- Zope - Zope lists

Re: CookieCrumbler: Login a user without a "login_form" Template
by Nico Grubert 13 Oct '03

13 Oct '03

hello jens, well, I set the cookie in the RESPONSE like this: --- def login_User(self, REQUEST=None): "login" req = REQUEST resp = REQUEST.RESPONSE name = 'testuser' # this user exists in acl_users pw = '123' ac = encodestring('%s:%s' % (name, pw)) req._auth = 'basic %s' % ac resp._auth = 1 cookie_name = '__ac' cookie_value = quote( ac ) resp.setCookie( cookie_name, cookie_value, path='/') # set the '__ac' auth cookie pt = getattr(self, 'welcome') # get a page template return pt(REQUEST) --- The code is taken from CookieCrumbler (modifyRequest() method). Unfortunately, this does not work. After I call this External Method I am still not logged in. I am redirected to: http://localhost:8080/testfolder/myZPT/login_form?came_from=... Anything I missed? > Look at how the CookieCrumbler sets the cookie and replicate that. A > cookie that you set in a request will only be read *during the next > request*. ______________________________________________________________________________ Die Besten ihrer Klasse! WEB.DE FreeMail (1,7) und WEB.DE Club (1,9) - bei der Stiftung Warentest - ein Doppelsieg! http://f.web.de/?mc=021184

1 0

Re: CookieCrumbler: Login a user without a "login_form" Template
by Jens Vagelpohl 12 Oct '03

12 Oct '03

On Sunday, Oct 12, 2003, at 15:25 US/Eastern, Nico Grubert wrote: > def loginUser(self, REQUEST=None, RESPONSE=None): > "login a user into Zope" > qry = REQUEST.get('qry', '') > if qry == 'whatever': > # login user "testuser" in Zope > cookie_name='__ac' > cookie_value='xyz' > RESPONSE.setCookie( cookie_name, cookie_value, path='/') > else: > # ... user not logged in > > > how does Zope know the user (username, password, roles, domains) who > is logged in? Please keep this on the list. Look at how the CookieCrumbler sets the cookie and replicate that. A cookie that you set in a request will only be read *during the next request*. jens

1 0

CookieCrumbler: Login a user without a "login_form" Template
by nicogrubert＠arcor.de 12 Oct '03

12 Oct '03

Hi there, I am using Cookie Crumbler to authenticate users in Zope. Am I right that Cookie Crumbler needs a "login_form" with fields 'username' and 'password' template to login users in Zope or is it possible to login a user in Zope without such a template, e.g. in an External Method ? In Zope, I have a folder containing: - cookie_authentication object - a simple Page Template "inputForm.html" with an input textfield 'qry' - an External Method "loginUser" - a "logged_in" Page Template the users sees if he is looged in successfully - an acl_users folder containing 1 user "testuser" (password: 123456, roles: Manager) The Page Template "inputForm.html" contains a submit button which calls the External Method "loginUser". In the External Method I want to login the currently anonymous user in Zope with username "testuser" and password "123456" (This user can be found in the acl_users folder). How can I do that? How do I need to modfify the REQUEST object to tell the Cookie Crumbler that the anonymous user now needs to be logged in? my External Method looks like this: ---------- def loginUser(self, REQUEST=None): "login a user into Zope" qry = REQUEST.get('qry', '') if qry == 'whatever': # login user "testuser" in Zope #... maybe something like ???: ?REQUEST['__ac_name'] = 'testuser' ?REQUEST['__ac_password'] = '123456' ?return self.logged_in(REQUEST) else: # ... user not logged in ------------ Any idea how I can login the current anonymous user in Zope within this External Method? thanks in advance, -nico

2 1

CookieCrumbler: Login a user without a "login_form" Template
by Nico Grubert 12 Oct '03

12 Oct '03

Hi there, I am using Cookie Crumbler to authenticate users in Zope. Am I right that Cookie Crumbler needs a "login_form" with fields 'username' and 'password' template to login users in Zope or is it possible to login a user in Zope without such a template, e.g. in an External Method ? In Zope, I have a folder containing: - cookie_authentication object - a simple Page Template "inputForm.html" with an input textfield 'qry' - an External Method "loginUser" - a "logged_in" Page Template the users sees if he is looged in successfully - an acl_users folder containing 1 user "testuser" (password: 123456, roles: Manager) The Page Template "inputForm.html" contains a submit button which calls the External Method "loginUser". In the External Method I want to login the currently anonymous user in Zope with username "testuser" and password "123456" (This user can be found in the acl_users folder). How can I do that? How do I need to modfify the REQUEST object to tell the Cookie Crumbler that the anonymous user now needs to be logged in? my External Method looks like this: ---------- def loginUser(self, REQUEST=None): "login a user into Zope" qry = REQUEST.get('qry', '') if qry == 'whatever': # login user "testuser" in Zope #... maybe something like ???: ?REQUEST['__ac_name'] = 'testuser' ?REQUEST['__ac_password'] = '123456' ?return self.logged_in(REQUEST) else: # ... user not logged in ------------ Any idea how I can login the current anonymous user in Zope within this External Method? thanks in advance, -nico ______________________________________________________________________________ Horoskop, Comics, VIPs, Wetter, Sport und Lotto im WEB.DE Screensaver1.2 Kostenlos downloaden: http://screensaver.web.de/?mc=021110

1 0

File url in a network
by F. Troester 12 Oct '03

12 Oct '03

Hello, I need some help. I don'n know how to specify a file url in a network. For uploading and creating an object (within the Product External File) I need <dtml-call "uploadCreate(target_filepath=target,upload_file=fileurl)" > with the file_url as upload_file. I get the error [Errno 2] No such file or directory: \\192.168.1.172\C:\FH-Unterlagen\Vorlesungen\MT\KFZ-MT\Folien\Temp\Titelblat t.pdf when I use this function with the fileurl='\\192.168.1.172\C:\FH-Unterlagen\Vorlesungen\MT\KFZ-MT\Folien\Temp\ Titelblatt.pdf'. How can I specify the file in the network? Thank you for an advice Fritz Troester

1 0

zope + certification
by Ruslan Spivak 11 Oct '03

11 Oct '03

Hello. Just interesting, if there is some kind of certification programs for zope developers. Best regards, Ruslan

1 0

zope and python global variables?
by Ted holden 11 Oct '03

11 Oct '03

I notice that zope doesn't like the idea of the file containing functions for use as external modules containing global variable assignments. For that matter, zope doesn't seem to be able to deal with python classes either. I have an application which in its pygtk version consists of a number of global assignments, a number of function definitions, and finally a gtk.main() line. I wish to create a zope version of the same application and one requirement for that is that the application retain its state (global variables) somehow or other. What is the preferred way of doing that in zope?

3 2

code problem
by Jianping Zhu 11 Oct '03

11 Oct '03

I am new to zope web application I want to creat a tab interface I copy following code form somebody else <html metal:use-macro="container/standard_template.pt/macros/page"> <div metal:fill-slot="body"> <table width="100%" cellpadding="0" cellspacing="0" tal:define="username user/getUserName; selectedTab request/tab> </table> </div> </html> When i test it I get Zope Error Zope has encountered an error while publishing this resource. Error Type: KeyError Error Value: tab How can i fix this problem? Thanks

2 2

RE: [Zope] sorting results by time
by Dieter Maurer 11 Oct '03

11 Oct '03

Please stay on the list... Katie Legere wrote at 2003-10-10 16:16 -0400: > Can you give me an example? I have tried several things that don't work... > Basicalle, without the 'fluff' I have ... > > >  > > <dtml-in expr="objectValues('File')" > sort="bobobase_modification_time" reverse> <dtml-if expr="bobobase_modification_time() > _.ZopeTime()-10"> ... </dtml-if> Dieter

1 0

RDBMS Applications and direct calling of script(python) and sql methods
by Eric Merritt 11 Oct '03

11 Oct '03

I am looking to use zope for a database driven web application. For the most part zope looks like a good fit and will definatly speed up development. However, there seems to be a major security issue for database driven sites. Lets take simple example, assume that each user has an id that is keyed to his 'stuff'. The zsql method must be passed this id to access his stuff. This is all fine and good, A script(python) method could provide this to the zsql method behind the scenes without any great issue. The problem comes in when the user attempts to access this zsql method from via its url. Going this route he could pretty easily supply and arbitrary id and get access to information that he shouldn't have. This assumes that the user is aware of or can guess the name of the zsql method. This isn't enough of a protection in my mind. I am sorry if I wasn't super coherent in this post, I had a very long day and late night last night. Thanks for the input, Eric __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com

4 8