September 2003 - Zope

Stuck with newSecurityManager in an access rule
by Gilles Lenfant 05 Sep '03

05 Sep '03

Hi, I used successfully newSecurityManager in a Product to change dynamically the user during a transaction (running some methods as owner). I tried to use this to change dynamically the user in a special folder hierarchy based on a request parameter. For doing this in this folder, I made standard user folder, a Python script as access rule that calls an external method like this... Python script (setUser1)... ==== container.setUser2(container) return ==== External method setUser2... ==== from AccessControl.SecurityManagement import newSecurityManager requestKey = 'an_userid' def setUser2(container): anUserId = container.REQUEST.get(requestKey, None) userFolder = container.acl_users if anUserId: userObj = userFolder.getUser(anUserId).__of__(userFolder) if userObj: newSecurityManager(container.REQUEST, userObj) return ==== The newSecurityManager is executed but seems to have no effect on the user during the rest of the transaction : <dtml-var AUTHENTICATED_USER> always shows "Anonymous User" in a template for which the above access rule is executed, and the REQUEST has a valid "an_userid" key. Did I miss something somewhere ? Why such a construct works in a Product and not in an external method ? Many thanks in advance. --Gilles

3 2

The persistent variable
by Børge Kjeldstad 05 Sep '03

05 Sep '03

First: again apologizing for having mixed up the words "vice" and "wise". I truely felt like an idiot and a no-brain. I hope I did not insult anybody. Mea maxima culpa. The bacground for my message was my eagernes to try to contribute, even with my small abilities, to the zope community which I find great and impressive! That stupid word "vice", I must have gotten in my head from the TV-series Miami Vice, some years ago. To much TV is dangerous :-) Now to the problem: I have a long time been fighting to find and establish something that I think in your language is called a "persistent variable". This variable, I wanted to use to personalize a website. Further, as my programming knowledge is so severe, I was looking for an easy way to do this, i.e. something that in pseudo code would look like this: set variable A let A = 1 And then later use variable A like this: if A = 1 do something However, I did not find an easy way to do this. My next plan was then to use cookies: <dtml-call expr="RESPONSE.setCookie('guest', 'C')"> And this: <dtml-if expr="REQUEST.has_key('guest', 'C')"> <dtml-var site_map> </dtml-if> However this also did not work. It was as though my cookie disappeared. Chris Withers then supplied mit with the following help: "You could look in REQUEST.cookies to be more on the safe side. I wonder what path is being set on your cookies? '/' is always a safe bet to prevent wierdness like this." I have try to understand and togle with this, but maybe I still do not understand the concept of cookies and the REQUEST object. I still cannot make it work. However, now I just read Dieter Maurers message (Re: [Zope] Variables and SubFolders): "Unless you do special things (modifiy a persistent object or store something in a session object) Zope forgets everything about a request as soon as it has been completed. Read the Zope Book (on zope.org) to learn something about sessions. Look for "manage_changeProperties" to learn how to modify properties of persistent objects. My question is then: Is properties maybe the easiest way to establish some "persistent variable" to play with in zope? (Sessions will until some more time unfortunately be to advanced for me.) I have also on this topic received the following good advices: - "The users are able to customise certain aspects of my application then the preferences are stored in a MySql database. When the user logs in, the application checks their user id and password but also reads in their preferences. These are used to apply style sheets and other various bits of customisation." [Stephen Slack] - "hint : Don't get started too much on DTML. Use python-scripts for things like this, and ZPT for presentation." [Geir Bækholt] I know I should follow these advices, but until some more time, both Python, zpt and sql databases are unfortunately beyond my knowledge ;-) Kind regards Børge

4 5

ZPT tal:define scoping with METAL
by Ed Leafe 05 Sep '03

05 Sep '03

I have a ZPT page where I need to create two sections that both iterate off of the same query. The query can be long, so I'd strongly prefer to run it once. No problem, I thought - just define it in an outer <div> tag - I've done that on lots of other pages. However, on this page, each of the two "inner" sections are defined as fill-slots for an overall template. Here's a rough idea of the structure: <html metal:use-macro="myTemplate"> <body>  <div tal:define="results here/someQuery"> <div metal:fill-slot="leftside"> <table> <tr tal:repeat="res results"> ... </tr> </table> </div> <div metal:fill-slot="rightside"> <table> <tr tal:repeat="res results"> ... </tr> </table> </div> </div> </body> </html> When this page is displayed, however, I get an error that "results" is not defined, and it points to the line with the first tal:repeat statement. I tried adding the 'global' keyword to the tal:define, but it made no difference. I'm guessing that the full page isn't being evaluated as it appears, but rather each of the slots is evaluated separately. Is that correct? If so, is there an alternative to having to define the "results" twice (once for each slot)? ___/ / __/ / ____/ Ed Leafe http://leafe.com/ http://opentech.leafe.com

3 3

Re: feed ZSQL "select" to a multiple selection property
by Daniel Ajoy 05 Sep '03

05 Sep '03

Thanks to both. It worked. But now I curious if there is a need to have the ZSQL method at all, or if there is a way to query the database directly from within the script. thanks again, Daniel On 2 Sep 2003 at 20:24, Dieter Maurer wrote: > Daniel Ajoy wrote at 2003-8-28 18:08 -0500: > > How can I feed a ZSQL "select" to a multiple > > selection property? > > You can use "Formulator" or use an adapter (a Python Script) > to your Z SQL Method. > > The adapter would look like this: > > return [r[0] for r in context.<yourZSQLMethod>()] > > > Dieter > From: Dustin Mitchell <dustin(a)ywlcs.org> > Subject: Re: [Zope] feed ZSQL "select" to a multiple selection > property > To: zope(a)zope.org > Message-ID: <20030901230748.GX17963(a)eleanor.internal.ywlcs.org> > Content-Type: text/plain; charset=us-ascii > > Use an SQL query as below, then call it from a Python script, located > within acquisition context, such as > > --- > rv = [] > for row in old_zsql_method: > rv.append(row.field1) > return rv > --- > > Then give the name of your Python script as the default value of the > "multiple" property. > > Dustin

2 1

Inheritance and the Search Engine : A Tragic Tale of Romance
by Edward Pollard 05 Sep '03

05 Sep '03

Greetings Zopers, I've got a quandary that I would like to solicit wisdom on. We are running Zope 2.6 as part of our website. Our central search engine that spans all our websites is running on ht-dig. Inheritance on zope is sending our search engine on infinite traversals of the Zope tree. This is caused, as you can probably guess, by relative linking (eg '../../blah.htm'), and one ill-formed url somewhere that gets the recursion started. This is not good. Now, I'm trying to create an environment where people can port their websites from the old non-templated world to the new Zope-templated one. However this necessitates a tolerance for bad coding, at the very least a tolerance so that one idiot with a (trivially) badly formatted url does not cause our search engine database to become somewhat close to useless as the same page is listed at 1000 distinct urls. Of course that just utterly destroys word search heuristics. It being my opinion that I'm not doing something completely batty and unusual, I thought there might be someone out there with greater understanding with which to enlighten me. Thanks for your time, --- Edward J. Pollard University of Lethbridge Web Development

3 3

acl_users
by Thomas Widmer 05 Sep '03

05 Sep '03

Hi Am I right that there is no extense documentation about automatic user creation and authentification in dtml-methods. I haven't found any. There is some little info about the variables and methods and I also found some discussion about it but I didn't success with that. For the use of a conference registration I want the applicants to be able to modify their indications after they subscribed a form. So I tried to create a user (with success) and authenticate him within the same method (without success). To create I use: ----------- <dtml-call "REQUEST.set('name',_.string.join([REQUEST.form.get('email')]))"> <dtml-call "REQUEST.set('pwd',REQUEST.form.get('last')+_.str(_.random.randint(0,9)))"> <dtml-call "REQUEST.set('password',pwd)"> <dtml-call "REQUEST.set('confirm',pwd)"> <dtml-call "REQUEST.set('roles', ['approvals'])"> <dtml-call "REQUEST.set('domains', '')"> <dtml-call "acl_users.manage_users(submit='Add', REQUEST=REQUEST)"> ----------- to confirm within the same method or after clicking a submit button, there seem to be different possibilities: ----------- DTML-Method: <dtml-call "acl_users.authenticate(name, pwd, REQUEST)"> <dtml-call "acl_users.autorize(name, pwd, REQUEST)"> Python-Script: security.validate(access, container, name, value, roles) ---what means 'container' and 'value'??? ----------- Thanks for any hint! Thomas _____________________________________________________________ Finally, a free email address your friends will remember! Become you(a)EmailAccount.com at http://www.emailaccount.com/

3 2

testing with dtml-if
by garry saddington 05 Sep '03

05 Sep '03

Does anyone know the syntax to use with dtml-if when i want to do something like this: <dtml-if <dtml-var w>==1> do stuff </dtml-if> ? thanks garry

7 10

Scripts run as least privileged user necessary?
by Ken Causey 05 Sep '03

05 Sep '03

I'm running into a strange problem. I have a situation in which I want a script to treat Managers differently than other users. But I'm finding that whether or not I'm logged in as a manager or not the script only considers the user to be 'Anonymous User' as long as 'Anonymous' has View privilege for the script. If I change the Security permissions so that only 'Authenticated' can View the script then the user is properly identified. Is this expected behaviour? This is what I'm seeing on 2.6.1. As a test create a script with return _.SecurityGetUser() be sure to bind '_' to Namespace. Set that script so that the View privilege is allowed for 'Anonymous'. Stay logged in and run the script. Then change it so only 'Authenticated' as the View privilege, run it again. The behavior changes based on the permissions. Ken Causey

3 7

What happened to MetaPublisher?
by paulporter＠buffalotalks.com 05 Sep '03

05 Sep '03

Does anyone know the status of MetaPublisher? It was put out by Beehive in Germany but their web site doesn't seem to exist any more. It was www.beehive.de. If MetaPublisher is gone is there anything as good or better available that someone could recommend? Your input is greatly appreciated. Paul

2 1

Problem with http-logging in Zope 2.6.1
by Charlie Clark 05 Sep '03

05 Sep '03

Hi, I've noticed there is a problem with the http-server log in Zope 2.6.1. I've also noticed I'm not the first to notice this. 2.6 betas seem to contain the fix but I'm loathe to update my productive system. I've traced the error medusa/http_server. Is is correct simply to remove the offending double space in the logging string? ie. self.channel.server.logger.log ( self.channel.addr[0], ' - %s [%s] "%s" %d %d "%s" "%s"\n' % ( name, self.log_date_string (time.time()), self.request, self.reply_code, bytes, referer, user_agent ) ) becomes self.channel.server.logger.log ( self.channel.addr[0], '- %s [%s] "%s" %d %d "%s" "%s"\n' % ( name, self.log_date_string (time.time()), self.request, self.reply_code, bytes, referer, user_agent ) ) Thanx very much Charlie Clark

2 1