ok, I've gone into the security tab in the site root and set 'view' to 'authenticated' whilst de-selecting aquire. However, using the password that gets me into the overall 8080/manage doesn't work. Also the front page still comes up if you cancel the login box and the page displays without css. This shouldn't happen with view set to authenticated.
<br><br><div><span class="gmail_quote">On 2/8/06, <b class="gmail_sendername">Jens Vagelpohl</b> <<a href="mailto:jens@dataflake.org">jens@dataflake.org</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>On 7 Feb 2006, at 23:58, michael nt milne wrote:<br><br>> Also, just to say that I did a test on only letting authenticated<br>> and managers view the root page of the site over ssl. If you just<br>> cancelled the login box or closed it, the whole front page was
<br>> displayed without any css but you could still get all the content.<br>> I've had this quite a bit before so that's why I'm looking into<br>> Apache authentication. I just don't think that Zope authentication
<br>> is secure.<br><br>As someone else has already mentioned, there is zero difference when<br>it comes to "how secure" the login procedure is. It doesn't matter<br>how you set up authentication if you haven't applied the proper
<br>permission settings in Zope to prevent showing that front page<br>content you mentioned earlier. You need to get a better idea how to<br>use the built-in Zope security mechanisms to achieve the security<br>settings you would like to see.
<br><br>Using both Apache and Zope authentication will bring mostly pain.<br>Your strategy is wrong. Get a better understanding of what Zope can<br>do in that regard and then decide.<br><br>jens<br><br>_______________________________________________
<br>Zope maillist - <a href="mailto:Zope@zope.org">Zope@zope.org</a><br><a href="http://mail.zope.org/mailman/listinfo/zope">http://mail.zope.org/mailman/listinfo/zope</a><br>** No cross posts or HTML encoding! **<br>
(Related lists -<br> <a href="http://mail.zope.org/mailman/listinfo/zope-announce">http://mail.zope.org/mailman/listinfo/zope-announce</a><br> <a href="http://mail.zope.org/mailman/listinfo/zope-dev">http://mail.zope.org/mailman/listinfo/zope-dev
</a> )<br></blockquote></div><br><br clear="all"><br>-- <br>Michael