[Zope-dev] Zope security alert and 2.2 information

[Michel Pelletier]

Brian Lloyd wrote:
> 
> > Which does bring be back to the question of what is the relationship
> > between the 'nobody' user and the 'Anonymous' user.
> 
> They are different names for the same thing. When you visit a
> (Zope) site without credentials, you are visiting as the
> Anonymous/nobody user. 'Anonymous User' is the name that you
> see in Zope UI (for example in undo logs if the AU ever does
> something that causes a transaction). Internally in the Zope
> code, this user is known as 'nobody'. To be exact, the
> username attribute of the nobody user is 'Anonymous User'.

Hmm... I was under the impression from the Wiki it was different, I'll
spell that out explicitly.

-Michel