[Zope3-dev] RE: [Zope3-Users] RFC: Should Zope grant view access to everybody?

[Roger Ineichen]

Hi together

> -----Original Message-----
> From: zope3-users-bounces at zope.org 
> [mailto:zope3-users-bounces at zope.org] On Behalf Of Garrett Smith
> Sent: Monday, February 07, 2005 7:52 PM
> To: jim at zope.com; zope3-users at zope.org
> Subject: RE: [Zope3-Users] RFC: Should Zope grant view access 
> to everybody?
> 
> Jim Fulton wrote:
> > By default, Zope 2 grants view access to the anonymous role.
> > 
> > Should Zope 3 do the equivalent?  Ot should sites be private
> > unless they are explicitly made public?
> 
> +1 for private until told otherwise. It's a policy assumption either
> way, but more secure is a better assumption than less secure.
> 
>  -- Garrett

+1
I like it private too. We are not only developing a windows 
application server where all is public as default ;-)

Regards
Roger Ineichen
... a z3 (windows) developer.

> _______________________________________________
> Zope3-users mailing list
> Zope3-users at zope.org
> http://mail.zope.org/mailman/listinfo/zope3-users
>