Re: [Zope-dev] Redirection and Authentication

2000-08-30 Thread Chris Withers

Christian Scholz wrote:
> /folder/list- public accessible dtml method which show the list
> /folder/edit- protected dtml method
> 
> The edit method is protected so that the login requester pops up and asks
> for a passwort.
> Originally I was simply redirecting back to the list page inside the edit document by
> 
> 

> The problem is now that after the Redirect AUTHENTICATED_USER is again set to
> Anonymous (which I tested by printing AUTHENTICATED_USER). If I do no redirect
> but put a normal link back to the list document, everything works as expected
> (thus showing the edit button).

Sounds like an HTTP Basic Authentication problem. I guess the browser
only does its Auth caching for /folder/edit, so when you redirect to
/folder/list, it doesn't pass any auth headers so Zope then thinks
you're still anonymous :-(

I think the trick would be to authenticate in /folder/ in some way, but
I may be wrong...

cheers,

Chris

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Redirection and Authentication

2000-08-29 Thread Christian Scholz

Hi!

I had a little problem and just wanted to ask if someone knows an explanation..

The goal: 
I want to show a list of newsitems to the user. If an administrator wants
to change it he should be able to log in and see the same list but with edit-
buttons.

The setup is:

/folder/list- public accessible dtml method which show the list
/folder/edit- protected dtml method

The edit method is protected so that the login requester pops up and asks
for a passwort.
Originally I was simply redirecting back to the list page inside the edit document by



(the only line in the document)

In list I then check for a login with


.. show edit button here ...


The problem is now that after the Redirect AUTHENTICATED_USER is again set to
Anonymous (which I tested by printing AUTHENTICATED_USER). If I do no redirect
but put a normal link back to the list document, everything works as expected
(thus showing the edit button).

So has anyone an explanation? (Version is 2.2.0)
(right now I directly include the list again in the edit document by
using dtml-var. Works for this little thing but I assume this only being
a workaround..)

(I also remember having some strange problems with a redirect from python some
time ago. Back then it did not commit the database transaction in Oracle. After
putting a get_transaction().commit() before the redirect made things work again.)

cheers,
  Christian

-- 
Christian Scholz   MrTopf@IRC
COM.lounge  http://comlounge.net/
communication & design   [EMAIL PROTECTED]

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )