When I create a user in a subfolder, he can view the files in the parent 
folders:

/www/folder1
/www/folder2

The manager of folder1 can not only view the content of /www but the content 
and the files of /www/folder2 too.

This is BAD security IMHO.

I don't want the user of folder1 let to know, that there exists a folder2!
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.


_______________________________________________
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )

Reply via email to