[Zope] Authentication depending on client domain ?

[Dieter Maurer]

Gilles Lenfant writes:
 > This is perhaps not a strict Zope problem, but I need to have some parts of
 > an extranet wiewable WITHOUT authentication from the LAN but WITH
 > authentication from Internet.
 > Has someone an idea for this ?
Zope could do that in earlier versions automatically:

  If a user had an empty password and a domain restriction,
  requests from this domain were authenticated automatically
  as this user.

It was considered a security hole (request IP addresses can quite
easily be forged) and disabled by default.

There is a method that enables the previous behaviour.
Search the mailing list archives or look at the sources
("AccessControl.User") to find its name.


Dieter