> Ah, I remember this bug; the "Classic" type of DCWorkflow > mistakenly grants 'View' when in 'private' state. Actually I can't see it in the code for any workflow. Isn't this rather a manifestation of http://www.zope.org/Products/PTK/Tracker/410 ? Florent -- Florent Guillaume, Nuxeo (Paris, France) +33 1 40 33 79 10 http://nuxeo.com mailto:fg@nuxeo.com