September 2003 - Zope

Authentication questions
by Mitch Pirtle 10 Sep '03

10 Sep '03

Hi listers, I'm currently discussing requirements for yet another Zope/Plone portal for the company that I'm working for; and the issues with this particular site include mixing accounts from both internal employees and external consultants. Not all employees will have access to this site. The internal staff are currently authenticated via Windows (and Active Directory accounts) which is a critical requirement. The external folks will only be accessing this one site, so their accounts are very site-specific. What is the most logical way to have both specific AD accounts (not the whole directory) and Zope user accounts authenticate for one site? -- Mitch

4 5

Re: [Zope] catalog and search refining
by Lee Harr 10 Sep '03

10 Sep '03

>>I have the basic use of catalogs and searching worked out... >>I can create indexes and metadata and make a form to search >>for and link to various things. >> >>My problem now is that I find a lot of objects that are just >>"parts" of the real documents. So, my links end up being to >>the bare content, rather than to the content wrapped up >>in my website. > >How do you dinsinguish between 'parts' and 'content wrapped up'? > I guess that is the basic question.... For instance, I might have a menu defined in a dtml-method, a navigation bar in a dtml-method and an article in a dtml-document. Those might all be in a folder, with an index_html to wrap them up in to a complete page. So, maybe my search should only return index_html page hits... except that (of course) I have some exceptions to that rule :o) Or maybe each article needs to have some metadata which tells how it should be accessed. Probably I need to rethink the whole structure of the site with cataloging in mind. Any pointers? _________________________________________________________________ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus

2 1

Re: [Zope] traverse_subpath with index_html ?
by Lee Harr 10 Sep '03

10 Sep '03

>>Is there a way to use traverse_subpath in a page template >>called index_html without having index_html in the url? >> >>so, for instance, if I have a template called aaa which just >>prints the traverse subpath, I can call it with: >> >>http://example.com/aaa/bbb/ccc >> >>and get: ['bbb', 'ccc'] >> >>but if it is called index_html I would have to use: >> >>http://example.com/index_html/bbb/ccc > >That's odd, I'd say your first example looks like a bug. > >Submit it at http://collector.zope.org or ask on zpt(a)zope.org and maybe >Evan can shed some light... > Not sure I understand... >From what I've read: """ If your script is traversed, meaning that other path elements follow it in a URL, then those path elements are placed in a list, from left to right, in this variable """ So, are you saying that /aaa/bbb/ccc should not give ['bbb', 'ccc'] or are you saying that /bbb/ccc should ALSO give ['bbb', 'ccc'] ? It does seem to me that index_html IS being traversed, even though it may be that it is being traversed implicitly. Thanks for your time. _________________________________________________________________ Add photos to your messages with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail

2 1

Re: [Zope] Local Roles and Acquisition
by Jaroslav Lukesh 10 Sep '03

10 Sep '03

> Odesílatel: nwingfield(a)che-llp.com > I am developing the security model for a ZODB-based document management > Product (with a capital P). I am only using two primary local roles: > 'Viewer' and 'Owner.' Because I wish to mimic the security model in a > Linux/UNIX environment, I would like to grant everyone at least the > 'Viewer' local role on the root of the folder/document tree, but have the > option to lock down particular folders at a lower point in the tree. For > example: > > Home (Everyone = 'Viewer') > | > -------------------------- > | | > Joe's stuff Sam's stuff > (Joe = 'Owner') (Sam = 'Owner') > > In this situation, I do not wish for local roles to be acquired from above. > In other words, I don't want Joe to acquire the local role of 'Viewer' when > attempting to look at Sam's stuff. Disable "Viev" rights in "authenticated_User" group via ZMI REgards JL.

1 0

Re: Zope Digest, Vol 2, Issue 8
by Gabriel Genellina 09 Sep '03

09 Sep '03

At 9/9/2003 11:08, you wrote: >Error Type: IOError >Error Value: [Errno 2] No such file or directory: 'chr1/CDS.htm'" > >The external method is in a folder called database, inside that folder are >14 folders called chr1, chr2, chr3 etc..., and inside any folder is a DTML >document called CDS.htm. Please help me with this because I don't know >what's the problem. Don't confuse the Zope hierarchy stored in the ZODB with folders in the filesystem. You can't use open() to access a DTML document inside a folder stored in Zope, because it's not a file contained in a directory. To enumerate all folders use objectValues('Folder'); you can get the DTML Document using folder['CDS.htm'] and you can get the raw document source with document_src(). And you can use a python script instead of an external method. See the API Reference in the Zope Book. And try to learn regular expressions, those boring string searches are really very much simpler. Gabriel Genellina Softlab SRL

1 0

Local Roles and Acquisition
by nwingfield＠che-llp.com 09 Sep '03

09 Sep '03

I am developing the security model for a ZODB-based document management Product (with a capital P). I am only using two primary local roles: 'Viewer' and 'Owner.' Because I wish to mimic the security model in a Linux/UNIX environment, I would like to grant everyone at least the 'Viewer' local role on the root of the folder/document tree, but have the option to lock down particular folders at a lower point in the tree. For example: Home (Everyone = 'Viewer') | -------------------------- | | Joe's stuff Sam's stuff (Joe = 'Owner') (Sam = 'Owner') In this situation, I do not wish for local roles to be acquired from above. In other words, I don't want Joe to acquire the local role of 'Viewer' when attempting to look at Sam's stuff. Because Zope makes the bold assertion that security should always get more permissive the deeper one traverses the object hierarchy, is there no way to do this short of hacking the 'getRolesInContext()' method? I have no interest in tweaking the permission-to-role grid on every particular folder and document, as this system will contain an indefinite depth of folders and a large volume of documents (hundreds of thousands). Thanks! Nathaniel Wingfield

3 2

Zope 2.6.2 Release Announcement
by Matthew T. Kromer 09 Sep '03

09 Sep '03

Zope 2.6.2 Now Available Zope 2.6.2 represents a development step in the next Zope release formed with a large number of community contributions. You may download Zope 2.6.2 from Zope.org: http://www.zope.org/Products/Zope/2.6.2/ Users of the Zope source release should note that Python 2.1.3 is now the required platform. Python 2.1.3 includes a fix to an issue that could cause crashes in Zope. Users who upgrade from source MUST RUN a make clean and make command to build the proper binaries correctly; distutils will skip compilation of the library modules needed for Zope and will cause errors if they are not up to date. Particular features of interest in Zope 2.6.2: * Fixed an error where ZClasses that subclassed ObjectManager would not load. * Fixed a case where objects trying to check access rights on behalf of another user were unable to do so. * Fixed memory leak with Page Templates * Python 2.2 compatibility fixes * Back ports of BTrees fixes * Back ports of ZODB fixes relating to the packing of storage, where a packed database could contain an UNDO transaction which referred to data which had been discarded by the pack * A fix for fsrecover.py which prevented it from recovering any data * Fixes for collector issues 256, 514, 683, 814, 816, 823, 875, 882, 892, 902, 928, 937, 939, 954, 956, 959, 964 For more information on what is new in this release, see the CHANGES.txt and HISTORY.txt files for the release: * http://www.zope.org/Products/Zope/2.6.2/CHANGES.txt * http://www.zope.org/Products/Zope/2.6.2/HISTORY.txt For more information on the available Zope releases, guidance for selecting the right distribution and installation instructions, please see: http://www.zope.org/Documentation/Misc/InstallingZope.html -- Matt Kromer Zope Corporation http://www.zope.com/

1 0

RE: [Zope] MAILBOXER questions
by Meilicke, Scott 09 Sep '03

09 Sep '03

Can you grep through the Mailboxer directory for a phrase below to try and find where it is located? grep -r "This is the ezmlm program. I'm managing the" or similar -Scott -----Original Message----- From: Paul Resnikoff [mailto:paulr@stanfordalumni.org] Sent: Tuesday, September 09, 2003 11:32 AM To: zope(a)zope.org Subject: [Zope] MAILBOXER questions I have successfully started using Mailboxer in a Zope installation, but am having great difficulty customizing the email messages that are sent to users when they subscribe, unsubscribe, or do other actions. I thought that I would be able to easily alter some DTML documents, but they seem hidden somewhere. For example: After a user subscribes, they get this message which I cannot seem to alter: "Hi! This is the ezmlm program. I'm managing the example(a)example.com mailing list. I'm working for my owner, who can be reached at example-owner(a)example.com. Acknowledgment: I have added the address paul(a)example.com to the interviews mailing list." Has anyone run into the same problem? Paul ____________________________________________________________________ _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient or any employee or agent responsible for delivering it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files.

1 0

Re: [Zope] Local Roles and Acquisition
by nwingfield＠che-llp.com 09 Sep '03

09 Sep '03

Dylan, I'm sure if we're on the same page or not. Perhaps it would help to more fully explain the situation. I spoke of 'Viewer' and 'Editor' (actually I'm recycling 'Owner') roles. On my root folder, these are loosely mapped to the 'View' and 'Edit' privileges, respectively. Almost all of my methods are restricted to one of these two privileges using declareProtected(). In order to granularly assign permissions to particular users on particular objects, I add local roles to each object, mapping a particular user to a role. The problem comes in when Zope combines the explicit local roles with any local roles granted on all parent objects, effectively granting a user more roles than it ought. I understand that you can assign default privileges to a particular role programmatically. Concerning setPermissionDefault(), the documentation says "Note that it is not always necessary to use this method. All permissions for which you did not set defaults using setPermissionDefault are assumed to have a single default role of Manager." This said, I'm not sure how adding this into my product code will prevent the "trickle down" local role effect. Nathaniel Dylan Reinhardt <zope@dylanreinha To: nwingfield(a)che-llp.com rdt.com> cc: Zope Users <zope(a)zope.org> Subject: Re: [Zope] Local Roles and Acquisition 09/09/2003 11:36 AM Please respond to zope On Tue, 2003-09-09 at 07:59, nwingfield(a)che-llp.com wrote: > In this situation, I do not wish for local roles to be acquired from above. > In other words, I don't want Joe to acquire the local role of 'Viewer' when > attempting to look at Sam's stuff. OK. That's easy enough to specify. > > Because Zope makes the bold assertion that security should always get more > permissive the deeper one traverses the object hierarchy, It does? Maybe we have different definitions of "deeper" but I think that standard practice is exactly the opposite of what you describe. > is there no way > to do this short of hacking the 'getRolesInContext()' method? Sure. Use security assertions in your product code to limit viewing-related privileges to owner and manager by default. Unless I'm grossly misunderstanding the question, you should be able to accomplish everything you need right in your product code. Check out this link for more info on security assertions. http://zope.org/Members/mcdonc/PDG/chap5zdg.stx HTH, Dylan

2 1

(no subject)
by zhimin＠iss.nus.edu.sg 09 Sep '03

09 Sep '03

>From nobody Tue Sep 9 12:22:33 2003 Received: from unknown (HELO mail.python.org) (12.155.117.29) by zulu.avenirsolutions.com with SMTP; 9 Sep 2003 07:33:14 -0000 Received: from localhost.localdomain ([127.0.0.1] helo=mail.python.org) by mail.python.org with esmtp (Exim 4.22) id 19wdy4-0005Kz-Qa; Tue, 09 Sep 2003 04:35:20 -0400 Received: from webmail.iss.nus.edu.sg ([137.132.244.144] helo=kingfisher.iss.nus.edu.sg) by mail.python.org with esmtp (Exim 4.22) id 19wdxy-0005IJ-EC for zope(a)zope.org; Tue, 09 Sep 2003 04:35:14 -0400 To: zope(a)zope.org X-Mailer: Lotus Notes Release 5.0.8 June 18, 2001 Message-ID: <OF5F2C902E.2D048996-ON48256D9C.002DF7D5(a)iss.nus.edu.sg> From: zhimin(a)iss.nus.edu.sg Date: Tue, 9 Sep 2003 16:26:26 +0800 X-MIMETrack: Serialize by Router on kingfisher/ISS(Release 5.0.8 |June 18, 2001) at 09/09/2003 04:35:28 PM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii X-Spam-Status: OK (zopelist 0.000) Subject: [Zope] running Zope with python -O option X-BeenThere: zope(a)zope.org X-Mailman-Version: 2.1.2 Precedence: list List-Id: Users of the Z Object Publishing Environment <zope.zope.org> List-Unsubscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=unsubscribe> List-Archive: <http://lists.zope.org/pipermail/zope> List-Post: <mailto:zope@zope.org> List-Help: <mailto:zope-request@zope.org?subject=help> List-Subscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=subscribe> Sender: zope-bounces(a)zope.org Errors-To: zope-bounces(a)zope.org Hi, Is it ok to run Zope with python -O option? e.g. python -O z2.py This will run Zope with optimized bytecode .pyo files instead of .pyc files. How's the performance gain? Any potential problem? Thanks and regards, _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0