[Zope-CMF] 'portal_metadata' tool in CVS

[Shane Hathaway]

marc lindahl wrote:
> 
> > From: Tres Seaver <tseaver@digicool.com>
> >
> > It isn't exactly a bug;  being able to "hide" the type object
> > by tweaking the Security tab settings on it is an "unintended
> > feature." :)
> 
> Hmmm... count on a newbie to uncover something like that...
> 
> But seriously, doesn't it make sense to somehow have content types that can
> be added only by certain roles?  I don't see any other way to do that.

Yes, it make sense, but AFAIK the policy set this way isn't actually
enforced.  You can still call invokeFactory() directly.  We'll just have
to plug that.

Shane