[Zope] security - am I going crazy ?

2000-12-08 Thread Aleksander Salwa
Few days ago I found that on site that I'm currently working on, everybody can add DTMLMethods and Documents (and maybe do more, I haven't checked yet, but I think it's bad enough !) by simply entering URL http://www.mysite.com/manage_addDTMLMethod?id=q1title=qq1file=qqq1 After that Zope sends

Re: [Zope] security - am I going crazy ?

2000-12-08 Thread Shane Hathaway
Aleksander Salwa wrote: Few days ago I found that on site that I'm currently working on, everybody can add DTMLMethods and Documents (and maybe do more, I haven't checked yet, but I think it's bad enough !) by simply entering URL