[Zope] Security management for groupware

Dieter Maurer dieter@handshake.de
Mon, 9 Apr 2001 21:42:29 +0200 (CEST)


Eric BARROCA writes:
 > .... I've tried many configuration but if an user can add files, he can
 > modify and delete other's files...
Adding objects is usually protected by "Add <object>"
while changing them is protected by "Change <object>" and
object deletion by "Delete objects".

Thus, you can separate creation (granted to "Anonymous")
from changing (granted to "Owner" and "Manager")
and deletion (same as for changes).


Dieter