- Zope-Dev - Zope lists

cvs.zope.org
by Chris Withers 31 Aug '01

31 Aug '01

Just me or is cvs.zope.org dead? cheers, Chris

3 3

OOP Suggestion: allow local roles to restrict and not only extend user's roles.
by Philipp Robbel 31 Aug '01

31 Aug '01

Dear everyone, I'm badly stuck with my problem and while I think that I'm using valid OOP design I don't think that Zope currently supports this. Here's a description of my current design: In our company there are different research groups whom I gave their own subfolders. /databases /bioinformatics etc. Within each group there are pseudo-managers defined (i.e. they have most of the full manager role, i.e. can create/delete documents etc., so I'll use "manager" as role when describing my problem.) I want all groups to share a common set of both DTML methods and SQL functions, so I placed them in the root folder. In the root folder there is for example a new management function that - when called like /databases/show_management_screen - will show the management options for the group specified by the containing folder. It will also allow database inserts depending on the containing folder. I do that in my inherited "show_management_screen" dtml method by using statements like: <dtml-call "sqlAddProjects(ResearchGroupName = id, ...)"> which will do: INSERT INTO table (...) VALUES(...) WHERE ResearchGroupName=<dtml-sqlvar id type=nb> It's critical that a manager from /databases is *not* allowed to access the sql method in the /bioinformatics group, else he would be able to insert values under a fake GroupID by calling the method like /bioinformatics/sqlAddProjects directly. Another thing that's critical is that no researcher from any group nor the anonymous user has direct access to this Database method: that's why I not only placed them in the root folder but also restricted the "Access contents information", "Use Database Methods" and "View" permission of that sqlAddProjects Method to Managers. Problem which is solved by that: no anonymous user can access that method. Problem that comes up: no Researcher (i.e. subfolder manager) can access that method either, because root manager is, of course, != subfolder manager. Possible solution for inherited DTML methods: a) Disable that "Access contents information", "Use DB Methods" and "View" permissions protection in root folder. b) Check for permissions in the method itself. <dtml-if "AuthenticatedUser.has_role(this(), ['Manager'])"> as outlined in http://www.zope.org/Members/tseaver/user_settable_passwords. It's supposed to check, whether the accessing user has the Manager Role in the context the DTML method is called on. But this fails for SQL Methods and I'm pretty confident that there should be a simpler way in Zope itself. My idea to fully support this OOP design was the following: Enable local roles not only to extend the user's roles but also restrict them. I.e. in my case I would define all researchers from the various groups in the root acl_users folder as Managers. But - at the same time - change the local roles of the root folder to _not_ give the researchers the Manager role in the root folder (understandable?) In the /databases folder, however, I would give the database-researcher back his "Manager" role, via local roles. This would solve my whole problem: Step 1: restrict again all critical dtml and sql methods in the root folder to managers (as already outlined above: "...but also restricted the "Access contents information", "Use Database Methods" and "View" permission of that sqlAddProjects Method to Managers"). Step 2: If the database researcher calls the "show_management_screen" dtml method like /databases/show_management_screen it would work because a) he is defined as Manager in the root folder (but local roles restrict them there to be a "real" Manager) b) he has the proper local roles set in his /databases folder so that there he finally is a "real" Manager. He couldn't, however, access the function like /show_management_screen (i.e. in the root folder) or like /bioinformatics/show_management_screen: both would be restricted by the local rules. Shouldn't that be valid OOP design? Please let me know what you think or - if I oversaw another solution to my problem - please let me know how to solve it :-) My original problem was outlined in my previous post at http://groups.yahoo.com/group/zope/message/70099 where I unfortunately didn't get any replies. Thanks in advance, Philipp Robbel

1 0

How to run some external method as diffrent user
by Maciek 31 Aug '01

31 Aug '01

Hello, Is any elegant way to do that in ZOPE, without running zope as root? Zope is running on Linux, so I use sudo and commands.getstatusoutput (python function) for now. Best regards from Poland, Maciej Łotysz

1 0

view data in ZODB
by Sunil Kumar Gupta 31 Aug '01

31 Aug '01

Hi, If any one of you know how to view data stored in ZODB please reply. Regards, Sunil

2 1

python w/o py_malloc
by Dario Lopez-Kästen 31 Aug '01

31 Aug '01

Hello! I am having my Zope.2.4.0 repeatedly restarting (using z-monitor). I am using python 2.1.1 with Zope source-release. There was a discussion on the list recently about recompiling python w/o py_malloc, and that that would solve the problems. How do I recompile python w/o py_malloc? I've tried the python dist but couldn't find any docs... Please help... /dario - -------------------------------------------------------------------- Dario Lopez-Kästen Systems Developer Chalmers Univ. of Technology dario(a)ita.chalmers.se ICQ will yield no hits IT Systems & Services

2 2

WebDav and access of content of a folder
by Eric Brun 31 Aug '01

31 Aug '01

Hi, I work on Zope 2.4.1b1, ZEO1.0b4 Server-side I test webdav with a Win98 machin with webfolders. Problem: I create a folder in Root Folder of zope I fix permissions (WebDav access, Webdav Lock /Unlock, View, Add Images FIles, Change Image Files, access content infomation) to Owner on the folder. I drag a file (Word2000 file) into the webfolder (after open the webfolder and authentication with the Owner of the folder Zope): that's ok. Then I try to open the Word file by double-clicking on. Word runs and then , an authenticate-box come. But, at this point, I am already authenticated to Owner of the folder ! What is the problem ??? I can read somethings like that in the Z2.log file : 193.47.140.12 - eric [date-..] "PROPFIND /myfolder HTTP/1.1" 207 2468 "" "Microsoft Data Access Internet Publishing Provider DAV" => Open webfolder 193.47.140.12 - Anonymous [date- ....] "OPTIONS /myfolder HTTP/1.1" 200 434 "" "Microsoft Data Access Internet Publishing Provider DAV" 193.47.140.12 - Anonymous [date- ...] "LOCK /myfolder/test.doc HTTP/1.1" 401 1772 "" "Microsoft Data Access Internet Publishing Provider DAV" Why these transactions take the Anonymous User ??? Anybody can help me ? Thanks ! -- Eric Brun Mission TIC Savoie Technolac France E-mail : Eric.Brun(a)univ-savoie.fr

1 0

manage_access problems
by Johan Beauce 30 Aug '01

30 Aug '01

Hello, I would like find a function like "manage_acces" which can give me the roles cheked for a permission. Example : I have a folder "myFolder" and I use this function : <dtml-let folderPermissions="folderEditing.rolesOfPermission('Access contents information')"> <dtml-var folderPermissions> </dtml-let> the variable folderPermissions return me this list : [{'selected': '', 'name': 'Anonymous'}, {'selected': 'SELECTED', 'name': 'Manager'}, {'selected': '', 'name': 'Member'}, {'selected': '', 'name': 'Owner'}, {'selected': 'SELECTED', 'name': 'Reviewer'}, {'selected': '', 'name': 'User'}, {'selected': '', 'name': 'publisher'}] With this list I can see "Manager" and "Reviewer" roles are checked because the string SELECTED appears. if I use <dtml-var folderPermissions[4]>, that's give me {'selected': 'SELECTED', 'name': 'Reviewer'}. But I can't access in this object if I want 'Reviewer' ??? it isn't a list or a string because I canp't use : <dtml-var folderPermissions[4][3]> for access to the 3th element, and I can't use <dtml-var expr="_.string.find(folderPermissions[4],'SELECTED',0)"> because it isn't a string .... Can you help me and tell me how I can use this object. Regards, Johan Beaucé.

4 3

E-market? What's happening? Latest Code, etc
by James 30 Aug '01

30 Aug '01

Hi, I thought that E-market was still being worked on. I thought it was sort of put on the back burner. Are there plans to revive it, and can where can I get the latest code? Thanks,

2 1

REQUEST problems
by jonathan 30 Aug '01

30 Aug '01

Hi All, am reletively new to zope, and in particular to products, so please accept my appologies if I am asking silly questions. I have in fact nearly completed my first ever product. The product was developed on a installation of Zope 2.4.0 and is giving errors when used with Zope 2.3.2. The error only occours when a method of the product is called directly from the web. The error does not occour when a dtml method is called that contains a reference to a method of the product. The error itself is that it can not find the object AUTHENTICATED_USER. Printing out REQUEST confirms this. There is no AUTHENTICATED_USER. Again this only happens when calling a method of the product directly. e.g. browsing http://zope-site/product/method generates an error but http://zope-site/dtml_method does not, even when dtml_method contains <dtml-var expr="product.method(REQUEST)"> Is this some sort of bug that was fixed in Zope 2.4.0 or has the way things should be done changed between versions? tia.. JOn. -- Jonathan Stoneman - Development Programmer - Frontier Internet Services Limited Tel: 029 20 820 045 Fax: 029 20 820 035 http://www.frontier.net.uk Statements are made at all times subject to Frontier's Terms and Conditions of Business, which are available on request.

2 1

unsliceable object
by Homan Els 30 Aug '01

30 Aug '01

Hi, Does somebody know why, I am getting an error on this function (inside a zope-product): def CreateProcessDirs(self,proposalid,runid): for i in self.objectValues(): id=i.id if callable( id ): id = id() RequestDir=os.path.join(dir,proposalid,runid,'process',id) if os.path.exists(RequestDir): print 'pathname ( file or directory) exist',path else: os.system('mkdir -p '+RequestDir) print "Make Directory: ",RequestDir return i The error message is: Error Type: TypeError Error Value: unsliceable object Thanks, Els _______________________________________________________________________ Els Homan European Molecular Biology Laboratory (EMBL) 6, rue Jules Horowitz, B.P.181 38042 Grenoble cedex 9. France homan(a)embl-grenoble.fr (Email) 04 76 20 74 66 (Phone) 04 76 20 71 99 (Fax) ______________________________________________________________________

3 3