There is no problem here per se. When you're logged in to the ZMI, your browser is authenticated using BASIC_AUTH. What cookiecrumbler does is allow you to log in via cookies instead. But if you're logged in via a BASIC_AUTH user (which your manager user is), then CC can't log that user out since that session is not cookie-based. The visitors to your site won't have this problem since they won't be logged in to ZMI.
Your best bet is simply to create a test user and use a different browser for your testing. For example user Firefox to be logged in to ZMI and use IE or Safari to be logged in as a test user to test the CC behavior. That's what I do... - Thibaud On Thu, Mar 12, 2009 at 10:31 AM, Dvir Bar-lev <dvi...@puresight.com> wrote: > My cookiecrumbler is indeed in a subfolder, is that the cause than? > > > > My zmi looks like this: > > > > Root folder > > Dvir folder – CookieCrumbler, log in forms, user folder > > > > If that is the cause what do I need to do to make sure when I log out the > username returns to anonymus user than? > > I searched the web but couldn’t find any way to do it > > > > *From:* Thibaud Morel l'Horset [mailto:tee...@gmail.com] > *Sent:* Thursday, March 12, 2009 4:29 PM > *To:* Dvir Bar-lev > *Cc:* zope@zope.org > *Subject:* Re: [Zope] CookieCrumbler question > > > > Is your cookiecrumbler installed at the root of your site? or in a > subfolder? If you're logged in to the ZMI in the root of your zope site and > execute a CookieCrumbler logout in a subdirectory, you will still be logged > in because you're using your manager user (if memory serves me well though > CC actually warns you of this if you try to logout while logged in to > ZMI...) > > - Thibaud > > On Thu, Mar 12, 2009 at 6:55 AM, Dvir Bar-lev <dvi...@puresight.com> > wrote: > > Hi > > > > I used the CookieCrumbler plugin the make a log in. > > I added the CookeCrumbler(standalone> from the ZMI , and now I have a log > in form that acts oka but I want logout the user, so what I did was call the > logout function of cookiecrumbler like this: > > > > <dtml-call expr=”logout()”> > > > > And that does bring me to the logged_out dtml but if I push the back button > and return to the logged_in and press the refresh button I still get the > result as if the user is till logged in. > > > > Do I have to do anything else besides calling the logout function to make > sure that the user is now back ti anonymus status? > > > _______________________________________________ > Zope maillist - Zope@zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > > > > _______________________________________________ > Zope maillist - Zope@zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > >
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
