what are the dtml for logout and deleting a existing user??
what are the dtml for logout of an account and deleting a existing user?? --------------------------------- Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone.
Allen Huang wrote at 2005-5-10 09:26 -0700:
what are the dtml for logout of an account and deleting a existing user??
When you are using "basic HTML authentication", then logout is a browser operation (and not a server one). You can use the following DTML Method to facilitate logout somehow <dtml-var standard_html_header> <h2><dtml-var title_or_id> <dtml-var document_title></h2> <p> <dtml-if "AUTHENTICATED_USER.getUserName() != 'Anonymous User'"> <dtml-raise Unauthorized></dtml-raise> </dtml-if> You have been logged out. </p> <dtml-var standard_html_footer> When you visit it, the browser login dialog appears. When you enter wrong (!) login information, you get logged out. As you see, not a very intuitive way (but the only one the server can used without Javascript (and I do not know any Javascript solution). The deletion of a user is a "UserFolder" operation. Look at the methods it provides (either look at the source or use "DocFinder" or the "DocFinder Tab"). -- Dieter
On 11.Mai 2005 - 20:32:33, Dieter Maurer wrote:
Allen Huang wrote at 2005-5-10 09:26 -0700:
what are the dtml for logout of an account and deleting a existing user??
When you are using "basic HTML authentication", then logout is a browser operation (and not a server one).
Right.
You can use the following DTML Method to facilitate logout somehow
<dtml-var standard_html_header> <h2><dtml-var title_or_id> <dtml-var document_title></h2> <p> <dtml-if "AUTHENTICATED_USER.getUserName() != 'Anonymous User'"> <dtml-raise Unauthorized></dtml-raise> </dtml-if> You have been logged out. </p> <dtml-var standard_html_footer>
When you visit it, the browser login dialog appears. When you enter wrong (!) login information, you get logged out.
That's not necessary, look at the ZMI, there is a logout option in the dropdown box. I never digged into "zmi_logout" (IIRC it has that name) but I think it is not accessible by _any_ Zope-User even not the Emergency User, so regardless of what you type in the Login-dialog you get logged out. The only problem I find is that you get presented a login dialog which always fails to login and this is a bit "weird" as "logout-action". Andreas -- Never be led astray onto the path of virtue.
On May 11, 2005, at 22:32, Andreas Pakulat wrote:
That's not necessary, look at the ZMI, there is a logout option in the dropdown box. I never digged into "zmi_logout" (IIRC it has that name) but I think it is not accessible by _any_ Zope-User even not the Emergency User, so regardless of what you type in the Login-dialog you get logged out. The only problem I find is that you get presented a login dialog which always fails to login and this is a bit "weird" as "logout-action".
That's only as weird as basic HTTP auth itself. There *is* no other way to make the browser discard the credentials you typed in other than to tell the browser that an access is unauthorized, which will then always pop up the login box again. This has nothing to do with Zope, it's just basic HTTP auth. jens
Jens Vagelpohl wrote:
That's only as weird as basic HTTP auth itself. There *is* no other way to make the browser discard the credentials you typed in other than to tell the browser that an access is unauthorized, which will then always pop up the login box again.
This has nothing to do with Zope, it's just basic HTTP auth.
Incidentally, I've noticed that newer versions of Firefox, and if I'm not mistaken, IE, provide menu options to drop current basic auth credentials... cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk
participants (5)
-
Allen Huang -
Andreas Pakulat -
Chris Withers -
Dieter Maurer -
Jens Vagelpohl