September 2002 - Zope

Fw: [Zope-dev] Logging in as admin and impersonating another user - is it possible with Zopes sec policy?
by Dario Lopez-Kästen 12 Sep '02

12 Sep '02

Hello! [sent this to the zope-dev list but it was pointed out that perhpas this was a better list, even it imho is a development question] I am wondering if it is possible to write a userfolder that does the following (I need to implement a userfolder with these properties): For certain categories of users, for instance Teachers, while keeping their current authorisation of Teachers, I need to let them "impersonate" a user with lower authorisation than they currently have, say Students. So a logged in Teacher could for instance examine what a particular student sees in a Student portal (i.e. "previewing" it as would that particular student) Is this possible with Zopes current securtiy mechanisms? For now I can do it by providing a security mechanism that runs in parallel to zope's own, but it is a bit cumbersome to develop for - also I miss some of the features that zope provides for automagically protecting obejcts, etc. Proxy roels will not work for what I have in mind (at leats I think they won't). Any info or pointers are appreciated. Sincerely, /dario - -------------------------------------------------------------------- Dario Lopez-Kästen, dario(a)ita.chalmers.se IT Systems & Services System Developer/System Administrator Chalmers University of Tech.

1 0

locked out by apache (I feel like a newbie AGAIN)
by Roel Van den Bergh 12 Sep '02

12 Sep '02

I know this sounds silly but after all the hard work lately I'm stressed to the bone ... We have finally our RH 7.3 running, rebuild Zope 2.5.1 it now handles LFS right (thnx to everyone for pointing us in the right direction, I'll publish an overview of it soon) we are locked out of apache. Accessing trough /mysite:8080 works fine but the rewrite rules only end up in : Forbidden You don't have permission to access /RMW on this server. ---------------------------------------------------------------------------- ---- Apache/1.3.23 Server at mysite Port 80 probably some stupid restriction somewhere but we can't locate it Any pointer would be very much apriciated TIA, R. - - - Roel Van den Bergh

3 2

RE: Users cannot acces sites
by Roel Van den Bergh 12 Sep '02

12 Sep '02

> Stefan H. Holek wrote: > > You are missing the VirtualHostRoot keyword in your rewrite rule. Also > > note that HTTP_HOST may include the port (if it is not 80 IIRC). > > > > RewriteRule ^/(.*) \ > > > http://127.0.0.1:8080/VirtualHostBase/http/%{HTTP_HOST}:80/Virtual > HostRoot/ > > $1 [L,P] > > > This "http/%{HTTP_HOST}:80/VirtualHostRoot/" is dangerous. More exactly, > the trailing :80 will bite you if the client sends the port > together with the hostname. The standard does not mandate one or the > other, and most clients don't do this if port == 80, but wget for > instance does. > My solution is to check if there is a trailing :80 in HTTP_HOST and then > use an other rewrite rule. > > > cheers, > oliver Adding VirtualHostRoot to the rewrite rule didn't change anything Removing the trailing :80 in HTTP_HOST lets any registrated user access the site but most of them have to login twice. Removing the trailing :80 in HTTP_HOST also blocked the entrance to the ZMI trough apache Does Apache require the registratition of my Zope users somewhere (read an article about conflicting apache & Zope users, but didn't understand how to)? In http://www.zope.org/Members/shaw/HowTo/ApacheFrontEnd it is also stated that the order of installing/configuring things is important but then again I got no clue where everything went wrong. All I need is this When someone enters http://mysite/CMF-site it is resolved by Apache in http://mysite:8080/CMF-site without showing the redirected port to the user. <VirtualHost 111.111.111.111> ServerName www.mysite.com RewriteEngine On RewriteRule ^/Zope/(.*) /home/zope/2-5-1/Zope.cgi/$1 [e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l] RewriteRule ^/(.*) http://127.0.0.1:8080/VirtualHostBase/http/%{HTTP_HOST}:80/VirtualHostRoot/$ 1 [L,P] </VirtualHost> Apparantly this doesn't resolve it, although it used to do the right thing

3 5

Creating CatalogAware products.
by Adam Summers 12 Sep '02

12 Sep '02

Hi all, First time poster, long time lurker.. Ive been trying to create a product which is CatalogAware, with only some success. * I have a ZCatalog in the root of the zope installation called 'Catalog' * The class for the product inherits/mixes like thus: class myProduct(OFS.SimpleItem.Item, Persistent,.... Products.ZCatalog.CatalogAwareness.CatalogAware): * In the __init__ method, I have : self.index_object() * In any method which modifies any of the fields that are used as indexes in the catalog I also have: self.index_object() My problem is, The products will not add/delete themselves from the catalog, but when I modify the item, the catalog is updated. What am I missing about this? Regards, Adam

3 2

Zope Myths?
by Paul Browning 12 Sep '02

12 Sep '02

Hello. In a week from now we'll be doing a presentation on Zope to the UCISA Software Group. They're having a day meeting in Birmingham, UK on Open Source Software. I'd beam you a URL but the site is down at present. We've been giving some thought to the best way of informing people about Zope. An outline of the ground we plan to cover is at: <http://www.bris.ac.uk/is/projects/cms/zope/ucisa-sg/mythz.htm> and various props (in various states of readiness) can be found there. In particular there's a list of Zope Myths (and, most of the time, rebuttals). We'd be grateful for any input from members of this list. What have we missed? What have we understated/exaggerated/misunderstood? TIA Paul, Ian & Tim -- The Library, Tyndall Avenue, Univ. of Bristol, Bristol, BS8 1TJ, UK E-mail: paul.browning(a)bristol.ac.uk URL: http://www.bris.ac.uk/

6 9

Re: Dreamweaver MX, was: Zope Myths?
by Johan Carlsson [Torped] 12 Sep '02

12 Sep '02

At 21:06 2002-09-11 +0000, mattyoungrev2 said: >Has anyone had luck using Dreamweaver/Zope through *either* Webdav or >FTP? > >Dreamweaver seems to get confused if you dare to edit files on the >server! XP seems to play fair w/Zope web folders, and DW crashes more >than either of the others, so I think it's a DW bug. Any >confirmations/workarounds? Right now I'm using DW for a very small % >of files by cut and paste! I think the best way to get this working for both Dreamweaver and GoLive is to ignore the WebDAV support all together and use the ExternalEditor product instead. (which is almost absolutely brilliant, excepts when it barfs at my buggy DTML and loses the connection between the file and the server of no apparent reason. If no one else fixes it, I gotta get my hand dirty in the MSVC and try to fix that some rain sunday, it just hasn't been allot of rain around here in Sweden this summer). Any, besides wealth conditions and all, ExternalEditor is your man. I think it even fakes extensions for you if you ask it nicely. At least for my 0.05 Euro. I know you temper with the tag engine in Dreamweaver (plus my own long experience with that beast) so that would make it a better choice. IMHO both DW and GL has blown out of proportion in the last releases. Still using DW3, which is still pretty fast on my oooold laptop. Cheers, Johan Carlsson PS. The DW template system has actually been an inspiration for Easy Publishers template system, so if I'm wining about who bad DW is its not entirely true :-) Next EP release will include smart Library Object, yee-haa. Well that probably more info than any but really cares about. Swedish-Zope-Jockey logging of for the day... >Also: does GoLive work any better with Zope/WebDav? >Matt -- Torped Strategi och Kommunikation AB Johan Carlsson johanc(a)torped.se Mail: Birkagatan 9 SE-113 36 Stockholm Sweden Visit: Västmannagatan 67, Stockholm, Sweden Phone +46-(0)8-32 31 23 Fax +46-(0)8-32 31 83 Mobil +46-(0)70-558 25 24 http://www.torped.se http://www.easypublisher.com

2 2

Re: Dreamweaver MX, was: Zope Myths?
by Johan Carlsson [Torped] 12 Sep '02

12 Sep '02

At 18:05 2002-09-11 -0700, Matt Young said: >Thanks for the pointer. So is ExternalEditor an actual >HTML editor, or a way to "mate" with them? Could you >recommend a version or give a link (I'm trying to avoid the >half-baked stuff, iykwim). No, it's a client-server solution (client works on Windows/Unix and the server is installed as a Product in Zope). The client uses regular HTTP get requests to download the editable part of an object, it then, based on extension or content type open a program (that you can configure) to edit the content. This works for textual object (linke DTML Method or ZPT) as well as binary object such as Images or Files. When you save the change file, the client detects that the file has been changad an uses WebDAV to upload the file to Zope. It's all transparent to you, though. http://www.zope.org/Members/Caseman/ExternalEditor Regards, Johan Carlsson -- Torped Strategi och Kommunikation AB Johan Carlsson johanc(a)torped.se Mail: Birkagatan 9 SE-113 36 Stockholm Sweden Visit: Västmannagatan 67, Stockholm, Sweden Phone +46-(0)8-32 31 23 Fax +46-(0)8-32 31 83 Mobil +46-(0)70-558 25 24 http://www.torped.se http://www.easypublisher.com

1 0

editing vocabulary ?
by Dave Banning 12 Sep '02

12 Sep '02

It seems that with vocabulary variable are stored as numbers. Is there a way to edit these variables? It looks to me like I can add new ones using the add function, but I have yet to see how one could be modified. __________________________________________________ Do you Yahoo!? Yahoo! News - Today's headlines http://news.yahoo.com

1 0

Clueless behind the wheel: Securely accessing remote Zope installation
by Wil Cooley 12 Sep '02

12 Sep '02

So, I've got my site using ZPT with 2.5.1. I'm using ZServer, Apache, mod_ssl, mod_proxy foo and SiteAccess to get access to the management interface. The secure server runs under https://secureserver.example1.com. This part works fine. I created my site an a folder "example2.com", got it all working as I wanted it, set up mod_proxy & mod_rewrite foo in my example2.com virtual host in Apache, and created another SiteAccess under my /example2.com folder in Zope. I can get to my site normally just fine. What I can't do, however, is access the Zope management stuff under /example2.com through the secure server, owing to the SiteAccess object under there. Oh, what to do? Surely I shouldn't need to set up a VPN between myself and my host to securely access my Zope site, do I? Is there a (easy) way to do this? Wil -- Wil Cooley wcooley(a)nakedape.cc Naked Ape Consulting http://nakedape.cc * * * * Linux, UNIX, Networking and Security Solutions * * * * QCSNet http://www.qcsn.com * * * * T1, Frame Relay, DSL, Dial-up, and Web Hosting * * * *

1 0

2 different versions of telnetlib.py
by working4aliving 12 Sep '02

12 Sep '02

I have a different version of telnetlib.py on regular python than i do in zope\lib. I was getting a "socket module has no attribute getaddrinfo" when calling my external method. Well, when looking at telnetlib, i decided to copy python's over to zope... Is this OK? is this a good idea? Is this evil? Thank you all for your help and comments. Bobb

1 0