On Wed, 7 Nov 2001, Dieter Maurer wrote:
Joachim Schmitz writes:
I trying to develop a LoginMethod with the LoginManager product, which does not use the HTTP-authentication at all. But stores the user-information in a session, I am using CoreSessionTracking 0.9.
If I call the loginForm directly, the user can login and can work in his session. He can logout and login again, everthing seams to work as exspected.
the structure is like this:
acl_users (default) AppFolder (not protected) acl_users (LoginManager) head foot index_html: <dtml-var head> <dtml-var content> <dtml-var foot> testFolder (protected) content
When I now - as anonymous - call AppFolder/testFolder/content directly, which is not accessible to anonymous, the LoginManager-loginform pops up. Is it possible that there is an object named "content" above the AppFolder?
In this case, a LoginManager authorized user would not be able to access it, unless it can be accessed by Anonymous.
No all objects accessed by index_html are on the same or a lower level. Mit freundlichen Grüßen Joachim Schmitz AixtraWare, Ing. Büro für Internetanwendungen Hüsgenstr. 33a, D-52457 Aldenhoven Telefon: +49-2464-8851, FAX: +49-2464-905163