[Roundup-users] Too Much Visible

[Chris W. <ch...@si...>]

Hmmm, I want users to only be able to see items for projects they're 
part of (or projects that are anonymously viewable).

I think I've got that part largely working now, however, how do I now 
stop people gettings "bits of issues" such as messages, files, etc.

for example, travesing direct to /my_tracker/msg23 gives you msg23.
Now, as I unmderstand it, all "users" need to be able to see and edit 
"msgs" from roundup's point of view, or the edit screen for issues won't 
work. BUT, if that is the case, how do I stop people seeing messages in 
isolation, etc?

If it's not the case, then lemme know what I'm missing ;-)

Chris

-- 
Simplistix - Content Management, Zope & Python Consulting
            - http://www.simplistix.co.uk