April 2006 - Zope - Zope lists

Automatically adding properties (keywords) to folders
by Terry Jones 20 Apr '06

20 Apr '06

I'd like to set up a folder in Zope with the property that when an object is put into it, the object has a keyword added to it automatically (and when the object is moved out of the folder, the keyword is removed). If you could do this, you would have a nice way to maintain a collection of such folders and have their contents appear elsewhere in a collection of Plone Smart Folders (using keyword criteria). Can anyone tell me how I should best go about doing this? I can imagine writing some python to run once in a while, find all the contents of the folder, add the keywords, etc. But that's far from being an ideal solution. Any pointers would be much appreciated. Regards, Terry

3 2

Python Generators and Zope question
by Palermo, Tom 20 Apr '06

20 Apr '06

All, I have a site that uses CookieCrumbler for user login. I need to track how many incorrect login attempts a user makes. I am trying to use a python generator to do this but it makes Zope hang when I try to do an invalid login (eg. no password or incorrect password). Here's a snippet: def make_counter(x): while 1: yield x x = x + 1 counter = make_counter(1) security.declarePublic('getUnauthorizedURL') def getUnauthorizedURL(self): ''' Redirects to the login page. ''' req = self.REQUEST resp = req['RESPONSE'] attempt = getattr(req, '_cookie_auth', ATTEMPT_NONE) if attempt == ATTEMPT_NONE: # An anonymous user was denied access to something. page_id = self.auto_login_page retry = '' elif attempt == ATTEMPT_LOGIN: # The login attempt failed. Try again. page_id = self.auto_login_page #retry = '1' retry = counter.next() I added the make_counter function. It seems the culprit is the retry = counter.next() bit. I tried doing this same thing with the make_counter function in an External method and then calling it from a python script like so: counter = context.make_counter(1) return counter.next() In that case, an unauthorized exception is raised complaining about next. I can however, just return the counter which gives me <generator object at 0xb48d56cc>. Am I calling the next method incorrectly or is there something else I'm missing or being dumb about? Thanks, Tom Palermo

2 1

RE: [Zope] Custom 404 - Resource not found
by Andy Yates 20 Apr '06

20 Apr '06

> > ... > >Changing standard_error_message does not seem change this error page. > > Maybe, you made a mistake? Yes, I made a mistake! In standard_error_message: <dtml-if error_message> <dtml-var error_message> <dtml-else> <h2>My TEST Site Error</h2> ... 404 errors hit the dtml-if and other errors, like attribute errors, go to the dtml-else. I was just modifying the else. Thanks!

1 0

Re: [Zope] Permissions, files and folders
by Sascha Welter 19 Apr '06

19 Apr '06

(Tue, Apr 18, 2006 at 12:00:12PM -0400) zope-request(a)zope.org wrote/schrieb/egrapse: > From: "Erik Billing" <erik(a)ekhagen.org> > Thank you, that worked nicely. But I was unable to call the LazyFilter from > the DTML document, I figure I have to import the ZTUtils module first. Is > there a special DTML-tag to do import? > > By the way? Is there some obvious documentation about the different modules > that I have missed? As I mentioned in an earlier letter I'm new to Zope and > I find it very hard to get an overview of all the different modules If you are new to Zope you should drop DTML like a hot potatoe and start doing your logic in python and your presentation in ZPT -- strictly parted. Also don't bother too much with implementing stuff with TTW means ("through the web" - the stuff you do from the ZMI). Better start doing filesystem python products. Read for example http://zopewiki.org/ZopeStarter - including the link to the "new" tutorial from upfrontsystems. The ZopeStarter page is a 5 minute read, but has good pointers to stuff that will get you started in the right directioin. Regards, Sascha

2 1

RE: [Zope] Cookie Crumbler/Authentication Question
by Palermo, Tom 19 Apr '06

19 Apr '06

Hi Dieter, Yes, I googled around a bit more and found this method. Works nicely: self.restrictedTraverse(['','login']).credentialsChanged(user,username,req.p assword) Thanks, Tom Palermo -----Original Message----- From: Dieter Maurer [mailto:dieter@handshake.de] Sent: Wednesday, April 19, 2006 1:44 PM To: Palermo, Tom Cc: 'zope(a)zope.org' Subject: Re: [Zope] Cookie Crumbler/Authentication Question Palermo, Tom wrote at 2006-4-18 22:29 -0400: >I am working on a site that uses CookieCrumbler for the authentication. >Part of this site allows a user to change their password via this line: >userfolder.manage_users(submit='Change', REQUEST=user_info). > >This works fine except after changing the password, the user is no >longer authenticated and an Unauthorized exception is raised. Is there >anyway to automatically keep the user logged in or re-authenticate them. Look at the CookieCrumblers "credentialChanged" method. -- Dieter

1 0

Cookie Crumbler/Authentication Question
by Palermo, Tom 19 Apr '06

19 Apr '06

All, I am working on a site that uses CookieCrumbler for the authentication. Part of this site allows a user to change their password via this line: userfolder.manage_users(submit='Change', REQUEST=user_info). This works fine except after changing the password, the user is no longer authenticated and an Unauthorized exception is raised. Is there anyway to automatically keep the user logged in or re-authenticate them. Thanks, Tom Palermo

2 1

Custom 404 - Resource not found
by Andy Yates 19 Apr '06

19 Apr '06

Is there a way to customize the Zope 404 error page? Site Error An error was encountered while publishing this resource. Resource not found Changing standard_error_message does not seem change this error page. I need to do this inside Zope or via the apache front end which talks to Zope through mod_rewrite/proxy and Virtual Host Monster. Thanks! Andy

2 1

Re: [Zope] Getting www.domain.com:8080/manage to go through Apache
by michael nt milne 19 Apr '06

19 Apr '06

Ok, good to know that. So if I get this right I add in _vh_manage to the VirtualHostRoot in Zope which will cause /manage/ to be appended onto the all the URLs within Zope. The correct pages will still be served and the Apache re-write rule will be satisfied... On 4/18/06, Alexis Roda <alexis.roda.villalonga(a)gmail.com> wrote: > > michael nt milne escribió: > > ok, thanks. Does anyone know how to re-write everything going through > > /manage/ ? > > > > Part of the answer is here (from the Virtual Host Monster's "About" tab): > > Inside-out hosting > > Another use for virtual hosting is to make Zope appear to be part of a > site controlled by another server. For example, Zope might only serve > the contents of http://www.mycause.org/dynamic_stuff. To accomplish > this, you want to add "dynamic_stuff" to the start of all Zope-generated > URLs. > > If you insert VirtualHostRoot, followed by one or more path elements > that start with '_vh_', then these elements will be ignored during > traversal and then added (without the '_vh_') to the start of generated > URLs. For instance, a request for "/a/VirtualHostRoot/_vh_z/" will > traverse "a" and then generate URLs that start with /z. > > In our example, you would have the main server send requests for > http://www.mycause.org/dynamic_stuff/anything to Zope, rewritten as > /VirtualHostRoot/_vh_dynamic_stuff/anything. > > > > > HTH > -- michael

1 0

Re: [Zope] DELETE Objects
by Erik Billing 18 Apr '06

18 Apr '06

Ok. Thanx. But why is it like this? I imagine that deleting an object in a folder where I do not have permission to delete every object, or the folder itself, is a quite common task. Using the manage_delObjects and a proxy really feels like I'm fighting the zope security instead of getting support by it. Or am I thinking wrong in the first place? What I really want to do is letting users answer a question object and the answers should be stored somewhere. A user must later be able to change or remove his answer, but of course not the answers of any other user. I place all answers objects belonging to a certain question in one folder, and I have the previously mentioned situation. I know it is not that much of a problem to use a proxy, but if I can change my design in some way so can avoid the proxy I imagine that would be better. /Erik On 4/18/06, Andreas Jung <lists(a)zopyx.com> wrote: > > > > --On 18. April 2006 14:15:48 +0200 Erik Billing <erik(a)ekhagen.org> wrote: > > > I want to create a python script that deletes a specific file from a > > folder. For now, the user who is calling the script does not have the > > Delete objects permission on the folder, only the file which he should > be > > able to delete. I have previously used the delObjects method on the > > folder to remove the file, but this requires the Delete obejcts > > permission on the folder itself. > > folder.manage_delObjects() is the only API method you should use. > If your script needs additional permissions you must give the script > the proxy role Manager. > > -aj > > -- > ZOPYX Ltd. & Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany > Web: www.zopyx.com - Email: info(a)zopyx.com - Phone +49 - 7071 - 793376 > E-Publishing, Python, Zope & Plone development, Consulting > > >

3 3

Re: [Zope] Permissions, files and folders
by Dieter Maurer 18 Apr '06

18 Apr '06

Erik Billing wrote at 2006-4-18 11:42 +0200: >Thank you, that worked nicely. But I was unable to call the LazyFilter from >the DTML document, I figure I have to import the ZTUtils module first. Is >there a special DTML-tag to do import? No, you have to go through a Python Script. But, you can make it generic, something like a "filterUnauthorized" script. > ... >Is there any complete api reference avalible? The Plone people have an "epidoc" documentation online (I do not have the url at hand, you have to search for it). Like any documentation generated automatically from the source (this is valid also for Java documentation), it is complete but contains more details than you might be interested in. -- Dieter

2 1