[Zope-dev] View permission with DTML Methods & Documents

Randall F. Kern randy@spoke.net
Thu, 26 Jul 2001 16:19:38 -0700


I must be losing my mind, I don't think this could possibly be broken in
2.4...

1) Create a DTML Method (or Document)
2) Goto it's security tab, and clear the View permission except for
Managers (i.e. uncheck Acquire, and check Manager)
3) Close your browser (logging out)
4) Goto the URL for your new method

With 2.4 on linux or Win2K, I can see the document (as anonymous).  With
2.3, it raised 'Unauthorized', so a login box appeared.

What's going on?
-Randy