[ZPatterns] LoginManager auth type screwiness
John Eikenberry
[email protected]
Wed, 20 Jun 2001 03:08:34 -0700
Specs:
Zope 2.2.5
LoginManager 8.8b1
ZPatterns 4.3b2
python 1.5.2
I've reproduced this on 2 zope setups. One using zclass based dataskins and
one python based.
How to reproduce:
Setup a working LoginManger with CookieLogin and BasicAuth LoginMethods
(in that order). Create a new role and a user with the role. Create a
folder containing an index_html (with default content), create an empty
sub-folder with view/access permissions limited to the role you created.
View that subfolder from a new browser... boom, a popup basic auth window.
You can login with it, or cancel it and the unauth error is:
You are not authorized to access title_or_id.
Create a dtml method in the subfolder and view it... cookie auth loginForm
is displayed.
What I'm shooting for is the cookie loginform to always be shown.
Any tips?
Thanks in advance,
--
John Eikenberry [[email protected]]
______________________________________________________________
"A society that will trade a little liberty for a little order
will deserve neither and lose both."
--B. Franklin