<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
Dustin wrote:<br>
<br>
<br>
Well, just chatted with one of the presenters today...and he cleared up
part of this puzzle.<br>
When you use the PLONE login, you're using cookie based
authentication. And actually, if you log out (but from PLONE... don't
go into the ZMI), what is actually happening is that an attempt to
re'login is done, but using a dummy /fake uid and pw - and it fails -
and then your browser keeps that last entered info... so you're logged
out. <br>
<br>
BUT.. if you've traversed OUT of Plone.. up into the ZMI - there you're
using AUTH type authentication. <br>
<br>
Test some more - go to your site, but dont log in. The go all the way
up to the root Zope object...log in there as admin... then use the log
out available up on the pulldown... and it should work fine.
Then..testing the other way...login to Plone only... then log out -
should work fine.<br>
<br>
<blockquote
cite="midPine.LNX.4.44.0507201312530.22350-100000@alice.wonderland.caltech.edu"
type="cite">
<blockquote type="cite">
<pre wrap="">This is not right, for sure. One thing I've noticed is that even though
you use the 'log out' button, unless you exit your browser (Firefox for
me), you'll continue to remain connected at the next login.
</pre>
</blockquote>
<pre wrap=""><!---->
Yes, last night I played with the browser and dug around in the docs and
realized this. I think it is behaving OK, except that you simply can't
log out.
Any clue why Zope is the only system that can't do this, when much more
lightweight PHP-based CMSes can log you out just fine? It seems like an
amazingly trivial limitation for such a complex and powerful system.
</pre>
</blockquote>
Plone uses GroupUserFolder - and I think it best that if you're using a
Plone site, add users/groups there (and ferget the ZMI). <br>
<blockquote
cite="midPine.LNX.4.44.0507201312530.22350-100000@alice.wonderland.caltech.edu"
type="cite">
<pre wrap="">
Oh--my impression is that Zope is actually handling the accounts, not
Plone, so that one administers a Plone site through the Zope management
interface. Is that correct?
</pre>
</blockquote>
Thats doable. But you probably only want to create a new 'MySmartUser'
group, and define whatever roles that this group needs - and then stay
away from messing with individual permissions on objects whenever
possible. I was just sayin true 'ADMIN' means open field day to mess
with the site...something others should not have.<br>
<blockquote
cite="midPine.LNX.4.44.0507201312530.22350-100000@alice.wonderland.caltech.edu"
type="cite">
<pre wrap=""></pre>
<blockquote type="cite">
<pre wrap="">as automagically bumping up a new users permissions to ADMIN - you
probably can do that with the (rather complex) permissions setups - but I
doubt its a good idea.
</pre>
</blockquote>
<pre wrap=""><!---->
No, making that automatic is the last thing I want. I just would like the
option to have the server email me that "New account XXX has been
created", as for example Mambo does by default. It's easier to notice
that someone needs bumping up that way.
</pre>
<pre wrap="">
</pre>
</blockquote>
Two quick things - one you may know...other I just heard today.<br>
Again..you say 'Zope' here - but I think you're talking Plone... and
the next release of Plone (v2.1... within 8 wks) is said to have GREAT
speed increases. (i know.... 'great' may not be a quantifiable term
for you Caltech folks 1) - but they're all quite excited about that.<br>
<br>
BID thing - out of the box Zope is runnin in Debug mode. And its WAY
slow. Useful for some things - but needs to be turned off on
productions sites (and probably should be turned off for your tests if
performance is an issue..and you've installed it on some decent
hardware.) Set in the zope config file zope.conf<br>
<blockquote
cite="midPine.LNX.4.44.0507201312530.22350-100000@alice.wonderland.caltech.edu"
type="cite">
<pre wrap="">
The major problem is that my impression is still that Zope is more
suitable for maintaining, say, Amazon.com on a big pile of hardware than a
small site running on modest hardware. The list of dependencies alone
that apt-get needed to install was pretty daunting. I'm testing it
because I've heard it said that it is easier for users, if not
administrators, to add simple content to, but the complexity and sheer
industrial-strength design is still kind of overwhelming. Well, I'm also
testing it because we had a nice presentation on Zope/Plone and it seemed
pretty cool and I just wanted to play with it a bit. But it still feels
like purchasing your own international shipping company just to bring home
groceries that would fit in the saddlebags of your bike. :-)
Dustin
</pre>
</blockquote>
<br>
good luck with your projects<br>
<br>
r<br>
</body>
</html>