GuardedFile provides a convenient way to create Zope File objects that are accessible by proxy only.

When a GuardedFile is created, all acquired permissions are unset. A proxy role is created in its container with the sole permission "View".

When the GuardedFile is deleted, its associated proxy role is also removed.

In all other aspects GuardedFile behaves exactly like a File.

See the HOWTO.