[Zope] How to prevent Anonymous users to view dir lists within LocalFS while still having them able to download files
e-Musty
emusty@mailbox.hu
Tue, 29 Jan 2002 02:16:26 +0100
This is a multi-part message in MIME format.
------=_NextPart_000_0018_01C1A86A.F47F2EA0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
I have a LocalFS product containing cc 1000 files in numerous directories
and maintain a database with info about those files, including their URL.
I provide my own search and listing DTMLs for visitors. When they want to
download a given file, they click on a link that increases a download
counter then sends the file for the browser. That's fine and that's what I
want.
I however wouldn't like Anonymous users to be able to view the directory
view provided by LocalFS (to say so I would like to keep my directory
structure hidden) to avoid direct downloads that I cannot register.
Do anybody know a way to hide that directory view from Anonymous users? I've
tried to disable the "Access content information" permission, but it seems
that it have no effect in either way. When I've revoked the View permission
from Anonymous users, I couldn't have Zope push out the files without
requiring authentication, however I've set the Proxy Role of the appropriate
script Manager, Owner and Authenticated.
Any tips on other workarounds? Or should I use *only* an FSCounter or some
similar stuff?
Your prompt help would be very important for me, dudes.
Rock on,
e-Musty
------=_NextPart_000_0018_01C1A86A.F47F2EA0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2712.300" name=3DGENERATOR></HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D397380401-29012002>I have =
a LocalFS=20
product containing cc 1000 files in numerous directories and =
maintain=20
a database with info about those files, including their URL.=20
</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D397380401-29012002>I =
provide my own=20
search and listing DTMLs for visitors. When they want to download a =
given file,=20
they click on a link that increases a download counter then sends the=20
file for the browser. That's fine and that's what I=20
want.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D397380401-29012002></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D397380401-29012002>I =
however wouldn't=20
like Anonymous users to be able to view the directory view provided by =
LocalFS=20
(to say so I would like to keep my directory structure hidden) to avoid =
direct=20
downloads that I cannot register.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D397380401-29012002>Do =
anybody know a=20
way to hide that directory view from Anonymous users? I've tried to =
disable the=20
"Access content information" permission, but it seems that it have no =
effect in=20
either way. When I've revoked the View permission from Anonymous users, =
I=20
couldn't have Zope push out the files without requiring authentication, =
however=20
I've set the Proxy Role of the appropriate script Manager, Owner and=20
Authenticated.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><SPAN class=3D397380401-29012002><FONT face=3DArial size=3D2>Any =
tips on other=20
workarounds? Or should I use *only* an FSCounter or some similar=20
stuff?</FONT></SPAN></DIV>
<DIV><SPAN class=3D397380401-29012002><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D397380401-29012002><FONT face=3DArial size=3D2>Your =
prompt help=20
would be very important for me, dudes.</FONT></SPAN></DIV>
<DIV><SPAN class=3D397380401-29012002><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D397380401-29012002><FONT face=3DArial size=3D2>Rock=20
on,</FONT></SPAN></DIV>
<DIV><SPAN class=3D397380401-29012002><FONT face=3DArial=20
size=3D2>e-Musty</FONT></SPAN></DIV></BODY></HTML>
------=_NextPart_000_0018_01C1A86A.F47F2EA0--