(I hope responding to myself is not considered talking to myself ...) Some more insights ...
> - declaring config nodes as read-only must work at all This seems to work, somehow: Adding "ooo:finalized='true'" to the Name property of the Bibliography registration, in the share layer, prevents me from changing the name programmatically. Declaring the whole Bibliography node as finalized also prevented me from changing both the location and the name programmatically. Sadly, *removing* the bibliography's node is not prevented by its "finalized" attribute. Need to check whether this is intentional. This might make it difficult to control the read-only-ness by configuration: We can't declare the "RegisteredNames" node itself as finalized, of course, and finalizing a sub node does not prevent anybody from deleting it. Hmm. > - I bet that programmatically, I am still able to change the template > paths, even the ones installed by extensions. This is implied by the > fact that the "user" layer overrules the "user/uno_packages" layer, > and config write access goes to the user layer. I would probably would have lost the bet. In fact the "InternalPaths" nodes are declared as finalized, for a lot (not all?) paths, in the "share" layer. Ciao Frank -- Frank Schönheit StarOffice/OpenOffice.org Base [EMAIL PROTECTED] +49 40 23 646 663 / +66663 Sun Microsystems Germany Hamburg, Nagelsweg 55 ---------------------------------------------------------------------- --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]