Jeff Watkins wrote:
> As well you should. However, the correct user experience would be to
> present a page saying:
>
>  > You must first provide your credentials before accessing Foobar.
>
> (Visitor authenticates.)
>
>  > You do not have sufficient privilege to view Foobar. Sorry.
>
> However, both are slightly less desirable scenarios, because if the
> visitor doesn't have privileges, he shouldn't ever see the link to
> Foobar.

The problem still persists when the user has a bookmark or some
external link to Foobar (or is playing around with the URL directly).

I agree that it's confusing to display the login page again after a
successful (with insifficient permissions) login.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TurboGears" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/turbogears
-~----------~----~----~----~------~----~------~--~---

Reply via email to