[Zope-dev] Strange bug(?) accessing File objects

robert robert at redcor.ch
Sat Sep 6 07:53:32 EDT 2003


I remember to have had this problem when accessing office files like *.doc's.
It *think* it was a IE issue, that olny happend with particular IE versions.
Robert
Am Friday 05 September 2003 23:26 schrieb Dieter Maurer:
> Bjorn Stabell wrote at 2003-9-2 19:33 +0800:
>  > Has anyone encountered this problem:
>  >
>  > When accessing File objects that are not accessible to Anonymous (HTTP
>  > and WebDAV View permissions not given), the Basic HTTP Auth window pops
>  > up repeatedly even after the user has logged in using the cookie
>  > crumbler method, and the user has permissions to view the file.
>  > Clicking cancel actually lets the user view the file, but that's not an
>  > acceptable solution, of course.
>  >
>  > I see this behavior with Zope 2.5.1 & 2.6.1 (haven't tried 2.7b2 yet),
>  > and I seem to recall earlier versions as well.
>
> I could not reproduce your problem (Zope 2.6.2b2).
> However, I remember that I saw similar problem reports in the mailing
> list.
>
> You get the basic authentication when the permission requirements
> during request processing are stronger than that on the
> published object. It is unclear, however, why you see the
> file when you cancel the login dialog.
>
> Shane's VerboseSecurity Product may give some clues.
>
>
> Dieter
>
> _______________________________________________
> Zope-Dev maillist  -  Zope-Dev at zope.org
> http://mail.zope.org/mailman/listinfo/zope-dev
> **  No cross posts or HTML encoding!  **
> (Related lists -
>  http://mail.zope.org/mailman/listinfo/zope-announce
>  http://mail.zope.org/mailman/listinfo/zope )

-- 
mit freundlichen Grüssen

Robert Rottermann
www.redCOR.ch




More information about the Zope-Dev mailing list