greg haygood

Plone's security mechanisms are pretty good: very granular and flexible, so you can tailor the site however neded. Strangely, though, if you mark a folder Private, by default the contents within are still visible. Plone's default workflows allow have to be modified to correct this counter-intuitive initial setting.It is posted as a how-to, but rather than searching for it everytime, here's the link. Maybe in a future release this will be fixed in the shipped product.http://plone.org/documentation/how-to/make-folder-hierarchy-private