<div>Hi Phil</div>
<div> </div>
<div>I've implemented what's outlined in the make private site documentation and it works fine on Plone 2.1.1. No content is available apart from the site-map page (doesn't list content) and the contact form but I can figure that out separately.
</div>
<div> </div>
<div>Yes I think I like the HTML login page way to authenticate. It feels more usable. And I don't think I'll use an Apache login box at all. Most users will find it hard remembering one password and with cookie authentication over SSL you can go straight into the site. Brilliant.
</div>
<div> </div>
<div>I'm revisting some of the points made in this thread though about security. It does seem that Zope and Plone as you say, are at odds on this.</div>
<div> </div>
<div>Thanks alot for your help and words of advice. I still seem to have an issue where editing a page in IE over SSL produces a 'can't find server' but it's a browser issue as this works fine on the latest Firefox.</div>
<div> </div>
<div>Michael<br><br> </div>
<div><span class="gmail_quote">On 2/11/06, <b class="gmail_sendername">Philip Kilner</b> <<a href="mailto:phil@xfr.co.uk">phil@xfr.co.uk</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Hi Michael,<br><br>michael nt milne wrote:<br>> Yes I found that as well but picked it up from the Google cache.
<br>> Strange that it is available there as it's password protected.<br>> Possibly it was public before?<br>><br><br>Yes, it was public before.<br><br>Have you tried this, and does it solve your problems?<br><br>
JCC is spot on when he points to workflow as being the basis of security<br>in Plone - it's also worth saying that the Zope system and the Plone<br>system are pretty much at odds with one another. You are more likely to<br>
make mistakes at the Zope level than to do what you intend.<br><br>(If you try the "howto", don't overlook that last step - hitting the<br>"update security settings" button. Managed to overlook this myself
<br>recently (despite it being the umpteenth time I've followed this howto),<br>and spent hours thinking that something more exotic was going on!)<br><br>Let us know how you get on...<br><br><br>--<br><br>Regards,<br><br>
PhilK<br><br>Email: <a href="mailto:phil@xfr.co.uk">phil@xfr.co.uk</a><br>PGP Public key: <a href="http://www.xfr.co.uk">http://www.xfr.co.uk</a><br>Voicemail & Facsimile: 07092 070518<br><br>"You'll find that one part's sweet and one part's tart:
<br>say where the sweetness and the sourness start."<br>- Tony Harrison<br></blockquote></div><br><br clear="all"><br>-- <br>Michael