- Zope - Zope lists

security changes from 2.5 -> 2.6?
by Rob Miller 03 Mar '03

03 Mar '03

hi there, i'm trying to migrate a plone project from zope 2.5.1 to zope 2.6.1. the app relies heavily on database driven local roles information, for which we're using zpatterns and loginmanager. so we've created these custom plone folders called 'teamfolders'. these folders are dataskins, and they override get_local_roles() and get_local_roles_for_userid(), returning the appropriate responses based on the team membership information that is in the database. similarly, in our user class, we've overridden getRolesInContext(). in zope 2.5.1 this all works beautifully. zope recognized the local roles and allows access accordingly. even the 'local_roles' link on the security tab still works, although it doesn't allow you to delete the local roles that originate from the database. when i import my product into 2.6.1, however, things don't work as smoothly. everything looks like it should work... the local roles page still displays the right information. a test page that i've written consistently displays the expected results for here.get_local_roles() and here.get_local_roles_for_userid(), as well as user.getRolesInContext(). but zope doesn't allow the access based on this information. that is, even when 'teammember' is showing up on the user's local roles list, zope isn't allowing the user to perform actions that should be allowed to 'teammember'. has something changed within zope's security implementation? is there a new method that needs to be overridden that i don't know about? does anyone have any other ideas why this might be happening? i've searched on the zope.org site and the mailing lists to no avail... any info anyone can provide would be greatly appreciated! thanks! -r

1 0

objects invisible
by Danny Nielsen 03 Mar '03

03 Mar '03

Hi there. First I have to say that Im very glad that this group exists. Now the problem: Im a zope newbie and have startet making a product solely through Python (leaving the management interface behind!). Inside my product object I want to make a folder containing images. My problem is that when I create folders and images through Python it aint visible in the management interface. How to I make them visible? Secund, can someone explain to me what implicit objects are available so Im able to communicate with Zope (I have had a hard time trying to figure out howto communicate with Zope through a Python product - the docs API aint well documented) regards Danny -- Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/

4 3

Storing a password in a python product
by Peter Bengtsson 03 Mar '03

03 Mar '03

What are the security implications of storing a password in a python product as persistent data? I was thinking of something like this: class MyProduct: def __init__(self, hostname, username, password): self.hostname = hostname self.username = username self.password = password But I will also need to be able to use the password in anonymous actions; otherwise I could ask for the password (in some suitable way) each time it's needed. Basically, how do I keep good security with sensitive persistent data in a python product? Peter

2 1

Add new property to a class
by Luis Machado 03 Mar '03

03 Mar '03

Having defined a class using python like this one: from OFS import ObjectManager, SimpleItem class Plant(ObjectManager.ObjectManager, SimpleItem.SimpleItem): """A plant""" def __init__(self, name, responsible): "Inits the product with default values" self.name = name self.responsible = responsible self.areas = {} you create a few instances, and later you want to add more properties to the same class, for example: def __init__(self, name, responsible, address): "Inits the product with default values" self.name = name self.responsible = responsible self.areas = {} self.address = address Is there a way to programatically modify the existing instances and add this new property to them. Any help will be appreciated. Luis

2 1

Really stupid acl_users mistake
by Marc Stein 02 Mar '03

02 Mar '03

I am quite new to Zope and have done something VERY stupid. I created an acl_users folder within an existing folder and added myself as a user. I did not however select either Manager or Owner and now cannot access the folder. Is there a way that I can either programmatically delete the user folder or change the permissions to allow access to this folder? I am the only current user on the system. Many thanks in advance. Marc Stein

4 3

error with setattr
by Fernando Martins 02 Mar '03

02 Mar '03

Hi, I tried this simple script (adapted from the Python tutorial): __________________ class Record: pass obj=Record() obj.setattr('field1',1) print obj return printed __________________ and got this error Error Type: AttributeError Error Value: Record instance has no attribute 'setattr' Why is it not working? Fernando

3 5

Newbie Page Template Question
by volker.wend＠efgbsh.de 02 Mar '03

02 Mar '03

He folks, I need a solution to format a title in lowercase all the time. I have an object with a title <a class="navigation" target="main" tal:attributes="href url" tal:content="r/object/title_or_id">ID</a> What would be the right way of converting the title to lowercase ? Thanks, Volker

2 1

Newbee question
by Jens JB. Bjerre 02 Mar '03

02 Mar '03

Hi I would like to add a DTML-Method called showfile, who call's the standard_header, call's the object specified in the url and then call's the footer. It could be: http://localhost/showfile?file=testfile.html Can anyone please help me? Regards Jens Bjerre

2 1

I discovered a great site for adults: http://www.HappyHug.com
by john fludderdome 02 Mar '03

02 Mar '03

Hi, I was surfing and than I discovered a great site for Aduts: http://www.HappyHug.com This is a new site for adults. They are operating since 9 december 2002. I think they can use some visitors. Go and take a look! John _________________________________________________________________ Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail

1 0

RE: [Zope] Help Needed - Case for Zope
by Samir Mishra 02 Mar '03

02 Mar '03

Thanks everyone. Any Project managers out there with something to add with regard to comparison between speed of implementation for Zove vs. other products? Personally, I place maintainability and transitioning skills as my top priority, and elegance of code comes last. Speed (e.g., of the server) is a non-issue because one can always allocate better hardware for this since it's a mere commodity now, intellectual capital is always at a premium. And that's why I like Zope :) But I still have to sell the concept to managers who only hear "Java" & "JSP" from software vendors and so are most familiar with these technologies. Samir. -----Original Message----- From: Paul Browning [mailto:paul.browning@bristol.ac.uk] Sent: Sunday, March 02, 2003 11:58 To: 'zope(a)zope.org' Cc: Samir Mishra Subject: Re: [Zope] Help Needed - Case for Zope --On 01 March 2003 21:52 +0100 Dieter Maurer <dieter(a)handshake.de> wrote: > Samir Mishra wrote at 2003-3-1 14:26 +0400: > > My manager has requested comments on whether Zope "performs like a > dog". I'm > doing some digging around at the moment, but, in the > meantime, if anyone has > any links to recommend, benchmarks, > experiences to share, that I can use to > counter his 'assertion', it > would be much appreciated. > One way of getting Zope "run like a bow-legged terrier on sleeping pills" (Pieters, M., pers. comm.) is to use multi-processor Solaris without paying attention to the threading issues (see <http://www.zope.org/Members/glpb/solaris>). If you're starting from a clean sheet it's probably best to avoid Solaris. Paul -- The Library, Tyndall Avenue, Univ. of Bristol, Bristol, BS8 1TJ, UK E-mail: paul.browning(a)bristol.ac.uk URL: http://www.bris.ac.uk/

1 0