[Zope] Question: user homepages

Michel Pelletier michel@digicool.com
Wed, 14 Jul 1999 11:13:07 -0400


> -----Original Message-----
> From: cg@cdegroot.com [mailto:cg@cdegroot.com]
> Sent: Wednesday, July 14, 1999 1:35 AM
> To: Alexander Staubo; zope@zope.org
> Subject: Re: [Zope] Question: user homepages 
> 
> 
> Thanks for the explanation, Alexander!
> 
> alex@mop.no said:
> > That's browser-specific -- Zope's management interface does not do
> > persistent logins. 
> 
> I presume Zope sets a cookie after login that identifies the 
> user, not? In 
> that case, wouldn't it be easy for Zope to overwrite this 
> cookie with junk in 
> response to a logout button so the next request fails with a 
> security error?
> 

Zope does not set a cookie, but you're welcome to with REQUEST.setCookie

> > Just open a new browser instance. In IE 5.0, just open a new window.
> 
> Doesn't work with Netscape on Linux, it seems. 

You'll have to close the browser and re open, or run another browser as
a different user.

-Michel

> 
> 
> -- 
> Cees de Groot               http://www.cdegroot.com     
> <cg@cdegroot.com>
> 
> 
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://www.zope.org/mailman/listinfo/zope
> 
> (For developer-specific issues, use the companion list,
> zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )
>