[Zope-CMF] Members only Site

[Jens Vagelpohl]

heiko,

in order to avoid the endless redirection loop go to the cookie crumbler 
instance in nthe root of your portal and simply delete the content of the 
login form field. then you can disable "view" and "access contents 
information" and it should not loop, but you will get a simple HTTP 
authentication box instead of the login page for logging in.

the problem is that by disallowing "view" and "access contents information"
  you also made it "illegal" for anyone to view the login page itself, 
which triggers a redirect to the login page, which is still illegal and 
triggers a redirect again and so forth...

jens


On Thursday, November 22, 2001, at 05:23 , Heiko Stoermer wrote:

> Hi,
>
> I followed the information I found in the recent messages, but none 
> worked.
>
> We want to use CMF 1.1 (Zope 2.4.1) to build an intranet which shouldn't
> allow access to anonymous users. I followed the instructions I found here 
> and
> allowed "View" and "Access contents information" to the root-folder and
> disallowed everything for the CMF-folder.
> No I have this redirection loop which prevents the access to the 
> login_form.
> The only chance to access the site is to allow these two permissions to 
> the
> CMF-folder too but then anonymous access is enabled.
> Any idea?
>
> Thanks and Regards,
>
> Heiko
> --
> Heiko Stoermer
> Project Manager                                     Login & Solutions AG
> heiko.stoermer@login-solutions.de          http://www.login-solutions.de
>
> _______________________________________________
> Zope-CMF maillist  -  Zope-CMF@zope.org
> http://lists.zope.org/mailman/listinfo/zope-cmf
>
> See http://www.zope.org/Products/PTK/Tracker for bug reports and feature 
> requests