Re: [Zope] what are the dtml for logout and deleting a existing user??

2005-05-25 Thread Chris Withers

Jens Vagelpohl wrote:


That's only as weird as basic HTTP auth itself. There *is* no other  way 
to make the browser discard the credentials you typed in other  than to 
tell the browser that an access is unauthorized, which will  then always 
pop up the login box again.


This has nothing to do with Zope, it's just basic HTTP auth.


Incidentally, I've noticed that newer versions of Firefox, and if I'm 
not mistaken, IE, provide menu options to drop current basic auth 
credentials...


cheers,

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] what are the dtml for logout and deleting a existing user??

2005-05-11 Thread Dieter Maurer
Allen Huang wrote at 2005-5-10 09:26 -0700:
what are the dtml for logout of an account  and deleting a existing user??

When you are using basic HTML authentication,
then logout is a browser operation (and not a server one).

You can use the following DTML Method to facilitate logout somehow

dtml-var standard_html_header
h2dtml-var title_or_id dtml-var document_title/h2
p
dtml-if AUTHENTICATED_USER.getUserName() != 'Anonymous User'
  dtml-raise Unauthorized/dtml-raise
/dtml-if
You have been logged out.
/p
dtml-var standard_html_footer

When you visit it, the browser login dialog appears.
When you enter wrong (!) login information, you get logged out.

As you see, not a very intuitive way (but the only one the
server can used without Javascript (and I do not know any Javascript
solution).


The deletion of a user is a UserFolder operation.
Look at the methods it provides (either look at the source
or use DocFinder or the DocFinder Tab).


-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] what are the dtml for logout and deleting a existing user??

2005-05-11 Thread Andreas Pakulat
On 11.Mai 2005 - 20:32:33, Dieter Maurer wrote:
 Allen Huang wrote at 2005-5-10 09:26 -0700:
 what are the dtml for logout of an account  and deleting a existing user??
 
 When you are using basic HTML authentication,
 then logout is a browser operation (and not a server one).

Right.

 You can use the following DTML Method to facilitate logout somehow
 
 dtml-var standard_html_header
 h2dtml-var title_or_id dtml-var document_title/h2
 p
 dtml-if AUTHENTICATED_USER.getUserName() != 'Anonymous User'
   dtml-raise Unauthorized/dtml-raise
 /dtml-if
 You have been logged out.
 /p
 dtml-var standard_html_footer
 
 When you visit it, the browser login dialog appears.
 When you enter wrong (!) login information, you get logged out.

That's not necessary, look at the ZMI, there is a logout option in the
dropdown box. I never digged into zmi_logout (IIRC it has that name)
but I think it is not accessible by _any_ Zope-User even not the
Emergency User, so regardless of what you type in the Login-dialog you
get logged out. The only problem I find is that you get presented a
login dialog which always fails to login and this is a bit weird as
logout-action.

Andreas

-- 
Never be led astray onto the path of virtue.
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] what are the dtml for logout and deleting a existing user??

2005-05-11 Thread Jens Vagelpohl
On May 11, 2005, at 22:32, Andreas Pakulat wrote:
That's not necessary, look at the ZMI, there is a logout option in the
dropdown box. I never digged into zmi_logout (IIRC it has that name)
but I think it is not accessible by _any_ Zope-User even not the
Emergency User, so regardless of what you type in the Login-dialog you
get logged out. The only problem I find is that you get presented a
login dialog which always fails to login and this is a bit weird as
logout-action.
That's only as weird as basic HTTP auth itself. There *is* no other  
way to make the browser discard the credentials you typed in other  
than to tell the browser that an access is unauthorized, which will  
then always pop up the login box again.

This has nothing to do with Zope, it's just basic HTTP auth.
jens
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )