[Zope] manage

[Dieter Maurer]

neeloy_saha writes:
 > .... authentication ....
 > 1.what is the python file which pops up that child window for entering
 > username and password ?
In plain vanilla Zope (i.e. without GUF, LoginManager or some other
login catcher)
Zope simply raises an Unauthorized exception.
This is turned into an HTTP Unauthorized response.
Your browser, upon receipt of such a response, pops up the dialog
and ask you for username and password.
It then automatically reissues the request.

 > 2.After u give the username and password what is the file / module name
 > against which  the username and password is authenticated.
For any request, Zope traverses the hierarchical WebSite object
guided by the request's URL. At the URL's end, it reaches
some object (or has raised a "NotFound" exception).
From that object, Zope looks back along its path for
objects that are able to authenticate some users.
Usually, these are objects that contain a "user folder", usually
called "acl_users".
Authentication is done by such a "user folder".
You find the code near the end of "ZPublisher.BaseRequest.traverse".

A user folder has a method "validate".
It gets the request, authentication information and
(optionally) the list of roles necessary to access the target
object. It returns a user object, if it can one authenticate
for the given authentication information and with the required
roles, otherwise, it returns None.
If it return None, Zope looks furhter up in the path.
If it reaches the end without being able to authenticate
the user, it raises an Unauthorized exception (this leads to 1) above).

You find Zope's vanilla user folder in "AccessControl.User.UserFolder".

 > 3.what is this 'manage'....? method/module???
There is none.



Dieter