[Zope-CMF] effective_date
Mark McEahern
marklists@mceahern.com
Wed, 12 Feb 2003 08:07:56 -0600
[Raphael]
> How are the settings for 'Access inactive portal content' at your site?
Thank you for pointing out that permission. Sadly, I'm confused by what I
found regarding that...
At the portal level, these permissions look like this:
Access future portal content: Manager, Reviewer
Access inactive portal content: [None listed explicitly]
Both have "Acquire permission settings" checked. At the root (one level
above the portal), it looks like this:
Access future portal content: Manager
Access inactive portal content: Manager
So that makes me all the more confused about how Anonymous can view the
future portal content. Where are these permissions enforced? From a quick
grep of the CMF source (including CMFCore and CMFDefault), the only place I
see the permission tested is in
CMFCore.CatalogTool.CatalogTool.searchResults.
Hmm, I wonder if I need to manage these permission in the workflow? My
assumption that these permissions apply out-of-the-box beyond search results
seems false.
Thanks,
// m
-