February 2003 - Zope

Permissions - Tutorial
by Samir Mishra 02 Feb '03

02 Feb '03

I'm having a busy day posting to this group. Apologies for being a bother... I installed the Zope Tutorial as root manager. Now I'm trying to specify permissions so that anyone (i.e., Anonymous) can access/modify the tutorial. How do I specify permissions to achieve this? Ideally, what I'd like to have is that when a user tries to access the tutorial, they are required to authenticate themselves. If they don't have a username on the system, they are allowed to create a username for themselves, but ONLY if they belong to a particular domain (or have an IP address in a given range). Once the user authenticates him/herself, they get the Manager role for the tutorial. Again, being a new user of Zope, the second part is probably well beyond me. But I feel it'll help me learn faster. Thanks. Samir.

1 0

Solutions Linux is in Paris - where are you?
by Heimo Laukkanen 02 Feb '03

02 Feb '03

Zope Europe kicks off 2003 in style, hosting a Zope 3 UI sprint and a Zope pavilion at the SolutionsLinux exhibition in Paris, showing Zope and making it known to the public. At Solutions Linux you will see familiar faces from the community: Alan Runyaga, Alexander Limi, Sidnei da Silva, Chris McDonough, Paul Everitt You have a chance to get to know companies like IngeniWeb, Pilot Systems, Logilab and Zope and Python Job Market and of course you can get comfortable with associations like Cocof, Savoie Technology and naturally Zope Europe. Aaand, then there is the release party of Plone 1.0. A small quote from a message written by Alexander Limi to plone developers list: " The release date for Plone 1.0 has been set, it will happen during the SolutionsLinux 2003 conference in Paris, the 6th of February. To celebrate the release, we will have announcements and waste some perfectly good champagne at the SolutionsLinux stand in Paris. You are welcome to join us in celebration at the stand. Later on we will gather up the Zopistas and Plonistas at the Zope Shack later that evening for some serious beer-drinking and socializing. You are of course invited to join us there too. " If you're not able to join us, or otherwise don't like to meet interesting persons of Zope world and drink champagne - don't feel too depressed. We will provide a nice blog with images from best parties - and later on even a set of video clips of most important moments. http://www.zope-europe.org/sl2003/

1 0

RE: [Zope] getting info on permissions
by Samir Mishra 02 Feb '03

02 Feb '03

I'm also looking for something similar. We have a pretty complex security requirement. What I need to be able to do is programmatically, as a manager, starting from the root, traverse down all of the nodes and list all users, roles, proxy roles, etc. by context. We have a situation where we have two separate groups of users (A & B) with a number of sub-groups in each. The sub-groups from A need to interact with different sub-groups from B at different times. There's never any overlap. Also, members in the A or B pool move between the sub-groups within A & B. I.e., teams interacting with teams, where the individuals are assigned to different teams at different times , and for security reasons one pair of teams should not know what another team pair is doing. This is well beyond what I currently know in Zope, but perhaps I may learn something I can use later. Thanks very much. Samir. -----Original Message----- From: Rocky Burt [mailto:rocky@atlas.nh.bricsnet.com] Sent: Saturday, February 01, 2003 23:39 To: zope(a)zope.org Subject: [Zope] getting info on permissions I'm currently in need of some code (for debugging reasons) that will show me what permissions are in affect for a give role in a given context. It needs to include acquired permissions as well. I've looked around for some api calls to get me this info. The closest thing I've found is context.permissionsOfRole(myRole). Unfortunately that only lists permissions defined for that role on that context, not the acquired ones as well. Am I going to have to traverse the tree and figure out acquired permissions myself? or is there an easier way? - Rocky -- __________________________________________________________________________ Rocky Burt Development, Director Bricsnet FM Americas - office: +1 (603) 559-2527 53 Green St - mobile: +1 (603) 512-9832 Portsmouth - fax: +1 (603) 436-5760 NH 03801 USA - email: rocky.burt(a)bricsnet.com __________________________________________________________________________ _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

Best Practices for Zope 2 and 3 coding
by Troy Farrell 02 Feb '03

02 Feb '03

Pardon the cross-posting. I'm not sure exactly who would want this most helpful information. Knowing that the majority of my present coding (and all current deployments) will be on Zope 2, but that I hope to use Zope 3 when it's available, I asked for the best practices on coding a new product for both Zope 2 and Zope 3. You can read my original post here: http://mail.zope.org/pipermail/zope2-migration/2003-February/000002.html Here's what Steve Alexander thinks: -------- Original Message -------- Subject: Re: [Zope2-migration] Best practices for Zope 2 (3?) Component Architecture Date: Sat, 01 Feb 2003 23:50:07 +0200 From: Steve Alexander <steve(a)cat-box.net> To: Troy Farrell <troy(a)entheossoft.com> Troy Farrell wrote: > Thanks Steve. > > I put it on the z2 migration list because I am referring to coding in > Zope2. Ok, I misunderstood your question. I thought you were asking how to design such a thing in Zope 3. The general way to do these things is to write your code so that it works in Python, then write a Zope 3 wrapper around it (which will be pretty small), and a Zope 2 wrapper around it (which will be somewhat larger). This gets harder when you want to write a product where "web application framework" features, such as services or acquisition or roles and permissions, are intrinsic to what you're doing. Here's an example on how to write a 'collective issues service'. 1: Define your collective issues service interface in python. Include a setter interface and a viewing interface. 2: Write python code that implements this API. 3: Write a 'wrapper' around this code that exposes it as a Zope 3 product. 4: Write a 'wrapper' around this code that exposes it as a persistent SimpleItem in Zope 2. Perhaps use a well-known name such as CollectorService. 5: Write an API for a function that you import from some module that, when passed a 'context', gets the appropriate 'service'. 6: Implement this function for Zope 3 as a getService call. 7: Implement this function for Zope 2 as a walk up the acquisition stack until you acquire a folder that contains your CollectorService item. 8: Write an XML or comma-separated-values import/export tool for your collector service. Use this to move data between zope2 and zope 3. For views, use page templates. Write a class derived from PageTemplateFile that makes 'context' availble instead of 'here' for Zope 2. (This is only 8 lines of code.) Security: For zope 3, use a configure.zcml file in the package of your zope3 'wrapper' class. For zope 2, use security declarations in your zope2 'wrapper' class. There are probably other issues too, but this is the general approach I'd use.

1 0

Imaging support in Zope
by pieter claassen 01 Feb '03

01 Feb '03

1. Are there any imaging products in Zope that can suck data out of a database and generate PNGs or GIFs or JPEGs? 2. Is the PIL (Python Imaging Library) installed and available to Zope? Thanks for any help. Pieter

4 3

Wrapper
by Philip Swann 01 Feb '03

01 Feb '03

I am going round in circles trying to grasp the semantics of "wrappers". Why do they have this special name? Are they a relative of the Cheshire Cat in Alice in Wonderland? __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

2 1

can't add an External Method
by Blurg 01 Feb '03

01 Feb '03

Hi, I want to add an external method Bla.py, but when I place this one in /usr/lib/zope/lib/python/Products/ExternalMethod/tests/Extensions and try to add it via the ZMI (adding the external method as Bla), Zope tells me that it can't find the pythonscript. I also made an Extensions one level higher than tests, but that didn't work out either. Wat directory should this method be in? Thanx, Jurgen --------------------------------------------------------------------------- "When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity." [A. Einstein, 1938] <footer align=left valign=bottom> http://weirdscience.nl </footer>

3 2

SSO using Zope?
by Andrew Kennel 01 Feb '03

01 Feb '03

I've been evaluating Zope as a possible corporate portal server for my company. I'm currently working on tying it to our existing directories via LDAP and have been very impressed. One feature I have not been able to find any reference re: Zope is SSO. (single sign-on) one of the primary uses of this portal would be the ability for my user's to sign in once and have the portal then pass their credentials on to external pages. Have there been any attempts at this using Zope? I've scoured the web sights, and the one book (Zope Bible) that I have. I'd like to know that what I need is possible/practicle using Zope before I devote too much more effort. Any pointers/URL links/RTFM page 243 comments would be most welcome. --Andrew

2 1

Inconsistent behaviour in DateTime comparisons
by Bill Anderson 01 Feb '03

01 Feb '03

I've got a PostgreSQL DB with date fields, and am using ZpsycopgDa (1.0.13) to connect Zope to it. What I am needing to do is to compare "now" with a date filed stored in the DB. I can get it out just fine, but the comparison is not consistent. I'm doing it in a a Script (Python). (m is smartbrains-enhanced ZSQL result) if DateTime().lessThan( m.expiresdate ): add m to a list else: pass return a list Sometimes it returns correctly, others it returns the opposite of what I want. Simply reloading the page has shown the switch happen -no change to the script. Any help appreciated. Bill -- Bill Anderson <bill(a)libc.org> Linux in Boise Club

1 0

getting info on permissions
by Rocky Burt 01 Feb '03

01 Feb '03

I'm currently in need of some code (for debugging reasons) that will show me what permissions are in affect for a give role in a given context. It needs to include acquired permissions as well. I've looked around for some api calls to get me this info. The closest thing I've found is context.permissionsOfRole(myRole). Unfortunately that only lists permissions defined for that role on that context, not the acquired ones as well. Am I going to have to traverse the tree and figure out acquired permissions myself? or is there an easier way? - Rocky -- __________________________________________________________________________ Rocky Burt Development, Director Bricsnet FM Americas - office: +1 (603) 559-2527 53 Green St - mobile: +1 (603) 512-9832 Portsmouth - fax: +1 (603) 436-5760 NH 03801 USA - email: rocky.burt(a)bricsnet.com __________________________________________________________________________

1 0