[Zope-CMF] member folder permissions?!

[Jonathan (Listserv Account)]

Hi all,

I am probably missing something here, but how is possible that user 'test'
can create new objects in the home directory of 'test2'. Can't see what's
already there
(index_html for example), but I can create new documents?

Using CVS checkout for CMF (earlier today) with Zope 2.3.2 compiled from
source with Python 1.5.2.

Thnx!
Jonathan