Feature Requests item #2810520, was opened at 2009-06-22 14:30
Message generated for change (Comment added) made by aredridel
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1126468&aid=2810520&group_id=250683

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Harlan Stenn (harlan)
Assigned to: Nobody/Anonymous (nobody)
Summary: web UI needs a "log out" link

Initial Comment:
Some folks have multiple email accounts on a machine, and with the current 
authentication mechanism used by the dspam webUI there seems to be no way to 
log out as one user in order to log in as another.

It can be very inconvenient to have to restart a browser (that may have many 
other open tabs) in order to log in to the dspam webUI as a different user.

----------------------------------------------------------------------

Comment By: Aria Stewart (aredridel)
Date: 2009-12-18 13:00

Message:
We use mod_auth_pubtkt and made a log-out link that takes you to its logout
page. Adding the link is easy, and using mod_auth_pubtkt was
straightforward to set up, and lets you design the login page in PHP

It's a good solution, since logout from HTTP auth should really be a
browser feature (why there's no logout button on the toolbar for sites that
are logged in is beyond me...)

----------------------------------------------------------------------

Comment By: Paul Cockings (paulcockings)
Date: 2009-12-18 10:40

Message:
We now have an experimental web-ui for Dspam that allow a pre defined
'manager' to switch to several other users from a drop down box.

This experimental interface will hopefully make it into the /contrib
folder once 3.9.0 has been released

I need to thank Stevan Bajic for the work on this feature



----------------------------------------------------------------------

Comment By: Imposit.com Webmaster (bofh999)
Date: 2009-06-22 16:48

Message:
im sorry to say that so hard but thats nonsense.
it just shows you didnt read in the documentation

logoutlink isnt possible (not regular) 
its an apache authentication. apache cannot logout.

all you can do is do reset the realm but that only barly works and not on
all browsers


its true that this feature might be needed but a request at this stage
make no sense. first we need a new webui, bevore that can happen we need
all data in the databases (also the quaratines or another solution for
them) so something else (like php or pythion or whatever can manage them


the main problem is the dspam design. as long setuid is needed as long we
need the apache authentication (and in this case its a good thing the way
it is for sec. reasons)

on the other hand the apache auth is together with mod_evasive and ssl a
real real real secure thing

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1126468&aid=2810520&group_id=250683

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Dspam-devel mailing list
Dspam-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-devel

Reply via email to