[Zope-CMF] Securing CMF with Page Templates

[Kent Polk]

Dieter Maurer wrote:
> Kent Polk writes:
>  > Dieter Maurer wrote:
>  > ...
> In order to successfully view something you often need
> "Access content information", too.
> 
>    That's because the viewing template often accesses properties
>    of the viewed object which are often protected by
>    "Access content information".

And if you enable "Access content information" for a role, members
of that role can then download the file, which kind of defeats the
purpose of restricting access to the file.