[Zope] LocalFS question
Dieter Maurer
dieter@handshake.de
Wed, 23 Oct 2002 20:16:20 +0200
AM writes:
> I have a LocalFS whose view settings are set to allow only manager to
> see them.
>
> Now I have a page that has direct links to the contents of the LocalFS
> (I contains images videos and soudn files only). Even though I set up
> that page to have a proxy as manager, I get a forbidden error when I
> click on any of those links.
Links on a page are just URLs.
When you click on a link this results in a new request which is
completely independent of the template that created the page (containing
the link).
> What I actually want is that
> 1. The LocalFS File listing is not visible to the users.
Take away the "View management screens" permission.
> 2. Nobody should be able to jus type in a URL and have direct access to
> my resource without going through a accept license page.
This is usually not possible.
You can try to interface access through an access point which
checks the HTTP_REFERER. Note, however, that not all browsers
sent the HTTP_REFERER information.
Dieter