Re: Authentication and URL Parameters
Sebastian Tänzer <[email protected]> Wed, 5 Sep 2012 12:42:00 +0200
| Newsgroups | gmane.comp.cms.zms.devel |
|---|---|
| Message-ID | <[email protected]> |
--S1NDlOkARe6PM4IVygVwyYHA8594I9I-a6YvjWb
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Maybe a quick fix for this:
Edit dtml/ZMS/index.dtml in ZMS product directory and change the dtml-retur=
n in line 10 to:
<dtml-if "REQUEST['QUERY_STRING']"><dtml-return "RESPONSE.redirect(getHref2=
IndexHtml(REQUEST) + '?' + REQUEST['QUERY_STRING'], 301)">
<dtml-else><dtml-return "RESPONSE.redirect(getHref2IndexHtml(REQUEST), 301)=
"></dtml-if>
Again quick fix - which should be tested in detail later. Especially what a=
bout POST data?=20
From what I can see POST data is lost if such a redirect occurs.=20
At least here my GET parameters are kept now with this change.
Best, Sebastian T=E4nzer
Am 05.09.2012 um 11:42 schrieb Christian Adolphi | meditix GmbH <c.adolphi@=
meditix.de>:
> Hello ZMS-Developers,
>=20
> I have this problem with newer ZMS instances, that I never had with=20
> older ones: when I call a restricted ZMS=20
> (attr_dc_accessrights_restricted, users as Abonnents) with Get=20
> parameters in the URL, these parameters get cut off after the=20
> Authentication dialog, and I get redirected to 'index_ger.html'. (This=20
> suffix normally is omitted by getHref2IndexHtml.) When I already am=20
> authenticated, the problem does not occur.
>=20
> Zope 2.10.3-final, python 2.4.4, linux2
> Python 2.4.4 (#1, Feb 11 2008, 13:45:20) [GCC 4.2.1 (SUSE Linux)]
> ZMS2 2.13.4.1890
>=20
> Thanks for any help.
>=20
> - Christian Adolphi
>=20
>=20
> ------------------------------------
>=20
> Yahoo! Groups Links
>=20
>=20
>=20
--S1NDlOkARe6PM4IVygVwyYHA8594I9I-a6YvjWb
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/htm=
l4/strict.dtd">
<html>
<head>
</head>
<body style=3D"background-color: #fff;">
<span style=3D"display:none"> </span>
<!--~-|**|PrettyHtmlStartT|**|-~-->
<div id=3D"ygrp-mlmsg" style=3D"position:relative;">
<div id=3D"ygrp-msg" style=3D"z-index: 1;">
<!--~-|**|PrettyHtmlEndT|**|-~-->
<div id=3D"ygrp-text" >
=20=20=20=20=20=20
=20=20=20=20=20=20
<p>Maybe a quick fix for this:<br>
<br>
Edit dtml/ZMS/index.dtml in ZMS product directory and change the dtml-retur=
n in line 10 to:<br>
<br>
<dtml-if "REQUEST['QUERY_STRING']"><dtml-return "RE=
SPONSE.redirect(getHref2IndexHtml(REQUEST) + '?' + REQUEST['QUERY_STRING'],=
301)"><br>
<dtml-else><dtml-return "RESPONSE.redirect(getHref2IndexHtml(=
REQUEST), 301)"></dtml-if><br>
<br>
Again quick fix - which should be tested in detail later. Especially what a=
bout POST data? <br>
From what I can see POST data is lost if such a redirect occurs. <br>
<br>
At least here my GET parameters are kept now with this change.<br>
<br>
Best, Sebastian T=E4nzer<br>
<br>
Am 05.09.2012 um 11:42 schrieb Christian Adolphi | meditix GmbH <<a href=
=3D"mailto:c.adolphi%40meditix.de">[email protected]</a>>:<br>
<br>
> Hello ZMS-Developers,<br>
> <br>
> I have this problem with newer ZMS instances, that I never had with <b=
r>
> older ones: when I call a restricted ZMS <br>
> (attr_dc_accessrights_restricted, users as Abonnents) with Get <br>
> parameters in the URL, these parameters get cut off after the <br>
> Authentication dialog, and I get redirected to 'index_ger.html'. (This=
<br>
> suffix normally is omitted by getHref2IndexHtml.) When I already am <b=
r>
> authenticated, the problem does not occur.<br>
> <br>
> Zope 2.10.3-final, python 2.4.4, linux2<br>
> Python 2.4.4 (#1, Feb 11 2008, 13:45:20) [GCC 4.2.1 (SUSE Linux)]<br>
> ZMS2 2.13.4.1890<br>
> <br>
> Thanks for any help.<br>
> <br>
> - Christian Adolphi<br>
> <br>
> <br>
> ------------------------------------<br>
> <br>
> Yahoo! Groups Links<br>
> <br>
> <br>
> <br>
<br>
</p>
</div>
=20=20=20=20=20
<!--~-|**|PrettyHtmlStart|**|-~-->
<div style=3D"color: #fff; height: 0;">__._,_.___</div>
=20=20=20=20=20=20=20=20
=20=20
=20=20=20
<div id=3D"ygrp-actbar" style=3D"clear: both; margin-bottom: 10px; whit=
e-space: nowrap; color: #666; padding-top: 15px;">
<div>
<a href=3D"mailto:[email protected]?subject=3DRe%3A%20%5Bzms-developers=
%5D%20Authentication%20and%20URL%20Parameters" style=3D"margin-right: 0; pa=
dding-right: 0;">
Reply to <span style=3D"font-weight: 700;">sender</span></a> |
<a href=3D"mailto:[email protected]?subject=3DRe%3A%20=
%5Bzms-developers%5D%20Authentication%20and%20URL%20Parameters">
Reply to <span style=3D"font-weight: 700;">group</span></a> |
<a href=3D"http://groups.yahoo.com/group/zms-developers/post;_yl=
c=3DX3oDMTJwMGwxZHEwBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ3Jwc3BJZAMxNzA3Mjg=
xOTQyBG1zZ0lkAzM4MTAEc2VjA2Z0cgRzbGsDcnBseQRzdGltZQMxMzQ2ODQxNzIy?act=3Drep=
ly&messageNum=3D3810">Reply <span style=3D"font-weight: 700;">via web post<=
/span></a> |
<a href=3D"http://groups.yahoo.com/group/zms-developers/post;_=
ylc=3DX3oDMTJlM2tpdWplBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ3Jwc3BJZAMxNzA3M=
jgxOTQyBHNlYwNmdHIEc2xrA250cGMEc3RpbWUDMTM0Njg0MTcyMg--" style=3D"font-weig=
ht: 700;">Start a New Topic</a>
</div>
<a href=3D"http://groups.yahoo.com/group/zms-developers/mes=
sage/3807;_ylc=3DX3oDMTM0dDhxaGpqBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ3Jwc3=
BJZAMxNzA3MjgxOTQyBG1zZ0lkAzM4MTAEc2VjA2Z0cgRzbGsDdnRwYwRzdGltZQMxMzQ2ODQxN=
zIyBHRwY0lkAzM4MDc-">Messages in this topic</a>
(<span style=3D"font-weight: 700;">4</span>)
</div>=20
<!------- Start Nav Bar ------>
<!-- |**|begin egp html banner|**| -->
<div id=3D"ygrp-vital" style=3D"background-color: #e0ecee; font-family: Ver=
dana; font-size: 10px; margin-bottom: 10px; padding: 10px;">
<span id=3D"vithd" style=3D"font-weight: bold; color: #333; text-tran=
sform: uppercase; ">Recent Activity:</span>
<ul style=3D"list-style-type: none; margin: 0; padding: 0; display: inl=
ine;">
<li style=3D"border-right: 1px solid #000; font-weight: 700; di=
splay: inline; padding: 0 5px; margin-left: 0;">
<span class=3D"cat"><a href=3D"http://groups.yahoo.com/group/zms-deve=
lopers/members;_ylc=3DX3oDMTJmNWFtY2dkBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ=
3Jwc3BJZAMxNzA3MjgxOTQyBHNlYwN2dGwEc2xrA3ZtYnJzBHN0aW1lAzEzNDY4NDE3MjI-?o=
=3D6" style=3D"text-decoration: none;">New Members</a></span>
<span class=3D"ct" style=3D"color: #ff7900;">1</span>
</li>
</ul>
=20=20=20=20
<div style=3D"clear: both; padding-top: 2px; color: #1e66ae;">
<a href=3D"http://groups.yahoo.com/group/zms-developers;_ylc=3DX3oDMTJl=
cHRyYmFpBF9TAzk3MzU5NzE0BGdycElkAzg0NzA4MjEEZ3Jwc3BJZAMxNzA3MjgxOTQyBHNlYwN=
2dGwEc2xrA3ZnaHAEc3RpbWUDMTM0Njg0MTcyMg--" style=3D"text-decoration: none;"=
>Visit Your Group</a>
</div>
</div>
=20=20
<div id=3D"ft" style=3D"font-family: Arial; font-size: 11px; margin-top: 5p=
x; padding: 0 2px 0 0; clear: both;">
<a href=3D"http://groups.yahoo.com/;_ylc=3DX3oDMTJkNmdqaWRjBF9TAzk3MzU5Nz=
E0BGdycElkAzg0NzA4MjEEZ3Jwc3BJZAMxNzA3MjgxOTQyBHNlYwNmdHIEc2xrA2dmcARzdGltZ=
QMxMzQ2ODQxNzIy" style=3D"float: left;"><img src=3D"http://l.yimg.com/a/i/u=
s/yg/logo/us.gif" height=3D"15" width=3D"137" alt=3D"Yahoo! Groups" style=
=3D"border: 0;"/></a>
<div style=3D"color: #747575; float: right;">Switch to: <a href=3D"mailto=
:[email protected]?subject=3DChange Delivery Forma=
t: Traditional" style=3D"text-decoration: none;">Text-Only</a>, <a href=3D"=
mailto:[email protected]?subject=3DEmail Delivery: Dige=
st" class=3D"margin-rt" style=3D"text-decoration: none;">Daily Digest</a> &=
bull; <a href=3D"mailto:[email protected]?subject=
=3DUnsubscribe" style=3D"text-decoration: none;">Unsubscribe</a> • <a =
href=3D"http://docs.yahoo.com/info/terms/" style=3D"text-decoration: none;"=
>Terms of Use</a></div>
</div>
<!-- |**|end egp html banner|**| -->
</div> <!-- ygrp-msg -->
<!-- Sponsor -->
<!-- |**|begin egp html banner|**| -->
<div id=3D"ygrp-sponsor" style=3D"width:160px; float:right; clear:none; m=
argin:0 0 25px 0; background: #fff;">
<!-- Start Recommendations -->
<div id=3D"ygrp-reco">
</div>
<!-- End Recommendations -->
</div> <!-- |**|end egp html banner|**| -->
<div style=3D"clear:both; color: #FFF; font-size:1px;">.</div>
</div>
<img src=3D"http://geo.yahoo.com/serv?s=3D97359714/grpId=3D8470821/grpspI=
d=3D1707281942/msgId=3D3810/stime=3D1346841722/nc1=3D5191955/nc2=3D3848642/=
nc3=3D4507179" width=3D"1" height=3D"1"> <br>
<div style=3D"color: #fff; height: 0;">__,_._,___</div>
<!--~-|**|PrettyHtmlEnd|**|-~-->
</body>
<!--~-|**|PrettyHtmlStart|**|-~-->
<head>
<style type=3D"text/css">
<!--
#ygrp-mkp {
border: 1px solid #d8d8d8;
font-family: Arial;
margin: 10px 0;
padding: 0 10px;
}
#ygrp-mkp hr {
border: 1px solid #d8d8d8;
}
#ygrp-mkp #hd {
color: #628c2a;
font-size: 85%;
font-weight: 700;
line-height: 122%;
margin: 10px 0;
}
#ygrp-mkp #ads {
margin-bottom: 10px;
}
#ygrp-mkp .ad {
padding: 0 0;
}
#ygrp-mkp .ad p {
margin: 0;
}
#ygrp-mkp .ad a {
color: #0000ff;
text-decoration: none;
}
#ygrp-sponsor #ygrp-lc {
font-family: Arial;
}
#ygrp-sponsor #ygrp-lc #hd {
margin: 10px 0px;
font-weight: 700;
font-size: 78%;
line-height: 122%;
}
#ygrp-sponsor #ygrp-lc .ad {
margin-bottom: 10px;
padding: 0 0;
}
a {
color: #1e66ae;
}
#actions {
font-family: Verdana;
font-size: 11px;
padding: 10px 0;
}
#activity {
background-color: #e0ecee;
float: left;
font-family: Verdana;
font-size: 10px;
padding: 10px;
}
#activity span {
font-weight: 700;
}
#activity span:first-child {
text-transform: uppercase;
}
#activity span a {
color: #5085b6;
text-decoration: none;
}
#activity span span {
color: #ff7900;
}
#activity span .underline {
text-decoration: underline;
}
.attach {
clear: both;
display: table;
font-family: Arial;
font-size: 12px;
padding: 10px 0;
width: 400px;
}
.attach div a {
text-decoration: none;
}
.attach img {
border: none;
padding-right: 5px;
}
.attach label {
display: block;
margin-bottom: 5px;
}
.attach label a {
text-decoration: none;
}
=20=20
blockquote {
margin: 0 0 0 4px;
}
.bold {
font-family: Arial;
font-size: 13px;
font-weight: 700;
}
.bold a {
text-decoration: none;
}
dd.last p a {
font-family: Verdana;
font-weight: 700;
}
dd.last p span {
margin-right: 10px;
font-family: Verdana;
font-weight: 700;
}
dd.last p span.yshortcuts {
margin-right: 0;
}
div.attach-table div div a {
text-decoration: none;
}
div.attach-table {
width: 400px;
}
div.file-title a, div.file-title a:active, div.file-title a:hover, div.fi=
le-title a:visited {
text-decoration: none;
}
div.photo-title a, div.photo-title a:active, div.photo-title a:hover, div=
.photo-title a:visited {
text-decoration: none;
}
div#ygrp-mlmsg #ygrp-msg p a span.yshortcuts {
font-family: Verdana;
font-size: 10px;
font-weight: normal;
}
.green {
color: #628c2a;
}
.MsoNormal {
margin: 0 0 0 0;
}
o {
font-size: 0;
}
#photos div {
float: left;
width: 72px;
}
#photos div div {
border: 1px solid #666666;
height: 62px;
overflow: hidden;
width: 62px;
}
#photos div label {
color: #666666;
font-size: 10px;
overflow: hidden;
text-align: center;
white-space: nowrap;
width: 64px;
}
#reco-category {
font-size: 77%;
}
#reco-desc {
font-size: 77%;
}
.replbq {
margin: 4px;
}
#ygrp-actbar div a:first-child {
/* border-right: 0px solid #000;*/
margin-right: 2px;
padding-right: 5px;
}
#ygrp-mlmsg {
font-size: 13px;
font-family: Arial, helvetica,clean, sans-serif;
*font-size: small;
*font: x-small;
}
#ygrp-mlmsg table {
font-size: inherit;
font: 100%;
}
#ygrp-mlmsg select, input, textarea {
font: 99% Arial, Helvetica, clean, sans-serif;
}
#ygrp-mlmsg pre, code {
font:115% monospace;
*font-size:100%;
}
#ygrp-mlmsg * {
line-height: 1.22em;
}
#ygrp-mlmsg #logo {
padding-bottom: 10px;
}
#ygrp-mlmsg a {
color: #1E66AE;
}
#ygrp-msg p a {
font-family: Verdana;
}
#ygrp-msg p#attach-count span {
color: #1E66AE;
font-weight: 700;
}
#ygrp-reco #reco-head {
color: #ff7900;
font-weight: 700;
}
#ygrp-reco {
margin-bottom: 20px;
padding: 0px;
}
#ygrp-sponsor #ov li a {
font-size: 130%;
text-decoration: none;
}
#ygrp-sponsor #ov li {
font-size: 77%;
list-style-type: square;
padding: 6px 0;
}=20
#ygrp-sponsor #ov ul {
margin: 0;
padding: 0 0 0 8px;
}
#ygrp-text {
font-family: Georgia;
}
#ygrp-text p {
margin: 0 0 1em 0;
}
#ygrp-text tt {
font-size: 120%;
}
#ygrp-vital ul li:last-child {
border-right: none !important;=20
}=20
-->
</style>
</head>
<!--~-|**|PrettyHtmlEnd|**|-~-->
</html>
<!-- end group email -->
--S1NDlOkARe6PM4IVygVwyYHA8594I9I-a6YvjWb--