I just joined the list, and I am following up on a post in the archive (sorry -- there wasn't a way to do this directly, so I don't know if this message will end up in the same thread).

On 10/1/05, Lennart Regebro <regebro at gmail.com> wrote:
On 10/1/05, Milind Khadilkar <zedobject at gmail.com> wrote:
>  I have installed Zope 3.1 rc 3. After logging in, I could not find any
> logout button.

There is no way to consistently log out from Basic HTTP authorization...

> Is it OK to directly shut the browser window ( I am using Firefox)?


I am writing for clarification on Lennart's answer to Milind's question. In the many screenshots of the ZMI that can be seen in Philip von Weitershausen's book ("Web Component Development with Zope 3", Springer, 2005), one can definitely see "[Logout]" in the upper-right corner of the ZMI page. Like Milind, however, my installation of Zope 3.1.0 does not have this link in its ZMI pages.

Is the absence of "[Logout]" in the latest version(s) because the developers realized that it was misleading (as Lennart is suggesting) and best left off, or is there another reason? Given the sensitive nature of some Zope deployments, the management password seems very well worth protecting. How about using a secure login (e.g., https) and sessions, which is capable of supporting a true logout?

Todd Wilson
Department of Computer Science
California State University, Fresno
Zope3-users mailing list

Reply via email to