- Zope - Zope lists

Custom Method to edit PythonScript
by Christoph Landwehr 13 Sep '03

13 Sep '03

Hi, I would like create a custom DTML-Method to edit a python-script within Zope. The reason for this is that I would like to be able to control in certain ways so I don't want to use "ZPythonScriptHTML_editForm". The user must not be able to change the whole script but only parts I let him see. Something like the 'manage_edit' object of DTML-Methods is (more or less) what I need. The result would be a web-form that lets the user edit some parts of the script body, the parameter and some aditional python code is added by a script/method. (I hope this makes sense ...) I am trying understand how the "PythonScript.py" does things but do to my limited knowledge (Zope-Newbie) I get stuck. My idea was to use the read() function to read the body into my custom form an write it back with the write() function. But doing this I don't use the nifty code-checking feature which I would like to use. Could someone please give me a hint if I am totally off-track? Regards Christoph

2 1

PropertySheets in python products
by Richard Jennings 13 Sep '03

13 Sep '03

I am trying to create a product which supports multiple propertysheets and is accessible using the standard ZMI. Following the mxm Easy product (thanks to mxm!) and advice received on this site, I have arrived at the code listed below. This installs a product in its containing folder and when I view the item, I get the page rendered from OFS/dtml/propertysheets.dtml. Spartan, to say the least! I get a reference to webdav (to be expected) and an Add button. Clicking the button returns the error: Error Type: AttributeError Error Value: manage_addPropertySheetForm which is the name of the input control. There is no such method in propertysheets.py. My questions: 1. When I look at the dtml for OFS/dtml/propertysheets.dtml, I have the feeling I'm looking at unfinished business - am I? 2. I expect to see a form listing existing property sheets with controls for adding new ones - does this already exist, if so where? 3. I am I going about this in the right way or have I misunderstood completely? When I have finished, I intend to contibute component 'rpjCompoundItem' as a complement to mxm's mxmSimpleItem - it might help newbies like myself. TIA Richard Jennings --------------------------------------------- from OFS import SimpleItem from OFS.PropertySheets import PropertySheets from Products.ZCatalog.CatalogPathAwareness import CatalogAware from Globals import DTMLFile from DateTime import DateTime class ssCompoundItem(CatalogAware, PropertySheets, SimpleItem.SimpleItem): """A base class for creating compound components""" meta_type = 'ssCompoundItem' manage_options = ( {'label':'propertysheets', 'action': 'manage'}, )+ SimpleItem.SimpleItem.manage_options __ac_permissions__= SimpleItem.SimpleItem.__ac_permissions__ + \ ( ('Manage properties', ('manage_addPropertySheet', 'addPropertySheet', 'delPropertySheet' )), ('Access contents information', ('items', 'values', 'get', ''), ('Anonymous', 'Manager'), ), ('View management screens', ('manage',)), ) def __init__(self, id): "Inits the product with default values" self.id = id manage_addForm = DTMLFile('dtml/manage_addForm', globals()) # # constructor methods for adding component to folder. # def manage_addAction(self, id=None, REQUEST=None): "Add ssCompoundItem to ObjectManager" return addClass(self, id, ssCompoundItem, REQUEST) def addClass(self, id=None, theClass=None, REQUEST=None): "Add an arbitrary class to a folder to a folder." # if no id passed, generate one from the datetime if id == None: id = DateTime().strftime('%Y%m%d_%H%M%S') self._setObject(id, theClass(id)) if REQUEST is not None: getattr(self, id).manage_changeProperties(REQUEST) return self.manage_main(self, REQUEST) constructors = (manage_addForm, manage_addAction)

2 1

VisualCMS - error in adding site
by Jaroslav Lukesh 13 Sep '03

13 Sep '03

Hi all, does somebody try VisualCMS? With recomended dependant products and Zope 2.5.1/Win32 I cannot add site. Thanks, JL. Zope has encountered an error while publishing this resource. Error Type: TALESError Error Value: exceptions.NameError on global name 'HUSER' is not defined in "", at line 2, column 1 Traceback (innermost last): File C:\Program Files\zope-web\lukesh251\lib\python\ZPublisher\Publish.py, line 150, in publish_module File C:\Program Files\zope-web\lukesh251\lib\python\ZPublisher\Publish.py, line 114, in publish File C:\Program Files\zope-web\lukesh251\lib\python\Zope\__init__.py, line 159, in zpublisher_exception_hook File C:\Program Files\zope-web\lukesh251\lib\python\ZPublisher\Publish.py, line 98, in publish File C:\Program Files\zope-web\lukesh251\lib\python\ZPublisher\mapply.py, line 88, in mapply (Object: manage_addSite) File C:\Program Files\zope-web\lukesh251\lib\python\ZPublisher\Publish.py, line 39, in call_object (Object: manage_addSite) File C:\Program Files\zope-web\lukesh251\lib\python\Products\AtlantisBlueCMS\Portal.py, line 70, in manage_addSite File C:\Program Files\zope-web\lukesh251\lib\python\Products\AtlantisBlueCMS\CMSPage.py, line 284, in cmsadmin (Object: atgggg) File C:\Program Files\zope-web\lukesh251\lib\python\Shared\DC\Scripts\Bindings.py, line 252, in __call__ (Object: cms_page_edit) File C:\Program Files\zope-web\lukesh251\lib\python\Shared\DC\Scripts\Bindings.py, line 283, in _bindAndExec (Object: cms_page_edit) File C:\Program Files\zope-web\lukesh251\lib\python\Products\PageTemplates\PageTemplateFile. py, line 95, in _exec (Object: cms_page_edit) File C:\Program Files\zope-web\lukesh251\lib\python\Products\PageTemplates\PageTemplate.py, line 86, in pt_render (Object: cms_page_edit) File C:\Program Files\zope-web\lukesh251\lib\python\TAL\TALInterpreter.py, line 158, in __call__ File C:\Program Files\zope-web\lukesh251\lib\python\TAL\TALInterpreter.py, line 191, in interpret File C:\Program Files\zope-web\lukesh251\lib\python\TAL\TALInterpreter.py, line 523, in do_useMacro File C:\Program Files\zope-web\lukesh251\lib\python\TAL\TALInterpreter.py, line 191, in interpret File C:\Program Files\zope-web\lukesh251\lib\python\TAL\TALInterpreter.py, line 406, in do_setGlobal_tal File C:\Program Files\zope-web\lukesh251\lib\python\Products\PageTemplates\TALES.py, line 247, in evaluate File C:\Program Files\zope-web\lukesh251\lib\python\Products\PageTemplates\ZRPythonExpr.py, line 49, in __call__ (Info: vhroot.browserType(request['HTTP_USER_AGENT'])) File Python expression "vhroot.browserType(request['HTTP_USER_AGENT'])", line 2, in f File C:\Program Files\zope-web\lukesh251\lib\python\Products\AtlantisBlueCMS\CMSPage.py, line 338, in browserType (Object: atgggg) TALESError: (see above)

2 1

Zope Logout Problem
by Praveen Kumar 13 Sep '03

13 Sep '03

Dear All, I have been facing problem with Logout. When I click Logout it is not actually logging out. I'm calling the following code in the Login Script: *********LOGIN SCRIPT*************************** <dtml-call "RESPONSE.setCookie('Login_Name', _.SecurityGetUser().getUserName(), expires='0')"> <dtml-comment> <dtml-call "RESPONSE.setCookie('user_name', _.SecurityGetUser().getUserName(), expires='')"> </dtml-comment> <dtml-if "REQUEST.has_key('Login_Name')"> <dtml-in DateLookup> <dtml-if Reminder_Lookup_By_Login> <form><input style="font-size:15;font-weight:bold" type="button" value="Check Reminders" onClick="JavaScript:PopWindow738401()"></form> </dtml-if> </dtml-in> </dtml-if> In the Logout Page: ********************LOGOUT SCRIPT********************************* <dtml-var la_header>  <p>REQUEST:<br> <dtml-var REQUEST> <br> <p>RESPONSE:<br> <dtml-var RESPONSE> <br>  <dtml-call "RESPONSE.expireCookie('__ac')"> <dtml-call "RESPONSE.expireCookie('session')"> <dtml-call "RESPONSE.expireCookie('*')"> <dtml-call "RESPONSE.expireCookie('Login_Name')"> <dtml-call "RESPONSE.expireCookie('user_name')">   <p>REQUEST:<br> <dtml-var REQUEST> <br> <p>RESPONSE:<br> <dtml-var RESPONSE> <br>  </body> </html> Please suggest me how to solve this problem. -- Regards Praveen Kumar, SoftPro Systems Ltd, Ph: 91-40-23111806

5 9

RE: [Zope] Securing Zope and Special URLs
by Roy Rapoport 13 Sep '03

13 Sep '03

Jamie Heilman wrote: [Zope Security is an oxymoron] > 3) Never use DTML. Why? Also, one other thing -- we're doing the standard thing with database connections -- having zsql methods call zodbc connectors; aforementioned connectors are defined with the username/password needed to connect to the DB. Is it possible to either have the password dealt with dynamically (supplied by whatever it is that's calling the zsql method) and/or obscured somehow? -roy Content-Type: text/plain; charset="iso-8859-1" ------------------------------------------------- PLEASE READ THIS WARNING: All e-mail sent to or from this address will be received or otherwise recorded by the Fisher Investments corporate e-mail system and is subject to archival, monitoring or review by, and/or disclosure to, someone other than the recipient.

4 3

Securing Zope and Special URLs
by Roy Rapoport 13 Sep '03

13 Sep '03

Greetings everyone, As part of a re-engineering of our Zope infrastructure, I'm tasked with finding any documentation out there on how to secure Zope sites in a best-practices sort of way. Anyone got any pointers? Also, we're fronting Zope with Apache using mod_proxy to relay requests through. We'd like to block Zope management-type URLs from coming through the Apache server and hitting the Zope server (we'll do our management directly to the Zope instance). For this, I need to figure out what special patterns signify a Zope management URL. Some patterns I know about already include: /.*/[^/]*manage[^/]*$ (Any URL whose last component (excluding args) includes 'manage') /acl_users/ ^/Control_Panel.* ^manage_addProduct/ ^manage/ Any others? -roy Content-Type: text/plain; charset="iso-8859-1" ------------------------------------------------- PLEASE READ THIS WARNING: All e-mail sent to or from this address will be received or otherwise recorded by the Fisher Investments corporate e-mail system and is subject to archival, monitoring or review by, and/or disclosure to, someone other than the recipient.

3 2

Re: [Zope] Local Roles and Acquisition
by nwingfield＠che-llp.com 13 Sep '03

13 Sep '03

Thanks, Dylan. Ultimately I decided to modify getRolesInContext(). It seemed like the easiest fix and will allow much more flexibility in the long run in creating new roles and users. From a design perspective, it doesn't seem clean or efficient to engineer around Zope's standard operating procedures. Why not change them instead? In short, my new getRolesInContext() executes in the normal fashion, except when passed an object with my classes' meta_types. In this case, it checks local roles explicitly assigned to the object and its parent only, then returns only the local roles shared by both object and parent. Now I have a much more file-system-like level of security management. Yeah! Dylan Reinhardt <zope@dylanreinha To: nwingfield(a)che-llp.com rdt.com> cc: Zope Users <zope(a)zope.org> Subject: Re: [Zope] Local Roles and Acquisition 09/09/2003 02:05 PM Please respond to zope On Tue, 2003-09-09 at 09:47, nwingfield(a)che-llp.com wrote: > I spoke of 'Viewer' and 'Editor' (actually > I'm recycling 'Owner') roles. On my root folder, these are loosely mapped > to the 'View' and 'Edit' privileges, respectively. Almost all of my > methods are restricted to one of these two privileges using > declareProtected(). OK. > The problem comes in when Zope > combines the explicit local roles with any local roles granted on all > parent objects, effectively granting a user more roles than it ought. I'm not sure that's the only problem. It's easy enough to restrict acquisition of permissions. I think a bigger problem may be that you are defining roles coarsely. With only one editor role, it's going to be difficult to distinguish between "editor in one context" and "editor in another context". At a minimum, this sounds like a three-role system: - Viewer - Owner (default Editor) - Guest Editor If I understand you, everyone can view and owners can edit. On certain objects, you want to enable "guest" (non-owner) editing. To do this, create the GuestEdit role at the highest level it should apply and add it to the correct users' roles. If you want your guest editor list to be same for all objects that enable guest editing, you're pretty much done: just enable guest editing per object desired. On the other hand, if you want to define *who* has the guest edit role per object, that's going to be a lot more work. The standard way to do that would be to create a role for each desired permutation. :-) Depending on how many users and objects we're talking about, it may be worth thinking about creating a root-level method that has an Editor proxy role. This method could have one large mapping containing each object each user should be able to guest edit (or vice versa). Basic object permissions for inner objects are configured strictly and this method allows users to "pierce" the security for objects they should have greater access to. This solution isn't necessarily easy or foolproof, but might be worth considering if you're talking about a really large system with many different combinations of editors and objects. HTH, Dylan

4 6

How to calculate variables using DTML
by Alexander Alvarado 13 Sep '03

13 Sep '03

Hi I just want to create a new variable adding some other vatiables, something like: TTP= ( T_ADT + T_SRC + T_CHD)*TT_NITES As I recieve this variables from a previous form I guess I have to convert them into integer I thought that <dtml-set TTP="(_.int(ADT)+_.int(CHD)+_.int(SRC)*(_.int(TT_NITES))"> would work, but it does not. Hoe can I do this? Thanks !!!!!!!!!!!!!!!!!!!!!!!!! _________________________________________________________________ Charla con tus amigos en línea mediante MSN Messenger: http://messenger.yupimsn.com/

3 2

dtml-tree: method for header attribute?
by Tobias Herp 13 Sep '03

13 Sep '03

Hi, I have a dtml-tree tag with nowrap switched off (intentionally), and I'd like the wrapped lines to align below the text, rather than below the usual meta_type icon. This is how it looks like: <dtml-tree ><img src="&dtml-BASEPATH1;/&dtml-icon;" height="16" width="16" alt="&dtml-meta_type;"> <a href="&dtml-absolute_url;/manage_keyView" target="details">(visible link text)</a> (further info) </dtml-tree> When I put a '</td><td>' between the image and the link, it looks nice -- until the first branch is expanded (the colspan attribute is applied to the cell containing the image). I tried several CSS styles instead, but without success. Now I had a closer look at the header attribute of the tree tag; but I couldn't figure out how this is used, i.e. how the method must look like. Can please someone give me a hint? Tia, Tobias P.S. By the way: wouldn't it be great if the tree tag would be able to do the icon thing itself? ;-)

1 0

Re: How to calculate variables using DTML
by Alexander Alvarado 13 Sep '03

13 Sep '03

Found the problem, it was on the spaces !!! Thanks Giuseppe and Simon !!!! >From: Simon Michael <simon(a)joyful.com> >To: "Alexander Alvarado" <funalito(a)hotmail.com> >Subject: Re: How to calculate variables using DTML >Date: Fri, 12 Sep 2003 16:48:34 -0700 > >Make that <dtml-let> and it should work. Up until </dtml-let>. See also the >DTML reference in the zope book. _________________________________________________________________ Consigue aquí las mejores y mas recientes ofertas de trabajo en América Latina y USA: www.yupimsn.com/empleos

1 0