Re: [Zope-dev] Redirection and Authentication
Christian Scholz wrote: > /folder/list- public accessible dtml method which show the list > /folder/edit- protected dtml method > > The edit method is protected so that the login requester pops up and asks > for a passwort. > Originally I was simply redirecting back to the list page inside the edit document by > > > The problem is now that after the Redirect AUTHENTICATED_USER is again set to > Anonymous (which I tested by printing AUTHENTICATED_USER). If I do no redirect > but put a normal link back to the list document, everything works as expected > (thus showing the edit button). Sounds like an HTTP Basic Authentication problem. I guess the browser only does its Auth caching for /folder/edit, so when you redirect to /folder/list, it doesn't pass any auth headers so Zope then thinks you're still anonymous :-( I think the trick would be to authenticate in /folder/ in some way, but I may be wrong... cheers, Chris ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Redirection and Authentication
Hi! I had a little problem and just wanted to ask if someone knows an explanation.. The goal: I want to show a list of newsitems to the user. If an administrator wants to change it he should be able to log in and see the same list but with edit- buttons. The setup is: /folder/list- public accessible dtml method which show the list /folder/edit- protected dtml method The edit method is protected so that the login requester pops up and asks for a passwort. Originally I was simply redirecting back to the list page inside the edit document by (the only line in the document) In list I then check for a login with .. show edit button here ... The problem is now that after the Redirect AUTHENTICATED_USER is again set to Anonymous (which I tested by printing AUTHENTICATED_USER). If I do no redirect but put a normal link back to the list document, everything works as expected (thus showing the edit button). So has anyone an explanation? (Version is 2.2.0) (right now I directly include the list again in the edit document by using dtml-var. Works for this little thing but I assume this only being a workaround..) (I also remember having some strange problems with a redirect from python some time ago. Back then it did not commit the database transaction in Oracle. After putting a get_transaction().commit() before the redirect made things work again.) cheers, Christian -- Christian Scholz MrTopf@IRC COM.lounge http://comlounge.net/ communication & design [EMAIL PROTECTED] ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )