November 2000 - Zope

Rookie Question - Syntax
by Walter Pleyer 30 Nov '00

30 Nov '00

Hi folks! I am a Zope/Python-Rookie and Ihave a probably quite simple problem: I must check if some must-fields from a form were filled out by a user. Checking data from a single field is no problem, but what's the correct syntax for checking more than one field (e.g. "name", "address", "email") ? Thanx Walter

4 3

Fast Access.
by Jason C. Leach 30 Nov '00

30 Nov '00

hi, Is there a faster way to access Zope? I find I wate too long for page refreshing and updates. j. ...................... ..... Jason C. Leach ... University College of the Cariboo. ..

3 3

User mangement
by Sven B. 30 Nov '00

30 Nov '00

>>Zope has a function "get_valid_userids()". >>Now my question; >>How is it possible to get something like (username;role;path)? >refer to the ZQR: > http://zdp.zope.org/projects/zqr/ZopeQR >and look for the section describing the AUTHENTICATED_USER object. > Thanks seb, but i need to get (username;role;path) for all users (i.e. 500) of a zope site. AUTHENTICATED_USER seems to be only for the current user. sven

1 0

RE: [Zope] ZClass security : a solution
by Bowyer, Alex 30 Nov '00

30 Nov '00

Seb, you were right, I was referring to ZClass security, which is very poorly documented. And no you're not being intellectually lazy, that sentence does make no sense!!!! I have kind of got a working solution now, so I will share it for anyone interested: To recap, the scenario is a news page with a DTML method for viewing which is accessible by all but also DTML methods for editing the content, which are only to be available to users holding a certain role, which I happen to have called UAAdmin (if you're wondering what UA is, it's the name of the newsletter "Update Australia"). Each instance of the class is a separate news page. What I did is this, it's a bit of a messy solution but it works for me: 1) Create a role at the root level of Zope called UAAdmin (I keep all roles at this level for simplicity). 2) At the level which instances of the news page class are to be created, go to the Security tab and assign permissions to the UAAdmin role. If possible include at least one permission which is not held by any other roles or users at this level (other than the Manager of course). In my case "Manage properties" could only be done by UAAdmin or Manager roles. This could be anything, even something you don't use such as perhaps "Add ZGadfly Database Connection" (ZODBC is much better!). 3) Within your ZClass class definition, for each DTML method you want to assign security to: a) Go to the 'Define Permissions' tab b) Go to the dropdown next to 'View' and change "View" to "Manage properties" (or whatever permission was unique to the role you want to give access to). For methods that should have anonymous access, leave it as "View" You will find that this will have the desired effect of limiting access to those pages/methods only. Essentially what we are doing is saying "If you want to View this object, you have to have the Manage Properties permission" There are probably better ways, but if it ain't broke don't fix it. I don't understand why you have to choose a permission for each permission (which is a very confusing concept). It would be much better if you could choose a role to say e.g. "If you want to View this object, you have to have the UAAdmin Role" Apparently there's something called ZPermissions where you can create your own, so I could create a permission "Manage News Pages" and then say "If you want to View this object, you have to have the Manage News Pages permission" but I never worked this out fully. If anyone has any suggestions for improvement, by all means put me straight, but this worked for me. Thanks Alex ================================== Alex Bowyer IT Contractor, Logica Australasia Tel : +61 2 9202 8130 Fax : +61 2 9922 7466 E-mail : bowyera(a)logica.com WWW : http://www.logica.com.au/ ================================== > -----Original Message----- > From: seb bacon [mailto:seb@jamkit.com] > Sent: Thursday, November 30, 2000 12:53 AM > To: Dieter Maurer > Cc: Bowyer, Alex; 'zope(a)zope.org' > Subject: Re: [Zope] security > > > * Dieter Maurer <dieter(a)handshake.de> [001128 00:12]: > > Bowyer, Alex writes: > > > Can some one explain how the Define Permissions screen > works. I really don't > > > understand the concept behind it, what does it mean for > a permission setting > > > to own a permission? > > > > > > All I need to do is to make certain ZClass methods have > a certain level of > > > security and the other methods of the class have no security. > > > It is quite good explain in the upcoming Zope book. > > In fact, I think Alex was referring to ZClass security, which isn't > covered in the book, and is something I've never go to the > bottom of either. > on the 'define permissions' tab, it says: > > The table below has two columns. The first column lists the > permissions for this object. The second column specifies the > permissions that should have this permission in this product > or ZClass. > > I'm probably being intellectually lazy or something, but that doesn't > make any sense to me at all. > > seb. >

2 1

User mangement
by Sven B. 30 Nov '00

30 Nov '00

Zope has a function "get_valid_userids()". Now my question; How is it possible to get something like (username;role;path)? Thanks in advance Sven

2 1

authentication II
by Olaf Zanger 30 Nov '00

30 Nov '00

hi everybody, after a long 10h struggle with installing and running zope i found some interesting things. may anybody be able to explain these to me? i run a suse7.0 system with a suse zope installation on 8080. i changed the access file to a new account name. with this account name i can do everything in zope, add users, add files, copy, paste ... if i add a new user i can not login for adding files ... aren't they made for that? do i understand anything wrong? are they probably only for content access? in previous (non-suse) installations i was allowed to add users to the acl_user with my superuser account but couldn't login to add files with these new accounts. greetings olaf -- soli-con Engineering Zanger Dipl.-Ing. (FH) Olaf Zanger Nusch Lorrainestrasse 23 3013 Bern / Switzerland Fon: +41-31-332 9782 Mob: +41-76-572 9782 mailto:info@soli-con.com mailto:olaf.zanger@soli-con.com http://www.soli-con.com

2 1

python methods
by Terry Kerr 30 Nov '00

30 Nov '00

Hi, Is there any way to get access to inbuild python functions like 'filter' and 'lambda' within pythonMethods? terry -- Terry Kerr (terry(a)adroit.net) Adroit Internet Solutions (www.adroit.net) Phone: +61 3 9563 4461 Fax: +61 3 9563 3856 ICQ: 79303381

2 1

jcNTUserFolder on 2.2.x
by Andy McKay 30 Nov '00

30 Nov '00

Is there an updated version or product similar to jcNTUserFolder (allowing NT authenitcation in Zope) that works in Zope 2.2.x? Or am I going to have to upgrade jcNTUserFolder? TIA. -- Andy McKay, Developer. ActiveState.

3 3

Re: [Zope] ZCatalog: How to request boolean NOT searches?
by Dieter Maurer 30 Nov '00

30 Nov '00

Doug Morse writes: > ... negating a ZCatalog index lookup ... Only ZCatalog text indexes support a restricted form of negation. Keyword and field indexes do not. Text indexes support only "and not": e.g. "Zope and not databases". Free standing "not" or combined with "or" (rather than "and") is not supported. Dieter

5 6

Portal user personalisation
by Bocquillon Philippe 30 Nov '00

30 Nov '00

Hello everybody, I would like to know if Zope provides the functionality for the user of a portal to have his personalized page of the portal. Thanks, Philippe

2 1