July 2000 - Zope-Dev

Re: [Zope-dev] several permissions for the same method
by Jephte CLAIN 21 Jul '00

21 Jul '00

Dieter Maurer wrote: > Jephte CLAIN writes: > > I have the scenario where a user can edit *its* data but not other > > users's data, unless he has a special role. however, the method used to > > edit one's data is the same. > Can you not use the "Owner" role for this? I suppose not, because data is taken from a SQL database, so everyone could potentially trash others' data Oleg advised to make edit_data unpublishable and to write wrappers around it. However, I have thought of another way to do it. Whether it is better or not, I like it because I do not have to rewrite edit_data that much. __ac_permissions__ = ( ('Use edit_data', ('edit_data', )), ('Edit one\'s data', ('check_perm_1', )), ('Edit others\' data', ('check_perm_2', )), ) check_perm1 and check_perm_2 are do-nothing methods that are protected by the permissions. In edit_data, I call them as appropriate to check for the user's permissions. any comments? regards, jephte.clain(a)univ-reunion.fr

2 2

RE: [Zope-dev] getting request variables values
by Chris McDonough 20 Jul '00

20 Jul '00

How about: <dtml-var "REQUEST.environ['SSL_CLIENT_EMAIL']"> ? > -----Original Message----- > From: Leonardo Kenji Shikida [mailto:kenji@intelligenesis.net] > Sent: Thursday, July 20, 2000 4:40 PM > To: zope-dev(a)zope.org > Subject: Re: [Zope-dev] getting request variables values > > > here it is. > > Kenji > > >>>>>>>>>>> > > form > > cookies > dtpref_rows 20 > dtpref_cols 55 > Zope-Version intranet/utility/http%20header%20test > tree-s eJyLjlZ3hANPW3UdhWi4iEuEtwWqiKO7j4GteiwYAACvmw8O > > other > tree-s eJyLjlZ3hANPW3UdhWi4iEuEtwWqiKO7j4GteiwYAACvmw8O > Zope-Version intranet/utility/http%20header%20test > dtpref_rows 20 > URL https://snowcrash.intelligenesis.net/pcgi/intranet/utility/http > AUTHENTICATED_USER kenji > SERVER_URL https://snowcrash.intelligenesis.net > dtpref_cols 55 > AUTHENTICATION_PATH > URL0 https://snowcrash.intelligenesis.net/pcgi/intranet/utility/http > URL1 https://snowcrash.intelligenesis.net/pcgi/intranet/utility > URL2 https://snowcrash.intelligenesis.net/pcgi/intranet > URL3 https://snowcrash.intelligenesis.net/pcgi > URL4 https://snowcrash.intelligenesis.net > BASE0 https://snowcrash.intelligenesis.net > BASE1 https://snowcrash.intelligenesis.net/pcgi > BASE2 https://snowcrash.intelligenesis.net/pcgi/intranet > BASE3 https://snowcrash.intelligenesis.net/pcgi/intranet/utility > BASE4 https://snowcrash.intelligenesis.net/pcgi/intranet/utility/http > > environ > SCRIPT_NAME /pcgi > HTTP_ACCEPT_ENCODING gzip, deflate > SSL_SERVER_KEY_SIZE 1024 > SSL_CLIENT_ISP NY > SSL_CLIENT_KEY_EXP > SSL_SERVER_CN snowcrash.intelligenesis.net > SSL_SERVER_CERT_START Jun 17 06:02:39 2000 GMT > SiteRootPATH / > SSL_SECRETKEYSIZE 128 > GATEWAY_INTERFACE CGI/1.1 > SSL_SERVER_OU > SSL_CLIENT_CERT_SERIAL 89 > SSL_SERVER_IEMAIL helpdesk(a)intelligenesis.net > SSL_SERVER_CERTFILE > /usr/local/stronghold/ssl/certs/snowcrash.intelligenesis.net.cert > SSL_CLIENT_OU > HTTPS on > SSL_PROTOCOL_VERSION TLSv1 > SSL_SERVER_SIGNATURE_ALGORITHM RSA-MD5 > SSL_CLIENT_CN kenji(a)intelligenesis.net > SCRIPT_FILENAME /home/httpd/htdocs/pcgi > HTTPS_SECRETKEYSIZE 128 > SSL_SERVER_KEY_ALGORITHM rsaEncryption > SSL_SERVER_CERTFILETYPE PEM > SSL_SERVER_SP New York > SSL_CLIENT_IC US > SSL_SERVER_IOU IT > HTTPS_KEYSIZE 128 > SSL_CLIENT_IO Intelligenesis Corporation > SSL_CLIENT_IL NY > PATH > /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/ > usr/bin/X11:/u > sr/X11R6/bin:/usr/local/bin:/usr/local/sbin:/usr/local/jdk1.2/ > bin:/root/bin > HTTPS_EXPORT false > REMOTE_ADDR 200.190.229.61 > SSL_CLIENT_IOU IT > HTTP_CONNECTION Keep-Alive > HTTP_USER_AGENT Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt) > SSL_SERVER_SESSIONDIR > SSL_SERVER_CERTIFICATELOGDIR > SSL_SERVER_KEYFILE > /usr/local/stronghold/ssl/private/snowcrash.intelligenesis.net.key > SSL_CIPHER RC4-MD5 > SSL_CLIENT_IEMAIL helpdesk(a)intelligenesis.net > QUERY_STRING > SSL_SERVER_ICN IGC IT CA > SERVER_NAME snowcrash.intelligenesis.net > PATH_TRANSLATED /home/httpd/htdocs/intranet/utility/http > SSL_CLIENT_KEY_SIZE 1024 > SSL_CLIENT_CERT_END Jul 19 19:47:52 2002 GMT > SSL_CLIENT_CERTIFICATE 320d2bcb.? > HTTP_COOKIE tree-s="eJyLjlZ3hANPW3UdhWi4iEuEtwWqiKO7j4GteiwYAACvmw8O"; > Zope-Version="intranet/utility/http%20header%20test"; > dtpref_rows="20"; > dtpref_cols="55" > SSL_CLIENT_SIGNATURE_ALGORITHM RSA-MD5 > PATH_INFO /intranet/utility/http > SSL_SERVER_KEYFILETYPE PEM > SSL_SERVER_KEY_EXP > SSL_SERVER_IO Intelligenesis Corporation > SSL_KEYSIZE 128 > SSL_CLIENT_ICN IGC IT CA > HTTP_ACCEPT_LANGUAGE en-us > SSL_SERVER_C US > SSL_SERVER_O Intelligenesis Corporation > SSL_SERVER_L New York > HTTP_ACCEPT image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, > application/vnd.ms-powerpoint, application/vnd.ms-excel, > application/msword, > application/pdf, application/x-comet, */* > REQUEST_URI /pcgi/intranet/utility/http > SSL_CLIENT_IDN /C=US/ST=NY/L=NY/O=Intelligenesis > Corporation/OU=IT/CN=IGC IT > CA/Email=helpdesk(a)intelligenesis.net > SSL_SERVER_ISP NY > SSL_CLIENT_O Intelligenesis Corporation > SSL_CLIENT_L NY > SSL_CLIENT_C US > HTTP_HOST snowcrash.intelligenesis.net > SSL_CLIENT_KEY_ALGORITHM rsaEncryption > SERVER_ADMIN intranet(a)intelligenesis.net > SSL_STRONG_CRYPTO true > SSL_EXPORT false > SSL_SERVER_IDN /C=US/ST=NY/L=NY/O=Intelligenesis > Corporation/OU=IT/CN=IGC IT > CA/Email=helpdesk(a)intelligenesis.net > DOCUMENT_ROOT /home/httpd/htdocs > SSL_SERVER_EMAIL helpdesk(a)intelligenesis.net > SERVER_PORT 443 > REMOTE_PORT 62783 > SERVER_ROOT /usr/local/stronghold > SSL_SERVER_DN /C=US/ST=New York/L=New York/O=Intelligenesis > Corporation/CN=snowcrash.intelligenesis.net/Email=helpdesk@int > elligenesis.ne > t > SSL_CLIENT_EMAIL kenji(a)intelligenesis.net > SERVER_PROTOCOL HTTP/1.1 > SSL_CLIENT_DN /C=US/ST=NY/L=NY/O=Intelligenesis > Corporation/CN=kenji@intelligenesis.net/Email=kenji@intelligenesis.net > REQUEST_METHOD GET > SERVER_SIGNATURE Stronghold/2.4.2 Apache/1.3.6 C2NetEU/2410 Server at > snowcrash.intelligenesis.net Port 443 > SSL_SERVER_CERT_SERIAL 0F > SERVER_SOFTWARE Stronghold/2.4.2 Apache/1.3.6 C2NetEU/2410 (Unix) > (mod_pcgi2/1.0.1; PCGI/2.0a5) ApacheJServ/1.0 > SSL_SSLEAY_VERSION SSLeay 0.9.1b.c2eu.4 17-Mar-1999 > SSL_SERVER_IC US > SSL_CLIENT_CERT_START Jan 26 19:47:52 2000 GMT > HTTPS_CIPHER RC4-MD5 > SSL_SERVER_CERT_END May 23 06:02:39 2002 GMT > SSL_SERVER_IL NY > SSL_CLIENT_SP NY > HTTP_REFERER > https://snowcrash.intelligenesis.net/pcgi/intranet/utility/htt p/manage_edit Leonardo Kenji Shikida Webmind - Brazil Office _______________________________________________ Zope-Dev maillist - Zope-Dev(a)zope.org http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )

2 1

Fishbowl Process
by Chris Withers 20 Jul '00

20 Jul '00

Is it just me or would it be helpful to know who's making a proposal so you can contact them and discuss it? Am I missing something obvious? ;-) cheers, Chris

1 0

Redirecting from the manage interfaces.
by Erik Enge 20 Jul '00

20 Jul '00

Hi. I've been browsing through the Zope and Zope-dev archives without finding anything related to this, please stop me if it has already been dealt with. :) technical person = someone who doesn't mind fuzzing around with the manage_main pages non-technical person = someone who needs everything in bright nice colors and would start crying if they saw the manage_main page, or anything similar. I have a Product that allows a customer of mine to add some nice pictures (Image object) to a folder. The add-method is nice and doesn't display any horrible technical information. I wasn't very keen on making a add-method for both the technical person and the non-technical person, so I hacked the source code a bit. I changed the the lib/python/OFS/Image.py It used to look like this: """ def manage_addImage(self, id, file, title='', precondition='', content_type='', REQUEST=None): [...] if REQUEST is not None: try: url=self.DestinationURL() except: url=REQUEST['URL1'] REQUEST.RESPONSE.redirect('%s/manage_main' % url) return id """ Which I changed into: """ def manage_addImage(self, id, file, title='', precondition='', content_type='', REQUEST=None, redir=None): [...] if redir is not None: REQUEST.RESPONSE.redirect('%s' % redir) elif REQUEST is not None: try: url=self.DestinationURL() except: url=REQUEST['URL1'] REQUEST.RESPONSE.redirect('%s/manage_main' % url) """ Now I can redirect the victim... erm.. customer to the method I want to, and they are pleased that they don't have to see the management interface. This saves me a lot of time, since I don't have to make several add-methods, and maintainace is a more joyable happening. :) This 'redir' thing is something I've stuck into a lot of .py files (for example, I use it in the manage_delObjects and others). And it is something I do every time a new Zope release comes out. Could this be to any use for anybody besides me? And if it could, how about adding it to the next release?

4 7

second step (many of You are going to laungh ;-)
by Vincent 20 Jul '00

20 Jul '00

Hi, I just download Zope today, and I am wondering how I am going to start toding something. May somebody tell me whath is the first step to do to put a custom HTML page into ZOPE ? (I started the server, I can access the 'manage' tools -> server:8080/manage), I guess I need to creat my HTML page with notepad, ultraedit or whatever, but the next step ? Creat a ZOPE object linked to this HTML page ? No idea how to do that... Thanks a lot Vincent

3 2

RE: [Zope-dev] getting request variables values
by Chris McDonough 20 Jul '00

20 Jul '00

Have you tried: <dtml-var "REQUEST['SSL_CLIENT_EMAIL']"> ? > -----Original Message----- > From: Leonardo Kenji Shikida [mailto:kenji@intelligenesis.net] > Sent: Thursday, July 20, 2000 3:38 PM > To: zope-dev(a)zope.org > Subject: Re: [Zope-dev] getting request variables values > > > that's the point: > <dtml-var REQUEST> > gives me the value of SSL_CLIENT_EMAIL, that is a HTTPS > environment variable > but trying to get <dtml-var "REQUEST.SSL_CLIENT_EMAIL"> don't work. > > any tips? > > Leonardo Kenji Shikida > Webmind - Brazil Office > > > ----- Original Message ----- > From: Jim Washington <jwashin(a)vt.edu> > To: Leonardo Kenji Shikida <kenji(a)intelligenesis.net> > Sent: Thursday, July 20, 2000 4:18 PM > Subject: Re: [Zope-dev] getting request variables values > > > > Leonardo Kenji Shikida wrote: > > > > > > does not work with > > > > > > >>>>>>>>>>>>>>>>>>>>>> > > > <dtml-var standard_html_header> > > > <h2><dtml-var title_or_id></h2> > > > <dtml-var "REQUEST.SSL_CLIENT_EMAIL"> > > > <dtml-var standard_html_footer> > > > >>>>>>>>>>>>>>>>>>>>>> > > > > > > why? > > > > What does <pre><dtml-var REQUEST></pre> give you? > > > > It will fail if SSL_CLIENT_EMAIL does not have a value (or > is bank) in > > the submitted form. > > > > -- Jim > > > _______________________________________________ > Zope-Dev maillist - Zope-Dev(a)zope.org > http://lists.zope.org/mailman/listinfo/zope-dev > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope ) >

2 1

Re: [Zope-dev] getting request variables values
by Leonardo Kenji Shikida 20 Jul '00

20 Jul '00

that's the point: <dtml-var REQUEST> gives me the value of SSL_CLIENT_EMAIL, that is a HTTPS environment variable but trying to get <dtml-var "REQUEST.SSL_CLIENT_EMAIL"> don't work. any tips? Leonardo Kenji Shikida Webmind - Brazil Office ----- Original Message ----- From: Jim Washington <jwashin(a)vt.edu> To: Leonardo Kenji Shikida <kenji(a)intelligenesis.net> Sent: Thursday, July 20, 2000 4:18 PM Subject: Re: [Zope-dev] getting request variables values > Leonardo Kenji Shikida wrote: > > > > does not work with > > > > >>>>>>>>>>>>>>>>>>>>>> > > <dtml-var standard_html_header> > > <h2><dtml-var title_or_id></h2> > > <dtml-var "REQUEST.SSL_CLIENT_EMAIL"> > > <dtml-var standard_html_footer> > > >>>>>>>>>>>>>>>>>>>>>> > > > > why? > > What does <pre><dtml-var REQUEST></pre> give you? > > It will fail if SSL_CLIENT_EMAIL does not have a value (or is bank) in > the submitted form. > > -- Jim

1 0

Re: [Zope-dev] Redirecting from the manage interfaces.
by Dieter Maurer 20 Jul '00

20 Jul '00

Erik Enge wrote: > > call, it won't redirect. So you should be able to achieve the same > > results just by invoking manage_addImage without including the REQUEST > > object. > > But I have to pass something with the REQUEST, or else it won't add the > image, right? I do not think so. "manage_addImage" does not need REQUEST to add the image. The request is only used to redirect. Dieter

1 0

Re: [Zope-dev] getting request variables values
by Leonardo Kenji Shikida 20 Jul '00

20 Jul '00

does not work with >>>>>>>>>>>>>>>>>>>>>> <dtml-var standard_html_header> <h2><dtml-var title_or_id></h2> <dtml-var "REQUEST.SSL_CLIENT_EMAIL"> <dtml-var standard_html_footer> >>>>>>>>>>>>>>>>>>>>>> why? Leonardo Kenji Shikida Webmind - Brazil Office ----- Original Message ----- From: Jim Washington <jwashin(a)vt.edu> To: Leonardo Kenji Shikida <kenji(a)intelligenesis.net> Sent: Thursday, July 20, 2000 3:31 PM Subject: Re: [Zope-dev] getting request variables values > Leonardo Kenji Shikida wrote: > > > > How do I get HTTP headers and environment variables on Zope > > I know that <dtml-var REQUEST> shows me everything, but I only want to get 1 > > specific variable. > > <dtml-var "REQUEST.variable_name"> > > - or - > > <dtml-var "REQUEST['variable_name']"> > > If it is not essential to know it is in REQUEST, you can just > > <dtml-var variable_name> > > -- Jim Washington

1 0

Namespace passing proposal
by Shane Hathaway 20 Jul '00

20 Jul '00

Zopistas, I've added a proposal to the fishbowl. It's a relatively safe change that would simplify a certain things, but it could break existing code and I'd like to know what you think. Please comment in the Wiki. Actually, even if you don't have anything to say you might be able to learn something from the "background" section anyway. http://dev.zope.org/Wikis/DevSite/Proposals/NamespacePassingRevisited Shane

1 0