Make Plone give proper 403 Forbidden errors

Question

Default Plone behavior is to display login box when the user tries to access content for which he or she does not have permission.

How to change this behavior so that instead and Unauthorized page is displayed? How to customize this unauthorized page to have custom texts. etc?

score 5 · Answer 1 · answered Jun 15 '11 at 11:56

PAS responds to a 401 Unauthorized error by invoking any challenge plugins, so to avoid the login form deactivate these plugins in acl_users.

A 403 Forbidden should not result in a challenge. However in production mode (but not debug mode) these errors are hidden and they are transformed into 404 Not Found.

score 3 · Accepted Answer · answered Jun 15 '11 at 06:12

3

Customize this template: Products.CMFPlone/Products/CMFPlone/skins/plone_login/require_login.py, either via "old style" skin customization or "new style" jbot customization: http://pypi.python.org/pypi/z3c.jbot (see CMF Objects section)

answered Jun 15 '11 at 06:12

aclark

4,345
1
19
31

Configuring PAS is the better approach here. – Laurence Rowe Jun 15 '11 at 18:55

score 1 · Answer 3 · answered Aug 24 '15 at 10:02

1

FYI, there's now also a PAS plugin that only redirects to login form if the UA is a browser:

https://pypi.python.org/pypi/koodaamo.pas.browseronlyredirect/

answered Aug 24 '15 at 10:02

Petri

4,796
2
22
31

Make Plone give proper 403 Forbidden errors

3 Answers3

Linked