Forum OpenACS Development: Requiring Login (Sitewide)

Posted by Dave Manginelli on 05/13/02 09:28 PM

I think this may have been dealt with in a previous thread but I
couldn't find it so here goes (again?)...

I would like to know how to make an entire site (subsite would be even
better) require login. That is, I would like to set it up such that
users cannot view any page except the opening site/subsite page (which
includes a login form) until after successful login.

Obviously, I would rather not have to check login status in every .tcl
page. Maybe this can be handled in the master template page?

TIA

2: Response to Requiring Login (Sitewide) (response to 1)

Posted by russ m on 05/14/02 02:27 AM

just set permissions in the site map - leave the root site (or
subsite) with "read" granted to "The Public", and set all your
mounted packages with "read" only granted to "Registered
Users"... you'll need to set the mounted packages to not inherit
permissions from their parent though... when someone not
logged in tries to go to a page within a mounted application
they'll be redirected to a registration/login page...

don't set the root site to only allow registered users have access
though, otherwise people will need to be logged in in order to
reach the login page... :(

3: Response to Requiring Login (Sitewide) (response to 1)

Posted by Dave Manginelli on 05/14/02 02:20 PM

What??!!!
No object subclassing? No TCL Code? No SQL?
The toolkit finally pays off!!!!

Thanks, Russell.
That's exactly what I needed!