[Zope-CMF] effective_date

Mark McEahern marklists@mceahern.com
Wed, 12 Feb 2003 08:07:56 -0600


[Raphael]
> How are the settings for 'Access inactive portal content' at your site?

Thank you for pointing out that permission.  Sadly, I'm confused by what I
found regarding that...

At the portal level, these permissions look like this:

  Access future portal content:   Manager, Reviewer
  Access inactive portal content: [None listed explicitly]

Both have "Acquire permission settings" checked.  At the root (one level
above the portal), it looks like this:

  Access future portal content:   Manager
  Access inactive portal content: Manager

So that makes me all the more confused about how Anonymous can view the
future portal content.  Where are these permissions enforced?  From a quick
grep of the CMF source (including CMFCore and CMFDefault), the only place I
see the permission tested is in
CMFCore.CatalogTool.CatalogTool.searchResults.

Hmm, I wonder if I need to manage these permission in the workflow?  My
assumption that these permissions apply out-of-the-box beyond search results
seems false.

Thanks,

// m

-