Roles and Hierarchy

Dear developers,

To give different gropus of users different access to different parts of 
the site, I tried this way:

1) Folders e2 and e3 have attr_dc_accessrights_restricted true,

2) Role role1 has subscriber-access to folder e2, Role role2 has 
subscriber-access to folder e3,

3) User user1 has role1, User user2 has role2, User user3 has role1 and 
role2.

The result should be user1 without access to e3 and user2 without access 
to e2. But in fact, all 3 users have free access to both folders.

The reason seems to be the fact that I gave the users the roles at the 
"content" node, so they get the ZMSSubscriber-Role at the parent node of 
all folders and have View-access to all of its children.

Is this correct behaviour?
Did I just misunderstood the concept of roles and permissions?
Is there any way to achieve the effect I have in mind?

Thanks a lot.
- Christian Adolphi



ZMS2 2.13.4.1917
Zope 2.10.3
Python 2.4.4


------------------------------------

Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/zms-developers/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/zms-developers/join
    (Yahoo! ID required)

<*> To change settings via email:
    [email protected] 
    [email protected]

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/