Re: [Zope-dev] Strange bug(?) accessing File objects

2003-09-10 Thread Chris Withers
Bjorn Stabell wrote:

When accessing File objects that are not accessible to Anonymous (HTTP
and WebDAV View permissions not given), the Basic HTTP Auth window pops
up repeatedly even after the user has logged in using the cookie
crumbler method, and the user has permissions to view the file.
Clicking cancel actually lets the user view the file, but that's not an
acceptable solution, of course.
Hmmm, you absolutely positive that's a basic auth box?
Do you have MS Office installed on the machines where this happens?
What type of files does this occur with?
cheers,

Chris

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Strange bug(?) accessing File objects

2003-09-05 Thread Dieter Maurer
Bjorn Stabell wrote at 2003-9-2 19:33 +0800:
  Has anyone encountered this problem:
  
  When accessing File objects that are not accessible to Anonymous (HTTP
  and WebDAV View permissions not given), the Basic HTTP Auth window pops
  up repeatedly even after the user has logged in using the cookie
  crumbler method, and the user has permissions to view the file.
  Clicking cancel actually lets the user view the file, but that's not an
  acceptable solution, of course.
  
  I see this behavior with Zope 2.5.1  2.6.1 (haven't tried 2.7b2 yet),
  and I seem to recall earlier versions as well.

I could not reproduce your problem (Zope 2.6.2b2).
However, I remember that I saw similar problem reports in the mailing
list.

You get the basic authentication when the permission requirements
during request processing are stronger than that on the
published object. It is unclear, however, why you see the
file when you cancel the login dialog.

Shane's VerboseSecurity Product may give some clues.


Dieter

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Strange bug(?) accessing File objects

2003-09-05 Thread robert
I remember to have had this problem when accessing office files like *.doc's.
It *think* it was a IE issue, that olny happend with particular IE versions.
Robert
Am Friday 05 September 2003 23:26 schrieb Dieter Maurer:
 Bjorn Stabell wrote at 2003-9-2 19:33 +0800:
   Has anyone encountered this problem:
  
   When accessing File objects that are not accessible to Anonymous (HTTP
   and WebDAV View permissions not given), the Basic HTTP Auth window pops
   up repeatedly even after the user has logged in using the cookie
   crumbler method, and the user has permissions to view the file.
   Clicking cancel actually lets the user view the file, but that's not an
   acceptable solution, of course.
  
   I see this behavior with Zope 2.5.1  2.6.1 (haven't tried 2.7b2 yet),
   and I seem to recall earlier versions as well.

 I could not reproduce your problem (Zope 2.6.2b2).
 However, I remember that I saw similar problem reports in the mailing
 list.

 You get the basic authentication when the permission requirements
 during request processing are stronger than that on the
 published object. It is unclear, however, why you see the
 file when you cancel the login dialog.

 Shane's VerboseSecurity Product may give some clues.


 Dieter

 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://mail.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists -
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope )

-- 
mit freundlichen GrĂ¼ssen

Robert Rottermann
www.redCOR.ch


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Strange bug(?) accessing File objects

2003-09-02 Thread Bjorn Stabell
Hi,

Has anyone encountered this problem:

When accessing File objects that are not accessible to Anonymous (HTTP
and WebDAV View permissions not given), the Basic HTTP Auth window pops
up repeatedly even after the user has logged in using the cookie
crumbler method, and the user has permissions to view the file.
Clicking cancel actually lets the user view the file, but that's not an
acceptable solution, of course.

I see this behavior with Zope 2.5.1  2.6.1 (haven't tried 2.7b2 yet),
and I seem to recall earlier versions as well.

Bye,
-- 
Bjorn

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )