March 2000 - Zope - Zope lists

reading from file in ZODB
by Terry Kerr 01 Mar '00

01 Mar '00

Hi, Is there a way to read from a binary file stored in the ZODB...eg, ob.read(x) to read x bytes?? terry -- Terry Kerr (terry(a)adroitnet.com.au) Adroit Internet Solutions Pty Ltd (www.adroitnet.com.au) (03) 9888 8522 0414 938 124

1 0

RE: Different Login Screens for Management and User?
by Stefan Langerman 01 Mar '00

01 Mar '00

I was working on the same kind of problem (see my earlier post today), and I think I found some solution, thanks to the many hints here and in the zope-ptk list. It's actually quite simple. The trick is to play with exceptions. In your standard_html_header, include something like (replace 'Member' with the role you want): <dtml-unless "AUTHENTICATED_USER.has_role('Member')"> <dtml-raise type="Please Login!"> <p>Please login before entering!<p> </dtml-raise> </dtml-unless> When the error is raised, the standard_error_message is called, so from there, you can do some more tests and go to the appropriate login page. I have not fully tested this yet, but I think it should work. I think if you put type=Unauthorized in the dtml-raise tag, you should get the usual HTML login instead of the error. Anyone has a better (more elegant/original/creative) solution? -- Stefan. > James W. Howe jwh(a)allencreek.com wrote: > > In creating my web site, I'm planning on limiting access to certain > portions of the site to registered users. When a user attempts to "view" > these areas, if they haven't logged in, I want to display a login page and > get their name and password. I also want to provide a way for the web site > management team to login and perform management activities. I would like > to present a different login screen (maybe just a basic auth dialog) to > allow access to management functions. I've been playing around a little > with GUF, but I haven't found a way to present two different login screens > based on the type of page being accessed. Is this type of functionality > possible with Zope? Would the LoginManager allow for this sort of thing? > > Thanks. > > James W. Howe mailto:jwh@allencreek.com > Allen Creek Software, Inc. pgpkey: http://ic.net/~jwh/pgpkey.html > Ann Arbor, MI 48103 >

1 0

Necraft Survey Zope Sites
by J. Atwood 01 Mar '00

01 Mar '00

First time I have seen this list... http://www.netcraft.com/Survey/Reports/0002/byserver/Zope/ and click on "com" or go to.. http://www.netcraft.com/Survey/Reports/0002/byserver/Zope/com.html A few surprises.. http://www.toyota-motorsports.com/ http://homemortgageusa.com/ And a few not even there?? JMA

3 2

Multiple Processes
by David Binger 01 Mar '00

01 Mar '00

What prevents id collisions in Zope? It looks like the the ObjectManager.py code checks to see if the id is taken, and then it reserves the id. Is there a danger that 2 processes/threads (z2.py -t 4?) could both check and reserve the same id? Is there something in Zope that prevents this (improbable, but perhaps possible) problem? Is there certain way to find an object id that is not taken?

3 2

unhandled connect event
by Taylor 01 Mar '00

01 Mar '00

(short time reader, first time poster) So I've set up my zope installation to test it out for use as the intranet server and content management system for my company. One of the features that I intend to use heavily is the FTP access, the main users of the system will be designers and their clients, so I want to set up an interface that works with existing tools <DTML-rah-rah yeah>. However everytime I connect with ftp (used Dreamweaver's FTP client as well as EMACS) I get an "PROBLEM(100) ZServer unhandled connect event" error from Zope. I've just upgraded to 2.1.4 which solved the crashing problem for the most part. My question is what is an "unhandled connect event", can I make a connect event be handled? Is there a howto, a document or a previous thread on this subject? Help, I want to be a fanatic! -- grumpy futurist taylor(a)taylor.org

1 0

Siteaccess problems
by Stefan Langerman 01 Mar '00

01 Mar '00

Hi, I've had a couple of problems with SiteAccess. The first one appeared when I tried the sample code from the doc: <dtml-unless "REQUEST.path[0][:6]=='manage'"> ... This Access Rule is placed in some directory foo. If I try to access http://my.site.org/foo I get: Error Type: IndexError Error Value: list index out of range If I try http://my.site.org/foo/bar, there is no such problem. The second problem is the following: I am trying to set up siteaccess so that it checks for user authentification, and redirects to a login screen if necessary. That way, I am sure all authentification is cookie-based, and I don't get the ugly error page in case of failure. So I tried: <dtml-unless "REQUEST.path[0][:6]=='manage'"> <dtml-unless "AUTHENTICATED_USER.has_role('Member')"> redirect to login screen </dtml-unless> </dtml-unless> But then I get: Error Type: KeyError Error Value: AUTHENTICATED_USER Which is weird, because if I try to render the method normally, it works. I tried replacing <dtml-unless "AUTHENTICATED_USER.has_role('Member')"> by <dtml-unless "AUTHENTICATED_USER"> And I get the same result. Last thing, I would like to be able to set the path to the login screen ('foo/login'). What is the most elegant way of doing that? I seem to also have permission problems when accessing methods like absolute_url() in the Access Rule. This might be related to the previous problem. Thanks a lot, Stefan.

2 1

I got it!
by glyph＠twistedmatrix.com 01 Mar '00

01 Mar '00

After much struggling ... the docs REALLY REALLY must be improved ... I finally understood what zope was for yesterday, in a spectactular epiphany! After installing PyGreSQL and mucking about with some dtml-in statements, I am hooked. Addicted. Zope is The Only Way To Web... (I think I'll be keeping my personal website outside of it, but mainly because I *want* my personal website to be crufty and poorly designed... that's what makes it personal ^_^) However, this new rush of excitement was tempered by the realization that I probably couldn't use it for the distributed authoring purposes that I had hoped I could. Security is a HUGE concern for me: students from college campuses log in to my server, and many of them are on networks where sniffers are running. This is not a random paranoid raving, either: our server has been attacked three times in the past six months. The attacks succeeded the first time, but we have since wised up and insisted that everyone connect over SSH only, no telnet, and Debian keeps us up-to-date on security fixes. A few questions: * Is there any way to secure the authentication process that Zope has, on the wire? * Can this be done internally to ZServer? If not, I have had some problems connecting over the Apache thing to the management interface. I hope that this is resolvable. (Debian Apache/Zope users?) Anyway, now that I know what's going on ... zope is AMAZING. I can't believe how easy it is to set up complex database-oriented websites. -- ______ __ __ _____ _ _ | ____ | \_/ |_____] |_____| |_____| |_____ | | | | @ t w i s t e d m a t r i x . c o m http://www.twistedmatrix.com/~glyph/

2 5