February 2001 - Zope

Re: [Zope] How to create a folder for a given user ?
by Dieter Maurer 25 Feb '01

25 Feb '01

Emmanuel Viennet writes: > > Apologies for these simples questions... > > What is the correct procedure to follow in order > to create a Folder owned by a given user > (ie I want to create the equivalent of a unix account > with a home directory). I fear, the new Zope security model will not support this. Afaik, the only method to change ownership is "takeOwnership". > By the way: in the (near) future I'd like > to automate this task (using XML-RPC or some other > scripting technique). > Where can I find a documentation of the API > (I didn't find informations about user creation, > ownership change etc in the Zope Book nor in > the QuickStart help). The most relevant object is the UserFolder (defined in "AccessControl.User"), usually called "acl_users". You can look into the sources or use my DocFinder product. Dieter

2 1

Reformatting a date string?
by Miro Jurisic 25 Feb '01

25 Feb '01

I'm just starting to play around with Zope, and I can't figure out how to take a string containing a date/time (I'm getting it from an SQL query) and print it in a different date/time format in DTML. Suggestions? meeroh -- meeroh(a)mit.edu | <http://meeroh.mit.edu/meeroh/> | MIT I/S Mac developer | KB1FMP "Look up at the sky. Ask yourselves: Is it yes or no? Has the sheep eaten the flower? And you will see how everything changes..." -- Antoine de Saint-Exupery, "The Little Prince"

1 0

Re: [Zope] reinstall
by Dieter Maurer 25 Feb '01

25 Feb '01

Patrick writes: > I am running FreeBsd and I did a make install to upgrade my zope from 2.2 to > 2.3. My validation is done by apache using the <directory> directive of the cgi- > bin directory but it does not seem to work. I keep getting the error below. Can > anyone give me any ideas on how to set it up again probably from scratch? > Zope Error > Zope has encountered an error while publishing this resource. > > Error Type: IndexError > Error Value: list index out of range > .... > File /usr/local/www/Zope/lib/python/AccessControl/User.py, line 505, in > validate > (Object: RoleManager) > IndexError: (see above) It is possible that the upgrade somehow went wrong? In my Zope 2.3 installation, line 505 of "User.py" is inside a comment and cannot raise any exceptions. Dieter

1 0

Accessing objects given an URL (was: [Zope] FW: Reading properties from nested objects.)
by Dieter Maurer 25 Feb '01

25 Feb '01

Michael Van Cleave writes: > ... > I cannot figure out how to use > the stored absolute url to read elements off the remote object. If the URL describes a physical path, you can use "restrictedTraverse" (-> Zope API -> ObjectManagerItem). If you are using virtual hosting and the URL describes a logical (i.e. virtual) path, then "REQUEST.resolve_url" is the correct method. Dieter

1 0

multipart pushing
by Ragnar Beer 25 Feb '01

25 Feb '01

Howdy Zopistas! I'd like to implement a chat function using the multipart content type and I wonder if that is possible with Zope. My idea is to write a python script that pushes the content of a database until e.g. the stop button is pressed in the Browser. But how would the script know that it's supposed to stop? And would such a longtime connection completely occupy one Zope thread so that I'd have to increase the number of threads? Ragnar

6 7

Bug in dtml-tree (with patch)
by Sebastien Nameche 25 Feb '01

25 Feb '01

Hi there, There is a bug into "lib/python/TreeDisplay/TreeTag.py" that prevents the SQL example that can be found here : http://www.zope.org/Members/anthony/tree-coding-tricks from running with MySQL. The error that is returned by Zope is : -- Error Type: TypeError Error Value: call of non-function (type long int) -- It's because MySQLDA returns a longint type for int columns of a MySQL table. I have made a little patch that corrects the problem. It's available here : http://www.virtual-net.fr/zope/TreeTag-patch.py.gz Since I am very surprised nobody found this bug before, I think it may comes from the version of one og the component I am using. For information, these are the versions of all the softwares I use : Zope: 2.2.5 MySQL: 3.22.32 Distutils: 1.0.1 MySQL-python: 0.3.3 ZMySQLDA: 2.0.4 -- S. Namèche (snameche(a)virtual-net.fr) Société Virtual Net Immeuble Gallium Tél. +33 2 2321 0630 80, avenue des Buttes de Coësmes Fax. +33 2 9938 1685 35700 Rennes - France Mob. +33 6 1670 2998 -- "It's easy to stop making mistakes, just stop having ideas." -- Someone in the Zope mailing list

1 0

Security policies and roles problem
by Kenneth Chin 25 Feb '01

25 Feb '01

Dear All, I'm using Zope 2.2.5 on Linux and I have a problem of setting security policies and roles. I have the following structure: / |--acl_users | |--user0 | |--user1 | |--user2 |--user1 | |--acl_users | |--pygresql_db_connection | |--index_html |--user2 |--acl_users |--index_html In the root folder (/), I defined a user defined role 'Admin'. For each user, I set the following roles: 'user0' is 'Manager'; 'user1' is 'Admin'; 'user2' is 'Operator'. I intend to have 'user0' as the administrator of the entire site, so Manager role should be appropriate. Both 'user1' and 'user2' are local managers, and they should be defined in acl_users folders in the respective folders. But I need each of them to have access to each other's folders, hence I have to defined them in a higher structure. I also enabled ALL permissions for 'Admin' in 'user1' and 'Operator' in 'user2' folders, but enabled only Access contents information, View and View management screen for both 'Admin' and 'Operator' in root so that each user can view the root but can make changes only in their respective folders. The problem comes when I log in as either 'user1' or 'user2'. For example, as 'user1', I add a new object acl_users in /user1. acl_users is created successfully, but when I click on it, the Contents tab is not visible, ie. I cannot manage users. I can set permissions, take over ownerships, but cannot manage users. Similarly, I can create and delete PyGreSQL database connection in /user1, but the Properties tab of PyGreSQL is not visible. 'user1' can have access to acl_users/Contents and PyGreSQL/Properties ONLY when I reset the role to Manager in /acl_users. I need 'user1' to have Manager-equivalent permissions ONLY in user1 folder, but have limited access to other folders. It seems to be that acl_users and PyGreSQL grant the user full access ONLY when they are Manager, regardless of the permissions enabled in their user defined roles. Is this a bug or a feature, or have I misunderstood something here. This scenario is like the one described in the Zope Book Chapter 6: Security --- Scientist and SalesPerson. I would like Scientist or user1 and SalesPerson or user2 to have full control in their folders WITHOUT being Manager so that the administrator or user0 can be Manager. Is there a way round this? Thanks! Regards, Kenneth

1 0

calling Zope objects from php
by Guy Redwood 25 Feb '01

25 Feb '01

Hi Just wanted to share this with you. We use the phorum bulletin board in php and Zope for the rest of our site (truly smitten with Zope). I've just realised how to add the menus and banner adverts (built in Zope) into the headers and footers of the bulletin board php scripts. I originally thought of embedding php into Zope... but it's easier to call zope from php! Use the 'include' function to call Zope dtml methods through http. Really easy.... <?php include ("http://www.siberianhuskyclub.com/banners/show_banner"); ?> This just places the code for our banner adverts in the right place. Guy http://www.siberianhuskyclub.com

1 0

Re: [Zope] Zope+Apache+ProxyPass
by Ragnar Beer 25 Feb '01

25 Feb '01

>I'm confused by a note in your caching howto about managing Zope using >an SSL connection: > > Apache+ZServer+SSL From the author of this How-To I also got a very > good tip for what to do if you want to manage your website via https > to avoid sending your unencrypted password over the net: Reverse the > setup he describes, i.e. instead of creating a folder "ssl" and > making the base of the site root "https://..." create a folder > "http" and make the base of the site root "http://..." > >Isn't the username/password still sent in clear text (mime-encoded) as >soon as you attempt to manage anything in the /http folder because of >the unencrytped connection (http://...) specified by the siteroot? > >-kevin Of course you need to use the https protocol! The advantage of the reversed setup is that if you configure it that way then the "natural" way to access the site can be https and http is the special case and not the other way round. Ragnar

1 0

Re: [Zope] multipart pushing
by Philippe J 25 Feb '01

25 Feb '01

The idea come from the book "web application development with php4.0" by Ratschiller and Gerken. The web site is http://www.phpwizard.net/ The idea was to build an irc client. You may ask them wether it's a foolproof solution or not. Beside the fact that some browsers may have a timeout setting, I do not see why it wouldn't work. Philippe > Cool idea! I never heard about it. Do you know whether that works > with all kinds of browsers (especially older versions)? > > Ragnar Beer

1 0