[Zope-CMF] Re: CMFPhoto Permissions

[BOB.BARTER at sbcglobal.net]

Tres,
Thanks for the advice.  You saved me from making changes to photo
album page templates -- which I knew was a bad idea :-)
I ended up going into
plone_site/portal_workflow/plone_workflow/states/visible/manage_permissions
and turning off "Acquire Permission Settings" for "View" (because
root security gives view permission to Anonymous), and turning
off "View" permission for "Anonymous".  While testing the site I
realized that I also have to turn on "View" permission for "Owner".

I also made the same changes for "Access contents information"

Thanks again,
Bob

--- Original Message ---
From: Tres Seaver <tseaver at zope.com>
To: zope-cmf at zope.org
Subject: [Zope-CMF] Re: CMFPhoto Permissions

>BOB.BARTER at sbcglobal.net wrote:
>> I have a site with:
>> CMF-1.4.2
>> Plone 2.0-RC3
>> CMFPhotoAlbum 0.4final
>> CMFPhoto 0.4rc1
>> 
>> All is well except:
>> I am having difficulty controlling visibility of the photo albums
>> and the photos.  Photos and photo albums that are set to private
>> are visible only to the owner as expected.  As soon as a photo's
>> workflow state is set to visible, then everyone (including
>> anonymous users) can see the photo.
>> 
>> How do I change the (configuration/permissions/???) so that
>> anonymous users can only see those photo albums and photos that
>> have a workflow state of published?
>
>DCWorkflow "stamps" the role-permissions for the workflow state
onto the 
>content object as it enters that state;  so, you need to edit the 
>"visible" state's security tab, and remove the View permission for 
>anonymous.  The workflow tool has a knob for updating content to
match 
>such changes.
>
>Tres.
>-- 
>===============================================================
>Tres Seaver                                tseaver at zope.com
>Zope Corporation      "Zope Dealers"       http://www.zope.com
>
>
>_______________________________________________
>Zope-CMF maillist  -  Zope-CMF at zope.org
>http://mail.zope.org/mailman/listinfo/zope-cmf
>
>See http://collector.zope.org/CMF for bug reports and feature
requests