I have seen a way to keep users from the management pages if you are using apache in front ... I cannot remember off the top of my head but it is in one of the apache zope guides floating around. ____________________________________________ Peter Millar -----Original Message----- From: zope-bounces@zope.org [mailto:zope-bounces@zope.org] On Behalf Of Thomas Rampelberg Sent: Friday, 5 November 2004 09:43 To: zope@zope.org Subject: [Zope] Hiding ZMI Pages Is there a way to keep users from being able to see any of the management pages? For example, return a 404 error if someone tries to go to http://zopesite/manage or http://zopesite/object/manage. In a similar vein, how would you go about keeping users from executing python scripts or external methods by just typing in the path to that object (http://zopesite/pythonscript) yet still let the pages that use those methods to access them? _______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )