RE: [Zope] Anonymous v. unknown
-----Original Message----- From: Matt Miller [mailto:matt.miller@thelinuxstore.com]
I have a problem which I am sure many others have run into and solved. I have setup some public folders in Zope and underneath them are some user folder protected branches.
In my work on my advertising banner project, I have created reports which show the reuslts of impressions, blah, blah for customers. They log in to the site and can see their banners and the statistics on them.
Problem:
I am trying to access, inside these branches, data which is public. Zope seems to demand that people who are logged in to any part of the document tree have access rights elsewhere in the tree.
If I understand you correctly, your problem is the HTTP Basic auth mechanism, it's actually your *browser* which is insisting on sending auth credentials with each request. Since Zope can't know whether or not you care about the validity of these credentials, it allways honors them.
would prefer to map an 'unknown' user to anonymous access. Did I miss something in my setup? I solved this short term by moving my user_folder up the tree.. but I don't like this solution much.
I don't understand what you mean by this mapping. -Michel
Michel Pelletier wrote:
would prefer to map an 'unknown' user to anonymous access. Did I miss something in my setup? I solved this short term by moving my user_folder up the tree.. but I don't like this solution much.
I don't understand what you mean by this mapping.
Browser sends auth info. Zope checks against user folder. If match: provide role access. else: If anon access: provide anon access else: deny access Does this break the security model? -- Matt Miller matt.miller@thelinuxstore.com
participants (2)
-
Matt Miller -
Michel Pelletier