[Zope-dev] LM and user objects

[Chip Vanek]

Hi,

I also tried to get the patch working with 2.2CVS PTK CVS and had little luck.
I also needed to manually apply the patch and worked through the errors until
I got a security violation with the PTK.  I was no longer in any way able to
access any of my test portals using the management interface.  I needed to
back the patch out and get to plain 2.21a and PTK cvs to even get a ZODB
portal working.

With all the problems with the standard PTK way of handling users access, I
think that the best long term solution is to fully make the leap into the use
of LoginManager and Racks as the standard mechenism for the PTK.  I also think
that the standard authentication algorithm should support user login screens
before basic auth for those folders that have a login_form in the aquisition
path.

So my vote is to check your patch into the main stream and harden it.

Best,

Chip Vanek
chip@upcast.com

>-----Original Message-----
>From: zope-dev-admin@zope.org [mailto:zope-dev-admin@zope.org]On Behalf
>Of Dan L. Pierson
>Sent: Wednesday, June 07, 2000 6:28 AM
>To: Bill Anderson
>Cc: zope-dev@zope.org
>Subject: Re: [Zope-dev] LM and user objects
>
>
>Bill Anderson writes:
> > "Phillip J. Eby" wrote:
> > >
> > > At 04:03 PM 6/6/00 -0600, Bill Anderson wrote:
> > > >
> > > >I am using the deafult UserSource that comes with LM for
>the moment (one
> > > >step at a time ;)
> > >
> > > LM or PTK?
> >
> > LM
> >
> > (Waiting for Dan's changes before trying _any_ LM with PTK ;)
>
>I posted the patch about two weeks ago, have you tried it?  I just got
>back from vacation yesterday afternoon.  It looks like Steve Alexander
>tried it and it worked OK (once he tracked down a bug in his manual
>patch application that took me about a day to find when I created the
>patch -- missing imports whose only references are wrapped in a
>try/except can be hard to find :-().
>
>I plan to check this in later today, either directly or on a branch.
>Any preferences?
>
>_______________________________________________
>Zope-Dev maillist  -  Zope-Dev@zope.org
>http://lists.zope.org/mailman/listinfo/zope-dev
>**  No cross posts or HTML encoding!  **
>(Related lists -
> http://lists.zope.org/mailman/listinfo/zope-announce
> http://lists.zope.org/mailman/listinfo/zope )
>
>