[Zope] Non-existing Zope-Security!!!

[Stephan Goeldi]

OK let me state that I don't think so (subject line). I had to choose this 
subject, because it seems to me, that nobody was interested in my previous 
attempts to get information about my problem. So here is my newbie (?) 
question again:

I have the folders:

/www/folder1
/www/folder2

Apache redirects domain1 to folder1 and domain2 to folder2.
The manager of folder1 is able to browse to /www and see what folders exist 
there. He shouldn't, because he only exists in the acl_user of /www/folder1. 
He even can look into the folder /www/folder2 (but not into the objects).

Is it possible to disable the access for the folder1-manager above folder1? 
It doesn't seem to me. If it really isn't possible, there is no security at 
all for ISP uses of Zope. But I'm sure, there should be a possibility.

I even created a local role in /www/folder1 too. Even with the local role I 
can browse /www and /www/folder2!

Any suggestions?

TIA
-goe-

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.