September 2001 - Zope

authentication problem
by Mitchell L Model 09 Sep '01

09 Sep '01

I would greatly appreciate it if people knowledgeable about the Zope user authentication process would consider helping me with a problem even though the context for the problem is extremely limited (Omniweb 10.0.5 on Mac OS X 10.0.4), because the answer will help me understand an important part of Zope in addition to helping me get past my problem and in fact, I think the answer probably has to do with the mechanism by which web browsers communicate user authorization to server-side programs generally, independent of Omniweb or Zope, so many people might find this answer interesting. I couldn't use Zope at all on Omniweb before the just released version 10.0.5, because although I could successfully connect to a specific port included in the URL, Omniweb was not using that port for the frames within the page. That seems to have been fixed with the newest version, but I still have a problem: I can successfully log in to Zope, but all attempts to use ZMI get redirected to View pages instead. I have traced through the code in ZPublisher/BaseRequest.py and ZServer/PubCore/ZServerPublisher.py to determine that the request's _auth is coming in as None in Omniweb, but a more meaningful value in other browsers. However, I'm having trouble finding where that information is coming from (the indirections in the Python code make it tricky to catch everything stepping through the code in pdb), and I've run out of time. I would GREATLY appreciate an explanation of where the authorization information is coming from. I don't see the currently logged in user in my CGI environment, including cookies. How does any server-side program get the user authorization information from the browser after the user has logged in and gone to a different frame or window? -- --- Mitchell

7 7

Complete dtml-var Reference?
by Dan Shafer 09 Sep '01

09 Sep '01

Is there a list anywhere of all the built-in dtml-vars? I have searched the How-Tos, the Tips, and the site to no avail. I'm sure this exists but I'm darned if I can find it. Without such a reference, coding dtml into your pages seems to be kind of a hit-and-miss situation. -- Hire a world-class ghostwriter to create your entire information product line! Dan Shafer, author of 57 books (and counting) - Ghostwriting Unlimited, Inc. dan(a)gui.com - 831-643-0590 (V) - 831-401-2531 (F) http://www.gui.com

2 1

Giving Zope more profile in Oz (ie Australia)
by Richard Volpato 09 Sep '01

09 Sep '01

I am looking for Australian Zope developers and would also like to get an estimate of the current state of the Zope developer base in Australia. I have gone to the new Australian Users group site OzZope.org but it's too new to give a good indication. A reasonably large organisation in Australia is currently exploring whether to fund a major Zope based application. It is probably the largest such Zope project in Australia. A prototype Zope application has been demonstrated and has revealed the power of Zope. While key business units within this organisation are very keen on Zope, others are skeptical about the spread and depth of Zope skills in Australia. Those who have invested in a 'one-size fits all' platform based on Lotus Notes need more convincing. The failure of the existing (mostly Lotus) platforms in this organisation to deal with the complexities of the content management problem in the first place led to a Zope based solution appearing so compelling. Other, smaller Zope based applications in other organisations, are also generating similar blends of fascination and skepticism. I need more examples of Australian applications. It will help me, and presumably other organisations, if developers in Australia, would go to the recently established OzZope.org and register. In this way, those interested in exploring Zope solutions can make contact with a developer base. If you are keen to offer services for Zope related work, please contact me. The more we can show that a developer community exists in Australia, the more likely I can convince corporate skeptics that Zope is part of something vibrant, growing and here for the long term. And, of course, if I can assist in getting this larger project running, then further spin off projects will emerge which in turn can fund more Zope development. Looking forward to hearing from you - and see you over at OzZope.org. Richard Volpato

1 0

Re: [Zope] External script generates xml - how to turn it into an xml file object
by Andy Bulka 08 Sep '01

08 Sep '01

> > I have an external script that generates an xml string - how do I > > turn that xml text into an zope xml file object ? > What do you mean by an "zope xml file object"? Yes, a file object with "content_type='text/xml'" > it should make no problems at all when the "file" parameter > of "manage_addFile" is a string containing "<" or ">". Ok, that's promising. All I have to do is get the xml string into zope - and that's the problem. The trouble is, xml returned by external scripts doesn't arrive successfully into zope. It seems that any tags in the string returned by my external python method are stripped out by zope!! Something to do with xml-rpc, no doubt? e.g the following external method def ParseDummy2(): return 'Hi <fred>from the external method</fred>' will actually return 'Hi from the external method' (note the <fred> tags are missing.) Even if my external method encodes the < and > symbols, using, say s = sub('<','<',s) s = sub('>','>',s) there is no easy way to un-substitute inside zope since the re module and sub function is not available inside zope (security etc. issues). Further, there are some some occurences of '<' in my string that I want to keep, since these occurences are actual valid content (as opposed to being part of a tag). Perhaps, ideally there would be a pair of encode/decode methods available to both python and zope that would deeply encode/decode the xml string returned by my external method so that it bypasses all these problems? -Andy

1 0

A Method To My Madness?
by Ben Ocean 08 Sep '01

08 Sep '01

Hi; I'm trying to implement a textbook example using a DTML Method with a <dtml-in> tag: <ul> <dtml-in expr="objectValues('DTML Document')"> <li><a href="&dtml-absolute_url;"><dtml-var title_or_id></a></li><br> </dtml-in> </ul> Pretty straight-forward stuff, but strangely it works within DTML Methods but *not* within DTML Documents. Other DTML Methods work just fine. What am I doing wrong? TIA, BenO

4 5

Re: External script generates xml - how to turn it into an xml file object
by Dieter Maurer 08 Sep '01

08 Sep '01

abulka(a)netspace.net.au writes: > Ok sounds good. Trouble is how to get that string into zope! You > see, passing back xml text containing "<" or ">" from my external > script doesn't seem to work. If my external script passes back a > normal string - fine. If there are tags in the string, they > magically get stripped out :-( > I assume this has something to do > with trying to send xml text within zope's xml-rpc mechanisms - but I > am just guessing here. Maybe, I start to understand.... With "external script" you do not mean an "External Method" but a script run outside Zope? What method do you use to send the string to Zope? HTML, XML-RPC? > e.g. my external method is > > def returnBigString(): > return 'Hi <fred>from the external method</fred>' > > but zope only ends up seeing the string > "Hi from the external method" Seems, you do speak of an External Method. Then, I can assure you that the "<...>" are *NOT* stripped! What you see is almost surely an illusion because you view the method's return value as HTML. Because the HTML browser does not recognize your tags (e.g. '<fred>'), it silently ignores them. Look at the HTML source and you will see them... Alternatively, set the Content Type to "text/plain": RESPONSE.setHeader('Content-Type','text/plain') Dieter

1 0

External script generates xml - how to turn it into an xml file object
by Andy Bulka 08 Sep '01

08 Sep '01

I have an external script that generates an xml string - how do I turn that xml text into an zope xml file object ? 1. If the external script returns the xml as a string, zope doesn't like tags in the string. xml within xml issues, I guess 2. If I encode the < and > symbols in the xml returned by my script, then search and replace them back again - this search and replace only works for a DTML document and not a file object. Perhaps my script should generate a file instead, then I could import the file into an xml file object directly. But I want to do this programatically, not though a form file upload. thanks for any guru thoughts. -Andy Bulka

2 1

problem with retrieving Archives with user input from the form
by Hamzat kamal 08 Sep '01

08 Sep '01

Dear Zopatistals I am have one serious problem which I will like you to assist me. I am keeping archives which is reference by the users by typing the file name into a form displayed on the web. i stored the user input into a var name called date_code. <input type="text" name="date_code">. Thereafter in my index_html, i then use <dtml-var expr="_.getitem(_.string.lower(date_code),1)"> to render the file. This work perfectly when a user type in the value for the date_code var. My problem is this. I have some other links which suppose to use the date_code value which the user type to display their contents as well, and i have already stored those content in their various folders, but to my surprise when clicked on these links this is the error message i got: Error Type: NameError Error Value: date_code Please i need your assistance as soon as posssble. This is the url of the site :http://www.champion-newspapers.com click on archive button when a newpage is displayed ignore the instruction and press logon button . Another page will be displayed asking you to enter the date code, for the purpose of this test type friday_1008_html and click view button. This will display the teaser archive for the news item, there after try to click on editorial on the left navi you will then see the error, despite the fact that i have the copy of friday_1008_html in the editorial folder. My impression is that since i have been able to use the date_code to display the teaser for the news item i should be able to use for all other link items on this page. thanks for your care. Hamzat Kamal.

1 0

Re: [cadaver] cadaver and zope
by Patrick Collins 08 Sep '01

08 Sep '01

Mathieu, I may get into an argument with the Zope authors on this one, but in my opinion, they haven't implemented the <link> in the way most clients would expect. >From my reading of RFC2518, in order to edit "index_html" (in your example) the client (cadaver) should be able to GET AND PUT "index_html/document_src". It doesn't make sense to me that you'd read from "index_html/document_src" and then write back to "index_html". This is because index_html MAY actually be generated by multiple source files. The example in RFC2518 in section 13.10.1 seems to behave the way you, Mathieu, would prefer it to work. The spec states: "The source of the link (src) is typically the URI of the output resource on which the link is defined, and there is typically only one destination (dst) of the link, which is the URI where the unprocessed source of the resource may be accessed." I've tried to send this email to the appropriate Zope mailing lists but not sure if I got the right ones. I'f I'm wrong, I'd be happy for someone to explain it to me because I will have to implement this into PerlDAV's "dave" command-line client as well and would rather do it right once. Regards, Patrick. Mathieu Longtin wrote: > > Hi, > > I'm trying to use Cadaver with Zope (www.zope.org) and the connection goes > well and I can download page and post new one. > > However, if I use the straight "edit" command, the page I get to edit is not > the source code, but rather the generated html. > > Zope allows one to get the source document, by getting > "index_html/document_src" instead of just "index_html". > > Problem is, if I say "edit index_html/document_src", it saves it to that > location as well and Zope promptly ignores it (it wants it to be saved to > "index_html"). > > I know I would have to modify the cadaver code to make this work, but what > is the best way? > > - Have a cadaver options that says: if you want to edit file x, actually > download file x/document_src (or some other extensions for other type of > server) > > - Have cadaver look at the "source" property. Here is a typical zope > property set: > dav:/zope/QuickStart/> propget index_html > Fetching properties for `index_html': (reconnecting...done) > creationdate = 1970-01-01T12:00:00Z > displayname = index_html > resourcetype = > getcontenttype = text/html > getcontentlength = 1558 > source = <link> > <src>/zope/QuickStart/index_html</src> > <dst>/zope/QuickStart/index_html/document_src</dst> > </link> > > supportedlock = <lockentry> > <lockscope><exclusive></exclusive></lockscope> > <locktype><write></write></locktype> > </lockentry> > > lockdiscovery = > getlastmodified = Thu, 06 Sep 2001 18:22:57 GMT > > Any suggestion? > > -Mathieu > > _______________________________________________ > cadaver mailing list > cadaver(a)webdav.org > http://mailman.webdav.org/mailman/listinfo/cadaver

2 1

FW: [Zope] click-stream collection and analysis with Zope??
by Trevor Toenjes 08 Sep '01

08 Sep '01

* Trevor Toenjes <zope(a)toenjes.com> [010907 15:30]: > Thanks, > I will try this in the next week , and post my success back to the board. > I always hear about the need to "clear the logs", which I dont want to do. > I want to keep a complete history together for analysis. Does this method > allow for that? It depends on the analysis tool you use. Since access logs are large, you should compress and rotate them. But the actual analysis tools themselves usually store historical data in a binary format. For a commericial one, try WebTrends, or a Free one, Webalyser. Can anyone else recommend anything else? seb > > > -----Original Message----- > > From: seb bacon [mailto:seb@jamkit.com] > > I use mod_usertrack in apache, combined with standard log analysis > > tools. There's no need to reinvent all this stuff. mod_usertrack > > does a pretty good job of guaranteeing unique ids. To integrate it > > with zope, you can run reports on a cron job and view the HTML output > > as a LocalFS view. Don't forget to make sure apache is proxying your > > requests, or your cookies won't get set. > * Trevor Toenjes <zope(a)toenjes.com> [010906 20:22]: > > My latest newbie challenge...! > > Has anyone implemented an extensive user tracking system with Zope?

4 3