[Zope-PTK] Re: PTK security

[Shane Hathaway]

Howard Zhang wrote:
> 
> Shane :
>   hi i'm howard.I was confused by newest PTK security mechanism.
>   I think the princeples look like this:
>     1. People shouldn't see private content even they know the url
> (except Manager or Owner).

That's right.  The old PTK did not enforce this rule.

>     2. security and catalog was changed after portalcontent state
> changed . and It all done by system automatically.

That's right, and that's what we need to look at now.  The old method
was strange, but it worked.  See previous postings for details.

>     3. it's base on Zope security mechanism

Correct.

>   any suggestion will appreciate

What was your question?

Shane