Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-12 Thread michael nt milne
Thanks"It's worth bearing in mind that those credentials are passed over thewire with every page, so you need your sessions to /stay/ in SSL modeonce authenticated."Yes, I've got the whole site going over SSL and the :8080 port re-directing to SSL. However on my main server where I have other sites

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-12 Thread Chris Withers
michael nt milne wrote: Yes I think I like the HTML login page way to authenticate. It feels more usable. And I don't think I'll use an Apache login box at all. Most users will find it hard remembering one password and with cookie authentication over SSL you can go straight into the site. Brilli

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-12 Thread Chris Withers
michael nt milne wrote: Yes, I've got the whole site going over SSL and the :8080 port re-directing to SSL. Anything not over SSL should be blocked, not redirected, given your earlier paranoia... However on my main server where I have other sites I was thinking about implementing SSL for th

Re: [Zope] Zope and roles and hierarchy

2006-02-12 Thread Kees de Brabander
Ok. This solves a long standing misconception on my part. Somehow I lived with the idea that the called object should have a proxy role and not the calling object. Stupid! Thanks. cb - Original Message - From: "Lennart Regebro" <[EMAIL PROTECTED]> To: "Kees de Brabander" <[EMAIL PROTECTED]

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-12 Thread michael nt milne
Yes, I do realise that it's hard. Regarding the cookie comment that was the reason I wanted to use Apache based login. I do realise that leaving a logon cookie is insecure and that comment was perhaps misguided. I started to think about usability etc. I'm going to block 8080 at the router/firewal

[Zope] Progress bar for file upload

2006-02-12 Thread Bruno Grampa
Hello, what is the better way to implement a simple progress bar when uploading a file in Zope? Thanks (also for all the answers, hints and tips i've received from this wonderful community in the past times!) Bruno ___ Zope maillist - Zope@zop

Re: [Zope] Progress bar for file upload

2006-02-12 Thread Tarek Ziadé
Bruno Grampa wrote: > Hello, > what is the better way to implement a simple progress bar when > uploading a file in Zope? > > Thanks (also for all the answers, hints and tips i've received from > this wonderful community in the past times!) >Bruno > > __

Re: [Zope] Progress bar for file upload

2006-02-12 Thread Andrew Milton
+---[ Bruno Grampa ]-- | Hello, | what is the better way to implement a simple progress bar when uploading | a file in Zope? The way I did it was to write a FS Product to handles uploads and that spawns a new thread for each upload. You should generate an id and redirect t

Re: [Zope] Progress bar for file upload

2006-02-12 Thread Andrew Milton
+---[ Tarek Ziad? ]-- | | IIRC you cannot do it because Zope 2 publisher won't let you get a | request state (ie, how much data has been retrieved by the server) You can do it, you just need to think outside the box. You can't do it using purely through-the-web programming

Re: [Zope] Progress bar for file upload

2006-02-12 Thread Tarek Ziadé
Andrew Milton wrote: >+---[ Bruno Grampa ]-- >| Hello, >| what is the better way to implement a simple progress bar when uploading >| a file in Zope? > >The way I did it was to write a FS Product to handles uploads and that spawns >a new thread for each upload. You should

Re: [Zope] Progress bar for file upload

2006-02-12 Thread Andrew Milton
+---[ Tarek Ziad? ]-- | Andrew Milton wrote: | | >+---[ Bruno Grampa ]-- | >| Hello, | >| what is the better way to implement a simple progress bar when uploading | >| a file in Zope? | > | >The way I did it was to write a FS Product to handles uplo

Re: [Zope] Progress bar for file upload

2006-02-12 Thread Tino Wildenhain
Bruno Grampa schrieb: Hello, what is the better way to implement a simple progress bar when uploading a file in Zope? Yes, you just use Firefox or similar browser which shows a progress bar on upload :-) ___ Zope maillist - Zope@zope.org http://ma