[Zope] view management screens

Hi all ! I have a small question for you guys ! Why the external methods need to have view management screens to run ? In my zope structure the anonymous user must have view management screens security checked to run successfully, still that is a big gap in security cause anonymous users can do a /manage_main and access my zope ! any hints ?? regards to you all