[GeneralDiscussion] ZWiki pages incorrectly can be added in other people's Members folders
[email protected] (nd51)
| Newsgroups | gmane.comp.web.zope.zwiki |
|---|---|
| Message-ID | <20080410073518-0700__37738.8568515473$1207838305$gmane$org@zwiki.org> |
Hi, Can anyone shed light on which permission to set to fix this? This problem was reported by someone else on plone-users using 3.0.6. We've had this problem for some time on Plone 2.5.3. If you go to Members folder of someone other than yourself, you have permission to add a wiki page to their folder! All my permissions on security tab are set to 'manager' (with 'authenticated' for add comment) which seems to behave fine for the rest of the site. How do I stop this from happening without turning everything off? I don't want to turn off "implicitly addable" for wiki page as that'd affect the whole site. Members is an ATBTreeFolder, as opposed to other folders being just ATFolder. Does that make a difference? -- forwarded from http://zwiki.org/GeneralDiscussion#[email protected]