November 2000 - Zope-Dev

fixing security problems HOW?
by Robin Becker 28 Nov '00

28 Nov '00

How can I find out exactly what is causing my security permissioning to fail. I have put extra stuff into ZPublisher\BaseRequest.py at line 463 so I know that I'm failing on UnauthorizedYou are not authorized to access this resource. URL='http://192.168.0.4:7080/live/index_html' No Authorization header found. I am an anonymous user. Even when I make /live have the same permissions as the manager I can't make it work. index_html is a dtml method of the class of which live is an instance. How can I figure out what is blocking the anonymous access. -- Robin Becker

2 1

RFC: Python/Zope Interfaces
by Michel Pelletier 28 Nov '00

28 Nov '00

Python Interface Proposal I have been working on a proposal for enhancing the existing interface documentation in Zope. The Wiki for this project can be found here: http://www.zope.org/Wikis/Interfaces/FrontPage An artifact of this project is formal Python/Zope support for "Interfaces". It's a vague word, and I know it means a lot of things to a lot of people, so I am interested in soliciting comments from the Python community. I have enhanced and fixed some bugs in Jim Fulton's 1998 Interfaces "scarecrow" proposal. One of the enhancements is user documentation. This would be a good place for you to start if you are interested in a high level, simple overview: http://www.zope.org/Wikis/Interfaces/InterfaceUserDocumentation The occasional weird formatting is because of the Wiki. This file is also contained in the release if you want something in-hand. If you want some higher fiber details, take a lot at Jim's original proposal document: http://www.zope.org/Wikis/Interfaces/OriginalInterfaceREADME which is also contained in the release. The current version is 0.2.0, and it is still a "scarecrow" piece of software, but it is usable, very interesting, and may stimulate some thoughts, all of which I would like to hear from you. The best way to capture those thoughts is right in the Wiki, which requires membership at Zope.org (which is free). Otherwise, you can send comments to me (michel(a)digicool.com) You can download the Interface-0.2.0.tgz package from Zope.org at: http://www.zope.org/Members/michel/Products/Interfaces/index_html If you are interested at looking at some of the higher level, Zope oriented goals of this project, take a look at the fishbowl proposal: http://www.zope.org/Wikis/Interfaces/OriginalProposal Thanks! -Michel

3 4

Mail and zope
by Roch'e Compaan 28 Nov '00

28 Nov '00

Is there anyway to get a hold off the message-id of e-mail sent through the sendmail tag? Roché

4 4

Loginmanager and LDAP
by Magnus Heino (Rivermen) 28 Nov '00

28 Nov '00

Hi. I'd like to authenticate users using LDAP and Active Directory. Zope is running on a RH7.0 box. Has anyone done this, is it possible? /Magnus

1 0

Create Virtual DataSkin
by bentzion＠bellatlantic.net 28 Nov '00

28 Nov '00

Thanks Phillip. Is there a way to pass my REQUEST info to the ADD Trigger? I am under the impression that only "self" and some other ZPattern specific properties are available to the trigger. Thanks. >>>>> Phillip J. Eby >>>> You can't have an ADDED and CHANGED both fire in the same subtransaction. ADDED, CHANGED, and DELETED are mutually exclusive. So your ADDED trigger has to perform the same operations to save data as your change trigger would.

2 1

RE: [Zope-dev] Create Virtual DataSkin
by Ben Schochet 28 Nov '00

28 Nov '00

Seems that way Steve. I have tried to do this in an external method with self.get_transaction.commit(1) before doing the changeProperties, but that didn't seem to work. Is there another way to do this? the CHANGE trigger works fine on its own. How are others creating new items with properties from an HTML FORM? Should I be doing this another way? I can't wait to figure out ZPatterns, I think it is the best way to create Zope applications! It seems to allow you to have the best of Zope objects along with your data secure and accessible from a RDBMS. (At least that is the value I see, there are probably others...) Please help. Thanks, -Ben >>>>>>> Hmm... since triggers are done at transaction commit time, could it be that the 'change' trigger doesn't happen if the change occurs on the same transaction as an 'add'? -steve >>>>> "bentzion" == bentzion <bentzion(a)bellatlantic.net> writes: bentzion> This simple issue is driving me crazy... I am trying to bentzion> create a DataSkin with some Properties in a MySQL bentzion> database. So I have an ID, NAME, and DESCRIPTION that is bentzion> in REQUEST and using: ___________________________________________________________________________ Visit http://www.visto.com/info, your free web-based communications center. Visto.com. Life on the Dot.

2 1

Lots more in the interfaces Wiki
by Michel Pelletier 28 Nov '00

28 Nov '00

Hello, I have added a lot more content to the interfaces wiki at: http://www.zope.org/Wikis/Interfaces/FrontPage (note, this is not the old interfaces wiki, which is link to from here). This wiki is the realization of last weeks interfaces proposal: http://www.zope.org/Wikis/Interfaces/OriginalProposal So far, I have gone pretty far into defining the first goal of the project "what is an interface". For those of you that are interested in looking at the prototype implementation, a new version can be downloaded from: http://www.zope.org/Members/michel/Products/Interfaces/ Some user and higher-fiber documentation can be found in the wiki. Please check out the wiki and let me know what you think about interfaces. These are important components that you will see a lot of in the future, so we want your input! -Michel

1 0

Questions
by Ender 27 Nov '00

27 Nov '00

A night of zopin' left with me some questions... what is a jar (_p_jar) ? does zope restrict you from doing metaprogramming with python products? or does zope's own metaprogramming reserve some names __klass__, etc? in Transaction.py i see the surrogate defining methods for __inform_commit__ and __inform_abort__, what are these for? browsing through zpatterns i was looking at ZPatterns/Transaction.py. i see some talk of transaction boundaries and the inability to know that a transaction is finished, can't an object assume a transaction is over if it has tpc_finish called on it in when its not in a subtransaction that the transaction is over? looking for some light kapil

1 1

Non-TTW ZPatterns
by Chris Withers 27 Nov '00

27 Nov '00

Hi, I think (shock, horror) I'm finally starting to understand ZPatterns ;-) (well, okay, just a little bit then...) Anyway, I'm wondering how I'd go about making a ZPatterns-based project that is totally file system based. The reasons for this are CVS-ability, the ability to update the 'product' without trashing the data, the ability to easily duplicate the 'system' without copying the data, better editing environment, etc, but I'm not sure how I'd go about it. It seems as though all the cool bits (like SkinScript methods, order of racks and the like) are in Zope's 'instance space' with ZPatterns. Does this have to be so or could all the 'setting up' be stored/changed in Python or other filesystem-based stuff? If so, how so? I guess I'm talking about HTMLFile-like things for SkinScript and ZSQL methods, amongst others. Possible, or am I off my rocker (again ;-) cheers, Chris

2 1

Create Virtual DataSkin
by bentzion＠bellatlantic.net 27 Nov '00

27 Nov '00

This simple issue is driving me crazy... I am trying to create a DataSkin with some Properties in a MySQL database. So I have an ID, NAME, and DESCRIPTION that is in REQUEST and using: <dtml-let ni="newItem(key=REQUEST['key'])" nips="ni.propertysheets.get('Basic')"> <dtml-call "nips.manage_changeProperties(REQUEST=REQUEST)"> </dtml-let> The item gets created but the Properties are not changed. Can someone please post the ADD/CHNAGE Trigger syntax and accompanying ZSQL Methods for a simple creation of a DataSkin ZClass. Much appreciated.

2 1