unauthorized page does not work for me

Hi,

I've put an ID for unauthorized_page in the manager, as well as an ID for error_page.

But if I try an unauthorized connection to a page that is protected by password (context web), I'm redirected to the error_page, not to the unauthorized_page.

Any clues what goes wrong?

I use revo 2-1-3.pl traditional, login snippet for protection in combination with revoSSL snippet for the protected pages.

Cheers
Frisco

Make sure you have an anonymous ACL on the web Context for the Resource Group with the Load Only policy. If anonymous users do not have permission to load protected Resources, it's as if they do not exist (i.e. 404). If they can load but not view, they will get the unauthorized_page (i.e. 401).

See the section here on "Unauthorized versus Error page" (near the bottom): http://bobsguides.com/revolution-permissions.html

Hm,

still can't get it working, although I tried to follow your recommendations - maybe I did s.th. wrong?

Here's what I did:

• I went to Security::ACL, there a 3 entries: anonymous, Administrator, clients (my usergroup for the protected pages)
  right mouse click on anonymous::4th register Resource Group ACL::Add Resource Group
  New entry for: clients, member - 9999, load only, web
  save
  Security::Reload rights

Sorry if I didn't take the proper menu wordings, mine are in german, but I hope you can figure out what I did.

But users not logged in are still redirected to error_page, not to unauthorized_page.

One time I thought I had it working - maybe it's just an issue for me because of cache/proxy problems? On the other hand reloading rights should clear the cache, and it doesn't work although I deactivated the cache in firefox (via webdeveloper toolbar).

Any clues?

Cheers
Frisco

Try Load, List, and View instead of List. Be sure to clear the site cache, then flush permissions and sessions after any changes.

Hi BobRay,

this doen't do the trick either

On the third tab for the user group anonymous - context ACL - there is an entry "web, member - 9999, load" - should I put this to Load, List and View as well?

Cheers
Frisco

no, tried this as well, doesn't work either

Is the unauthorized page published?

Yes, everything works well, authentication and so on, only the redirect does not work for me, if I log out and try to access the protected pages (all published and seen before) I get redirected to error_page.

Protected pages are only accessible via SSL (via revossl snippet), the whole site works with friendly URLs under lighttpd, authentication is done by login snippet.

If you need further information please let me know, I'm very grateful for you help.

Cheers
Frisco

I'm not familiar with the revossi snippet, but it could be a factor.

Another thought: I had some trouble with redirection on one host because I did not have their standard redirect pages in the MODX root (401.shtml, 403.shtml, etc.). When those weren't found, Apache issued a new request with a different URL that always made me end up on the error page.