[Zope-CMF] Securing CMF with Page Templates
Kent Polk
kent@goathill.org
Sun, 14 Apr 2002 18:34:03 -0500 (CDT)
Dieter Maurer wrote:
> Kent Polk writes:
> > Dieter Maurer wrote:
> > ...
> In order to successfully view something you often need
> "Access content information", too.
>
> That's because the viewing template often accesses properties
> of the viewed object which are often protected by
> "Access content information".
And if you enable "Access content information" for a role, members
of that role can then download the file, which kind of defeats the
purpose of restricting access to the file.