September 2002 - Zope-Dev

Logging in as admin and impersonating another user - is it possible with Zopes sec policy?
by Dario Lopez-Kästen 11 Sep '02

11 Sep '02

Hello! I am wondering if it is possible to write a userfolder that does the following: For certain categories of users, for instance Teachers, while keeping their current authorisation of Teachers, I need to let them "impersonate" a user with lower authorisation than they currently have, say Students. So a logged in Teacher could for instance examine what a particular student sees in a Student portal (i.e. "previewing" it as would that particular student) Is this possible with Zopes current securtiy mechanisms? /dario - -------------------------------------------------------------------- Dario Lopez-Kästen, dario(a)ita.chalmers.se IT Systems & Services System Developer/System Administrator Chalmers University of Tech.

1 0

Trouble populating a dictionary of dictionaries
by Anton Hughes 11 Sep '02

11 Sep '02

Hi All, I'm trying to implement a computer booking system for staff members here. At the moment I have a table with date, timeslot (eg 8:00 - 9:00), resource (eg. PC 1) and person. I want to draw a table showing the bookings for the day looking something like this: |Time| PC 1 | PC 2 | PC 3 | +----+------+------+------+ |8:00| AH | | | +----+------+------+------+ |9:00| | BC | MD | +----+------+------+------+ etc... I thought the best way to do it would be use the table to populate a dictionary of dictionaries like: booking['8:00']['PC 1'] = 'AH' Then when I'm rendering the table using ZPT I can use a nested loop to look through the timeslots and resources and fill table cells with the booking[slot][resource] value if it exists. After playing around for too long on it, I can't seem to get it to work. I even tried pre-filling the d-o-d with empty strings. I just don't understand what I am doing wrong. Thanks, Anton Code: ===== #parameters: booking_date # Import a standard function, and get the HTML request and response objects. from Products.PythonScripts.standard import html_quote request = container.REQUEST RESPONSE = request.RESPONSE bookings = {} # declare the bookings dictionary resource_hash = {} #declare the resource dictionary #populate bookings dictionary with timeslot keys for row in context.resources(): resource = row['name'] resource_hash[resource] = '' #populate bookings dictionary with timeslot keys for row in context.timeslots(): slot = row['slot_name'] bookings[slot] = resource_hash #fill the bookings dictionary of arrays with actual bookings for row in context.getBookings(on_date=booking_date): slot = row['timeslot'] resource = row['resource'] - 1 person = ['person'] bookings[slot][resource] = person return bookings Error: ====== Error Type: TypeError Error Value: unsupported operand type(s) for - Traceback (innermost last): File D:\ongaku\lib\python\ZPublisher\Publish.py, line 150, in publish_module File D:\ongaku\lib\python\ZPublisher\Publish.py, line 114, in publish File D:\ongaku\lib\python\Zope\__init__.py, line 159, in zpublisher_exception_hook (Object: bookings) File D:\ongaku\lib\python\ZPublisher\Publish.py, line 98, in publish File D:\ongaku\lib\python\ZPublisher\mapply.py, line 88, in mapply (Object: render_bookings) File D:\ongaku\lib\python\ZPublisher\Publish.py, line 39, in call_object (Object: render_bookings) File D:\ongaku\lib\python\Shared\DC\Scripts\Bindings.py, line 252, in __call__ (Object: render_bookings) File D:\ongaku\lib\python\Shared\DC\Scripts\Bindings.py, line 283, in _bindAndExec (Object: render_bookings) File D:\ongaku\lib\python\Products\PythonScripts\PythonScript.py, line 302, in _exec (Object: render_bookings) (Info: ({'script': <PythonScript instance at 01707050>, 'context': <PortalFolder instance at 01CFFEE0>, 'container': <PortalFolder instance at 01CFFEE0>, 'traverse_subpath': []}, ('9/9/02',), {}, None)) File Script (Python), line 23, in render_bookings TypeError: (see above) Anton Hughes Data Administrator Childhood Determinants of Adult Health Project Menzies Centre for Population Health Research GPO Box 252-23, Hobart Tasmania 7001 Email: anton.hughes(a)utas.edu.au Web: http://www.menzies.utas.edu.au/cohort/CDAH.htm Phone: +61 (0) 3 6226 7761 =+=+=+===+++=====+++++=========+++++++++ Sattinger's Law: It works better if you plug it in.

4 7

Unit testing on win32 with FAT requires patch to custom_zodb.py, is this a known issue?
by Craeg K Strong 11 Sep '02

11 Sep '02

Hello: In order to use the unit testing facility for my custom Zope Products under FAT in win32, I had to do the following: In the file name:: [ZOPE]\lib\python\Testing\custom_zodb.py Where ZOPE stands for the directory in which you installed Zope, Change line number seven:: Storage = DemoStorage(base=FileStorage(dfi,read_only=1), quota=(1<<20)) to instead read:: Storage = DemoStorage(base=FileStorage(dfi, read_only=0), quota=(1<<20)) My guess is that FAT does not support the read_only attribute as required. Is this a known issue? Am I missing something? Thanks very much! --Craeg

3 6

Correction: Previous Message Off-Topic, Disregard
by Edward Pollard 10 Sep '02

10 Sep '02

Netscape was so kind as to direct my message to the entirely wrong mailing list. Humblest Apologies, Edward

1 0

Passing a Folder as a Parameter to a Script
by Edward Pollard 10 Sep '02

10 Sep '02

Hello Folks, A fairly straightfoward question. I'm trying to create some scripts that allow the folder and file structure of the content to control dynamicly the content of the menus that present said content. In a directory are folders. These folders are the "Menu Headings" of the content. Beneath each "Menu Heading" are some links in a "submenu" determined by the files within the associated folder. If I call the submenu script explicitly in the correct context, it generates the correct content. However the menu items should not be hard coded so I want to pass the folder to the script which generates the submenu content. I have it all figured out except the parameter passing. I have included the relevant part of the Page Template at the bottom. The script menuWidget looks for folders in the current context. The script subMenuWidget looks for Page Templates in the current context, but needs to be modified to accept an ObjectManager object as a parameter. (the "items" object from the "menu" repetition loop) I've looked around, fidgeted, snooped, and guessed. No luck. I can't seem to call it correctly. I believe I only need to add a parameter to the script in the ZMI, and change these lines <div tal:define="submenu here/org/subMenuWidget.py" tal:omit-tag=""> (from the template) submenuitems = context.objectValues('Page Template') (from subMenuWidget.py) For completeness I will include the code of subMenuWidget, but I doubt its relevant to this semantic and syntactic question. Thanks in Advance. Edward PS - if anyone has any good ideas on how to sort the collection of ObjectManager objects based on the numeric content of the isRanked comment, advice is appreciated. >From the Page Template: ------------------------------------------- <div tal:define="menu here/menuWidget.py" tal:omit-tag=""> <div tal:condition="menu" tal:omit-tag=""> <div tal:repeat="items menu" tal:omit-tag=""> <P></P><b><font color="#0033CC"><span tal:replace="items/title_or_id">folder id</span></font></b><br> <font size="-1"> <div tal:define="submenu here/org/subMenuWidget.py" tal:omit-tag=""> <span tal:condition="submenu" tal:omit-tag=""> <span tal:repeat="subitems submenu" tal:omit-tag=""> <span tal:replace="subitems/title_or_id">subfolder</span> </span> </span> <p tal:condition="not:submenu"><b>Submenu Here</b></p> </div> </font> <p></p> </div> </div> <p tal:condition="not:menu"><b>Main Menu Here</b></p> </div> ------------------------------------------- content of subMenuWidget.py ------------------------------------------- submenuitems = context.objectValues('Page Template') d1 = {} returnitems = [] for eachItem in submenuitems: if eachItem.getProperty('isRanked',0): index = eachItem.getProperty('isRanked',1000) while d1.has_key(index): index = index + 1 d1[index] = eachItem keys = d1.keys() keys.sort() for key in keys: dictObject = d1[key] returnitems.append(dictObject) return returnitems -------------------------------------

1 0

Bump up the nr of ZOpe trhreads
by Dario Lopez-Kästen 10 Sep '02

10 Sep '02

Hello! Apart from the -t option to z2.py (that, afaik, limits me to only 7), what other settings do I need to change to bump up the number of Zope threads to around 20, both for ZServer and for ZODB Accesses? If i change these settings, which one will allow me to have around 20 threads available to access an external Oracle DB (the zserver or the ZODB)? TIA, /dario - -------------------------------------------------------------------- Dario Lopez-Kästen, dario(a)ita.chalmers.se IT Systems & Services System Developer/System Administrator Chalmers University of Tech.

3 5

Some basic questions on Zope performance/scalability
by Wankyu Choi 10 Sep '02

10 Sep '02

Hi all, First, I apologize for posting this. I'm sure the topic has been discussed time and again, but I couldn't find a definite answer to my queries: 1. I made a custom user folder using MySQL as a storage backend. But I always feel wary about that User Folder method getUsers(). I have about 300,000 users in a MySQL db table. Is this method really meant to return that many users? Or the fundamental design of a Zope User Folder is intended for a small group of users? 2. Again, I have a 300,000-strong user base. Would it be wise to let them create a home folder and start adding things of their own? Could ZODB's FileStorage model take that much data without any problems or without severe perfomance penalty? I'm trying to pull out huge data objects as external files (as I did with NeoBoard's attachments), but I guess there's a limit to that approach too (and it's seemingly stupid not to use ZODB for all the benefits it offers). Simply put, say you already have 300,000 users with tons of data for each of them and you want to put them and their data somewhere in and/or outside of Zope. What would you do? Thanks in advance. Best Regards, Wankyu Choi

1 0

I/O Error
by Myroslav Opyr 09 Sep '02

09 Sep '02

Hi, When running one of development servers (Zope 2.5.1, Python 2.1.3+freebsdPatch) Several times I've got "I/O Error" exception page when trying to render random ZMI page. Retrying always succeeds... I was not able to get traceback so far (it is in HTML comments). Any ideas what that can be? m. -- Myroslav Opyr zope.net.ua <http://zope.net.ua/> ° Ukrainian Zope Hosting e-mail: myroslav(a)zope.net.ua <mailto:myroslav@zope.net.ua>

4 5

Zope-Dev digest, Vol 1 #1823 - 7 msgs
by TGERMAINE＠UPei.CA 09 Sep '02

09 Sep '02

I am away on vacation until Sept 16. If your inquiry is urgent please resend your request to Chris Martin (cmartin(a)upei.ca) and he will look after it. Alternatively, you can call Chris at 566-0604 Tom Germaine Access Services Administrator

1 0

ZCatalog and cataloguing remote sites
by Agata Cruickshank 09 Sep '02

09 Sep '02

Has anyone successfully managed to use ZCatalog for cataloguing external sites? I followed the example from the Spicklemire's book (Zope - Web Application Development and Content Management, chapter 9), but didn't manage to get it working. The basic idea is that you have a TinyTablePlus called CatalogedURLs storing URLs to be catalogued (with one column of data called url). You also create a ZCatalog called HTMLCatalog with an index called contents, and the title and source fields in the metadata. Then you have an external method called HTMLForCatalog.py, which creates a dummy object with title and content. HTMLForCatalog.py: ------------------------------- from ZPublisher import Client import string class dummyObject : pass def createTitle(url,data) : aTitle = string.split(url,'/')[-1] firstIndex = string.find(string.upper(data), '<TITLE>') if (firstIndex <> -1): secondIndex = string.find(string.upper(data), '<TITLE>') if (secondIndex <> -1) : aTitle = data[firstIndex+7:secondIndex] return aTitle def getHTMLForCatalog(self, url): x = dummyObject() theFile = Client.call(url) theData = theFile[1] x.title = createTitle(url, theData) x.content = theData aSource = string.split(url,'/')[-1] x.source = string.join(aSource, '/') return x ----------------------------------------------- You connect an external method to the Zope site by creating GetHTMLForCatolog external method in ZMI. You also have a DTML method called addFilesToCatalog which calls the external method addFilesToCatalog : -------------------------------------------- <dtml-var standard_html_header> <dtml-in CataloguedURLs> <dtml-let newObject="GetHTMLForCatalog(anUrl)"> <dtml-call "HTMLCatalog.catalog_object(newObject,url)"> </dtml-let> </dtml-in> <p> <dtml-in "HTMLCatalog()">whatever <a href='<dtml-var "getPath()">'> <dtml-var "getPath()"> <dtml-var title></a><br> </dtml-in> <dtml-var standard_html_footer> --------------------------------- This doesn't work because the line 3 passes 'anURL', which is not defined . If I change this to 'url' the URLs from the CatalogedURLs table are inserted into the catalog, but the method fails to retrive title or content. Any suggestions as to how to fix it or where I'm going wrong are welcomed. As, in fact, are any suggestions how I can implement a search engine across Zope and non-Zope sites. Many thanks, Agata

1 0