May 2000 - Zope-Dev - Zope lists

Trouble setting LoginManager default user class
by Dan L. Pierson 17 May '00

17 May '00

I'm trying to port the PTK PersistentUserSource stuff to the new LoginManager. A lot of things seem to be working, but I seem to have fallen into a Catch 22: 1. UserSources.BasicUserSource defines self._defaultClass as LoginUser, where UserSources.LoginUser is a simple RackMountable class (not a ZClass) defined earlier in the file. 2. PTK requires DemoPortal.LoginMember, a ZClass that inherits from LoginUser and PersistentUserSource.MemberMixin (actually, it's having the MemberMixin stuff that's crucial). 3. Rack._v_itemConstructor is a ComputedAttribute that looks at self._defaultClass: if it's a class, it uses it, if it's a string it looks in Products.meta_classes[self._defaultClass] for the class to use. So PersistentUserSource needs to change _defaultClass to refer to DemoPortal.LoginMember. If I try to do it by using a ComputedAttribute: def _defaultClass(self): c = Products.DemoPortal.LoginMember self._defaultClass = c _defaultClass = ComputedAttribute(_defaultClass) I get an error traceback from an AttributeError in Rack.createItem for _v_itemConstructor. BTW: this also happens if I also define _v_itemConstructor as a ComputedAttribute in PersistentUserSource. I need something like ComputedAttributes here, because DemoPortal doesn't (necessarily?) exist at the time PTKDemo is installed. If I try to do it by setting _defaultClass to 'LoginMember', it fails because 'LoginMember' isn't in Products.meta_classes. In fact nothing relating to DemoPortal or any other ZClass product is in Products.meta_classes! The official way to get into that dictionary appears to be to call registerBaseClass or registerZClass. registerZClass would seem like the correct method, but the ONLY call of this is in Products/OFSP/__init__.py for ZClasses.ObjectManager.ZObjectManager. Should ZClass products be registering themselves? If I try to set _defaultClass in PersistentUserSource.__init__. I can't figure out how to refer to /Control_Panel/Products/DemoPortal/LoginMember from there. Looks like I need more Zen. Please enlighten me. Dan Pierson

4 5

Re: [Zope-dev] Trouble setting LoginManager default user class
by Dan L. Pierson 17 May '00

17 May '00

Phillip J. Eby writes: > At 10:01 PM 5/17/00 +0100, Steve Alexander wrote: > > > >The _defaultClass only needs to become DemoPortal.LoginMember before a > >Portal's LoginManager instance is created. > > > >Therefore, you can leave the _defaultClass as LoginUser until the > >"install" method of DemoPortalBase is called (PTKDemo/Portal.py). > > > >In the "install" method, after creating a MembersClass(), set its > >_defaultClass to LoginMember. > > It would be better to call manage_setStorage(zclass='meta type') rather > than tinkering with attributes directly, as manage_setStorage should always > be forward-compatible. Ah yes, forgot about this problem -- it was yesterday... Here's my current code from DemoPortalBase.install: elif db == 'LoginManager': from Products.LoginManager.LoginManager import \ LoginManager, manage_addLoginManager from PersistentUserSource import PersistentUserSource self.MembersClass = LoginManager # maybe not needed anymore manage_addLoginManager(self, 'Persistent User Source', ['Basic Auth Login'], 0, 0, 0) #self.acl_users.manage_setStorage('DemoPortal/LoginMember') for us in self.acl_users.UserSourcesGroup.objectValues(): if us.meta_type == 'Persistent User Source': us.manage_setStorage('DemoPortal/LoginMember') The commented out line fails because it doesn't have a manage_setStorage. The uncommented out code causes the following traceback. It was after I hit this that I started hacking on _defaultClass... Probably I should have yelled for help then, but I have this bad habit of digging myself in as far a possible first :-) Traceback (innermost last): File /home/zope/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /home/zope/lib/python/ZPublisher/Publish.py, line 179, in publish File /home/zope/lib/python/Zope/__init__.py, line 202, in zpublisher_exception_hook File /home/zope/lib/python/ZPublisher/Publish.py, line 165, in publish File /home/zope/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: Portal_add) File /home/zope/lib/python/ZPublisher/Publish.py, line 102, in call_object (Object: Portal_add) File /home/zope/lib/python/OFS/DTMLMethod.py, line 150, in __call__ (Object: Portal_add) File /home/zope/lib/python/DocumentTemplate/DT_String.py, line 502, in __call__ (Object: Portal_add) File /home/zope/lib/python/DocumentTemplate/DT_With.py, line 148, in render (Object: Portal.createInObjectManager(REQUEST['id'], REQUEST)) File /home/zope/lib/python/Products/PTKDemo/Portal.py, line 71, in install (Object: DemoPortalBase) File /home/dan/src/Zope-2.1.6-src/lib/python/Products/ZPatterns/Rack.py, line 348, in manage_setStorage (Object: AttributeProviderContainer) File /home/dan/src/Zope-2.1.6-src/lib/python/Products/ZPatterns/Rack.py, line 225, in _unifiedZClassRegistry (Object: AttributeProviderContainer) AttributeError: (see above)

1 0

Mailing List management: corrupted message headers in digests
by Dieter Maurer 17 May '00

17 May '00

Dear mailing list administrators at least the digests have some deficiencies: 1. some message headers are corrupted (do not use RFC822 continuation style). Example is: Zope-Dev digest, Vol 1 #517 - 17 msgs" Message: 10 From: "Kevin Dangoor" <kid(a)kendermedia.com> To: "Fabio Augusto Mazzarino" <mazza(a)radiumsystems.com.br>, <zope-dev(a)zope.org> Subject: Re: [Zope-dev] Turn-off undo. Date: Tue, 16 May 2000 10:13:29 -0400 charset="iso-8859-1" The "To:" header continuation line is not indented as it should be by RFC822. 2. the digest removes MIME headers. They are, however, vital, e.g. for multipart messages. 3. MIME header removal seems to be incomplete, leading to corrupted message headers. See the example above, where obviously the "Content-Type:" header has been removed, but its parameter "charset="iso-8859-1" was retained. 4. Many messages get truncated by RFC934 bursting, apparently, because they contain lines beginning with "--". As far as I understand RFC934, such lines should be prefixed with "- ". Example: Zope-PTK digest, Vol 1 #127, message 8 Message: 8 From: "Kevin Dangoor" <kid(a)kendermedia.com> To: "Tres Seaver" <tseaver(a)palladion.com> Cc: <zope-ptk(a)zope.org> Subject: Re: [Zope-PTK] Adding LoginManager at the root Date: Tue, 16 May 2000 10:53:26 -0400 charset="iso-8859-1" ----- Original Message ----- From: "Tres Seaver" <tseaver(a)palladion.com> To: "Kevin Dangoor" <kid(a)kendermedia.com> Cc: <zope-ptk(a)zope.org> Sent: Monday, May 15, 2000 11:28 PM Subject: Re: [Zope-PTK] Adding LoginManager at the root RFC934 bursting creates a message with empty body. 5. similar problem as 3 for "References:" header: Example X-Digest: Zope digest, Vol 1 #783 - 36 msgs Message: 35 <39210503.EF2145DA(a)nipltd.com> <39211152.E4A6A06D(a)lancaster.ac.uk> <20000516123952.F573(a)leda.comlounge.net> <39212AC2.C9E65D0B(a)lancaster.ac.uk> <392150D1.639261F5(a)digicool.com> <39215365.C5BA87AD(a)nipltd.com> <3921568D.8A52C271(a)digicool.com> From: "Jason Spisak" <444(a)hiretechs.com> To: Shane Hathaway <shane(a)digicool.com> Cc: Chris Withers <chrisw(a)nipltd.com>, Steve Alexander <s.alexander(a)lancaster.ac.uk>, Christian Scholz <cs(a)comlounge.net>, zope(a)zope.org Subject: Re: [Zope] subfolder wrong absolute_url Date: Tue, 16 May 2000 19:08:45 GMT - Dieter

1 0

2.2.0a1 Problems
by Chris Withers 17 May '00

17 May '00

Hi, Just a few comments after a 5 minute play: - start.bat still hasn't been renamed. It's not that bright since windows has had a start command for ages now... typing start.bat tries to 'start' something called .bat. doh... The only way to get it to work is "start.bat" or ./start which is very weird on an NT box although quite normal on UNIX ;-) - the -P option doesn't work properly. python z2.py -D -P 9000 still resulted in the PCGI server being run on port 8090. Wasn't there going to be an option so that servers which you don't use (monitor and PCGI in this case) don't get started? - hitting the help button on the ownership tab resulted in: Traceback (innermost last): File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\Publish.py, line 224, in publish_module File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\Publish.py, line 189, in publish File C:\ZOPESI~1\22CB55~1.0A1\lib\python\Zope\__init__.py, line 221, in zpublisher_exception_hook (Object: Help) File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\Publish.py, line 161, in publish File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\BaseRequest.py, line 350, in traverse File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\HTTPResponse.py, line 530, in debugError NotFound: (see above) cheers, Chris

2 1

Methods through the Web (security?)
by Chris Withers 17 May '00

17 May '00

Hi, With all the talk of security and Zope 2.2 I thought I'd throw this one into the post again: How come you can browse things like the objectIds and objectValues methods through the web? Surely this is exposing information that people shouldn't really know about? For example, check out: http://www.zope.org/objectIds While I'm at it, is there any way to make DTML methods accessible to objects (such as other DTML methods) but not through URLs other than by a tortuous series of proxy roles? I've expressed views about an 'execute' permission in the past but these have fallen on deaf ears. For example: http://www.codecatalog.com/standard_html_footer This is messy and there's no reason why it needs to be exposed through a URL. cheers, Chris

2 2

Mounted Database Proposal/Notes
by Jim Fulton 17 May '00

17 May '00

I've created a wiki page to capture my thoughts on a simple model for "mounting" Zope databases. See: http://www.zope.org/Members/jim/ZODB/MountedDatabases This is actually something we are working on and we hope to have some useful results soon. The biggest potential stumbling block is the ZClass support. Stay tuned. Jim -- Jim Fulton mailto:jim@digicool.com Technical Director (888) 344-4332 Python Powered! Digital Creations http://www.digicool.com http://www.python.org Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats.

2 1

Help Domains
by Brun Eric 17 May '00

17 May '00

Hi, I work on a Portal built with PTK and ZOPE. I would like to known the meaning of "domains" in a user Thanks Eric

1 0

Loginmanager/guf the right way to go?
by Alexander Schonfeld 17 May '00

17 May '00

Wouldn't it be better to improve Zope's built in authentication system to support more generalized membership systems? Rather than building these separate loginmanager/user folder things? That way roles and permissions could be integrated easily. And auto-account generation could be possible: 0. let anonymous people fill in the account gen form.. 1. send out the email with pre-generated password 2. build default folder/prefs/whatever 3. let the user login and see whatever the role supports... plus their personal stuff. I guess the main problem is the "plus their personal stuff" thing. How hard would it be to make a new private vs. public layer. It seems this would start to sound like unix permissions... 'doomed to repeat' et all. As I understand it, currently there isn't any private stuff for people in the same role? This seems like it might be useful for major sites... and yes... one day... when zope rules the world... there will be 'major sites' and people will have their own folders and all will be good. ...IMHO, comments please. Regards, Alex. 1010011010101001101010100110101010011010 0 Digital Garage 1 Alexander Schonfeld 0 alex(a)garage.co.jp - pear - 03-5454-7219 1 http://www.zope.ne.jp/

2 1

Re: [Zope-dev] Methods through the Web (security?)
by Chris Withers 17 May '00

17 May '00

Steve Alexander wrote: > One of the elements of the List give this: > > http://www.zope.org/ShowingDad > > I wonder what the story behind that was? :-) Dunno, but you can't do a /view_source on it 'cos it doesn't have a document_src attribute... curiouser and curiouser... Chris

1 0

Bluefish?
by Lalo Martins 17 May '00

17 May '00

"Bluefish":http://bluefish.openoffice.nl/ is not a WYSIWYG HTML editor, but it's a very user-friendly editor, with help, hilight, autotag, and possibly even wizards and preview for PHP3, SSI and RXML. It's easy to give it a module for an additional dynamic-HTML language; would someone bother writing one for DTML? []s, |alo +---- -- Hack and Roll ( http://www.hackandroll.org ) News for, uh, whatever it is that we are. http://www.webcom.com/lalo mailto:lalo@hackandroll.org pgp key in the personal page Brazil of Darkness (RPG) --- http://zope.gf.com.br/BroDar

1 0