[Zope-CMF] members-only section of cmf site

[Sam Brauer]

I've seen in various places advice about making an entire CMF site (or 
just specific folders) "members-only".

I have verified on my dev machine that I can make a specific folder 
(and everything under it) viewable only by authenticated users by going 
to the security tab for the folder in the ZMI and twiddling the 
permissions.  For both "Access contents information" and "View", uncheck 
Acquire and check Authenticated.

Although this works on my dev box, when I tried it on a production 
server (where Apache is in front of Zope and we use a 
VirtualHostMonster) it doesn't work.  I've re-checked the permissions 
and re-tested several times, but it's still possible for anonymous users 
to view content inside a folder with permissions set as described above.

Any help would be most appreciated.

- Sam Brauer