[Zope] Session Tracking w/ login management?

[Chris McDonough]

Core session tracking will likely not be a default part of the access
control system in any Zope release.  The purpose of the session tracking
system as it exists is to associate state between requests for *anonymous*
users.  This isn't to say that making use of the sessioning machinery for an
auth system wouldn't be useful, it's just unlikely that DC will make a user
folder implementation that makes any use of it... it's likely that someone
else will, though...

You can do the things you've asked about without loginmanager or session
tracking... for instance, Zope.org uses a modified version of the UserDB
user folder to allow folks to "go back to where they came from" after
logging in, and to redirect folks to a login screen when they're trying to
access a resource to which they don't have access.  You might want to ask
how this is done on the "zope-web" maillist.

- C



----- Original Message -----
From: "Jason Byron" <jason_zope@yahoo.com>
To: <zope@zope.org>
Sent: Monday, May 14, 2001 12:56 PM
Subject: [Zope] Session Tracking w/ login management?


> Is core session tracking going to be integrated into the
> access system in future zope versions?  My real question
> is: will we be able to redirect users to a login screen when
> they try to access unauthorized pages, or their login has
> expired?  And, will it be able to redirect people to their
> originally requested page after they verify access?
> (like login managers do now)
>
> thanks in advance
>
> Jason
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/
>
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )
>