Jules wrote:

You could build a new standard header/footer pair and include some dtml-if decisions on IP addresses. Everything that is a peer or child of that folder object would then be allowed/denied based on IP.

Would that work?

Hi, Yes - that would definitely work, and I can do that if I can't find anything else: I think it'd be best to have the authorization be seperated from the content, like the standard authorization is. (BTW, anyone know how questions like this can be put into an FAQ? I'd assume that lots of people might have this one, since this is a feature that Apache has, and needs to be replaced if you go with ZServer all the way.) Thanks, Robb

Tony McDonald wrote:

At 1:15 pm +0100 3/2/00, Robb Shecter wrote:

...

Hi,

I'm new to Zope and haven't figured out how to allow only a specifed set of IP addresses or hostnames access to a folder.

I assume that the "domains" attribute of anonymous user permissions could maybe be used here somehow? I haven't seen any documentation this attribute.

Essentially yes. Set the password to blank and put the IP addresses you want to provide access to in the domains box. Change the role to be 'Owner' or something and turn off 'Acquire Permissions' and 'View' for the index_html DTML in the target folder. Make the index_html DTML have 'View' permission for the role you've set up. That should do it.

Hi, Thanks. What format should the IP addresses be specified in? (ie: a comma seperated list, or...) Are wild cards allowed? Is this documented somewhere? If this (address-based authorization) isn't documented somewhere yet, I can make a "tip" on zope.org, once I get it working... - Robb