Hide folder_contents from unauthenticated users in Plone

Question

I have just noticed that, by default, http://host/yourplonesite/folder/folder_contents will always reveal the contents of a Plone folder.

Is it possible to hide folder/folder_contents from unauthenticated users? (Think Options -Indexes in httpd)

Thanks!

Answer 1

This controlled by the "List folder contents" permission. You should adjust the related workflow - in particular the permission-role mapping maintained by workflows.