[Zope-CMF] Re: private docs shown to other members, pending shown

[Lynn Walton]

I would love to hear from someone at ZC on the questions I asked below regarding this.
I'm having a hard time believing that the default workflow that comes with CMF is flawed with respect to
having pending things viewable to anonymous user and that it hasn't been fixed yet ... as that seems like
a pretty major bug, and I would expect there to be more people who are using CMF to have talked about this
problem.
Am, I just misunderstanding something?

Thanks,
Lynn

Lynn Walton wrote:

> > From: Jeffrey P Shell <jeffrey@cuemedia.com>
> >
> > This might be due to a bug in how CMF Content objects are
> > instantiated, as outlined in CMF Tracker issue 410 [1].  Basically,
> > when an object is instantiated, 'manage_afterAdd()' is called.  And
> > the default behavior for manage_afterAdd() for portal content based
> > objects is to notify the workflow tool that they've been created.
>
> Thanks for your response. If I understand this correctly then NO DCWorkflow based custom workflow
> will work (at least with regard to appropriate permissions) unless one hacks up some other CMF code,
> right?   It does seem to associate the object with my custom workflow because the script that emails
> (which is all I added) is getting called.
>
> Am I correct in understanding then that the default workflow that comes with CMF1.1 wrongly gives
> "pending" items anonymous view permissions?  Isn't this in itself a fairly serious bug that would have
> already been addressed, that is separate from the one you entered into the tracker regarding custom
> workflows?
>
> Thanks,
> Lynn