- Zope-Dev - Zope lists

Re: [Zope-dev] Trouble setting LoginManager default user class
by Dan L. Pierson 17 May '00

17 May '00

Phillip J. Eby writes: > At 10:01 PM 5/17/00 +0100, Steve Alexander wrote: > > > >The _defaultClass only needs to become DemoPortal.LoginMember before a > >Portal's LoginManager instance is created. > > > >Therefore, you can leave the _defaultClass as LoginUser until the > >"install" method of DemoPortalBase is called (PTKDemo/Portal.py). > > > >In the "install" method, after creating a MembersClass(), set its > >_defaultClass to LoginMember. > > It would be better to call manage_setStorage(zclass='meta type') rather > than tinkering with attributes directly, as manage_setStorage should always > be forward-compatible. Ah yes, forgot about this problem -- it was yesterday... Here's my current code from DemoPortalBase.install: elif db == 'LoginManager': from Products.LoginManager.LoginManager import \ LoginManager, manage_addLoginManager from PersistentUserSource import PersistentUserSource self.MembersClass = LoginManager # maybe not needed anymore manage_addLoginManager(self, 'Persistent User Source', ['Basic Auth Login'], 0, 0, 0) #self.acl_users.manage_setStorage('DemoPortal/LoginMember') for us in self.acl_users.UserSourcesGroup.objectValues(): if us.meta_type == 'Persistent User Source': us.manage_setStorage('DemoPortal/LoginMember') The commented out line fails because it doesn't have a manage_setStorage. The uncommented out code causes the following traceback. It was after I hit this that I started hacking on _defaultClass... Probably I should have yelled for help then, but I have this bad habit of digging myself in as far a possible first :-) Traceback (innermost last): File /home/zope/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /home/zope/lib/python/ZPublisher/Publish.py, line 179, in publish File /home/zope/lib/python/Zope/__init__.py, line 202, in zpublisher_exception_hook File /home/zope/lib/python/ZPublisher/Publish.py, line 165, in publish File /home/zope/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: Portal_add) File /home/zope/lib/python/ZPublisher/Publish.py, line 102, in call_object (Object: Portal_add) File /home/zope/lib/python/OFS/DTMLMethod.py, line 150, in __call__ (Object: Portal_add) File /home/zope/lib/python/DocumentTemplate/DT_String.py, line 502, in __call__ (Object: Portal_add) File /home/zope/lib/python/DocumentTemplate/DT_With.py, line 148, in render (Object: Portal.createInObjectManager(REQUEST['id'], REQUEST)) File /home/zope/lib/python/Products/PTKDemo/Portal.py, line 71, in install (Object: DemoPortalBase) File /home/dan/src/Zope-2.1.6-src/lib/python/Products/ZPatterns/Rack.py, line 348, in manage_setStorage (Object: AttributeProviderContainer) File /home/dan/src/Zope-2.1.6-src/lib/python/Products/ZPatterns/Rack.py, line 225, in _unifiedZClassRegistry (Object: AttributeProviderContainer) AttributeError: (see above)

1 0

Mailing List management: corrupted message headers in digests
by Dieter Maurer 17 May '00

17 May '00

Dear mailing list administrators at least the digests have some deficiencies: 1. some message headers are corrupted (do not use RFC822 continuation style). Example is: Zope-Dev digest, Vol 1 #517 - 17 msgs" Message: 10 From: "Kevin Dangoor" <kid(a)kendermedia.com> To: "Fabio Augusto Mazzarino" <mazza(a)radiumsystems.com.br>, <zope-dev(a)zope.org> Subject: Re: [Zope-dev] Turn-off undo. Date: Tue, 16 May 2000 10:13:29 -0400 charset="iso-8859-1" The "To:" header continuation line is not indented as it should be by RFC822. 2. the digest removes MIME headers. They are, however, vital, e.g. for multipart messages. 3. MIME header removal seems to be incomplete, leading to corrupted message headers. See the example above, where obviously the "Content-Type:" header has been removed, but its parameter "charset="iso-8859-1" was retained. 4. Many messages get truncated by RFC934 bursting, apparently, because they contain lines beginning with "--". As far as I understand RFC934, such lines should be prefixed with "- ". Example: Zope-PTK digest, Vol 1 #127, message 8 Message: 8 From: "Kevin Dangoor" <kid(a)kendermedia.com> To: "Tres Seaver" <tseaver(a)palladion.com> Cc: <zope-ptk(a)zope.org> Subject: Re: [Zope-PTK] Adding LoginManager at the root Date: Tue, 16 May 2000 10:53:26 -0400 charset="iso-8859-1" ----- Original Message ----- From: "Tres Seaver" <tseaver(a)palladion.com> To: "Kevin Dangoor" <kid(a)kendermedia.com> Cc: <zope-ptk(a)zope.org> Sent: Monday, May 15, 2000 11:28 PM Subject: Re: [Zope-PTK] Adding LoginManager at the root RFC934 bursting creates a message with empty body. 5. similar problem as 3 for "References:" header: Example X-Digest: Zope digest, Vol 1 #783 - 36 msgs Message: 35 <39210503.EF2145DA(a)nipltd.com> <39211152.E4A6A06D(a)lancaster.ac.uk> <20000516123952.F573(a)leda.comlounge.net> <39212AC2.C9E65D0B(a)lancaster.ac.uk> <392150D1.639261F5(a)digicool.com> <39215365.C5BA87AD(a)nipltd.com> <3921568D.8A52C271(a)digicool.com> From: "Jason Spisak" <444(a)hiretechs.com> To: Shane Hathaway <shane(a)digicool.com> Cc: Chris Withers <chrisw(a)nipltd.com>, Steve Alexander <s.alexander(a)lancaster.ac.uk>, Christian Scholz <cs(a)comlounge.net>, zope(a)zope.org Subject: Re: [Zope] subfolder wrong absolute_url Date: Tue, 16 May 2000 19:08:45 GMT - Dieter

1 0

2.2.0a1 Problems
by Chris Withers 17 May '00

17 May '00

Hi, Just a few comments after a 5 minute play: - start.bat still hasn't been renamed. It's not that bright since windows has had a start command for ages now... typing start.bat tries to 'start' something called .bat. doh... The only way to get it to work is "start.bat" or ./start which is very weird on an NT box although quite normal on UNIX ;-) - the -P option doesn't work properly. python z2.py -D -P 9000 still resulted in the PCGI server being run on port 8090. Wasn't there going to be an option so that servers which you don't use (monitor and PCGI in this case) don't get started? - hitting the help button on the ownership tab resulted in: Traceback (innermost last): File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\Publish.py, line 224, in publish_module File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\Publish.py, line 189, in publish File C:\ZOPESI~1\22CB55~1.0A1\lib\python\Zope\__init__.py, line 221, in zpublisher_exception_hook (Object: Help) File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\Publish.py, line 161, in publish File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\BaseRequest.py, line 350, in traverse File C:\ZOPESI~1\22CB55~1.0A1\lib\python\ZPublisher\HTTPResponse.py, line 530, in debugError NotFound: (see above) cheers, Chris

2 1

Methods through the Web (security?)
by Chris Withers 17 May '00

17 May '00

Hi, With all the talk of security and Zope 2.2 I thought I'd throw this one into the post again: How come you can browse things like the objectIds and objectValues methods through the web? Surely this is exposing information that people shouldn't really know about? For example, check out: http://www.zope.org/objectIds While I'm at it, is there any way to make DTML methods accessible to objects (such as other DTML methods) but not through URLs other than by a tortuous series of proxy roles? I've expressed views about an 'execute' permission in the past but these have fallen on deaf ears. For example: http://www.codecatalog.com/standard_html_footer This is messy and there's no reason why it needs to be exposed through a URL. cheers, Chris

2 2

Mounted Database Proposal/Notes
by Jim Fulton 17 May '00

17 May '00

I've created a wiki page to capture my thoughts on a simple model for "mounting" Zope databases. See: http://www.zope.org/Members/jim/ZODB/MountedDatabases This is actually something we are working on and we hope to have some useful results soon. The biggest potential stumbling block is the ZClass support. Stay tuned. Jim -- Jim Fulton mailto:jim@digicool.com Technical Director (888) 344-4332 Python Powered! Digital Creations http://www.digicool.com http://www.python.org Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats.

2 1

Help Domains
by Brun Eric 17 May '00

17 May '00

Hi, I work on a Portal built with PTK and ZOPE. I would like to known the meaning of "domains" in a user Thanks Eric

1 0

Loginmanager/guf the right way to go?
by Alexander Schonfeld 17 May '00

17 May '00

Wouldn't it be better to improve Zope's built in authentication system to support more generalized membership systems? Rather than building these separate loginmanager/user folder things? That way roles and permissions could be integrated easily. And auto-account generation could be possible: 0. let anonymous people fill in the account gen form.. 1. send out the email with pre-generated password 2. build default folder/prefs/whatever 3. let the user login and see whatever the role supports... plus their personal stuff. I guess the main problem is the "plus their personal stuff" thing. How hard would it be to make a new private vs. public layer. It seems this would start to sound like unix permissions... 'doomed to repeat' et all. As I understand it, currently there isn't any private stuff for people in the same role? This seems like it might be useful for major sites... and yes... one day... when zope rules the world... there will be 'major sites' and people will have their own folders and all will be good. ...IMHO, comments please. Regards, Alex. 1010011010101001101010100110101010011010 0 Digital Garage 1 Alexander Schonfeld 0 alex(a)garage.co.jp - pear - 03-5454-7219 1 http://www.zope.ne.jp/

2 1

Re: [Zope-dev] Methods through the Web (security?)
by Chris Withers 17 May '00

17 May '00

Steve Alexander wrote: > One of the elements of the List give this: > > http://www.zope.org/ShowingDad > > I wonder what the story behind that was? :-) Dunno, but you can't do a /view_source on it 'cos it doesn't have a document_src attribute... curiouser and curiouser... Chris

1 0

Bluefish?
by Lalo Martins 17 May '00

17 May '00

"Bluefish":http://bluefish.openoffice.nl/ is not a WYSIWYG HTML editor, but it's a very user-friendly editor, with help, hilight, autotag, and possibly even wizards and preview for PHP3, SSI and RXML. It's easy to give it a module for an additional dynamic-HTML language; would someone bother writing one for DTML? []s, |alo +---- -- Hack and Roll ( http://www.hackandroll.org ) News for, uh, whatever it is that we are. http://www.webcom.com/lalo mailto:lalo@hackandroll.org pgp key in the personal page Brazil of Darkness (RPG) --- http://zope.gf.com.br/BroDar

1 0

RE: [Zope-dev] Zope 2.2.0 alpha 1 released...
by Brian Lloyd 17 May '00

17 May '00

> > This release contains the new changes to the Zope security > > model to protect against the server-side trojan issue: > > > > http://www.zope.org/Members/jim/ZopeSecurity/ServerSideTrojan > > Hmm. Let's say an object is owned by user Joe. I export the > object and > reimport it in a different Zope installation, where Joe > doesn't exist. Who > owns the object? nobody? No - you do :) Importing is the moral equivalent of "creating" the object. Whenever you create, copy, cut & paste or import you will get ownership of the resulting new object. To me, the more hairy issue is what if Joe *does* exist in the different Zope installation, and you *do* want Joe to continue to have ownership? Currently, you must either arrange for Joe to do the import (which will give him ownership directly), or import it and use an external method to assign ownership (which is a pain). One thing we've thought of is that perhaps superuser (and only superuser) could be able to assign ownership through a web interface, which could make this sort of thing a bit easier. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

3 2