[Zope] LocalFS question

Dieter Maurer dieter@handshake.de
Wed, 23 Oct 2002 20:16:20 +0200


AM writes:
 > I have a LocalFS whose view settings are set to allow only manager to 
 > see them.
 > 
 > Now I have a page that has direct links to the contents of the LocalFS 
 > (I contains images videos and soudn files only). Even though I set up 
 > that page to have a proxy as manager, I get a forbidden error when I 
 > click on any of those links.
Links on a page are just URLs.
When you click on a link this results in a new request which is
completely independent of the template that created the page (containing
the link).

 > What I actually want is that
 > 1. The LocalFS File listing is not visible to the users.
Take away the "View management screens" permission.

 > 2. Nobody should be able to jus type in a URL and have direct access to 
 > my resource without going through a accept license page.
This is usually not possible.

You can try to interface access through an access point which
checks the HTTP_REFERER. Note, however, that not all browsers
sent the HTTP_REFERER information.


Dieter