November 2000 - Zope

redirect on Authorization
by Spicklemire, Jerry 03 Nov '00

03 Nov '00

Daniel says: > We have a very large site and many of Users bookmark pages. > This can cause several problems especially if the site layout > changes, security changes at different levels and a user > bookmarks a result pages that depends on previous page(s) > submissions. Yes, it's easy to redirect to a "front page" upon authentication, but what's to keep the user from hitting the bookmark again, after signing on? The real question is, "How can we keep users from bookmarking dynamic pages?". It may be frustrating, but this is something that will haunt us as long as browsers have a bookmark button. Worse, the browser cache, and higher levels of caching (e.g. Squid), are clueless and will obliviously serve up expired pages. You need to be very diligent to include metatags on every dynamic page to explicitly prevent caching! The only answer I can come up with is to include checking for valid prerequisites, and redirect the user to the starting point of each process when they ask for the last page first. An interesting problem, which I haven't got a canned answer for. Later, Jerry S.

1 0

CMS/publishing system
by Spicklemire, Jerry 03 Nov '00

03 Nov '00

Pete asked: > How well does Zope integrate applications/cgi's written in ASP, > Cold Fusion, Perl, etc...? As we've got a number of things we'd > prefer to keep as is, and run alongside Zope. and added: > Is it possible? I'm thinking that with Apache and mod_rewrite > it would be doable (using file extensions to map the request), > but I'm not sure how that might work under IIS or within Zope... Yes, the mod_rewrite approach is a very common way to serve from both Apache and Zope, e.g. static pages / images from Apache, dynamic stuff from Zope. In fact, that's how Zope.org was set up for quite awhile, and may still be (don't know the details). There are many refernces to this topic in the mail list archives. Try searching at : http://zope.nipltd.com/public/lists.html For more intimate integration with existing Perl stuff, see: http://lists.zope.org/pipermail/zope-perl/ CMS is the latest buzzword for Web Application Development, AKA WorkFlow, Distributed Applications, etc. Zope is perfectly at home with this paradigm, whatever the nom du jour! Later, Jerry S.

1 0

Authorization Question
by Terry Babbey 03 Nov '00

03 Nov '00

I have been unable to figure out how to let only certain people access a method. I have a method setup for people to modify our online phonebook but I want to restrict access to this method for obvious reasons. Any ideas how to accomplish this? I am also wondering if anyone has been able to tie authentication into a unix passwd file? Thanks again, Terry -- __________________________________________________________________ Terry Babbey Technical Support Specialist Lambton College, Sarnia, Ontario, Canada __________________________________________________________________

1 0

Re: [Zope] Can somebody please help me....
by chip johansen 03 Nov '00

03 Nov '00

Try <dtml-call "REQUEST.set('email', _['sequence-item'])"> You must use the _ namespace variable. >From: "Thomas Søndergaard" <stoonsdesign(a)hotmail.com> >To: zope(a)zope.org >Subject: [Zope] Can somebody please help me.... >Date: Fri, 03 Nov 2000 11:42:43 CET > >I am currently working on a newsletter function, and I am a newbie at this >EXELLENT ZOPE-Server..... > >Therefore can somebody please help me doing this: > >****** ><dtml-var standard_html_header> ><dtml-in expr="_.string.split(emails.raw,'\n')"> > ><dtml-call "REQUEST.set('first_name', 'none')"> ><dtml-call "REQUEST.set('last_name', 'none')"> > ><dtml-call "REQUEST.set('email', <dtml-var sequence-item>)"> ><dtml-call "REQUEST.set('title', 'added through list')"> ><dtml-with "manage_addProduct['NewsLetter']"> > <dtml-call "newsletter_entry_add(_.None, _, NoRedir=1)"> ></dtml-with> > ></dtml-in> ><dtml-var standard_html_footer> >****** > >What i am trying to do here is to add alot of email adresses from a >dtml-document containing them, one on each line.... But how do I >REQUEST.set a sequence-item (Sequence-item works perfectly, but not in the >REQUEST.set line!) > >Please Answer me.... = ( > >Stoonsdesign, Thomas Søndergaard > >_________________________________________________________________________ >Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. > >Share information about yourself, create your own public profile at >http://profiles.msn.com. > > >_______________________________________________ >Zope maillist - Zope(a)zope.org >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - http://lists.zope.org/mailman/listinfo/zope-announce >http://lists.zope.org/mailman/listinfo/zope-dev ) > _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

1 0

Re: [Zope-dev] pluggable brains - namespace blues
by Philipp Auersperg 03 Nov '00

03 Nov '00

the best answers are those answered by yourself: For all who want to know it: you have to explicitely give self as an extra parameter: concerning the example below: just call: rs[0].getName(rs[0]) and it works for me. Weird, but now I can enjoy my beer.... phil *********** REPLY SEPARATOR *********** On 03.11.2000 at 12:30 Philipp Auersperg wrote: I have a problem with pluggable brains: 1. Given is a ZClass named 'Merchant' that maps to a SQL table 'Merchant' with the columns 'ID' and 'name'. 2. I the ZClass I defined a Python method 'getName' with the body: return self.name 3. I have a SQL Method with "select * from merchant" that I bind to the brain class 'Merchant' 4. I define a Python method with the following body: -------------------------------- rs=self.Merchants() return rs[0].name -------------------------------- And now the problems: That works fine, but when I want to access the Merchant's name through the its member function getName() with the following code: -------------------------------- rs=self.Merchants() return rs[0].getName() -------------------------------- then I get an AttributeError mentioning that 'name' cannot be found. when I change the getName() Python method to: return 42 it works! It seems that the namespace is somehow shreddered, I have to dig into that but if anybody can help it would spare much time! So finally my desperate question: How can I solve/workaround that problem to call methods in pluggable brains that access database-based members from a python method? thanks in advance phil

1 0

ZServer log buffer?
by J�lio Dinis Silva 03 Nov '00

03 Nov '00

Hi all. Supose you are saving z2.log on a mounted disk, either nfs linux or a WinNT cluster network name. If for some seconds that mounted disk became unavailable, isnt supose ZServer log system to buffer a little until the mounted resource became available again? I'm dealing with the problem that z2.log "write system" on NT are giving me a IOError when the resource becames unavailable for some seconds. If there isnt anything already to fix this, wouldnt be good if ZServer buffer a "little" until the resource became available and in the case the resource just completelly cease to be then ZServer just stop to write logs, instead of killing the process raising the exception? I know what you are thinking: just dont permit the resource to became unavailable dude! But supose you have active-passive resources in case of fail down and you need some seconds to automatically or by hand(not the case) fix the resource, wouldnt be nice for ZSERVER to, for instance, stop logging. Maybe this should not be addressed to Zope Log writes. Maybe this is more a system administration issue but... Thanx anyway for some comments. Júlio Dinis Silva _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

2 1

Can somebody please help me....
by Thomas S�ndergaard 03 Nov '00

03 Nov '00

I am currently working on a newsletter function, and I am a newbie at this EXELLENT ZOPE-Server..... Therefore can somebody please help me doing this: ****** <dtml-var standard_html_header> <dtml-in expr="_.string.split(emails.raw,'\n')"> <dtml-call "REQUEST.set('first_name', 'none')"> <dtml-call "REQUEST.set('last_name', 'none')"> <dtml-call "REQUEST.set('email', <dtml-var sequence-item>)"> <dtml-call "REQUEST.set('title', 'added through list')"> <dtml-with "manage_addProduct['NewsLetter']"> <dtml-call "newsletter_entry_add(_.None, _, NoRedir=1)"> </dtml-with> </dtml-in> <dtml-var standard_html_footer> ****** What i am trying to do here is to add alot of email adresses from a dtml-document containing them, one on each line.... But how do I REQUEST.set a sequence-item (Sequence-item works perfectly, but not in the REQUEST.set line!) Please Answer me.... = ( Stoonsdesign, Thomas Søndergaard _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

2 1

CMS/publishing system
by Pete Prodoehl 03 Nov '00

03 Nov '00

[Note: this was also sent to cms-list(a)camworld.com/Content Management System Mailing List] I'm looking for opinions on Zope being used as a CMS/publishing system. Here's some rough notes on our situation and my thoughts on Zope. We run NT now, but would like the option of migrating to *nix. (Zope runs on both.) We want to deploy across 50+ sites. (Since it's open source, we'd spend our money on customization/development rather than licensing fees.) We'd prefer a browser based administration system. (Zope's already got a very good one.) Some questions I have are: How well does Zope integrate applications/cgi's written in ASP, Cold Fusion, Perl, etc...? As we've got a number of things we'd prefer to keep as is, and run alongside Zope. How does Zope deal with serving virtual domains off of a single NT box? What approach would that require? Zope looks like a really nice platform, any real-world evaluations would be most appreciated... (Besides what I've read on www.zope.org) thanks... Pete

3 2

Help wanted on Zope ZClasses/DTML please.
by Bowyer, Alex 03 Nov '00

03 Nov '00

Hi, I have only just started developing in Zope over this last week. I like it a lot, but I am having problems finding solutions to some of my more specific problems in the various zope documentations. I am hoping that if I describe my problems, one of you more-experienced Zope users out there will be able to help me. First some background: Basically I have written a news page which allows you to add/edit/delete articles from it. It is similar in some ways to the Zope HowTo "Build a searchable job board". It revolves around two classes: (UA stands for Update Australia, the name of the news page) UAArticle : A single article, to be included on the page. --------- Properties: article_title,article_author and article_text (self-explanatory) DTML Methods: index_html - renders the data from the three properties into HTML ready for inclusion in the news page edit - a page with a form to allow you to modify the content, submits to "update" update - processes the form results from "edit", updates the properties and redirects UAPage : the page itself, inherits from ObjectManager and has Add UAArticle permission defined. Each instance contains 0 or more UAArticles. ------ Properties: issue_date, issue_number, intro_text (self-explanatory) Methods: index_html - renders the page to HTML, both from these properties and by calling the index_html of each subcomponent UAArticle. edit - a set of forms for modifications to edit the above three properties and add a new article, or select an article to edit or delete. update - processes updates to the UAPage properties that have been made on the edit page. edit_article - once an article is selected and the Edit button is clicked, this finds the article, calls the edit method and gives feedback. add_article - a form to create a new article and add it to the UAPage. create_article - processes the data from the add_article form and actually makes the object and adds it. delete_article - once an article is selected and the Delete button is clicked, this finds the article, deletes it and gives feedback. Now to the problems I have got: 1) I cannot get my delete_article method to work. I figured I need to use manage_delObjects, but I can't find a working example to copy from and my code doesn't seem to do anything. The following code gets called by a form with a field called article_to_delete which is the title of the article we want to delete: <dtml-var standard_html_header>  <dtml-call "REQUEST.set('id_to_delete','NULL')">  <dtml-let the_match="REQUEST['article_to_delete']">  <dtml-in objectValues> <dtml-with sequence-item><dtml-with propertysheets><dtml-with UAArticleClassPropertySheet> <dtml-if expr="article_title==the_match"> <dtml-call "REQUEST.set('id_to_delete',title_or_id)">  </dtml-if> </dtml-with></dtml-with></dtml-with> </dtml-in>  <dtml-if expr="REQUEST['id_to_delete']=='NULL'">  <h2>Article not found</h2> <P>Could not find the article to delete.</P><P><A HREF=edit>Return to maintenance page</A></P> <dtml-else>  <dtml-let the_id="REQUEST['id_to_delete']">  <dtml-call "manage_delObjects('the_id')"> <h2>Article deleted</h2> <P>Deleted article '&dtml-the_match;' (id='&dtml-the_id;').</P><P><A HREF=edit>Return to maintenance page</A></P> </dtml-let> </dtml-if> </dtml-let> <dtml-var standard_html_footer> This gets an error that the_id does not exist. But I can't put <dtml-call "manage_delObjects('REQUEST['id_to_delete']')"> because that is quotes within quotes within quotes. I also tried <dtml-with the_id><dtml-call "manage_delObjects()"></dtml-with> but that doesn't seem to do anything. What is the correct way to use manage_delObjects? 2) I need to be able to make a "Back" button on the UAArticle's edit page that will return to the UAPage's edit page. The problem is that if I use <A HREF=edit> it just goes to the edit page of the object, because our current location is within the UAArticle not the UAPage. Is there a way to get the name of an object's parent (or its own name for that matter) and use it to construct a URL? 3) When redirecting or linking to a page I have already visited, how can I force a refresh? I tried the JavaScript window.location.reload(true) but I think that is only supported by Netscape. It didn't work in IE5 for me anyway. 4) What is the best way to handle security with ZClasses. In my example I want the index_html pages to be public but everything else to require a password. I managed to require a password for a particular instance of the UAPage, but that affects both the index_html and the edit pages. Thanks very much for taking the time to read this - I hope someone can put me out of my misery! - I have been fiddling around with the code for ages, getting nowhere fast, and the documentation wasn't much help in these areas. It just seems to cover the basics of ZClasses. Regards, Alex ================================== Alex Bowyer IT Contractor, Logica Australasia Tel : +61 2 9202 8130 Fax : +61 2 9922 7466 E-mail : bowyera(a)logica.com WWW : http://www.logica.com.au/ ==================================

2 1

RE: [Zope] PHP and Zope
by Max Møller Rasmussen 03 Nov '00

03 Nov '00

If you want to you could just use Apache as a front end server serving php pages, and as a proxy to Zope. That way you can have the best of both worlds. But I would recommend using Zope, as you will have far greater possibilities for re-use of your code. Regards Max M -----Original Message----- From: Vincent - D. Ertner [mailto:vincent@eec.de] Sent: Friday, November 03, 2000 2:44 AM To: Zope Subject: [Zope] PHP and Zope Hi Zopers, I learned PHP and now discovered Zope. So I'd like to put a simple question: What's the best way to incorporate the advantages of PHP and Zope? Should I focus on one and forget the other? Okay, these are two questions and I honestly doubt that anyone would suggest to drop Zope ;-))) Anyway: Please gimme some starting hints on my way to the perfect content managed web site! Thanx in advance! Cheers, Vince ''' ô¿ô - _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0