Re: webdna preferences

This WebDNA talk-list message is from

2005


It keeps the original formatting.
numero = 63132
interpreted = N
texte = --- Sam Lewis wrote: > Are you sure that you aren't seeing completely > normal behavior with > the login pop-up when hitting an https url? Once you > go from http to > https then as far as your web browser is concerned > they just hit a > different server and have not logged in to this one > yet. > There are only 4 pages in their admin area. login is to a https:// page all other pages are https://etc tried new browser windows, different pcs, etc always same result when gitting that lat page with the delete a record part (code submitted in my earlier posts) I duped all 4 pages and put them into the "non-ssl" Plesk folder httpdocs vs the ssl folder httpsdocs and the exact same thing happens with http://etc - the login loop ONLY when i try to hit the page with the "delete" a record part in it.... These exact same pages that mis-behave work a-ok for deletin a record when I place them into a folder on a domain that is not setup for an ssl certficate. Looked at all settings within Plesk, IIS, etc.... all seems OK And the deletes always worked in the past (and still do) on non-ssl domains with users setup in users.db that were NOT specifically in that admin group. I am the only one on that admin group. I am using webdna 4.5 on IIS if that has any impact on all of this... same results IE and Firefox > > On Sep 27, 2005, at 6:08 AM, Lester wrote: > > > In webdna preferences: > > Only the following commands may be issued by > > non-administrators: > > ShowPage, Search, FlushCache, ShowCart, Add, > Remove, > > NewCart, Purchase, NewCartSearch, Clear > > > > > > I've always removed "Delete" from this list as far > > back as I can remember, and all individuals who > can > > administer their sites have always been able to > delete > > records, and I always setup a new group for them > to > > belong to. > > > > In my SSL issue if I add "delete" back into this > list > > a member of a group not defined as "Admin" can > delete > > a record, but if I remove it they cannot. (only > occurs > > this way in the ssl configured domain) > > > > Am i misundertanding "Administrator" as its being > used > > here in preferences??? > > > > I always thought adding a user through the admin > panel > > made them an "administrator" of sorts...... > > This is exactly as expected. > Administrators are those users who are assigned to > the "Admin" group > only. But that list only pertains to "commands" that > are included in > the url. Contexts are not affected by this list. So > any user who you > allow to hit a page with a delete context will > delete that record. > > > Sam Lewis > > samlewis.com > > > > ------------------------------------------------------------- > This message is sent to you because you are > subscribed to > the mailing list > . > To unsubscribe, E-mail to: > > To switch to the DIGEST mode, E-mail to > > Web Archive of this list is at: > http://webdna.smithmicro.com/ >  __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. Re: webdna preferences ( Lester 2005)
  2. Re: webdna preferences ( Sam Lewis 2005)
  3. webdna preferences ( Lester 2005)
--- Sam Lewis wrote: > Are you sure that you aren't seeing completely > normal behavior with > the login pop-up when hitting an https url? Once you > go from http to > https then as far as your web browser is concerned > they just hit a > different server and have not logged in to this one > yet. > There are only 4 pages in their admin area. login is to a https:// page all other pages are https://etc tried new browser windows, different pcs, etc always same result when gitting that lat page with the delete a record part (code submitted in my earlier posts) I duped all 4 pages and put them into the "non-ssl" Plesk folder httpdocs vs the ssl folder httpsdocs and the exact same thing happens with http://etc - the login loop ONLY when i try to hit the page with the "delete" a record part in it.... These exact same pages that mis-behave work a-ok for deletin a record when I place them into a folder on a domain that is not setup for an ssl certficate. Looked at all settings within Plesk, IIS, etc.... all seems OK And the deletes always worked in the past (and still do) on non-ssl domains with users setup in users.db that were NOT specifically in that admin group. I am the only one on that admin group. I am using webdna 4.5 on IIS if that has any impact on all of this... same results IE and Firefox > > On Sep 27, 2005, at 6:08 AM, Lester wrote: > > > In webdna preferences: > > Only the following commands may be issued by > > non-administrators: > > ShowPage, Search, FlushCache, ShowCart, Add, > Remove, > > NewCart, Purchase, NewCartSearch, Clear > > > > > > I've always removed "Delete" from this list as far > > back as I can remember, and all individuals who > can > > administer their sites have always been able to > delete > > records, and I always setup a new group for them > to > > belong to. > > > > In my SSL issue if I add "delete" back into this > list > > a member of a group not defined as "Admin" can > delete > > a record, but if I remove it they cannot. (only > occurs > > this way in the ssl configured domain) > > > > Am i misundertanding "Administrator" as its being > used > > here in preferences??? > > > > I always thought adding a user through the admin > panel > > made them an "administrator" of sorts...... > > This is exactly as expected. > Administrators are those users who are assigned to > the "Admin" group > only. But that list only pertains to "commands" that > are included in > the url. Contexts are not affected by this list. So > any user who you > allow to hit a page with a delete context will > delete that record. > > > Sam Lewis > > samlewis.com > > > > ------------------------------------------------------------- > This message is sent to you because you are > subscribed to > the mailing list > . > To unsubscribe, E-mail to: > > To switch to the DIGEST mode, E-mail to > > Web Archive of this list is at: > http://webdna.smithmicro.com/ >  __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Lester

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

[WebDNA] WebDNA Start-up Error (2012) Clickable maps and WebCatalog? (1996) Preserving form data (1999) Couple of questions (1999) gateway application timeouts (1998) WebCat2 several catalogs? (1997) No data - More Info (1997) Server slowing down. (1997) If Empty ? (1997) [if] and [showif] - A solution (2002) tcpSend variables not seen (2006) syntax question, not in online refernce (1997) Secure server question (1997) links page (2002) WebCatalog Hosting (1996) [WriteFile] problems (1997) Almost a there but..bye bye NetCloak (1997) Exclude by date - multiple (1997) NT Version on IIS 4.0 (1997) Emailer again & again (1997)