September 2003 - Zope

Re: [Zope] Local Roles and Acquisition
by nwingfield＠che-llp.com 13 Sep '03

13 Sep '03

Thanks, Dylan. Ultimately I decided to modify getRolesInContext(). It seemed like the easiest fix and will allow much more flexibility in the long run in creating new roles and users. From a design perspective, it doesn't seem clean or efficient to engineer around Zope's standard operating procedures. Why not change them instead? In short, my new getRolesInContext() executes in the normal fashion, except when passed an object with my classes' meta_types. In this case, it checks local roles explicitly assigned to the object and its parent only, then returns only the local roles shared by both object and parent. Now I have a much more file-system-like level of security management. Yeah! Dylan Reinhardt <zope@dylanreinha To: nwingfield(a)che-llp.com rdt.com> cc: Zope Users <zope(a)zope.org> Subject: Re: [Zope] Local Roles and Acquisition 09/09/2003 02:05 PM Please respond to zope On Tue, 2003-09-09 at 09:47, nwingfield(a)che-llp.com wrote: > I spoke of 'Viewer' and 'Editor' (actually > I'm recycling 'Owner') roles. On my root folder, these are loosely mapped > to the 'View' and 'Edit' privileges, respectively. Almost all of my > methods are restricted to one of these two privileges using > declareProtected(). OK. > The problem comes in when Zope > combines the explicit local roles with any local roles granted on all > parent objects, effectively granting a user more roles than it ought. I'm not sure that's the only problem. It's easy enough to restrict acquisition of permissions. I think a bigger problem may be that you are defining roles coarsely. With only one editor role, it's going to be difficult to distinguish between "editor in one context" and "editor in another context". At a minimum, this sounds like a three-role system: - Viewer - Owner (default Editor) - Guest Editor If I understand you, everyone can view and owners can edit. On certain objects, you want to enable "guest" (non-owner) editing. To do this, create the GuestEdit role at the highest level it should apply and add it to the correct users' roles. If you want your guest editor list to be same for all objects that enable guest editing, you're pretty much done: just enable guest editing per object desired. On the other hand, if you want to define *who* has the guest edit role per object, that's going to be a lot more work. The standard way to do that would be to create a role for each desired permutation. :-) Depending on how many users and objects we're talking about, it may be worth thinking about creating a root-level method that has an Editor proxy role. This method could have one large mapping containing each object each user should be able to guest edit (or vice versa). Basic object permissions for inner objects are configured strictly and this method allows users to "pierce" the security for objects they should have greater access to. This solution isn't necessarily easy or foolproof, but might be worth considering if you're talking about a really large system with many different combinations of editors and objects. HTH, Dylan

4 6

How to calculate variables using DTML
by Alexander Alvarado 13 Sep '03

13 Sep '03

Hi I just want to create a new variable adding some other vatiables, something like: TTP= ( T_ADT + T_SRC + T_CHD)*TT_NITES As I recieve this variables from a previous form I guess I have to convert them into integer I thought that <dtml-set TTP="(_.int(ADT)+_.int(CHD)+_.int(SRC)*(_.int(TT_NITES))"> would work, but it does not. Hoe can I do this? Thanks !!!!!!!!!!!!!!!!!!!!!!!!! _________________________________________________________________ Charla con tus amigos en línea mediante MSN Messenger: http://messenger.yupimsn.com/

3 2

dtml-tree: method for header attribute?
by Tobias Herp 13 Sep '03

13 Sep '03

Hi, I have a dtml-tree tag with nowrap switched off (intentionally), and I'd like the wrapped lines to align below the text, rather than below the usual meta_type icon. This is how it looks like: <dtml-tree ><img src="&dtml-BASEPATH1;/&dtml-icon;" height="16" width="16" alt="&dtml-meta_type;"> <a href="&dtml-absolute_url;/manage_keyView" target="details">(visible link text)</a> (further info) </dtml-tree> When I put a '</td><td>' between the image and the link, it looks nice -- until the first branch is expanded (the colspan attribute is applied to the cell containing the image). I tried several CSS styles instead, but without success. Now I had a closer look at the header attribute of the tree tag; but I couldn't figure out how this is used, i.e. how the method must look like. Can please someone give me a hint? Tia, Tobias P.S. By the way: wouldn't it be great if the tree tag would be able to do the icon thing itself? ;-)

1 0

Re: How to calculate variables using DTML
by Alexander Alvarado 13 Sep '03

13 Sep '03

Found the problem, it was on the spaces !!! Thanks Giuseppe and Simon !!!! >From: Simon Michael <simon(a)joyful.com> >To: "Alexander Alvarado" <funalito(a)hotmail.com> >Subject: Re: How to calculate variables using DTML >Date: Fri, 12 Sep 2003 16:48:34 -0700 > >Make that <dtml-let> and it should work. Up until </dtml-let>. See also the >DTML reference in the zope book. _________________________________________________________________ Consigue aquí las mejores y mas recientes ofertas de trabajo en América Latina y USA: www.yupimsn.com/empleos

1 0

Re: FW: [Zope] How to calculate variables using DTML
by Alexander Alvarado 12 Sep '03

12 Sep '03

I trayed closing the <dtml-set> but is not working, is there any other way of doing this using dtml? >From: "Giuseppe Bonelli" <giuseppe.bonelli(a)tiscali.it> >Reply-To: giuseppe.bonelli(a)tiscali.it >To: <zope(a)zope.org> >Subject: FW: [Zope] How to calculate variables using DTML >Date: Sat, 13 Sep 2003 01:33:22 +0200 > > >Hi Alexander, > >this means the problem is not in the <dtml-let > code. It seems that the >dtml file containing the form or whatever is missing a parameter named >'data' expected by the form processing method. > >Have you closed the <dtml-let> tag ? > >__peppo > > > -----Original Message----- > > From: Alexander Alvarado [mailto:funalito@hotmail.com] > > Sent: sabato 13 settembre 2003 0.10 > > To: giuseppe.bonelli(a)tiscali.it > > Subject: RE: [Zope] How to calculate variables using DTML > > > > > > The error I recieve is: > > > > Invalid request > > > > The parameter, data, was omitted from the request. > > Make sure to specify all required parameters, and try the > > request again. > > > > It happens when I try to save the changes on the dtml > > document, and when I > > erase this line it gives no error. > > > > > > >From: "Giuseppe Bonelli" <giuseppe.bonelli(a)tiscali.it> > > >Reply-To: <giuseppe.bonelli(a)tiscali.it> > > >To: "Alexander Alvarado" <funalito(a)hotmail.com>,<zope(a)zope.org> > > >Subject: RE: [Zope] How to calculate variables using DTML > > >Date: Sat, 13 Sep 2003 00:06:33 +0200 > > > > > >What kind of error you get? > > > > > >Have a look at your REQUEST object to check that the variables are > > >there. > > > > > >__peppo > > > > > > > -----Original Message----- > > > > From: zope-bounces(a)zope.org > > [mailto:zope-bounces@zope.org]On Behalf Of > > > > Alexander Alvarado > > > > Sent: venerdì 12 settembre 2003 23.35 > > > > To: zope(a)zope.org > > > > Subject: [Zope] How to calculate variables using DTML > > > > > > > > > > > > > > > > Hi I just want to create a new variable adding some other > > vatiables, > > > > something like: > > > > > > > > TTP= ( T_ADT + T_SRC + T_CHD)*TT_NITES > > > > > > > > As I recieve this variables from a previous form I guess I > > > > have to convert > > > > them into integer I thought that <dtml-set > > > > TTP="(_.int(ADT)+_.int(CHD)+_.int(SRC)*(_.int(TT_NITES))"> > > > > would work, but > > > > it does not. > > > > > > > > Hoe can I do this? > > > > > > > > Thanks !!!!!!!!!!!!!!!!!!!!!!!!! > > > > > > > > _________________________________________________________________ > > > > Charla con tus amigos en línea mediante MSN Messenger: > > > > http://messenger.yupimsn.com/ > > > > > > > > > > > > _______________________________________________ > > > > Zope maillist - Zope(a)zope.org > > > > http://mail.zope.org/mailman/listinfo/zope > > > > ** No cross posts or HTML encoding! ** > > > > (Related lists - > > > > http://mail.zope.org/mailman/listinfo/zope-announce > > > > http://mail.zope.org/mailman/listinfo/zope-dev ) > > > > > > > > > > > _________________________________________________________________ > > Charla con tus amigos en línea mediante MSN Messenger: > > http://messenger.yupimsn.com/ > > > > > > >_______________________________________________ >Zope maillist - Zope(a)zope.org >http://mail.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) _________________________________________________________________ Charla con tus amigos en línea mediante MSN Messenger: http://messenger.yupimsn.com/

1 0

RE: [Zope] How to calculate variables using DTML
by Alexander Alvarado 12 Sep '03

12 Sep '03

I trayed closing the <dtml-let > code but recieve same error, is there any other way of doing this using dtml? >From: "Giuseppe Bonelli" <giuseppe.bonelli(a)tiscali.it> >Reply-To: <giuseppe.bonelli(a)tiscali.it> >To: "Alexander Alvarado" <funalito(a)hotmail.com> >Subject: RE: [Zope] How to calculate variables using DTML >Date: Sat, 13 Sep 2003 01:30:22 +0200 > >Hi Alexander, > >this means the problem is not in the <dtml-let > code. It seems that the >dtml file containing the form or whatever is missing a parameter named >'data' expected by the form processing method. > >Have you closed the <dtml-let> tag ? > >__peppo > > > -----Original Message----- > > From: Alexander Alvarado [mailto:funalito@hotmail.com] > > Sent: sabato 13 settembre 2003 0.10 > > To: giuseppe.bonelli(a)tiscali.it > > Subject: RE: [Zope] How to calculate variables using DTML > > > > > > The error I recieve is: > > > > Invalid request > > > > The parameter, data, was omitted from the request. > > Make sure to specify all required parameters, and try the > > request again. > > > > It happens when I try to save the changes on the dtml > > document, and when I > > erase this line it gives no error. > > > > > > >From: "Giuseppe Bonelli" <giuseppe.bonelli(a)tiscali.it> > > >Reply-To: <giuseppe.bonelli(a)tiscali.it> > > >To: "Alexander Alvarado" <funalito(a)hotmail.com>,<zope(a)zope.org> > > >Subject: RE: [Zope] How to calculate variables using DTML > > >Date: Sat, 13 Sep 2003 00:06:33 +0200 > > > > > >What kind of error you get? > > > > > >Have a look at your REQUEST object to check that the variables are > > >there. > > > > > >__peppo > > > > > > > -----Original Message----- > > > > From: zope-bounces(a)zope.org > > [mailto:zope-bounces@zope.org]On Behalf Of > > > > Alexander Alvarado > > > > Sent: venerdì 12 settembre 2003 23.35 > > > > To: zope(a)zope.org > > > > Subject: [Zope] How to calculate variables using DTML > > > > > > > > > > > > > > > > Hi I just want to create a new variable adding some other > > vatiables, > > > > something like: > > > > > > > > TTP= ( T_ADT + T_SRC + T_CHD)*TT_NITES > > > > > > > > As I recieve this variables from a previous form I guess I > > > > have to convert > > > > them into integer I thought that <dtml-set > > > > TTP="(_.int(ADT)+_.int(CHD)+_.int(SRC)*(_.int(TT_NITES))"> > > > > would work, but > > > > it does not. > > > > > > > > Hoe can I do this? > > > > > > > > Thanks !!!!!!!!!!!!!!!!!!!!!!!!! > > > > > > > > _________________________________________________________________ > > > > Charla con tus amigos en línea mediante MSN Messenger: > > > > http://messenger.yupimsn.com/ > > > > > > > > > > > > _______________________________________________ > > > > Zope maillist - Zope(a)zope.org > > > > http://mail.zope.org/mailman/listinfo/zope > > > > ** No cross posts or HTML encoding! ** > > > > (Related lists - > > > > http://mail.zope.org/mailman/listinfo/zope-announce > > > > http://mail.zope.org/mailman/listinfo/zope-dev ) > > > > > > > > > > > _________________________________________________________________ > > Charla con tus amigos en línea mediante MSN Messenger: > > http://messenger.yupimsn.com/ > > > > > _________________________________________________________________ ¿Estás buscando un auto nuevo? http://www.yupimsn.com/autos/

1 0

FW: [Zope] How to calculate variables using DTML
by Giuseppe Bonelli 12 Sep '03

12 Sep '03

Hi Alexander, this means the problem is not in the <dtml-let > code. It seems that the dtml file containing the form or whatever is missing a parameter named 'data' expected by the form processing method. Have you closed the <dtml-let> tag ? __peppo > -----Original Message----- > From: Alexander Alvarado [mailto:funalito@hotmail.com] > Sent: sabato 13 settembre 2003 0.10 > To: giuseppe.bonelli(a)tiscali.it > Subject: RE: [Zope] How to calculate variables using DTML > > > The error I recieve is: > > Invalid request > > The parameter, data, was omitted from the request. > Make sure to specify all required parameters, and try the > request again. > > It happens when I try to save the changes on the dtml > document, and when I > erase this line it gives no error. > > > >From: "Giuseppe Bonelli" <giuseppe.bonelli(a)tiscali.it> > >Reply-To: <giuseppe.bonelli(a)tiscali.it> > >To: "Alexander Alvarado" <funalito(a)hotmail.com>,<zope(a)zope.org> > >Subject: RE: [Zope] How to calculate variables using DTML > >Date: Sat, 13 Sep 2003 00:06:33 +0200 > > > >What kind of error you get? > > > >Have a look at your REQUEST object to check that the variables are > >there. > > > >__peppo > > > > > -----Original Message----- > > > From: zope-bounces(a)zope.org > [mailto:zope-bounces@zope.org]On Behalf Of > > > Alexander Alvarado > > > Sent: venerdì 12 settembre 2003 23.35 > > > To: zope(a)zope.org > > > Subject: [Zope] How to calculate variables using DTML > > > > > > > > > > > > Hi I just want to create a new variable adding some other > vatiables, > > > something like: > > > > > > TTP= ( T_ADT + T_SRC + T_CHD)*TT_NITES > > > > > > As I recieve this variables from a previous form I guess I > > > have to convert > > > them into integer I thought that <dtml-set > > > TTP="(_.int(ADT)+_.int(CHD)+_.int(SRC)*(_.int(TT_NITES))"> > > > would work, but > > > it does not. > > > > > > Hoe can I do this? > > > > > > Thanks !!!!!!!!!!!!!!!!!!!!!!!!! > > > > > > _________________________________________________________________ > > > Charla con tus amigos en línea mediante MSN Messenger: > > > http://messenger.yupimsn.com/ > > > > > > > > > _______________________________________________ > > > Zope maillist - Zope(a)zope.org > > > http://mail.zope.org/mailman/listinfo/zope > > > ** No cross posts or HTML encoding! ** > > > (Related lists - > > > http://mail.zope.org/mailman/listinfo/zope-announce > > > http://mail.zope.org/mailman/listinfo/zope-dev ) > > > > > > > _________________________________________________________________ > Charla con tus amigos en línea mediante MSN Messenger: > http://messenger.yupimsn.com/ > >

1 0

GUID Equivalent in Zope?
by Philip Kilner 12 Sep '03

12 Sep '03

Hi All, We need to be able to add a system-generated unique key string to a record entered into an RDBMS via a Zope application. The same database is also accessed by an ASP application which uses GUIDs for this function: - - Is there something similar to a GUID generator in Zope? - If so, would it be practical to actually generate this string in the same format as MS GUIDs (I know they look horrible, but an trying to keep equivalence between the ASP-powered functions and the Zope-powered functions)? FWIW, the Zope application is on Win32, so perhaps we could get Windows to generate us a GUID? Thanks in anticipation for any input! -- Regards, PhilK Email: phil(a)xfr.co.uk / Voicemail & Facsimile: 07092 070518 "the symbols of the divine show up in our world initially at the trash stratum." Philip K Dick

3 5

Re: Simple way to obfuscate email addresses to foil spambots?
by Josef Albert Meile 12 Sep '03

12 Sep '03

>Does anyone have any suggestions as the best way to, within Zope, >obfuscate email addresses such that, when passed an email, a script >obfuscates it from being picked up by email-address >collecting robots? > >Or any other creative anti-spam tricks.. I work at an educational >nonprofit and our spam load seems to be increasing exponentially.. In the past, I was using a Javascript that I translated to python: http://www.zope.org/Members/jmeile/email%20encoder But for some reason it shows the real address on the html source on netscape 4.x under zope. Without zope, the javascript works perfect also in netscape 4.x. Anyway, now I'm using this on the body of my pages: <script language="JavaScript">jemail("username","domain","");</script> or <script language="JavaScript">jemail("username","domain","linkText");</script> If you use the first call, then the text of the email link will be the e-mail address. The second one allows you to specify a text, ie: 'Contact us'. And the javascript code is: function jemail(user, domain, text){ if (text=='') document.write('<a href="'+'mailto:'+user+'@'+domain+'">'+user+'@' +domain+'</a>') else document.write('<a href="'+'mailto:'+user+'@'+domain+'">'+text+'</a>') } You can combine it with dtml like this: def splitMail(myEmail): return myEmail.split('@') Then: <dtml-let splitedMail="splitMail(myEmail)" username="myEmail[0]" domain="myEmail[1]"> <script language="JavaScript">jemail("&dtml-username;","&dtml-domain;","linkText");</script> </dtml/let> And if you are using Zclasses or python Classes, then you can store the encoded email as an attribute and you won't have to write the ugly and long code again. I'd like to use zpt, but I haven't had time to think about it. Regards, Josef _________________________________________________________________ Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail

2 2

RE: [Zope] prevent quoting in tal:attributes
by Passin, Tom 12 Sep '03

12 Sep '03

[Milos Prudek] > How can I prevent quote escaping in tal:attributes? My attribute > contains many quotes itself, and ZPT automatically escapes them. > > Details: > ... > The result of this when rendered via ZPT is this: > > onmouseover="MM_swapImage("contacts", "", > "/contacts_on_cs.gif", 0)" > > I need to change those " back to single quotes. In tal:replace I > could use the "structure" modifier, but it does not work for > tal:attributes. You do not have to change the " back. The browser will do that for you when it parses the attribute values. Although I knew that this is how things are supposed to work, I just tested it (using your example) in IE and Mozilla/Firebird, and it worked as expected - the mouseover called the function correctly (I wrote a tiny function that popped up an alert). So not to worry. Cheers, Tom P

1 0