Re: [Zope-dev] Authenticating with acl_users (fwd)

2003-03-09 Thread Andy McKay
Sondre Rønjom wrote:
I'm creating a python product - which needs to be authenticated; and I 
dont want to use any products that does not come with a clean Zope install 
- so I user Simple User Folder and define two roles admin user and 
ordinary user. I just want a user to login via login form, check username 
and password with the acl_users user list and set the user to 
AUTHENTICATED_USER if username and password is correct. Actually I just 
want to access the methods which the pop-up authenticator use when one 
does /manage.  To me it looks like validate() from AccessControl/User.py does this for you, but Im not 
sure how to use the method.  
Zope by default comes with Basic Auth. If you want to do cookie / form 
based logins either:

a) use the Cookie Crumbler product

b) take the Cookie Crumbler code, pull it apart and put it in your 
product so you can have your clean install.
--
  Andy McKay

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Authenticating with acl_users

2003-03-09 Thread Dieter Maurer
Sondre Rønjom wrote at 2003-3-8 18:30 +0100:
  I'm creating a python product - which needs to be authenticated; and I 
  dont want to use any products that does not come with a clean Zope install 
  - so I user Simple User Folder and define two roles admin user and 
  ordinary user. I just want a user to login via login form, check username 
  and password with the acl_users user list and set the user to 
  AUTHENTICATED_USER if username and password is correct. Actually I just 
  want to access the methods which the pop-up authenticator use when one 
  does /manage.  To me it looks like validate() from AccessControl/User.py does this 
  for you, but Im not 
  sure how to use the method.  

Usually, you just protect the methods of your product by permissions
and let Zope do everything else.


Dieter

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Authenticating with acl_users

2003-03-08 Thread Sondre Rønjom
Ive been looking through AccessControl/User.py to understand the 
validate() methods paramteres. Im not sure what to put inside the request, 
and how to do it. I have been testing around, but I can only manage to do 
authenticate(), but this only tells if the user is valid and has the right 
password. The thing is, I also want to set AUTHENTICATED_USER, but not 
sure how to to this, but I have the idea validate() does all this for you, 
if you pass the right parameters. I have been searching at zope.org and 
google.com for a long time now, but cant find very much useful. The only 
parameters I have put in the REQUEST are __ac_user and __ac_password, but 
I know I also need object value and physical container of the object, but 
dont know how to find this.

/Sondre




___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Authenticating with acl_users

2003-03-08 Thread Jens Vagelpohl
what exactly is it you are trying to achieve? maybe someone can help if 
you let us know what the real motivation is.

jens

On Saturday, Mar 8, 2003, at 11:42 US/Eastern, Sondre Rønjom wrote:

Ive been looking through AccessControl/User.py to understand the
validate() methods paramteres. Im not sure what to put inside the 
request,
and how to do it. I have been testing around, but I can only manage to 
do
authenticate(), but this only tells if the user is valid and has the 
right
password. The thing is, I also want to set AUTHENTICATED_USER, but not
sure how to to this, but I have the idea validate() does all this for 
you,
if you pass the right parameters. I have been searching at zope.org and
google.com for a long time now, but cant find very much useful. The 
only
parameters I have put in the REQUEST are __ac_user and __ac_password, 
but
I know I also need object value and physical container of the object, 
but
dont know how to find this.

/Sondre


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Authenticating with acl_users

2003-03-08 Thread Sondre Rønjom

I'm creating a python product - which needs to be authenticated; and I 
dont want to use any products that does not come with a clean Zope install 
- so I user Simple User Folder and define two roles admin user and 
ordinary user. I just want a user to login via login form, check username 
and password with the acl_users user list and set the user to 
AUTHENTICATED_USER if username and password is correct. Actually I just 
want to access the methods which the pop-up authenticator use when one 
does /manage.  To me it looks like validate() from AccessControl/User.py does this for 
you, but Im not 
sure how to use the method.  

/sondre

On Sat, 8 Mar 2003, Jens Vagelpohl wrote:

 what exactly is it you are trying to achieve? maybe someone can help if 
 you let us know what the real motivation is.
 
 jens
 
 
 On Saturday, Mar 8, 2003, at 11:42 US/Eastern, Sondre Rønjom wrote:
 
  Ive been looking through AccessControl/User.py to understand the
  validate() methods paramteres. Im not sure what to put inside the 
  request,
  and how to do it. I have been testing around, but I can only manage to 
  do
  authenticate(), but this only tells if the user is valid and has the 
  right
  password. The thing is, I also want to set AUTHENTICATED_USER, but not
  sure how to to this, but I have the idea validate() does all this for 
  you,
  if you pass the right parameters. I have been searching at zope.org and
  google.com for a long time now, but cant find very much useful. The 
  only
  parameters I have put in the REQUEST are __ac_user and __ac_password, 
  but
  I know I also need object value and physical container of the object, 
  but
  dont know how to find this.
 
  /Sondre
 
 


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Authenticating with acl_users (fwd)

2003-03-08 Thread Sondre Rønjom
I'm creating a python product - which needs to be authenticated; and I 
dont want to use any products that does not come with a clean Zope install 
- so I user Simple User Folder and define two roles admin user and 
ordinary user. I just want a user to login via login form, check username 
and password with the acl_users user list and set the user to 
AUTHENTICATED_USER if username and password is correct. Actually I just 
want to access the methods which the pop-up authenticator use when one 
does /manage.  To me it looks like validate() from AccessControl/User.py does this for 
you, but Im not 
sure how to use the method.  

/sondre

On Sat, 8 Mar 2003, Jens Vagelpohl wrote:

 what exactly is it you are trying to achieve? maybe someone can help if 
 you let us know what the real motivation is.
 
 jens
 
 
 On Saturday, Mar 8, 2003, at 11:42 US/Eastern, Sondre Rønjom wrote:
 
  Ive been looking through AccessControl/User.py to understand the
  validate() methods paramteres. Im not sure what to put inside the 
  request,
  and how to do it. I have been testing around, but I can only manage to 
  do
  authenticate(), but this only tells if the user is valid and has the 
  right
  password. The thing is, I also want to set AUTHENTICATED_USER, but not
  sure how to to this, but I have the idea validate() does all this for 
  you,
  if you pass the right parameters. I have been searching at zope.org and
  google.com for a long time now, but cant find very much useful. The 
  only
  parameters I have put in the REQUEST are __ac_user and __ac_password, 
  but
  I know I also need object value and physical container of the object, 
  but
  dont know how to find this.
 
  /Sondre
 
 



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )