[Andrew Lahser, on Thu, 30 Mar 2000]

:: Additionally, I would suggest removing the "Acquire Permissions Settings" from the :: "View" permission, and making the "View" permission only available to managers. :: :: This is easy to do, assuming you called the DTMLMethod above "debug_request" and :: created it in your Zope Site Root, then you could: :: :: 1. Navigate to http://mysite.com:8080/debug_request/manage_access :: 2. Scroll to the bottom of that long page. :: 3. Uncheck "Acquire Permissions Settings" next to the "View" Permission/ :: 4. The "Manager" box should already be check, verify this. :: 5. Click the "Change" button near the bottom of the permission list. :: :: Forgive me if I over-explain.

No, you don't over-explain. I'd actually like more explanation. ;)

What is the purpose of the change you suggest?

After changing the permissions, you can only view the REQUEST by using the debug_request method. The only people that can view debug_request would be users logged in with the manager role. Drew