- Zope - Zope lists

Problem with Python Win32 Extensions
by Igor Leturia 02 Apr '03

02 Apr '03

Hi! I am making some changes to the LocalFS product, in windows. The problem is that I need to read the security permissions of a file. I have found a piece of code in the Python Win32 Extensions to do so (you can see it at the end of the message). The problem is that the piece of code works properly if I run it in ActivePython or in Python+Python Win32 Extensions, but not if I run it in the Python version that comes with Zope. Doesn't Zope's Python include Python Win32 Extensions. I think it does, as the win32security module for example is there, but then why doesn't the code work? Any help will be appreciated. Igor Leturia This is the piece of code. The first function call, GetFileSecurity, works, but the second, GetSecurityDescriptorOwner, doesn't: # Contributed by Kelly Kranabetter. import os, sys import win32security, ntsecuritycon # get security information #name=r"c:\autoexec.bat" #name= r"g:\!workgrp\lim" name=sys.argv[0] if not os.path.exists(name): print name, "does not exist!" sys.exit() print "On file " , name, "\n" # get owner SID print "OWNER" sd= win32security.GetFileSecurity(name, win32security.OWNER_SECURITY_INFORMATION) sid= sd.GetSecurityDescriptorOwner() print " ", win32security.LookupAccountSid(None, sid) # get group SID print "GROUP" sd= win32security.GetFileSecurity(name, win32security.GROUP_SECURITY_INFORMATION) sid= sd.GetSecurityDescriptorGroup() print " ", win32security.LookupAccountSid(None, sid) # get ACEs sd= win32security.GetFileSecurity(name, win32security.DACL_SECURITY_INFORMATION) dacl= sd.GetSecurityDescriptorDacl() if dacl == None: print "No Discretionary ACL" else: for ace_no in range(0, dacl.GetAceCount()): ace= dacl.GetAce(ace_no) print "ACE", ace_no print " -Type" for i in ("ACCESS_ALLOWED_ACE_TYPE", "ACCESS_DENIED_ACE_TYPE", "SYSTEM_AUDIT_ACE_TYPE", "SYSTEM_ALARM_ACE_TYPE"): if getattr(ntsecuritycon, i) == ace[0][0]: print " ", i print " -Flags", hex(ace[0][1]) for i in ("OBJECT_INHERIT_ACE", "CONTAINER_INHERIT_ACE", "NO_PROPAGATE_INHERIT_ACE", "INHERIT_ONLY_ACE", "SUCCESSFUL_ACCESS_ACE_FLAG", "FAILED_ACCESS_ACE_FLAG"): if getattr(ntsecuritycon, i) & ace[0][1] == getattr(ntsecuritycon, i): print " ", i print " -mask", hex(ace[1]) # files and directories do permissions differently permissions_file= ("DELETE", "READ_CONTROL", "WRITE_DAC", "WRITE_OWNER", "SYNCHRONIZE", "FILE_GENERIC_READ", "FILE_GENERIC_WRITE", "FILE_GENERIC_EXECUTE", "FILE_DELETE_CHILD") permissions_dir= ("DELETE", "READ_CONTROL", "WRITE_DAC", "WRITE_OWNER", "SYNCHRONIZE", "FILE_ADD_SUBDIRECTORY", "FILE_ADD_FILE", "FILE_DELETE_CHILD", "FILE_LIST_DIRECTORY", "FILE_TRAVERSE", "FILE_READ_ATTRIBUTES", "FILE_WRITE_ATTRIBUTES", "FILE_READ_EA", "FILE_WRITE_EA") permissions_dir_inherit= ("DELETE", "READ_CONTROL", "WRITE_DAC", "WRITE_OWNER", "SYNCHRONIZE", "GENERIC_READ", "GENERIC_WRITE", "GENERIC_EXECUTE", "GENERIC_ALL") if os.path.isfile(name): permissions= permissions_file else: permissions= permissions_dir # directories also contain an ACE that is inherited by children (files) within them if ace[0][1] & ntsecuritycon.OBJECT_INHERIT_ACE == ntsecuritycon.OBJECT_INHERIT_ACE and ace[0][1] & ntsecuritycon.INHERIT_ONLY_ACE == ntsecuritycon.INHERIT_ONLY_ACE: permissions= permissions_dir_inherit calc_mask= 0 # calculate the mask so we can see if we are printing all of the permissions for i in permissions: if getattr(ntsecuritycon, i) & ace[1] == getattr(ntsecuritycon, i): calc_mask= calc_mask | getattr(ntsecuritycon, i) print " ", i print " ", "Calculated Check Mask=", hex(calc_mask) print " -SID\n ", win32security.LookupAccountSid(None, ace[2])

3 2

ZPT/DTML namespace problem
by Danny W. Adair 02 Apr '03

02 Apr '03

Hi, I have a ZClass instance "Log" with a DTML (!) method "show_entries" in its class. "Log" lies in ---------------------------------------------------------------------------------------------------- /path/to/Log ---------------------------------------------------------------------------------------------------- I also have a folder with an interface in it, one of its pages is ---------------------------------------------------------------------------------------------------- /interface/showLog ---------------------------------------------------------------------------------------------------- Now, if "showLog" was a DTML method, I could fill it with ---------------------------------------------------------------------------------------------------- <dtml-with "path.to.Log"><dtml-var show_entries></dtml-with> ---------------------------------------------------------------------------------------------------- But (of course :-)) I want "showLog" to be a ZPT. Now my problem: ---------------------------------------------------------------------------------------------------- The log entries of Log ---------------------------------------------------------------------------------------------------- won't work as (I) expected. Apparently - although I say "Log/show_entries", the ZPT passes "here" as the client to "show_entries". Of course that doesn't make sense: there are no log entries in "/interface/showLog". Why is "here" passed although I explicitly say "Log/show_entries"? How can I solve this problem??? I tried ---------------------------------------------------------------------------------------------------- tal:replace="python:Log.show_entries(Log, request)" ---------------------------------------------------------------------------------------------------- but this looks somewhat stupid. Do I really have to explicitly pass a client and namespace to a DTML method, isn't there something like <dtml-with>? Anyway, it looks like the same problem would arise if "show_entries" was a ZPT itself. Right? Thank you very much in advance, Danny P.S.: Please include my address explicitly in your reply ("Reply All"), since I am currently not subscribed to zope(a)zope.org. Thank you.

2 1

JOB: Python Technical Lead || New York, NY
by beau＠nyc-search.com 02 Apr '03

02 Apr '03

JOB: Python Technical Lead || New York, NY We are seeking an experienced and highly-talented programmer/scripter/analysts to fill the position of Technical Lead for our quality control group. The successful candidate will collaborate with engineering, QC, and clients, and shall be responsible for developing and executing testing scripts to ensure all aspects of client data, as transformed to reports, meet stringent quality standards. JOB DESCRIPTION: http://www.nyc-search.com/jobs/python.html

1 0

another newbie rewrite problem
by Dan Donaldson 02 Apr '03

02 Apr '03

I'm new to the list - just in the process of evaluating Zope for possible use. I've had no problems setting up 2.6.1 and getting it to run on Apache 2 on Linux RH8. My problem comes from a lack of success getting Zope running behind Apache. My situation is that I am running only a localhost, located for now on a static IP in our LAN (10.1.3.225). Apache works fine, and I have no virtual hosts set up apart from this one: <VirtualHost 10.1.3.225> ServerName 10.1.3.225 DocumentRoot /var/www/html RewriteEngine On RewriteCond %{HTTP:Authorization} ^/(.*) RewriteRule ^/Zope/(.*) http://10.1.3.225:8080/VirtualHostBase/http/10.1.3.225:80/VirtualHostRoot/$1 [L,P] </VirtualHost> what I'm trying to do is set up a situation where via Apache, Zope will be serving anything requested in the /Zope directory, and all other requests will go to Apache. Zope will I set up a folder in Zope at /dantest, and I can access it fine at http://10.1.3.225:8080/dantest I've tried various permutations of the RewriteRule, such as ...VirtualHostBase/http/10.1.3.25:80/VirtualHostRoot/dantest/$1 ...VirtualHostBase/http/10.1.3.25:80/dantest/VirtualHostRoot/$1 but no joy. I think that things are kind of getting there, however. If I try to access http://10.1.3.225/Zope/ using the above set up, I get the index of the directory /var/www/html/Zope - in other words, I get no rewrite and it goes via Apache to the Zope directory Apache serves. On the other hand, if I comment out the RewriteCond line, I get You don't have permission to access /Zope/ on this server. So there is some issue around authentication, I guess... I added a VHM in the folder /dantest, called it zopeIHope, thinking that if I matched the name of the virtual host and the VHM that that had something to do with it. But no. So I tried moving it to the Root and that made no difference either... So what gives? I toyed with ProxyPass, - I can't be sure that the server that I will eventually be hosted on will allow me to use it - but I haven't found any documentation on what Apache 2.0 does in this regard - unlike mod_rewrite.so, it doesn't seem that mod_proxy is part of it, but that probably tells you how little I actually know about Apache.... ;-). >From the docs, I'd rather use RewriteRule stuff anyway. I have a feeling that someone out there can see exactly what I'm doing wrong - your help greatly appreciated. I'm on the batch list so I may not get your reply quickly. If you can, let me know directly as well... TIA Dan DAN DONALDSON Webmaster UNICEF Canada ddonaldson(a)unicef.ca www.unicef.ca Tel.: 416 482-4444 ext. 890 Fax: 416 482-8035

3 2

cookies + zpt
by Jos van der Vleuten 02 Apr '03

02 Apr '03

2 1

and again zpt + cookies
by Jos van der Vleuten 02 Apr '03

02 Apr '03

1 0

cookies + zpt
by Jos van der Vleuten 02 Apr '03

02 Apr '03

1 0

Sorting TextIndexNG results...
by Thierry FLORAC 02 Apr '03

02 Apr '03

Hi, I use TextIndexNG with french stemmers to index my documents in "full-text" mode. My questions are : - how are TextIndexNG results sorted ? - how are results stored when a TextIndexNG is mixed with other indexes (fieldindexes,...) in a single query ? - is there a "rank" or "score" value available in TextIndexNG query results to be able to sort results manually ? - does ZCTextIndex solves these problems ?? Thanks, Thierry -- Linux every day, keeps Dr Watson away... http://gpc.sourceforge.net -- http://www.ulthar.net

3 2

Catalog: access index value in ZPT
by Florian Konnertz 02 Apr '03

02 Apr '03

Hi all, ZWiki, IssueTracker: I want to get all issues from the current folder but not the subfolder/subwiki (which has an own catalog and issuetracker). AFAICS a catalog always catalogues the subfolders and i cannot configure it to not do this, is this right? So i have to do it with query logic resp. filtering the results later. My IssueTracker implementation is in ZPT, it's translated 1:1 from the dtml-version, so it does a query and loops over it at once: ### condition for path should go here (?) ### table rows for the results ### repeat loop How can i show only issues (items) from the current folder? I thought about using the path index, so i added it to the metadate in Catalog cfg. and updated the Cat. Then i try to access the path from an item with (print it for testing) but that doesn't work. All other metadata can be accessed via "item.metadata", only path indizes not. Why? Is there a better way to do that? Cheers , TIA, Florian -- Florian Konnertz --- http://www.florian-konnertz.de http://openspirit.homelinux.net/noowiki/FrontPage Improved ZWiki about all topics, especially consciousness research and wisdom traditions

1 1

Boletim UP Click - Resultado de Busca - Seu site
by Sites para empresas de RH 02 Apr '03

02 Apr '03

1 0