May 2003 - Zope - Zope lists

Session expiration and concurrent same user access control.
by Felipe Barousse Boue 06 May '03

06 May '03

Hello: We are currently using CookieCrumbler as the authentication method for an application. It all works fine so far. Nevertheless, we are interested in implementing session expirations, we'd like to set a property somewhere in the application tree with the number of inactivity minutes when the "session" would expire after the user has not done anything within that period. The question is: what is the best approach to perform this "session expiration" feature ? As far as I am aware, CookieCrumbler does not natively supports this, except of course, coding a bit more to programatically expire CookieCrumbler's session cookies, but this could potentially create other issues.... The second question is: there is also the need to control that users do not access the system with one account more than once at a time. (i.e. that an account is not used by more than one user at a time). Again, what would be the advise in this subject ? Both requirements (expirations and "only one login at a time") are for the same application that currently uses CookieCrumbler. I have seen many different UserFolders and Session products for Zope, some have a rather old release dates and before embarking into an adventure with some of this products, I'd like to get some feedback from the Zope community. Your advise is well appreciated, thanks in advance. ! Felipe

1 0

monkey patch html_quote (was: RE: [Zope] html_quote, quoting acce nts)
by Jean-Francois.Doyon＠CCRS.NRCan.gc.ca 06 May '03

06 May '03

Ah, I was almost there, I traced it to DocumentTemplate, but didn't notice the seperate html_quote.py file ... OK, now that all this makes sense ... I'm trying to overload/monkey patch the html_quote with some of my own code that quotes ALL html entities, not just the cgi.escape() ones (& < >) ... BUT, it's not working. I noticed the the way DT_Var implements this in ways I'm not too sure I understand (coding beyond my current level of knowledge). Something to do with modifiers, lambda, and mappings. I'm guessing that the monkey patching isn't working because it's "too late" in the process, and the function has been "copied" or something like that? Anyways, could anyone point me in the right direction on how to do this? I've monkey patched other things before successfully, but this one isn't cooperating :( Any help would be greatly appreciated! P.S. : Code is below, not optimized, just for testing. Thanks, J.F. The code in my product's __init__.py # Monkey patch that makes the html_quote actually quote ALL entities, not just "&" "<" and ">", but NOT the octal coded ones, which would allready be encoded. def my_html_quote(string, name='(Unknown name)', md={}): string = ustr(string) myentities = {} for (key, value) in entitydefs.items(): if ( len(value) == 1 ): myentities[value] = key del myentities['&'] # First do the ampersands if ( find(string,'&') > 0 ): string = replace(string,'&','&') # Then everything else for char in myentities.keys(): if ( char in string ): string = replace(string,char,'&'+myentities[char]+';') return string html_quote.html_quote = my_html_quote -----Original Message----- From: Troy Farrell [mailto:troy@entheossoft.com] Sent: Monday, May 05, 2003 12:09 PM To: Jean-Francois.Doyon(a)CCRS.NRCan.gc.ca; zope Subject: Re: [Zope] html_quote, quoting accents Ok. We're going to trace this to the root. The html_quote you are using is in Products.PythonScripts.standard.html_quote() or so, which points to DocumentTemplate.DT_Var.html_quote() which points to DocumentTemplate.html_quote.html_quote() which points to cgi.escape(). The cgi.escape() docs say this: escape(s[, quote]) Convert the characters "&", "<" and ">" in string s to HTML-safe sequences. Use this if you need to display text that might contain such characters in HTML. If the optional flag quote is true, the double-quote character (""") is also translated; this helps for inclusion in an HTML attribute value, as in <A HREF="...">. If the value to be quoted might include single- or double-quote characters, or both, consider using the quoteattr() function in the xml.sax.saxutils module instead. http://www.python.org/doc/current/lib/node300.html All that being said, html_quote will not solve your problem. One thing you might try is messing with the character coding used on your html pages. The only other option I can see is writing your own convertor. Troy Jean-Francois.Doyon(a)CCRS.NRCan.gc.ca wrote: > Troy, > > OK, well for the purpose of this example, and where I'm starting, is with > CMF Metadata, such as the title. > > A user enters the metadata using their regular keyboards and so on, which > means the accented characters are typed in in ISO-8859-1, and stored as such > I guess? (since technically this value isn't HTML, it should be stored in > it's native character set) > > Now when I output the Title, it comes out in ISO-8859-1 properly, but I'd > like to force it encoded as an HTML entity, so when a user enters the word > "région" in the Title, it'll be entered/saved that way, and by default be > output that way, but ... > > My understanding was that uting html_quote would transform that into > "région" ... But it's not doing anything different for me. Same with > entity notation, &dtml-Title; doesn't do the html_quoting either. > > This is using the default metadata templates, or close enough that changes I > have made shouldn't matter (I've extended the metadata, but not modified the > existing DC setup). > > Am I misunderstanding the purpose of this command? Or is there something > else I'm not getting? > > Thanks, > J.F. > > > -----Original Message----- > From: Troy Farrell [mailto:troy@entheossoft.com] > Sent: Friday, May 02, 2003 5:15 PM > To: Jean-Francois.Doyon(a)CCRS.NRCan.gc.ca > Subject: Re: [Zope] html_quote, quoting accents > > > Bonjour Jean-François. > > We need more information before we can help you. Where is your user > typing these characters? In what forms? In what type of objects are > you storing this information? We'll try to help you, but we need more > information first. > > Troy > > Jean-Francois.Doyon(a)CCRS.NRCan.gc.ca wrote: > >>Hello, >> >>I have french content on my site, which means accents and other high-bit >>type characters. >> >>For the first time a user actually ran into the problem of the characters >>coming out wrong on his screen, so now I have to fix it :P >> >>I tried using html_quote without success, and also using the &dtml-Title; >>type syntax (Which apparently is auto-quoted) but in both cases my accents >>are still coming out in raw latin-1 instead of something like é ... >> >>Of course in the case of the metadata, I don't want to html encode the >>characters since technically it's not HTML just yet :) >> >>Help ? >> >>Thanks, >> >>Jean-François Doyon >>Internet Service Development and Systems Support / Soutien de systèmes et >>developement de services Internet >>GeoAccess Division / Division GéoAccès >>Canada Center for Remote Sensing / Centre canadien de télédétection >>Natural Resources Canada / Ressources naturelles Canada >>Phone / Téléphone: (613) 992-4902 >>Fax / Télécopieur: (613) 947-2410 >>http://atlas.gc.ca >> >> >>_______________________________________________ >>Zope maillist - Zope(a)zope.org >>http://mail.zope.org/mailman/listinfo/zope >>** No cross posts or HTML encoding! ** >>(Related lists - >> http://mail.zope.org/mailman/listinfo/zope-announce >> http://mail.zope.org/mailman/listinfo/zope-dev ) > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

Re: [Zope] create Login/Logout functionality
by Andreas Pakulat 06 May '03

06 May '03

On 03.Mai 2003 - 17:38:10, Troy Farrell wrote: > Look in the source for 'manage_zmi_logout' in > zopedir/lib/python/App/Management.py That doesn't help me much, I see that I can call manage_zmi_logout to logout the user, but how do I get him to log in? I don't think that I can do it with such a message box, as far as I can see, this can only be done, by setting the permissions on the file. But this doesn't work for me, as anybody should be able to view a certain page, but only logged in users should see a link that points to an edit-form So the question is, which method to call if I have a username and a password, I didn't find anything in the UserFolder API. I will try to look further on the source of the API, but maybe someone can directly point me to the right spot. Andreas > Troy > > Andreas Pakulat wrote: > >Hi, > > > >I would like to have a login Link on the top of my page, but I don't > >know how I can login a user. I have searched through the help, but > >didn't find a method that causes the MessageBox, that appears if I go to > >a /manage Url, to appear. > > > >And I also want the users to get logged of again. > > > >I know that I can write a dtml/zpt page and call a script with values > >from a form, and then in the script set the Authenticated User if he > >exists in the User Folder, but I don't see how to verify the password. > >Also I really would like to have it with the messagebox and not a > >separate form to fill in. > > > >Andreas > > > -- Letzte Worte eines Flugkapitäns: "Wir landen in wenigen Minuten planmäßig"

4 8

How to install Zope server in RedHat Linux 6.1
by sukhee ochirbat 06 May '03

06 May '03

I want to install Zope server in Red Hat Linux 6.1. I have downloaded Zope-2.6.1-linux2-x86.tgz and I have intalled it. According to installation guide, Zope installation was okey. But After ./start command, I encouraged following error. . . . z2 Startup exception Trackback (unnermost last): File /usr/local/zweb/Zope-2.6.1.-linux2-x86/z2.py,line 840 in? SystemExit: A user was not specified to setuid to; fix this to start as root (see doc/SETUID>txt) I read setUID.txt file but python z2.py -u root python zpasswd.py inituser ... has an error. How can I install Zope server in Red hat Linux 6.1. Thank you ===== __________________________________ Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. http://search.yahoo.com

2 1

NuxUserGroups question
by Zanotti Michele 06 May '03

06 May '03

Hi all, How can I obtain the list of local roles associated to a group? Thanks. Michele

2 1

Create top-level folder
by Matt Ficken 06 May '03

06 May '03

Part of my product's job is to create a top-level folder. I can have it do that only when, from the management interface's "add function", I add it to the root directory. I would like it to always be able to go to the root directory, regardless of where its added. In order to do this, I need to access the root directory object, but I don't know how. What function can I call to return the root directory object? Would 'getPhysicalRoot' do what I want? if yes, what do I call it on? -- __________________________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup

2 1

SIGUSR2 on Solaris
by Thierry FLORAC 06 May '03

06 May '03

Hi, I try to make a log rotation on Zope-2.6.1 on Solaris. I just do : mv Z2.log Z2.log.0 kill -USR2 `cat Z2.pid` My Zope events log say that log file have been reopened, but in fact Z2.log is not created and log goes on in Z2.log.0 The same thing works correctly with Zope-2.6.1 on Linux... Any idea ?? I wouldn't like to have to restart Zope and flush all my caches to make this rotation... Thanks, Thierry -- Linux every day, keeps Dr Watson away... http://gpc.sourceforge.net -- http://www.ulthar.net

3 3

Urgent: ZODB transaction error '_p_oid' attribute
by felix slager 06 May '03

06 May '03

Hi everybody, i have a serious problem using Zope to run an administrative form for lots (and lots) of students. I get lots of ZODB conflict errors and crashes of the zope instance (2.6.1. linux) with the following beauty: 2003-05-06T10:12:05 ERROR(200) ZODB A storage error occured during transaction abort. This shouldn't happen. Traceback (innermost last): File /usr/local/zope/Zope-2.6.1-src/lib/python/ZODB/Transaction.py, line 261, in commit File /usr/local/zope/Zope-2.6.1-src/lib/python/ZODB/Transaction.py, line 392, in _commit_error AttributeError: Surrogate instance has no attribute '_p_oid' A restart of the instance is needed, but it's thin ice. I've found, and was send (:-) some leads in lists about this problem. It appears the problem is caused by the transaction mechanism (there's no _p_oid in the classes of the DA). Does anybody know a (quick) fix to this problem. Help would be very (VERY) welcome indeed. Felix _____________________________________________________________ Get Your Private, Free Email at <A HREF="http://freemail.burningmail.com" target="_new">http://www.BurningMail.com</A> _____________________________________________________________ Select your own custom email address for FREE! Get you(a)yourchoice.com w/No Ads, 6MB, POP & more! http://www.everyone.net/selectmail?campaign=tag

1 0

40,000 users - 800,000 documents
by Robert Jean 06 May '03

06 May '03

Hello, We are seeking information on running Zope under an extreme load. Here are the metrics of the system that we would like to migrate: # of users with an account: 40,000 # of R/O concurrent users at peak time: 5,000 # of R/W concurrent users at peak time: 5,000 # of (static) documents: 800,000 Read-only users mostly search and view documents. Searching is currently done with metadata, but we would like to add full-text search on text renditions of the documents. Read-write users mostly view and index documents. --> Has someone already run Zope under such extreme conditions? --> Could someone share ideas on hardware and software issues? We plan to do some kind of feasibility testing. At this time, here are a few of our ideas: 1. Run ZEO 2. Possibly add an additional layer of load-balancing with specialized Linux software 3. Serve static pages with Apache or IIS 4. Do not rely on ZODB only � consider MySQL, Postgres, Oracle 5. Consider alternatives to ZCatalog � for example Lucene 6. Develop customization with Products instead of ZClasses 7. Use Zope RAM caching as much as possible Your opinion on this topic will be very much appreciated. Thanks, Robert __________________________________ Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. http://search.yahoo.com

2 1

Re: [Zope] DTML Sendmail Error
by Zope＠Stylus 06 May '03

06 May '03

Hi Jens Thanks for your reply. I removed the indentation and it worked.Thanx once again. Best Regards John : ----- Original Message ----- : From: "Jens Vagelpohl" <jens(a)zope.com> : To: "Zope@Stylus" <zope(a)stylusinc.net> : Cc: <zope(a)zope.org> : Sent: Monday, May 05, 2003 5:08 PM : Subject: Re: [Zope] DTML Sendmail Error : : : > you must remove all indentation inside that sendmail tag. : > : > jens : > : > : > On Monday, May 5, 2003, at 07:19 US/Eastern, Zope@Stylus wrote: : > : > > Hi Lennart : > > : > > Thaks for your prompt reply.I have asigned the security permission of : > > the : > > Mail Host to Anonymous to allow all users who are not loggged into : > > Zope to : > > send their mails. : > > Now let me clarify how I am trying to use dtml-sendmail : > > <dtml-sendmail mailhost="MailHost"> : > > To: <dtml-var recipient> : > > From: <dtml-var sender> : > > Subject: <dtml-var subject> : > > : > > Dear <dtml-var recipient>, : > > : > > You order number <dtml-var order_number> is ready. : > > Please pick it up at your soonest convenience. : > > </dtml-sendmail> : > > : > > I am calling this DTML Document from another DTML Document passing the : > > parameters recepient,sender,subject,order_number from a FORM. : > > I am using Python version 2.1.3 : > > Could you please help me in figuring what I am doing wrong.Also could : > > you : > > please tell me how I can add delete users from acl_users without : > > actually : > > logging into ZOPE through the ZMI Login.And how to Login a User who is : > > m,ember of acl_users into the Zope server without actually going : > > through the : > > ZMI Login.THis would solve my problem fr adding Folders into the Zope : > > Folder : > > Structure and also to access SquishDOT. : > > : > > Thanks and Best regards : > > John --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.476 / Virus Database: 273 - Release Date: 4/24/2003

1 0