April 2001 - Zope - Zope lists

ZClass' Method permissions
by Oleg Broytmann 04 Apr '01

04 Apr '01

Hello! Can anyone explain the mechanism under "Define Permissions" tab on ZClasses? I do not understand the screen. Why can I set "Delete Objects" permisson to "Add Site Roots"? Why do I need it? What's worse, I don't understand this explanation: "For ZClass methods, only permissions that are defined for the ZClass are permitted. " I want to protect a DTML Method in a ZClass so that it won't be accessible by Anonimous. Example: I want to protect importRSS method of RSS Channel product. Currently, anyone who discovered the name of the object can call importRSS with any URL, thus cracking my site. And it is easy to discover these objects as any page on the site has view_source link. Oleg. ---- Oleg Broytmann http://www.zope.org/Members/phd/ phd(a)phd.pp.ru Programmers don't die, they just GOSUB without RETURN.

1 0

Questions on roles and permissions
by Fernstrom, Christer 04 Apr '01

04 Apr '01

Some questions on roles and permissions: 1) I want the same *authenticated user* to have different permissions at different parts of my server. Are local roles the best way to handle this? 2) How can I get hold of the local user roles? <dtml-var expr="AUTHENTICATED_USER.getRoles()"> only returns the global role associated with the authenticated user. 3) Is there a way to retreive the permissions that the authenticated user has on a given object? 4) I have observed that when a user has been authenticated at a deeper level in the folder hierarchy, then <dtml-var expr="AUTHENTICATED_USER.getUserName()"> on a higher level yields 'Anonymous User'. Bug or normal behaviour? I'm building my first real Zope application, so please bear with me... christer

1 0

User Database and ZOPE Security
by David Woods 04 Apr '01

04 Apr '01

Hello, I have a site which uses a SQL-Server database to maintain usernames and passwords. This allows me to create pretty user interfaces to allow Teaching Assistants to create user accounts without having to learn ZOPE and which allows me a lot more control over the accounts they create. It also allows me to have greater control over the interface students use for logging in to our site. The students who then log in using these accounts are considered anonymous users by ZOPE. I also have some videos on my site that, because of confidentiality issues, must be protected from unauthorized access. I use ZOPE security for this. When the students need to access the videos, they are left logging in twice. My question is this: Is there a way to avoid having to have two separate sets of usernames and passwords? Specifically, is there a way to get ZOPE security to validate against my SQL-Server database instead of its internal acl-users database in allowing access to the videos? Are there utilities to accomplish this? Any suggestions? Thanks, David Woods University of Wisconsin, Madison

2 1

Zope hangs from time to time
by george.lively＠ccpace.com 04 Apr '01

04 Apr '01

I have Zope 2.2.2 on Windows NT with ProxyPass to a Linux box where the Apache web server is. We use the Zope Connector to connect to Interbase DB also sitting on NT. From time to time (a few times a day), Zope hangs. It doesn't die, but it will hang for a few minutes at which time no one can connect to the site. Then after about 5-10 minutes, it will restore itself, and everything will be ok. If we try to connect directly to the Apache web server (running off 8080), we connect to Apache very quickly. When we look at the NT box during this time of trouble, mem usage and cpu time look normal. But here's a twist that perhaps is interesting, perhaps not. Could be a coincidence. But anyhow, we have been running IPCheck for a little over a week - having that little application hit our server every 60 seconds to see if it's still responding. When the server does not respond, a little alarm goes off. The log from ipcheck shows that some of the non-responsive times are at times when no one is hitting the server (except IPCheck). When I've been around to catch the alarm recently, I've immediately logged into /manage on Zope. Each time I've done this, Zope stops hanging. And it stops hanging immediately. Any thoughts? Is there anything I can do to ensure that I don't have to log into /manage to stop the hanging? Thanks.

2 1

Re: [ZCommerce], etc.
by Spicklemire, Jerry 04 Apr '01

04 Apr '01

Walter said: > Amazon has taught us all a lot about how eCommerce sites can adapt > dynamically to user preferences and choices in such a way as to sell more > stuff WHILE building stronger customer relationships Maybe it isn't obvious while wrestling with the next major Content Management contract that personalizatin a la Amazon is relevant, but consider the possibilities. Even if the goal of CBSNewYork.com isn't selling more CBSs, or NewYorks, there can still be aspects of personalization to deploy. Wouldn't the frequent flyer be tickled if the site noticed after a few visits that VisitorX always hits the weather page, and offers to add a link to save a few clicks? Making this sort of thing painless to implement will get everyone closer to the goal. Later, Jerry S.

1 0

A quick poll about the zope start page
by Philippe Jadin 04 Apr '01

04 Apr '01

Hello, We all know that the most important thing when we try someting is the first "overview" we have about it. So came the idea of this little poll : "What would you* like to see on the zope welcome screen after installation? * as a newbie. * as an experienced zopist. " Any idea welcome, there will most probably someone listening at DC (N'est-ce pas Chris M? ;-) Philippe

3 2

zope 231 crashing on start
by Jason Cunliffe 04 Apr '01

04 Apr '01

hm...help please. Been using Zope231 happily on Win98se for many days. Suddenly this evening it quits rights after startup. /index_html displays but it quits with following error message in the start.bat window: Any ideas? - Jason .... asynchat.async_chat.handle_error (self) File "D:\Program Files\Zsite231\ZServer\medusa\asyncore.py", line 365, in hand le_error self.close() File "D:\Program Files\Zsite231\ZServer\HTTPServer.py", line 364, in close p.more() # free up resources held by producer File "D:\Program Files\Zsite231\ZServer\Producers.py", line 108, in more getattr(self.logger, self.method)(self.bytes) File "D:\Program Files\Zsite231\ZServer\medusa\http_server.py", line 274, in l og ' - - [%s] "%s" %d %d "%s" "%s"\n' % ( File "D:\Program Files\Zsite231\ZServer\medusa\logger.py", line 247, in log self.logger.log ('%s:%s' % (ip, message)) File "D:\Program Files\Zsite231\ZServer\medusa\logger.py", line 77, in log self.write (message) File "D:\Program Files\Zsite231\ZServer\medusa\logger.py", line 53, in write self.maybe_flush() File "D:\Program Files\Zsite231\ZServer\medusa\logger.py", line 65, in maybe_f lush self.file.flush() IOError: [Errno 9] Bad file descriptor D:\Program Files\Zsite231>

1 0

Re: [Zope] zSQl and changing connection ids?
by Dieter Maurer 04 Apr '01

04 Apr '01

David Hassalevris writes: > How much work would be involved in creating an "alternative" zSQL method > (product?) that would accept the "connection id" as a parameter? This > seems like such a natural. I think, I would need an hour or two. You may have a look at URL:http://www.dieter.handshake.de/pyprojects/zope/CCSQLMethod.html It extends Z SQL methods by application controllable caches. You want something simpler, but you can get a feeling for the amount of work needed to extend a product. Dieter

2 1

[newbie] key error
by Tres Seaver 04 Apr '01

04 Apr '01

"Jason Wehmhoener" <webmaster(a)saturn.deanza.fhda.edu> wrote: > I'm attempting to create a custom skin for a CMF 1.0beta site. > > I'm getting a key error with an image object whose id is "about_btn". > The full contents of the DTML method is this: > > <dtml-var about_btn> > > I've placed the image object in a folder called "images". > > What am I doing wrong? First, you'll get better answers for skins-related questions in the "zope-cmf mailing list":mailto:zope-cmf@zope.org Second, the 'images' folder probably isn't in the "skin path" of the skin you have selected. See Jeffrey Shell's How-to on using CMF skins: http://cmf.zope.org/doc/devel/writing_skins Tres. -- =============================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

Accessing DTML's this() from PythonScript
by Jérôme Loisel 03 Apr '01

03 Apr '01

Hi! My site has an admin menu. That was originally a DTML Method which had become long, complex and hard to maintain. So I re-wrote it as a Python Script. But I now have an additional problem. When my DTML Method is called from /folder/document.html/method, this() refers to the document. But in PythonScript, context and context.this() refer to folder/ instead. Does anyone know how to have access to the document.html object instead? Thanks in advance. I can supply sample code if I am being unclear. Cheers, Jérôme Loisel -- Jérôme Loisel, étudiant et webmestre Lévinux: GNU/Linux pour la communauté http://www.levinux.org/

2 1