Frankly, this one good reason you should consider the use of a proxy server in front to Zope like Apache or Squid, which is the usual setup for Production Zope deployments. You use proxy ACLs to screen for certain things, and can use an authenticator for things Zope doesn't authenticate on, as long as you use the same user names and passwords, or user director service. That said, you can see object ids in folders, but nothing else using WebDAV. You can also see the method objectIds callable via URL; if this concerns you, a proxy ACL is a simple, graceful solution, to keep your object id listings more obscure, and you should be able to setup ACLs for WebDAV and for things like /objectIds. You could bind an ACL to a authenticated user for this, or bind it to a group of source addresses, or a particular interface on the proxy server. True security is almost always a proper integration issue. Zope has strong security, but comprehensive solutions in a production environment really require the smart use of a reverse-proxy server / http-accelerator as a front end. Sean -----Original Message----- From: netadmin [mailto:netadmin@technifind.com] Sent: Wednesday, November 21, 2001 5:49 PM To: zope@zope.org Subject: Re: [Zope] WEBDAV I was using Webfolders under Windows 98 to access my webdav folder on a linux server. I found that I could access not only the directory ( and see all the files listed ) but the actual contents without having to authenticate [ scared the ? out of me ]. Is this standard? I double checked everything. I disabled acquisition and all persons on the anonymous user and I was still able to get to the contents of a file. ----- Original Message ----- From: sean.upton@uniontrib.com To: netadmin@technifind.com ; zope@zope.org Sent: Wednesday, November 21, 2001 6:37 PM Subject: RE: [Zope] WEBDAV It works; you need to specify the client you are trying to use, as some clients are non-standard, or do funky things. Most clients should work without problem, AFAIK... Sean -----Original Message----- From: netadmin [mailto:netadmin@technifind.com] Sent: Wednesday, November 21, 2001 5:30 PM To: zope@zope.org Subject: [Zope] WEBDAV Is webdav just pre-beta or what? It just doesn't seem to be working right at all. Is there a Zope-Webdav tutorial or faq or something I can get my hands on that might help me? Thanks ahead of time for any help, Luis.