AFAIK only the standalone Cookie Crumbler supports nesting. It's somewhere on hathawash.freezope.org Stefan On Tue, 11 May 2004, Ralph vd Houdt wrote:

I'm trying to setup a CookieCrumbler in a folder below a folder wich has allready required authentication, the second folder has different access rights and therefore requires the user to login again. When the user is logged in allready by an initial CookieCrumbler or even by an initial Basic HTTP Authentication the CookieCrumbler is ignored and Zope gives me Basic HTTP Authentication and not the CookieCrumbler Form.

My Setup: -- Folder A (requires authentication) |-- Folder B (requires different authentication with CookieCrumbler)

When I go directly to Folder B without authenticating for Folder A the CookieCrumbler pops up. But first authenticating Folder A and then going to Folder B ignores the CookieCrumbler.

Does anyone know a solution?

Ralph vd Houdt wrote at 2004-5-11 21:30 +0200:

... or even by an initial Basic HTTP Authentication the CookieCrumbler is ignored

All cookie authentication mechanisms use HTTP Authentication when it is provided. They do this, in order not to break protocals (such as FTP or WebDAV) that do not know about cookies.

and Zope gives me Basic HTTP Authentication and not the CookieCrumbler Form.

When you get an "HTTP authentication" dialog cancel it and look at the error page. Usually, this page tells you which access has been unauthorized. -- Dieter