Core session tracking will likely not be a default part of the access control system in any Zope release. The purpose of the session tracking system as it exists is to associate state between requests for *anonymous* users. This isn't to say that making use of the sessioning machinery for an auth system wouldn't be useful, it's just unlikely that DC will make a user folder implementation that makes any use of it... it's likely that someone else will, though... You can do the things you've asked about without loginmanager or session tracking... for instance, Zope.org uses a modified version of the UserDB user folder to allow folks to "go back to where they came from" after logging in, and to redirect folks to a login screen when they're trying to access a resource to which they don't have access. You might want to ask how this is done on the "zope-web" maillist. - C ----- Original Message ----- From: "Jason Byron" <jason_zope@yahoo.com> To: <zope@zope.org> Sent: Monday, May 14, 2001 12:56 PM Subject: [Zope] Session Tracking w/ login management?

Is core session tracking going to be integrated into the access system in future zope versions? My real question is: will we be able to redirect users to a login screen when they try to access unauthorized pages, or their login has expired? And, will it be able to redirect people to their originally requested page after they verify access? (like login managers do now)

thanks in advance

Jason

__________________________________________________ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/

_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )