--- a/app/soc/views/models/base.py	Tue Nov 25 17:19:37 2008 +0000
+++ b/app/soc/views/models/base.py	Tue Nov 25 23:16:32 2008 +0000
@@ -89,13 +89,16 @@
 
     rights = {}
     rights['unspecified'] = []
-    rights['any_access'] = [access.checkIsUser]
+    rights['any_access'] = [access.checkIsLoggedIn]
     rights['public'] = [access.checkIsUser]
     rights['create'] = [access.checkIsDeveloper]
     rights['edit'] = [access.checkIsDeveloper]
     rights['delete'] = [access.checkIsDeveloper]
     rights['list'] = [access.checkIsDeveloper]
 
+    if 'rights' in params:
+      rights = dicts.merge(params['rights'], rights)
+
     new_params = {}
     new_params['rights'] = rights
     new_params['create_redirect'] = '/%(url_name)s' % params