On a CMF site, when user get "404 Not Found" error, it appears they are logged out automatically....
Hi, In a CMF site, (Plone site too) when a member tries to load a page that doesn't exist. They get the site error page. However, this page gives the appearance as if the user as been automatically logged out. Because, in the header of the site, CMF displays the user as Guest, and plone displays "you are not logged in". Is this a bug, or is there a reason behind this behavior. I am using zope 2.7.4, cmf 1.4.7, plone 2.0.5 Thanks, Gary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gary Zhu wrote: | In a CMF site, (Plone site too) when a member tries to load a page that | doesn't exist. They get the | site error page. However, this page gives the appearance as if the user | as been automatically | logged out. Because, in the header of the site, CMF displays the user | as Guest, and plone displays | "you are not logged in". | | Is this a bug, or is there a reason behind this behavior. | | I am using zope 2.7.4, cmf 1.4.7, plone 2.0.5 Zope only authenciates a user when needed -- the error page is (in your case, any way) completely renderable by the anonymous user, and so the user validation process is never invoked. Tres. - -- =============================================================== Tres Seaver tseaver@zope.com Zope Corporation "Zope Dealers" http://www.zope.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCMKwzGqWXf00rNCgRAgitAJ4wuxCgklTofJtby/m1IYW0oKa84QCfb6so gW+bOy2UCnv9Ipf8JaBEUvA= =114Y -----END PGP SIGNATURE-----
Okay, now I understand why. However, on websites with alot of personalization, it would be pretty confusing for the user see an error page, and all their personalized stuff are gone. For now, I just don't use the main_template with the error page, so the user don't see the login link, and "You are not logged in" on the error page. Tres Seaver wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Gary Zhu wrote:
| In a CMF site, (Plone site too) when a member tries to load a page that | doesn't exist. They get the | site error page. However, this page gives the appearance as if the user | as been automatically | logged out. Because, in the header of the site, CMF displays the user | as Guest, and plone displays | "you are not logged in". | | Is this a bug, or is there a reason behind this behavior. | | I am using zope 2.7.4, cmf 1.4.7, plone 2.0.5
Zope only authenciates a user when needed -- the error page is (in your case, any way) completely renderable by the anonymous user, and so the user validation process is never invoked.
Tres. - -- =============================================================== Tres Seaver tseaver@zope.com Zope Corporation "Zope Dealers" http://www.zope.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCMKwzGqWXf00rNCgRAgitAJ4wuxCgklTofJtby/m1IYW0oKa84QCfb6so gW+bOy2UCnv9Ipf8JaBEUvA= =114Y -----END PGP SIGNATURE-----
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Tres Seaver wrote:
Zope only authenciates a user when needed -- the error page is (in your case, any way) completely renderable by the anonymous user, and so the user validation process is never invoked.
Gary raises a valid point about this though. I guess the workaround if to reference something in standard_error_message that requires authentication, but should we really have to do that? Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk
participants (3)
-
Chris Withers -
Gary Zhu -
Tres Seaver