[Zope-dev] Help on Zope security needed ...

[Joachim Werner]

> > > Just tested it with blank zope 2.3.3
> > >
> > > /
> > > method
> > >  - testfolder
> > >    - userfolder with user test and manager role (just in testfolder!)
> > >
> > > The following doesn't work for user test:
> > >
> > > http://localhost/method/manage
> > >
> > >
> > > The following _will_ work for user test:
> > >
> > > http://localhost/testfolder/method/manage

I checked this in an "old" Zope 2.1.6:

There I can do http://localhost/testfolder/method, too, but at least NOT
.../manage!

So there seem to have been some changes into the wrong direction ...

Cheers

Joachim