Re: Authentication and URL Parameters

Sebastian Tänzer <[email protected]> Wed, 5 Sep 2012 12:23:06 +0200
Newsgroups	gmane.comp.cms.zms.devel
Message-ID	<[email protected]>
--w-cJEHqijrcVmYwojQjzgjJj2csW-HXURZT6ntm
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Christian,

there was a patch in July related to avoiding duplicate content which was "=
fixed" in dtml/ZMS/index.dtml (line 7++).
Maybe it has something to do with this? As far as I remember if declarative=
 URLS are enabled this leads to redirection
to the declarative URL if the absolute URL (e1234...) is used.

First checks show: If I call a absolute URL (example: www.taenzer.de/e143/e=
3378?foo=3Dbar) the GET parameters get lost, too.
I guess we have to look into that code again. I'll do so later and see if I=
'll find a quick fix.

I don't think this is about the authentication itself.

Regards, Sebastian T=E4nzer

-
t=E4nzermedien GmbH - Agentur f=FCr Online-Medien
Kekul=E9str. 39 | 53115 Bonn, Germany
E-Mail: [email protected] | Web: http://www.taenzer.me=20=20
Tel.: 0228-304134-0 | Fax.: 0228-304134-99

Besuchen Sie Bonn's ersten Coworking-Space: www.cowobo.de

Am 05.09.2012 um 11:42 schrieb Christian Adolphi | meditix GmbH <c.adolphi@=
meditix.de>:

> Hello ZMS-Developers,
>=20
> I have this problem with newer ZMS instances, that I never had with=20
> older ones: when I call a restricted ZMS=20
> (attr_dc_accessrights_restricted, users as Abonnents) with Get=20
> parameters in the URL, these parameters get cut off after the=20
> Authentication dialog, and I get redirected to 'index_ger.html'. (This=20
> suffix normally is omitted by getHref2IndexHtml.) When I already am=20
> authenticated, the problem does not occur.
>=20
> Zope 2.10.3-final, python 2.4.4, linux2
> Python 2.4.4 (#1, Feb 11 2008, 13:45:20) [GCC 4.2.1 (SUSE Linux)]
> ZMS2 2.13.4.1890
>=20
> Thanks for any help.
>=20
> - Christian Adolphi
>=20
>=20
> ------------------------------------
>=20
> Yahoo! Groups Links
>=20
>=20
>=20


--w-cJEHqijrcVmYwojQjzgjJj2csW-HXURZT6ntm
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable




<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/htm=
l4/strict.dtd">
<html>
<head>
</head>







<body style=3D"background-color: #fff;">
<span style=3D"display:none">&nbsp;</span>

<!--~-|**|PrettyHtmlStartT|**|-~-->
<div id=3D"ygrp-mlmsg" style=3D"position:relative;">
  <div id=3D"ygrp-msg" style=3D"z-index: 1;">
<!--~-|**|PrettyHtmlEndT|**|-~-->

    <div id=3D"ygrp-text" >
=20=20=20=20=20=20
=20=20=20=20=20=20
      <p>Hi Christian,<br>
<br>
there was a patch in July related to avoiding duplicate content which was &=
quot;fixed&quot; in dtml/ZMS/index.dtml (line 7&#43;+).<br>
Maybe it has something to do with this? As far as I remember if declarative=
 URLS are enabled this leads to redirection<br>
to the declarative URL if the absolute URL (e1234...) is used.<br>
<br>
First checks show: If I call a absolute URL (example: www.taenzer.de/e143/e=
3378?foo=3Dbar) the GET parameters get lost, too.<br>
I guess we have to look into that code again. I'll do so later and see if I=
'll find a quick fix.<br>
<br>
I don't think this is about the authentication itself.<br>
<br>
Regards, Sebastian T=E4nzer<br>
<br>
-<br>
t=E4nzermedien GmbH - Agentur f=FCr Online-Medien<br>
Kekul=E9str. 39 | 53115 Bonn, Germany<br>
E-Mail: <a href=3D"mailto:st%40taenzer.me">[email protected]</a> | Web: <a href=
=3D"http://www.taenzer.me">http://www.taenzer.me</a>  <br>
Tel.: 0228-304134-0 | Fax.: 0228-304134-99<br>
<br>
Besuchen Sie Bonn's ersten Coworking-Space: www.cowobo.de<br>
<br>
Am 05.09.2012 um 11:42 schrieb Christian Adolphi | meditix GmbH &lt;<a href=
=3D"mailto:c.adolphi%40meditix.de">[email protected]</a>&gt;:<br>
<br>
&gt; Hello ZMS-Developers,<br>
&gt; <br>
&gt; I have this problem with newer ZMS instances, that I never had with <b=
r>
&gt; older ones: when I call a restricted ZMS <br>
&gt; (attr_dc_accessrights_restricted, users as Abonnents) with Get <br>
&gt; parameters in the URL, these parameters get cut off after the <br>
&gt; Authentication dialog, and I get redirected to 'index_ger.html'. (This=
 <br>
&gt; suffix normally is omitted by getHref2IndexHtml.) When I already am <b=
r>
&gt; authenticated, the problem does not occur.<br>
&gt; <br>
&gt; Zope 2.10.3-final, python 2.4.4, linux2<br>
&gt; Python 2.4.4 (#1, Feb 11 2008, 13:45:20) [GCC 4.2.1 (SUSE Linux)]<br>
&gt; ZMS2 2.13.4.1890<br>
&gt; <br>
&gt; Thanks for any help.<br>
&gt; <br>
&gt; - Christian Adolphi<br>
&gt; <br>
&gt; <br>
&gt; ------------------------------------<br>
&gt; <br>
&gt; Yahoo! Groups Links<br>
&gt; <br>
&gt; <br>
&gt; <br>
<br>
</p>

    </div>
=20=20=20=20=20

    <!--~-|**|PrettyHtmlStart|**|-~-->
    <div style=3D"color: #fff; height: 0;">__._,_.___</div>

=20=20=20=20=20=20=20=20
=20=20
=20=20=20
    <div id=3D"ygrp-actbar" style=3D"clear: both; margin-bottom: 10px; whit=
e-space: nowrap; color: #666; padding-top: 15px;">
      <div>
        <a href=3D"mailto:[email protected]?subject=3DRe%3A%20%5Bzms-developers=
%5D%20Authentication%20and%20URL%20Parameters" style=3D"margin-right: 0; pa=
dding-right: 0;">
	  Reply to <span style=3D"font-weight: 700;">sender</span></a> |
        <a href=3D"mailto:[email protected]?subject=3DRe%3A%20=
%5Bzms-developers%5D%20Authentication%20and%20URL%20Parameters">
	  Reply to <span style=3D"font-weight: 700;">group</span></a> |
        	  <a href=3D"http://groups.yahoo.com/group/zms-developers/post;_yl=
c=3DX3oDMTJwbWIxYmFoBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ3Jwc3BJZAMxNzA3Mjg=
xOTQyBG1zZ0lkAzM4MDkEc2VjA2Z0cgRzbGsDcnBseQRzdGltZQMxMzQ2ODQwNTkw?act=3Drep=
ly&messageNum=3D3809">Reply <span style=3D"font-weight: 700;">via web post<=
/span></a> |
            	<a href=3D"http://groups.yahoo.com/group/zms-developers/post;_=
ylc=3DX3oDMTJlNXFicWN2BF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ3Jwc3BJZAMxNzA3M=
jgxOTQyBHNlYwNmdHIEc2xrA250cGMEc3RpbWUDMTM0Njg0MDU5MA--" style=3D"font-weig=
ht: 700;">Start a New Topic</a>
      </div>

                <a href=3D"http://groups.yahoo.com/group/zms-developers/mes=
sage/3807;_ylc=3DX3oDMTM0Y2tpdTlwBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ3Jwc3=
BJZAMxNzA3MjgxOTQyBG1zZ0lkAzM4MDkEc2VjA2Z0cgRzbGsDdnRwYwRzdGltZQMxMzQ2ODQwN=
TkwBHRwY0lkAzM4MDc-">Messages in this topic</a>
          (<span style=3D"font-weight: 700;">3</span>)
          </div>=20
<!------- Start Nav Bar ------>

<!-- |**|begin egp html banner|**| -->
<div id=3D"ygrp-vital" style=3D"background-color: #e0ecee; font-family: Ver=
dana; font-size: 10px; margin-bottom: 10px; padding: 10px;">
      <span id=3D"vithd" style=3D"font-weight: bold; color: #333; text-tran=
sform: uppercase; ">Recent Activity:</span>

    <ul style=3D"list-style-type: none; margin: 0; padding: 0; display: inl=
ine;">
            <li style=3D"border-right: 1px solid #000; font-weight: 700; di=
splay: inline; padding: 0 5px; margin-left: 0;">
      <span class=3D"cat"><a href=3D"http://groups.yahoo.com/group/zms-deve=
lopers/members;_ylc=3DX3oDMTJmcWFiOTFkBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ=
3Jwc3BJZAMxNzA3MjgxOTQyBHNlYwN2dGwEc2xrA3ZtYnJzBHN0aW1lAzEzNDY4NDA1OTA-?o=
=3D6" style=3D"text-decoration: none;">New Members</a></span>
      <span class=3D"ct" style=3D"color: #ff7900;">1</span>
    </li>
                                              </ul>
=20=20=20=20
  <div style=3D"clear: both; padding-top: 2px; color: #1e66ae;">
    <a href=3D"http://groups.yahoo.com/group/zms-developers;_ylc=3DX3oDMTJl=
YXU5ZWhsBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ3Jwc3BJZAMxNzA3MjgxOTQyBHNlYwN=
2dGwEc2xrA3ZnaHAEc3RpbWUDMTM0Njg0MDU5MA--" style=3D"text-decoration: none;"=
>Visit Your Group</a>
  </div>
</div>

=20=20
<div id=3D"ft" style=3D"font-family: Arial; font-size: 11px; margin-top: 5p=
x; padding: 0 2px 0 0; clear: both;">
  <a href=3D"http://groups.yahoo.com/;_ylc=3DX3oDMTJkc2RycmdmBF9TAzk3MzU5Nz=
E0BGdycElkAzg0NzA4MjEEZ3Jwc3BJZAMxNzA3MjgxOTQyBHNlYwNmdHIEc2xrA2dmcARzdGltZ=
QMxMzQ2ODQwNTkw" style=3D"float: left;"><img src=3D"http://l.yimg.com/a/i/u=
s/yg/logo/us.gif" height=3D"15" width=3D"137" alt=3D"Yahoo! Groups" style=
=3D"border: 0;"/></a>
  <div style=3D"color: #747575; float: right;">Switch to: <a href=3D"mailto=
:[email protected]?subject=3DChange Delivery Forma=
t: Traditional" style=3D"text-decoration: none;">Text-Only</a>, <a href=3D"=
mailto:[email protected]?subject=3DEmail Delivery: Dige=
st" class=3D"margin-rt" style=3D"text-decoration: none;">Daily Digest</a> &=
bull; <a href=3D"mailto:[email protected]?subject=
=3DUnsubscribe" style=3D"text-decoration: none;">Unsubscribe</a> &bull; <a =
href=3D"http://docs.yahoo.com/info/terms/" style=3D"text-decoration: none;"=
>Terms of Use</a></div>
</div>

<!-- |**|end egp html banner|**| -->

  </div> <!-- ygrp-msg -->

  <!-- Sponsor -->
  <!-- |**|begin egp html banner|**| -->
  <div id=3D"ygrp-sponsor" style=3D"width:160px; float:right; clear:none; m=
argin:0 0 25px 0; background: #fff;">

<!-- Start Recommendations -->
<div id=3D"ygrp-reco">
     </div>
<!-- End Recommendations -->



  </div>   <!-- |**|end egp html banner|**| -->

  <div style=3D"clear:both; color: #FFF; font-size:1px;">.</div>
</div>

  <img src=3D"http://geo.yahoo.com/serv?s=3D97359714/grpId=3D8470821/grpspI=
d=3D1707281942/msgId=3D3809/stime=3D1346840590/nc1=3D3848640/nc2=3D4507179/=
nc3=3D4836043" width=3D"1" height=3D"1"> <br>

<div style=3D"color: #fff; height: 0;">__,_._,___</div>
<!--~-|**|PrettyHtmlEnd|**|-~-->

</body>

<!--~-|**|PrettyHtmlStart|**|-~-->
<head>
  <style type=3D"text/css">
  <!--
  #ygrp-mkp {
  border: 1px solid #d8d8d8;
  font-family: Arial;
  margin: 10px 0;
  padding: 0 10px;
}

#ygrp-mkp hr {
  border: 1px solid #d8d8d8;
}

#ygrp-mkp #hd {
  color: #628c2a;
  font-size: 85%;
  font-weight: 700;
  line-height: 122%;
  margin: 10px 0;
}

#ygrp-mkp #ads {
  margin-bottom: 10px;
}

#ygrp-mkp .ad {
  padding: 0 0;
}

#ygrp-mkp .ad p {
  margin: 0;
}

#ygrp-mkp .ad a {
  color: #0000ff;
  text-decoration: none;
}
  #ygrp-sponsor #ygrp-lc {
  font-family: Arial;
}

#ygrp-sponsor #ygrp-lc #hd {
  margin: 10px 0px;
  font-weight: 700;
  font-size: 78%;
  line-height: 122%;
}

#ygrp-sponsor #ygrp-lc .ad {
  margin-bottom: 10px;
  padding: 0 0;
}

  a {
    color: #1e66ae;
  }

  #actions {
    font-family: Verdana;
    font-size: 11px;
    padding: 10px 0;
  }

  #activity {
    background-color: #e0ecee;
    float: left;
    font-family: Verdana;
    font-size: 10px;
    padding: 10px;
  }

  #activity span {
    font-weight: 700;
  }

  #activity span:first-child {
    text-transform: uppercase;
  }

  #activity span a {
    color: #5085b6;
    text-decoration: none;
  }

  #activity span span {
    color: #ff7900;
  }

  #activity span .underline {
    text-decoration: underline;
  }

  .attach {
    clear: both;
    display: table;
    font-family: Arial;
    font-size: 12px;
    padding: 10px 0;
    width: 400px;
  }

  .attach div a {
    text-decoration: none;
  }

  .attach img {
    border: none;
    padding-right: 5px;
  }

  .attach label {
    display: block;
    margin-bottom: 5px;
  }

  .attach label a {
    text-decoration: none;
  }
=20=20
  blockquote {
    margin: 0 0 0 4px;
  }

  .bold {
    font-family: Arial;
    font-size: 13px;
    font-weight: 700;
  }

  .bold a {
    text-decoration: none;
  }

  dd.last p a {
    font-family: Verdana;
    font-weight: 700;
  }

  dd.last p span {
    margin-right: 10px;
    font-family: Verdana;
    font-weight: 700;
  }

  dd.last p span.yshortcuts {
    margin-right: 0;
  }

  div.attach-table div div a {
    text-decoration: none;
  }

  div.attach-table {
    width: 400px;
  }

  div.file-title a, div.file-title a:active, div.file-title a:hover, div.fi=
le-title a:visited {
    text-decoration: none;
  }

  div.photo-title a, div.photo-title a:active, div.photo-title a:hover, div=
.photo-title a:visited {
    text-decoration: none;
  }

  div#ygrp-mlmsg #ygrp-msg p a span.yshortcuts {
    font-family: Verdana;
    font-size: 10px;
    font-weight: normal;
  }

  .green {
    color: #628c2a;
  }

  .MsoNormal {
    margin: 0 0 0 0;
  }

  o {
    font-size: 0;
  }

  #photos div {
    float: left;
    width: 72px;
  }

  #photos div div {
    border: 1px solid #666666;
    height: 62px;
    overflow: hidden;
    width: 62px;
  }

  #photos div label {
    color: #666666;
    font-size: 10px;
    overflow: hidden;
    text-align: center;
    white-space: nowrap;
    width: 64px;
  }

  #reco-category {
    font-size: 77%;
  }

  #reco-desc {
    font-size: 77%;
  }

  .replbq {
    margin: 4px;
  }

  #ygrp-actbar div a:first-child {
   /* border-right: 0px solid #000;*/
    margin-right: 2px;
    padding-right: 5px;
  }

  #ygrp-mlmsg {
    font-size: 13px;
    font-family: Arial, helvetica,clean, sans-serif;
    *font-size: small;
    *font: x-small;
  }

  #ygrp-mlmsg table {
    font-size: inherit;
    font: 100%;
  }

  #ygrp-mlmsg select, input, textarea {
    font: 99% Arial, Helvetica, clean, sans-serif;
  }

  #ygrp-mlmsg pre, code {
    font:115% monospace;
    *font-size:100%;
  }

  #ygrp-mlmsg * {
    line-height: 1.22em;
  }

  #ygrp-mlmsg #logo {
    padding-bottom: 10px;
  }

  #ygrp-mlmsg a {
    color: #1E66AE;
  }

  #ygrp-msg p a {
    font-family: Verdana;
  }

  #ygrp-msg p#attach-count span {
    color: #1E66AE;
    font-weight: 700;
  }

  #ygrp-reco #reco-head {
    color: #ff7900;
    font-weight: 700;
  }

  #ygrp-reco {
    margin-bottom: 20px;
    padding: 0px;
  }

  #ygrp-sponsor #ov li a {
    font-size: 130%;
    text-decoration: none;
  }

  #ygrp-sponsor #ov li {
    font-size: 77%;
    list-style-type: square;
    padding: 6px 0;
  }=20

  #ygrp-sponsor #ov ul {
    margin: 0;
    padding: 0 0 0 8px;
  }

  #ygrp-text {
    font-family: Georgia;
  }

  #ygrp-text p {
    margin: 0 0 1em 0;
  }

  #ygrp-text tt {
    font-size: 120%;
  }

  #ygrp-vital ul li:last-child {
    border-right: none !important;=20
  }=20
  -->
  </style>
</head>

<!--~-|**|PrettyHtmlEnd|**|-~-->
</html>
<!-- end group email -->


--w-cJEHqijrcVmYwojQjzgjJj2csW-HXURZT6ntm--