Jeff Watkins wrote: > As well you should. However, the correct user experience would be to > present a page saying: > > > You must first provide your credentials before accessing Foobar. > > (Visitor authenticates.) > > > You do not have sufficient privilege to view Foobar. Sorry. > > However, both are slightly less desirable scenarios, because if the > visitor doesn't have privileges, he shouldn't ever see the link to > Foobar.
The problem still persists when the user has a bookmark or some external link to Foobar (or is playing around with the URL directly). I agree that it's confusing to display the login page again after a successful (with insifficient permissions) login. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/turbogears -~----------~----~----~----~------~----~------~--~---

