April 2001 - Zope - Zope lists

user login via form (calling authenticate)
by rob.sheppard＠btinternet.com 03 Apr '01

03 Apr '01

I've been trying to use the authenticate(password, REQUEST) method in User.py from a login form (as described in the Beehive "Users, Roles and Permissions" document). I want to have a members login like the one on Zope.org. In a folder called "Members" I've created an acl_users folder with: a) one test user, b) a simple DTML doc containing a form with 2 fields (Name and Password), and c) a DTML doc which matches the form's action containing: <dtml-if "acl_users.getUser(REQUEST.form ['Name']).authenticate(REQUEST.form ['Password'],REQUEST)"> password correct. <dtml-else> Password incorrect. </dtml-if> When I try to login using the form as the test user in /Members/acl_users, Zope brings up its own login dialog. If I enter the test user from /Members/acl_users into Zope's login dialog, it tries 3 times then reports: "Zope Error Zope has encountered an error while publishing this resource. Unauthorized You are not authorized to access getUser. " and the last line in the error comment reads: File /home/sites/site6/users/london/Zope-2.2.2- src/lib/python/AccessControl/ZopeSecurityPolicy.py, line 159, in validate Unauthorized: authenticate If I enter my own user/password at Zope's dialog box (i.e. valid in the toplevel /acl_users, owner/manager roles), it tries 3 times and reports: "Zope Error Zope has encountered an error while publishing this resource. Unauthorized Sorry, a Zope error occurred " and the last line in the error comment reads: File /home/sites/site6/users/london/Zope-2.2.2- src/lib/python/AccessControl/ZopeSecurityPolicy.py, line 159, in validate Unauthorized: authenticate OK, I figured that its an access problem with the User.py methods, but I've tried setting the proxy roles of the form and the action document to Manager, and setting the permissions on /Members/acl_users to anonymous but still get the same problem. Zope version is 2.2.2, Python 1.5.2. What have I missed? How do I give an anonymous user access to getUser? -- Rob PS I've searched the mail archives at NIP (found a couple of people with the similar problem but no answers) and the bug collector (nothing).

1 0

[Q] Book problems with early examples
by Carl David 03 Apr '01

03 Apr '01

I wrote concerning book examples, and was asked to clarify what was going on. Here is "navigation" which exists in root: <dtml-if expr="_.len(PARENTS) > 1"> <h2><dtml-var title_or_id>Section</h2> <a href="..">Return to parent</a><br> </dtml-if> <ul> <dtml-in expr="objectValues('Folder')"> <li><a href="&dtml-absolute_url;"> <dtml-var title_or_id></a> <br></li></dtml-in> </ul> and here is index_html from /ChemAdm/FallSched: <dtml-var standard_html_header> <h1>This is the Fall Master Schedule</h1> <hr>Choose from the above days of the week to see<hr> <dtml-tree> <dtml-var getId> </dtml-tree> <hr> <p>This is the <dtml-var id> Document in the FallSched folder.</p> <dtml-var standard_html_footer> To the best of my knowledge there are no typos here, and yet ... Thanks for any help Carl David

2 1

Re: [Zope] RESPONSE.redirect + TARGET
by Dieter Maurer 03 Apr '01

03 Apr '01

Diego Rodrigo Neufert writes: > But it's on a framed page, and when I do the redirect I need to kill all = > de=20 > frames to show the redirected page.... I do not know a way that a Web server can do that directly. But a Web server may return a page containing a Java Script that reloads the complete frame set. Of course, this requires Java Script to be enabled. Dieter

1 0

Re: [Zope] Zope vs other Web Languages.
by Michael R. Bernstein 03 Apr '01

03 Apr '01

Jens Benecke wrote: > > On Mon, Apr 02, 2001 at 08:00:41PM -0700, Michael R. Bernstein wrote: > > Steven Grimes wrote: > > > ... With Zope, I can build (for example) a fairly sophisticated Intranet > > for a company in a couple of days, without breaking into a sweat. This > > Intranet will include personal folders for the users, a bug/ticket > > tracker, industry news, departmental pages, and any of a dozen other > > goodies like discussion forums and a collaborative documentation system. > > Just a small question in between: You can build this site because all the > required functions are available as Zope modules (or "products") and you > just need to plug them together, right? How would Zope cope if you did > _not_ have these ready-made modules or if they didn't fit your needs? Mmm. I can build this site that *quickly* because ceratin functionality is available as Products, or part of the Zope core functionality. Authentication, security, and delegation are built in, for example. > What I mean is this: In PHP you _can_ add PHPLIB, which is a class library > does user management, authentication, sessions, forms with automatic error > checking (both Javascript and server-side), database-independant SQL > connections and much more for you. Soon there will be PEAR, which is > comparable to CPAN for Perl and will offer all kinds of modules. > > But if you need to do your _own_ applets (e.g. plug in something like a > client-side Javascript calendar that connects to a server-side SQL-DB > before displaying itself and when acted upon pre-fills some input fields - > just an example), how difficult would that be? Client side javascript (Bleh!). :-) I've built several small applications from scratch, such as an FAQ manager, and I'm working on a couple of bigger ones now which I'll release as Zope Products. > I know the OOP model fairly well, so I understand you can extend Zope's > classes to an extent to fit your needs. However ATM I'm a little worried > about Zope when I see people posting 20-line DTML code just to squeeze a > string through a regexp. (Or five-line Python - Perl, PHP, etc. can do it > in one.) Python emphasizes legibility over terseness. It's a trade off that won't appeal to some, I'm sure. I wouldn't suggest using DTML for your applications business logic, anyway. Use Python for that. DTML is very well suited to presentation logic tasks. This also helps enforce separation of content/presentation/logic. Again, a trade off that may not appeal to some. > > Then I can refine it over another couple of days. By any sane measure, > > this is far more cost effective for a company than paying two or more > > programmers to build something equivalent in a couple of months, just to > > save a grand on hardware. > > That's precisely why I started looking at Zope. I'm not interested in a Web > GUI, in dividing content and design (We're a team of two developers, we can > organize ourselves without CVS like functions) or such. What I'm interested > in is making my site > > - easy to extend later (with well sorted out OOP, this should be > manageable) True. > - easy to manage even if it gets bigger (not having to worry about things > like "where do I put this new feature") Zope's pretty good at that, IMO. > - and secure, of course. (ie. built-in filtering for FORM variables and > such things would be nice. PHP does this with addslashes() and the like). Well, Zope does automatic casting of variables by using a simple naming convention in your forms (ie. <input name="size:int">) the ':int' is stripped off the actual variable name when you want to access the value. > Last but not least: Is there a Zope intro for people like me who already > _have_ a couple years of Web development with PHP and other languages and > don't need things like "insert common HTML header/footer" presented as > Zope's primary features? Have you checked out the New Riders Zope Book: http://www.zope.org/Members/michel/ZB Or this one: http://www.handshake.de/~dieter/pyprojects/zope/book/chap1.html http://www.handshake.de/~dieter/pyprojects/zope/book/chap2.html http://www.handshake.de/~dieter/pyprojects/zope/book/chap3.html HTH, Michael Bernstein.

1 0

Re: [Zope] Searching a FieldIndex for prefix or OR
by Dieter Maurer 03 Apr '01

03 Apr '01

Randall F. Kern writes: > Is it possible to search a catalog on a field index for either a given > prefix, or any of a list of values? "Prefix" means your fields contain strings... You could try to emulate such searches through range searches. In usual cases (not all, I agree), PREFIX(x) == p is similar to "p <= x <= (p + chr(255)*n)" with "n" sufficiently large (usually "1" will be enough). A search against a list of values is supported directly. See the catalog section of URL:http://www.dieter.handshake.de/pyprojects/zope/book/chap3.html Dieter

1 0

Re: [Zope] Passing Variable to multiple objects within a page
by Oliver Bleutgen 03 Apr '01

03 Apr '01

> I want to be able to have a one page that for example has a table (a > search > interface made from a SQL method) and the chart (GDChart) of related > information. > I know how to pass the variable to one of these objects from a hyperlink > on > previous page however I want to pass the variable to both objects on this > pass. Try something like <dtml-var "my_method(myvariable='my_value')> and variations. For questions like these take a look at the valuable searchable archieves at http://zope.nipltd.com/public/lists.html because it's clearly something nearly every zopista hits against in his learning process. For instance searching for passing AND values AND method brought a heap of answers to this question. The answers there will also give further valuable information about some things also important to know in this context. cheers, oliver

1 0

Re: [Zope] Add document and change properties at once?
by Dieter Maurer 03 Apr '01

03 Apr '01

Paul Winkler writes: > Is there a way to make a form that creates a DTML document and > creates several properties of that document immediately? Sure: <form action="customAddDocument" ....> .... </form> customAddDocument: <dtml-call "manage_addDocument(id,title)">  <dtml-with "_.getitem(id)"> <dtml-call "manage_addProperty(...)"> .... </dtml-with> More information: embedded Zope online help -> API-Reference -> PropertyManager, ObjectManager, DTMLDocument. Dieter

1 0

RE: [Zope] Sudden authentication problem
by Dieter Maurer 03 Apr '01

03 Apr '01

Dunigan, Craig writes: > I guess I meant how do you know that "getpath" is unlikely to have caused > the exception? "getpath" does not return the object, just its path. This path has been remembered when the object was cataloged. Thus, accessing it does not require any object access. You would get an "Unauthorized", if the user has no permission to call the catalogs "getpath". But that would be a big configuration bug, not very probable... Dieter

1 0

Passing Variable to multiple objects within a page
by Rob Senk 03 Apr '01

03 Apr '01

I want to be able to have a one page that for example has a table (a search interface made from a SQL method) and the chart (GDChart) of related information. I know how to pass the variable to one of these objects from a hyperlink on previous page however I want to pass the variable to both objects on this pass. i.e. This works for one object <a href="<dtml-var r-qty_contacts url>?Company.Name=<dtml-var name>">Number of Contacts in Company</a><BR> r-qty_contacts is a search interface based on a search method setup with a parameter of Company.Name. I pass the name to r-qty_contacts from the previous page. Really I would like to pass Company.Name on to multiple objects on a dtml document. Any wisdom anyone can provide would be most appreciated. Thanks Rob

1 0

Users...
by After Dark 03 Apr '01

03 Apr '01

Someone knows how to insert a user in acl_users.manager_users?? Without using the Zope Manager interface, of course, I want to make a site that insert users... with permissions and everything else... But I can`t send parameters to it. Example: <dtml-call expr="acl_users.manage_users(name=login, password=senha, confirm=senha1, submit='Add')"> Thanks. ________________________________________________ Don't E-Mail, ZipMail! http://www.zipmail.com/

1 0