[Zope] ViewAndCopyOnly role

Dieter Maurer dieter@handshake.de
Fri, 10 May 2002 21:41:16 +0200


Bill Kerr writes:
 > ....
 >  After further experimentation I can't see how it is possible to setup the
 > sort of folder I want using Zope security. I've now eliminated all
 > permissions except for:
 > ** View Management Screen (for seeing the files)
 > The problem is that users can CUT the files with this permission and paste
 > them somewhere else
I would say, you discovered a bug:

  Cutting should require "Delete object" permission on the source folder...

I would file a Collector report...


Dieter