[Zope-CMF] Re: Not logging out of CMF 1.4.2 on Zope 2.7b3?

[Jake]

Has this changed from previous versions of CMF? Logout has always worked
fine (logging the user out of CMF) and the only time I saw this was when I
was actually logged into the ZMI and into the CMF at the same time.

The seems to be something that popped up only when I went from 1.4 -> 1.4.2

Jake
-- 
http://www.ZopeZone.com


Tres Seaver said:
> Jake wrote:
>> I have noticed that on all my CMF 1.4.2 sites that when a user hits
>> "logout" they get the "you might still be logged into the Zope ZMI.."
>> message.
>>
>> When the user goes anywhere else, it shows they are actually logged out
>> (and not logged into the Zope ZMI.
>>
>> Is this a known bug or something that might be in one of my
>> installations?
>
> If your login is based on HTTP basic auth, rather than the
> CookieCrumbler, then the 'loggged_out' template does not actually log
> you out;  this behaviour is due to the nature of basic auth, which
> doesn't contemplate true logouts.  The 'manage_zmi_logout' link actually
> just raises Unauthorized, which is not what you usually want.
>
> Tres.
> --
> ===============================================================
> Tres Seaver                                tseaver at zope.com
> Zope Corporation      "Zope Dealers"       http://www.zope.com
>
>
> _______________________________________________
> Zope-CMF maillist  -  Zope-CMF at zope.org
> http://mail.zope.org/mailman/listinfo/zope-cmf
>
> See http://collector.zope.org/CMF for bug reports and feature requests
>