August 2003 - Zope - Zope lists

Authentication questions
by Mitch Pirtle 10 Sep '03

10 Sep '03

Hi listers, I'm currently discussing requirements for yet another Zope/Plone portal for the company that I'm working for; and the issues with this particular site include mixing accounts from both internal employees and external consultants. Not all employees will have access to this site. The internal staff are currently authenticated via Windows (and Active Directory accounts) which is a critical requirement. The external folks will only be accessing this one site, so their accounts are very site-specific. What is the most logical way to have both specific AD accounts (not the whole directory) and Zope user accounts authenticate for one site? -- Mitch

4 5

xml.dom.minidom
by Patrick W. Fraley 08 Sep '03

08 Sep '03

Hi List, I am trying to use the xml.dom.minidom praseString routine. It works fine under normal python (2.2), but when I try and runn it under the binary distribution of Zope (Python 2.1) I get teh following error message: Traceback (most recent call last): File "mM4Connection.py", line 118, in ? dom_parser = parseString(xmldata) File "/opt/Zope-2.6.1/lib/python2.1/xml/dom/minidom.py", line 915, in parseString return _doparse(pulldom.parseString, args, kwargs) File "/opt/Zope-2.6.1/lib/python2.1/xml/dom/minidom.py", line 901, in _doparse events = apply(func, args, kwargs) File "/opt/Zope-2.6.1/lib/python2.1/xml/dom/pulldom.py", line 301, in parseString parser = xml.sax.make_parser() File "/opt/Zope-2.6.1/lib/python2.1/xml/sax/__init__.py", line 88, in make_parser raise SAXReaderNotAvailable("No parsers found", None) xml.sax._exceptions.SAXReaderNotAvailable: No parsers found Now I though all these modules (including a parser) are part of a standard python distribution. How can I get this to work? Or is there a better way to use XML under Zope? Do I have to install some extra Packages? Tia Patrick -- *************************************** COMsulting Gerhard Faehling GmbH Patrick W. Fraley Oeverdieker Weg 6 23669 Timmendorfer Strand Tel: 04503 / 88 12 45 Fax: 04503 / 88 10 18 E-Mail: pf(a)comsulting.de Internet: www.comsulting.de ***************************************

4 7

Global Variable
by rpenatez＠lattice.com.co 05 Sep '03

05 Sep '03

Hello Zopers! I need to write a global variable into my Zope project but I don't know how to do it. HELP!!!! RicardoP

6 5

A login page
by rpenatez＠lattice.com.co 05 Sep '03

05 Sep '03

Hey Zopers!!! I'm a newbie in this excellent package and I need some help. I'm trying to do a simple login page (username and password text fields and a button) that enable or disable the navigation into a Zope project. This mean that if you didn't login you can't be able to surf the project. This sound easy to do but I can't do it :-( Is out there somebody who can help me??? I'll appreciate your suggestions. Thanks a lot. RicardoP

4 3

Scripts run as least privileged user necessary?
by Ken Causey 05 Sep '03

05 Sep '03

I'm running into a strange problem. I have a situation in which I want a script to treat Managers differently than other users. But I'm finding that whether or not I'm logged in as a manager or not the script only considers the user to be 'Anonymous User' as long as 'Anonymous' has View privilege for the script. If I change the Security permissions so that only 'Authenticated' can View the script then the user is properly identified. Is this expected behaviour? This is what I'm seeing on 2.6.1. As a test create a script with return _.SecurityGetUser() be sure to bind '_' to Namespace. Set that script so that the View privilege is allowed for 'Anonymous'. Stay logged in and run the script. Then change it so only 'Authenticated' as the View privilege, run it again. The behavior changes based on the permissions. Ken Causey

3 7

maintaining consistent security settings across cloned sites
by Dennis Allison 05 Sep '03

05 Sep '03

I'm looking for a tool that will help maintain security settings, having been burned a couple of times. What I need is: 1. A tool to traverse a site and build a database of security settings that must be set for each of the various roles. Ideally this would remove redundancies and, perhaps, raise warnings when settings look strange. 2. A tool to apply said database to a site which is similar but, perhaps, not identical in structure--that is, some extra folders(and enclosed material) might appear in one site and not in another. 3. It would be nice if the security settings database could be read and edited off-line so they could be reviewed and corrected as a unit. 4. It has to be able to handle proxies. 5. It has to be able to handle roles beyond the usual Anonymous, Authorized, Manager, and Owner. It's OK to demand that both sites have the same user defined roles. Anyone done anything like this?

4 8

newbie question: to edit/delete in zodb
by Vinoth 04 Sep '03

04 Sep '03

Hi I am a newbie to zope. I need a sample code to perform, editing/deleting properties of zodb object I use the following code to add a file to a folder as well as properties of that. ////////////// entries_folder.manage_addProduct['OFSP'].manage_addFile(id, title="", content_type="text/plain", file=comments) # add a required properties entry=getattr(entries_folder, id) entry.manage_addProperty('name', name, 'string') //////////////// Thanks in advance, -visu --------------------------------- Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software

3 2

Caching custom ZClasses
by Bart Hubbard 04 Sep '03

04 Sep '03

Hello, I've created a set of custom ZClasses, and can't associate them with a cache manager. I see there isn't a baseclass available in the ZMI that corresponds to the 'Cacheable' class in 'cache.py' in the OFS directory of Zope. I suppose I could subclass another class that is cacheable, like DTML Document, but will that just cache the DTML Document portions of my class? I just want my ZClass to be cacheable, so ideas are welcome. much thanks, bart

4 6

Confusion about thread safety
by andre 03 Sep '03

03 Sep '03

Hi, after reading several things about thread safety, i'm a little bit confused by the fact that the words threads and connection are used in too various contexts. So i'll ask a simple question. With a basic Zope server, without any other DB, what happens when two different users want to commit changes made to the same object at the same time ? are the two requests, two different threads ? ZODB speaking.

4 6

VS: A disappeared cookie..
by Børge Kjeldstad 03 Sep '03

03 Sep '03

Hello :) ..I try to send this message again, as I received no answer. Maybe it disappeared in the mess with the large virus attack some days ago. To personalize a website I use cookies. That is; when a person chooses a link, a cookie is set like this: <dtml-call expr="RESPONSE.setCookie('guest', 'C')"> Now, this cookie is used to either include or not include a table of contents on all of the following pages that I (or actually guest C) visits: <dtml-if expr="REQUEST.has_key('guest', 'C')"> <dtml-var site_map> </dtml-if> The <dtml-var site_map> looks like this: <a class="map" href="&dtml-URL0;?expand_all=1">Show all</a> <br> <a class="map" href="&dtml-URL0;?collapse_all=1">Hide all</a> <br> <dtml-tree expr="topics"> <a class="map" href="&dtml-absolute_url;"><dtml-var title_or_id></a> </dtml-tree> (topics is here the folder containing all the pages that guest C may visit) This works fine untill guest C presses some of the links generated by the <dtml-tree>. If he or she for instance presses the Page 1 link, he comes to page 1, but page 1 does not include the <dtml-var site_map> even though page 1 still has the same <dtml-if> statement: <dtml-if expr="REQUEST.has_key('guest', 'C')"> <dtml-var site_map> </dtml-if> It looks to me as if the cookie has disappeared. Or have I misunderstood the hole concept of the REQUEST object? What could be wrong? Thank you very much :) Børge Kjeldstad

2 1