Someone (Shane?) claimed that 2.4.1 removes this "optimization".

----- Original Message -----
From: "R. David Murray" <[EMAIL PROTECTED]>
To: "George Nguyen" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, September 26, 2001 4:40 PM
Subject: Re: [Zope-dev] Z2.log file not showing user name correctly


> On Wed, 26 Sep 2001, George Nguyen wrote:
> > I was looking in the entries in the Z2.log file and it
> > lists the user as being "Anonymous" when I'm actually
> > logged in as a validated user.
>
> This is very likely the result of an authentication...optimization?...done
> by the security machinery:  if the resource requires only Anonymous
> permission to access, then no further security checks are done,
> including identification of the user.  This leads to various unexpected
> behaviors, presumably this among them, and there has been at least
> one motion to change this behavior.  I don't know if it has made it
> into the Fishbowl yet or not.
>
> --RDM
>
>
> _______________________________________________
> Zope-Dev maillist  -  [EMAIL PROTECTED]
> http://lists.zope.org/mailman/listinfo/zope-dev
> **  No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope )
>


_______________________________________________
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

Reply via email to