- Zope - Zope lists

Is this forum available through a newgroup.
by Daniël Hooymans 13 Mar '03

13 Mar '03

Hi, Just wondering if this Mailing list also available trough a newsgroup. Greets, Daniel

2 2

Zope product security question
by Michael R. Schwab 13 Mar '03

13 Mar '03

Hi, I've a question regarding security in Zope Product classes for Zope 2.6.1. I'm hoping that someone has some experience/suggestions for implementing Zope scurity within a product's class. I need to provide secure access to specific methods and attributes (e.g. meta_type) for a class within my Zope product. I have a set of specific roles that I need to create when an instance of my product is created along with the default roles of 'Manager' and 'Owner'. I am declaring this set of roles by assigning them to the __roles__ attribute: __ac_roles__= ( 'Anonymous', 'Authenticated', 'Manager', 'Owner', 'Editor' ) I've noted two different methods for declaring security in a class. The first is to use __ac_permissions__ to declare a tuple of tuples that declares a permission name, a tuple of method names, and a list of roles. For example: __ac_permissions__ = ( ('View', ('manage', 'manage_menu'), ['Manager', 'Editor']) ) The second method, which I believe to be the most recent, is to: 1. Declare the security object: security = AccessControl.ClassSecurityInfo() 2. Set the default security access to 'deny': security.setDefaultAccess('deny') 3. Declare each permission: security.setPermissionDefault( 'View', ['Authenticated', 'Manager', 'Editor']) 4. Assert that each method or subobject is protected by a particular permission: security.declareProtected( 'View', 'manage_menu') 5. Initialize the the class' security: InitializeClass(MyClass) The first method seems to work, although I have not tested to ensure that all of the methods inherited from the parent classes are protected. I have a sneaking suspicion that this is an older mechanism for Zope security. The second method seems to be the newest and most logical approach. The being exception that the default security access to 'deny' does not permit me to access attributes from my class that are basic Python types such as strings (e.g. meta_type from a DTML Method). I could declare the default security access to 'allow', but that seems inherently dangerous from a security standpoint. Thanks, Michael -- Michael R. Schwab

3 4

prevent printing?
by baiewola＠netscape.net 13 Mar '03

13 Mar '03

Does Zope offer a way to prevent people from printing privileged pages that I want certain people to be able to view but not distribute? Many thanks. __________________________________________________________________ The NEW Netscape 7.0 browser is now available. Upgrade now! http://channels.netscape.com/ns/browsers/download.jsp Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/

9 8

TAL + <select> + record modifier
by Ruslan Spivak 13 Mar '03

13 Mar '03

Hello, zope users! I have script getServiceMapping that return a list of dictionaries, like: [{'type_name' : 'xxx', 'title' : 'ccc', 'groupname' : 'vvv' }, {'type_name' : 'xxx1', 'title' : 'ccc1', 'groupname' : 'vvv' }, ] I want user to be able to use <select> staement, and i need to pass three variables to form handler, how to implement that? Maybe 'record' modifier? But i can't make it working with select properly. Here i can get only one varibale - type_name, and how to pass another 2(title and groupname)? <form name="client_addservice_form" method="post" action="folder_object" tal:define="types here.getServiceMapping(); no_types python:len(types);" tal:attributes="action here/absolute_url"> <select name="type_name"> <option value="Select">Select</option> <metal:block tal:repeat="ctype types"> <option value="Document" tal:attributes="value ctype/type_name" tal:content="ctype/tilte" i18n:translate="">Document</option> </metal:block> </select> </form> Thanks in advance, Ruslan

1 0

How to convert string to object?
by Lubos Culen 13 Mar '03

13 Mar '03

Hi! Maybe this is more Python question, but because I'm using it with Zope, I'm posting it here. Let's suppose I have DTML Method called e.g. 'index_html' . It has one input parameter 'obj' which contains name of existing file object inside the directory tree. For example, the index_html file would be called as: www.mysite.com/path/index_html?obj=path.to.object.file Then in folder www.mysite.com/path/path/to/object/file in this example would be the DTML document I'd like to be displayed. I have to make proper code in the index_html file do do this. I tried do following in index_html: <dtml-var obj> But this echoes only plain text ('path.to.object.file') and not the object's content. I need to find some way how to convert this string to object, so Zope (or Python) can understand it as an object and display its content. Is there some way? Thanks a lot for any answer! -- Regards, Mirsoft

4 4

Adding new product in Zope - creating file in subfolder problem
by Lubos Culen 13 Mar '03

13 Mar '03

Hello! A simple problem: I'd to create new object, which will inherit the Zope 'Folder' behavior and inside the folder will create some 'content' DTML document (or other document type), which I can edit. I followed these steps: I have created new product (let's call it 'New product' and new ZClass inside it (let's call it 'New object'). For 'New object', I used base classes 'ZClasses: Object Manager' and 'OFS: Folder', so now it inherits all folder behavior right (it can contain files, etc.). Now it creates successfully my new object as a folder, but I want to copy the default "content" file inside it automatically. I created some DTML document called "template" inside "New product" folder in Zope products, and I want modify the "new_object_add" Python script, to do this: - copy the "template" file to file "content" inside the "New object" folder - run some editing onto this "content" file, so user can edit it. I know I need to add something to "new_object_add" python script, but I don't know how, because using "context.manage_clone(container.template, instance.content) " (slightly modified step from the Chapter 14 in Zope book) doesn't work when creating object inside the Folder. Can anybody help? Thanks a lot for any answer! -- Regards, Mirsoft

1 0

Re: Spinning Zope on MP3 file import
by hpinson＠indepthl.com 13 Mar '03

13 Mar '03

> How big is the file? Is it possible that you're just waiting for it > to upload? The file is 4.9 mb, over a fast DSL connection. I've tried importing several times now in several browsers, each with the same results. I've let the process run for over 20 minutes. Zope just appears to hang when importing this MP3 file. Harlow Pinson Indepth Learning Email: hpinson(a)indepthl.com Web: http://www.indepthl.com Voice: 505-994-2135 FAX: 208-475-7678

4 4

Proposed installation changes for review
by Chris McDonough 13 Mar '03

13 Mar '03

Hi folks, An effort to improve Zope 2 installation, startup, and configuration for Zope 2.7 has been ongoing for some time now (see http://dev.zope.org/Wikis/DevSite/Proposals/InstallationAndConfiguration) The effort has reached a point where we believe it is reasonable to merge its fruits to the Zope trunk. Before doing so, however, we want to gather input from people who care deeply about Zope configuration and installation; particularly those who have significant investments in the existing behaviors of Zope 2 configuration and installation. A bunch of stuff is changed (most notably Zope no longer uses environment variables as configuration, and instead defers to command-line arguments and config file values). What follows is a summary of changes, a walk-through of a Zope 2 installation under this regime, and a list of the configuration-file changeable parameters exposed by the current Zope configuration schema. Please provide your feedback before this Friday, March 14. If possible, check out and try the new software. If there are showstopper issues for a lot of people, we will consider not performing the merge directly after that date. Otherwise, the merge will be performed at any time after the 14th. Thanks! - C ----- Major changes in Zope 2.7 ========================= Zope 2.7 will contain a number of changes related to the build process and configuration. The scripts used to start Zope will also be substantially changed. The implementation of these changes is not yet complete, but a substantial portion has been done and is expected to be merged into the Zope 2 trunk in the near future. The exact schedule for merging these changes has not been determined; additional notice will be provided. These changes are substantially based on efforts by Chris McDonough on the "chrism-install-branch". Major changes ------------- The following are the most important and user-visible changes compared to Zope 2.6 and the current CVS HEAD: - Configuration is normally done by editing a config file instead of passing command line options. The configuration file is handled by the ZConfig package. - Environment variables are no longer used for configuration. - Building and installing the software have become more clearly distinct; the installation can be separate from the build. - Zope 2.7 uses the "instance home" model in the normal case: a script in the installed software is used to create new "instances" of Zope. Each instance is defined by a directory tree containing configuration, scripts, and data. (For convenience, the instance and the installation can be located in the same directory, and the build area may be used in lieu of an installation if desired.) - The z2.py, start, and stop scripts have been replaced by the runzope and zopectl scripts. - The runzope/zopectl scripts do not accept the same command-line arguments as z2.py used to accept. - The wo_pcgi.py script used to build Zope without PCGI support has been replaced by the common Unix build sequence of configure, make. - The pcgi/ directory and the w_pcgi.py script have been removed from the top of the source tree. The pcgi/ directory may be made available as a separate distribution. (The application server still has support to allow connections from a PCGI-capable Web server.) - The ZServer package has been moved from the top of the source tree into the lib/python/ directory. Getting the code today ---------------------- The implementation lives in the "new-install-branch", which is a "partial" branch rather than a complete branch: only the files and directories which need to be changed have been placed on the branch; all other files are used from the CVS HEAD. The current state of this code can be checked out from CVS using the command: cvs -d :pserver:anonymous@cvs.zope.org:/cvs-repository co \ -r new-install-branch -f Zope The installation instructions in doc/INSTALL.txt has been updated on the branch; that file provides detailed information on creating an installation and instance. (A copy has been attached for convenience.) A sample installation/startup runthrough --------------------------------------- The below is the output from a sample install session. During this session, we install the Zope software to /tmp/zopehome and install an instance home to /tmp/insthome. [chrism@james software]$ cd NewInstallBranch/ [chrism@james NewInstallBranch]$ ./configure --prefix=/tmp/zopehome Configuring Zope installation Testing for an acceptable Python interpreter... Python version 2.1.3 found at /home/chrism/bin/python Python version 2.1.3 found at /home/chrism/bin/python2.1 Python version 2.2.2 found at /home/chrism/bin/python2.2 The optimimum Python version (2.2.2) was found at /home/chrism/bin/python2.2. - Zope top-level binary directory will be /tmp/zopehome. - Makefile written. Next, run make. [chrism@james NewInstallBranch]$ make "/home/chrism/bin/python2.2" inst/setup.py -q build_ext -i <... compilation output elided ...> Zope built. Next, do 'make install' (or 'make instance' to run a Zope instance directly from the build directory). [chrism@james NewInstallBranch]$ make install <... installation output elided ...> Zope binaries installed successfully. Now run '/tmp/zopehome/bin/mkzopeinstance' [chrism@james NewInstallBranch]$ /tmp/zopehome/bin/mkzopeinstance mkzopeinstance requires exactly one argument mkzopeinstance: Create a Zope instance home. usage: mkzopeinstance [options] directory Options: -h/--help -- print this help text -u/--user NAME:PASSWORD -- set the user name and password of the initial user [chrism@james NewInstallBranch]$ /tmp/zopehome/bin/mkzopeinstance \ --user=admin:123 /tmp/inst [chrism@james NewInstallBranch]$ cd /tmp/inst/ [chrism@james inst]$ ls bin etc Extensions import inituser log Products README.txt var [chrism@james inst]$ bin/zopectl start . daemon process started, pid=2947 [chrism@james inst]$ bin/zopectl stop . daemon process stopped Changing the configuration via the config file ---------------------------------------------- The Zope configuration file uses the ZConfig API and file format. See the ZConfig documentation PDF at http://cvs.zope.org/Packages/ZConfig/doc/zconfig.pdf for more information. The default Zope configuration file will live in the instance_home's /etc directory and will be named 'zope.conf'. The Zope configuration file allows you to change the following configuration variables: instance home client home debug mode effective user production installation (on/off) locale number of zserver threads the python "check interval" (thread switch timing) zserver read only mode pid file name lock file name structured text header level publisher profile file (debugging) cgi environment dns server (hostname resolving in logfiles) ip address (for zserver bindings) http realm automatic quotation of dtml request data security manager stack size security policy implementation (C, Python) skip authentication checking skip ownership checking max number of session objects session "add notify" script path session "delete notify" script path session timeout minutes access rule suppress site root suppression database quota size read only database zeo client name logging (access, event, debug, filenames, to syslog, etc). network servers (http, dav, ftp, monitor, etc) databases (storages, database classes, etc.)

9 27

DHTML Popup menu bar built from content
by Gilles Lenfant 13 Mar '03

13 Mar '03

Hi, I have deeply tried to build a DHTML/Javascript menu bar based on the Zope content rather than having a fixed (hard coded in javascript) menu content. Have some of you experiences in building such stuffs ? Thanks in advance for your tips --Gilles --__--__-- Pilot Systems http://www.pilotsystems.net 66, rue de Provence 75009 Paris Tel (direct): +33 1 44 53 25 93 Tel (standard): +33 1 44 53 05 55 Fax : +33 1 44 53 04 44 mailto:gilles@pilotsystems.net

5 4

exUserFolder authentication problem -URGENT
by K.Praveen Kumar 13 Mar '03

13 Mar '03

Dear list, I've been using exUser Folder authentication for the web application developed using Zope. I'm using MySQL as backend. I've created users. I've deselected the Access contents information" and "View" in the Authenticated module and given permission to "Authenticated", "Owner", "Manager" roles only. Now If I visited to the Home page it is redirecting to the Login Page and after successful authentication Showing the Home page. Till now it is fine. If I click any of the link in the HOme page it is redirecting to the Login screen again. what might be the problem? Please help me out. Thanks in advance Praveen __________________________________________________ Do you Yahoo!? Yahoo! Web Hosting - establish your business online http://webhosting.yahoo.com

1 0