When we had a post-authentication hook (a hook called by ZPublisher after authentication has been done), then we could check in this hook that the user has the right to enter the version.
When did we have one? Where did it go?
Such a hook would be extremely helpful for other applications, too.
Yeah, a specific example that springs to mind is the selection of a CMF skin based on a user's role...
Zope-Dev maillist - [EMAIL PROTECTED]
** No cross posts or HTML encoding! **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce