Even if the cache is set to 0 Ko ! This case doesn't appened in Netscape with the same configuration...
But I suppose other protected pages not in memory cache will send the user to the login page... But would it be better (if not done, but in this case I don't understand) to set expiration date to now in all protected pages ? Sorry if it is a dumb question... ! :) ----- Original Message ----- From: "Olivier Billard" <[EMAIL PROTECTED]> To: "Cocoon Users" <[EMAIL PROTECTED]> Sent: Wednesday, April 02, 2003 11:07 AM Subject: Authentication framework sample and Mozilla... > Hi all cocooners ! > > I'm working on using the authentication framework, base on the > authentication sample, in the Cocoon 2.1 CVS from yesterday. > I made : > build clean > build webapp > cocoon servlet > > With an ooold Netscape (4.78) and IE 6, all works fine : protected area > access is first denied, and then accepted after logged in, finally denied > when logged out. > But with Mozilla, when cache option are set to "Never compare with the > cache" (and cache deleted) the protected area is still accessible, even if I > logged out... > > Is this a bug from Mozilla or Cocoon ? > This "hole" is pretty disturbing... > > Thanks > -- > Olivier > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]