<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I’m a little confused here.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>What happened is this, I launch IE, go to the address <a
href="http://zope">http://zope</a> address/dvir/login<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I do log in and than I log out after I managed to log in, now I f
I press the back button after I logged out and goes back to the page and
refresh it I still get the same behavior as if I was logged in. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Is this supposed to work like this? <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>If not than how can I fix it?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Thibaud Morel
l'Horset [mailto:teebes@gmail.com] <br>
<b>Sent:</b> Thursday, March 12, 2009 4:49 PM<br>
<b>To:</b> Dvir Bar-lev<br>
<b>Cc:</b> zope@zope.org<br>
<b>Subject:</b> Re: [Zope] CookieCrumbler question<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'>There is no problem here per
se. When you're logged in to the ZMI, your browser is authenticated using
BASIC_AUTH. What cookiecrumbler does is allow you to log in via cookies
instead. But if you're logged in via a BASIC_AUTH user (which your manager user
is), then CC can't log that user out since that session is not cookie-based.
The visitors to your site won't have this problem since they won't be logged in
to ZMI.<br>
<br>
Your best bet is simply to create a test user and use a different browser for
your testing. For example user Firefox to be logged in to ZMI and use IE or
Safari to be logged in as a test user to test the CC behavior. That's what I
do...<br>
<br>
- Thibaud<o:p></o:p></p>
<div>
<p class=MsoNormal>On Thu, Mar 12, 2009 at 10:31 AM, Dvir Bar-lev <<a
href="mailto:dvir.b@puresight.com">dvir.b@puresight.com</a>> wrote:<o:p></o:p></p>
<div>
<div>
<p><span style='font-size:11.0pt;color:#1F497D'>My cookiecrumbler is indeed in
a subfolder, is that the cause than?</span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'> </span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'>My zmi looks like this:</span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'> </span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'>Root folder</span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'>
Dvir folder – CookieCrumbler, log in forms, user folder</span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'> </span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'>If that is the cause what do I
need to do to make sure when I log out the username returns to anonymus user
than?</span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'>I searched the web but couldn’t
find any way to do it</span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'> </span><o:p></o:p></p>
<div style='border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0in 0in 0in;
border-color:-moz-use-text-color -moz-use-text-color'>
<p><b><span style='font-size:10.0pt'>From:</span></b><span style='font-size:
10.0pt'> Thibaud Morel l'Horset [mailto:<a href="mailto:teebes@gmail.com"
target="_blank">teebes@gmail.com</a>] <br>
<b>Sent:</b> Thursday, March 12, 2009 4:29 PM<br>
<b>To:</b> Dvir Bar-lev<br>
<b>Cc:</b> <a href="mailto:zope@zope.org" target="_blank">zope@zope.org</a><br>
<b>Subject:</b> Re: [Zope] CookieCrumbler question</span><o:p></o:p></p>
</div>
<div>
<div>
<p> <o:p></o:p></p>
<p style='margin-bottom:12.0pt'>Is your cookiecrumbler installed at the root of
your site? or in a subfolder? If you're logged in to the ZMI in the root of
your zope site and execute a CookieCrumbler logout in a subdirectory, you will
still be logged in because you're using your manager user (if memory serves me
well though CC actually warns you of this if you try to logout while logged in
to ZMI...)<br>
<br>
- Thibaud<o:p></o:p></p>
<div>
<p>On Thu, Mar 12, 2009 at 6:55 AM, Dvir Bar-lev <<a
href="mailto:dvir.b@puresight.com" target="_blank">dvir.b@puresight.com</a>>
wrote:<o:p></o:p></p>
<div>
<div>
<p>Hi<o:p></o:p></p>
<p> <o:p></o:p></p>
<p>I used the CookieCrumbler plugin the make a log in.<o:p></o:p></p>
<p>I added the CookeCrumbler(standalone> from the ZMI , and now I have a log
in form that acts oka but I want logout the user, so what I did was call the
logout function of cookiecrumbler like this:<o:p></o:p></p>
<p> <o:p></o:p></p>
<p><dtml-call expr=”logout()”><o:p></o:p></p>
<p> <o:p></o:p></p>
<p>And that does bring me to the logged_out dtml but if I push the back button
and return to the logged_in and press the refresh button I still get the result
as if the user is till logged in.<o:p></o:p></p>
<p> <o:p></o:p></p>
<p>Do I have to do anything else besides calling the logout function to make
sure that the user is now back ti anonymus status?<o:p></o:p></p>
</div>
</div>
<p style='margin-bottom:12.0pt'><br>
_______________________________________________<br>
Zope maillist - <a href="mailto:Zope@zope.org" target="_blank">Zope@zope.org</a><br>
<a href="http://mail.zope.org/mailman/listinfo/zope" target="_blank">http://mail.zope.org/mailman/listinfo/zope</a><br>
** No cross posts or HTML encoding! **<br>
(Related lists -<br>
<a href="http://mail.zope.org/mailman/listinfo/zope-announce"
target="_blank">http://mail.zope.org/mailman/listinfo/zope-announce</a><br>
<a href="http://mail.zope.org/mailman/listinfo/zope-dev" target="_blank">http://mail.zope.org/mailman/listinfo/zope-dev</a>
)<o:p></o:p></p>
</div>
<p> <o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><br>
_______________________________________________<br>
Zope maillist - <a href="mailto:Zope@zope.org">Zope@zope.org</a><br>
<a href="http://mail.zope.org/mailman/listinfo/zope" target="_blank">http://mail.zope.org/mailman/listinfo/zope</a><br>
** No cross posts or HTML encoding! **<br>
(Related lists -<br>
<a href="http://mail.zope.org/mailman/listinfo/zope-announce"
target="_blank">http://mail.zope.org/mailman/listinfo/zope-announce</a><br>
<a href="http://mail.zope.org/mailman/listinfo/zope-dev" target="_blank">http://mail.zope.org/mailman/listinfo/zope-dev</a>
)<o:p></o:p></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>