Have now leanrt enough to know you can control permissions on views by configure.zcml - i.e adding something like:-
<browser:page name="test_settings" for="*" template="www/lockout.pt" permission="cmf.ManagePortal" /> Will ensure that test_settings is only viewable by administrators. This is great. But the plugin I'm working with must already be registering it's settings view in a different manner .. because putting these setiings into configure,zcml does not change the permissions on that view. I think maybe it's setuphandlers.py that needs changing - but again I'm confused as to the many different ways Plone can produce a plugin. This loginlogout plugin has a skins layer - again maybe this is the issue. Is there somewhere I can see where the view (URL) login is having it's permissions set. Thx dave -- View this message in context: http://plone.293351.n2.nabble.com/Security-settings-for-Plone-Plugin-tp5983031p5997346.html Sent from the Installation, Setup, Upgrades mailing list archive at Nabble.com. _______________________________________________ Setup mailing list Setup@lists.plone.org https://lists.plone.org/mailman/listinfo/setup