Use Access Rules. They will transparently watch all the requests to any object within a folder(or the root), and perform what you want based on them. Also, you may find useful the following how-to: http://wohnheim.fh-wedel.de/~dietmar/wohnheim/access.html Ausum ----- Original Message ----- From: "Nicolas LAURANCE" <nicolas.laurance@expert-rh.com> To: <zope@zope.org> Sent: Wednesday, December 04, 2002 6:07 AM Subject: [Zope] security and domain

hello zopers,

Here is my situation :

I have a zope hosted behind apache and virtual monster When i need the ip address of a visitor I use HTTP_X_FORWARDED_FOR

I want some users to log only from a specific IP for example : 100.100.50.25

If I set 'domain' in the acl_user fiels to that IP, it doesn't work, I guess the domain it returns is the domain of the Apache or proxy server. Is there a workaround for the domain to be checked against the HHTP_X_FORWARDED instead of the IP_ADDRESS ???

Any help or pointers is welcome...

_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )