- Zope - Zope lists

RE: Permissions, ZPT and absolute_url
by Jay, Dylan 03 Dec '02

03 Dec '02

A bit more exploring reveals that I can call absolute_url on Folder object or aquition path of Folder objects regardless of the fact that they all fail to aquire a view permission. However if I try to do the same on another ZPT or PythonScript etc, then I get the follwing error " Error Type: Unauthorized Error Value: You are not allowed to access doRegistration in this context " It seems that the security framework barfs to a traversal of anything else other than folders??? > -----Original Message----- > From: Jay, Dylan > Sent: Tuesday, 3 December 2002 2:59 PM > To: 'zope(a)zope.org' > Subject: Permissions, ZPT and absolute_url > > > I'm having a bit of trouble with security and ZPT. I am > locking down my site such that only the cookie login page has > anonymous view permission. This page however is used with the > VirtualHost monster so all the links off it have something > like tal:attributes="here/reg/register.html/absolute_url". > > Now from looking at the code absolute_url is a public method > so shouldn't call be allowable without having to make > register.html viewable to anonymous? Without ZPT proxy roles > would be the answer but that isn't offer with ZPT :( > > ---- > Dylan Jay mailto:djay@avaya.com > Avaya Communication Tel: +61-2-9352-8642 > Level 3, 123 Epping Road FAX: +61-2-9352 9224 > Nth Ryde NSW 2113 Mobile: 0409 606 171 > AUSTRALIA >

1 0

Permissions, ZPT and absolute_url
by Jay, Dylan 03 Dec '02

03 Dec '02

I'm having a bit of trouble with security and ZPT. I am locking down my site such that only the cookie login page has anonymous view permission. This page however is used with the VirtualHost monster so all the links off it have something like tal:attributes="here/reg/register.html/absolute_url". Now from looking at the code absolute_url is a public method so shouldn't call be allowable without having to make register.html viewable to anonymous? Without ZPT proxy roles would be the answer but that isn't offer with ZPT :( ---- Dylan Jay mailto:djay@avaya.com Avaya Communication Tel: +61-2-9352-8642 Level 3, 123 Epping Road FAX: +61-2-9352 9224 Nth Ryde NSW 2113 Mobile: 0409 606 171 AUSTRALIA

1 0

RE: [Zope] iptables rules for zope webserver
by Jianping Zhu 03 Dec '02

03 Dec '02

Thank you for your advice, after i open the port 8022 the problem is still there. This is that ws_ftp can connect to zope, but the directoris in zope can not be seen in the ws_ftp window. i checked the iptables rules for regular ftp in my iptables.rules. Thesre are several lines as following:(this rule is set up by the privious administrator, and he has left) ------------------------------------------------------------------------- # Passive inbound and outbound FTP iptables -A INPUT -i $IFACE -p tcp --sport $UP_PORTS --dport $UP_PORTS \ -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -o $IFACE -p tcp --sport $UP_PORTS --dport $UP_PORcS \ -m state --state ESTABLISHED,RELATED -j ACCEPT ------------------------------------------------------------------------ I did some experiment to this. The interesting thing is that if i comment out this rules. regular ftp can access my linux server but the directories in my linux server can not be seen. My guess is maybe i need some lines like that for zope ftp to let passive tranfer mode work, but i do not how to do it. Any further suggestion will be appreciated. Jianping On Mon, 2 Dec 2002, Jeff Sacksteder wrote: > you need to allow port 8021 and 8022. > > iptables -A INPUT -i $IFACE -p tcp --dport 8021 -m state --state > NEW,ESTABLISHED -j ACCEPT > iptables -A OUTPUT -o $IFACE -p tcp --storc 8021 -m state --state > ESTABLISHED -j ACCEPT > iptables -A INPUT -i $IFACE -p tcp --dport 8022 -m state --state > NEW,ESTABLISHED -j ACCEPT > iptables -A OUTPUT -o $IFACE -p tcp --storc 8022 -m state --state > ESTABLISHED -j ACCEPT > > You might also consider writing them like this, I think it's easier to see > what is happening. > > iptables -A OUTPUT -o $IFACE -p tcp -m state --state ESTABLISHED -j ACCEPT > iptables -A INPUT -i $IFACE -p tcp --dport 8021 -j ACCEPT > iptables -A INPUT -i $IFACE -p tcp --dport 8022 -j ACCEPT > >>Date: Sun, 1DDec 2002 22:49:12 -0500 (EST) >>From: Jianping Zhu <zjp(a)arches.uga.edu> >>To: redhat-list(a)redhat.com >>Cc: zjp(a)arches.uga.edu >>Subject: iptables rules for zope webserver >>I have a redhat linux 7.1 server with a zope websever on iE. I use >>iptables as firewall. following is the iptables rules for zope:o >>#===========J===========i===============n=================== >>## Zope >>iptables -=aINPUT -i $IFACE -p tcp --dport 8080 -j ACCEPT >># Allow inbound ftp >>iptaeles -A INPUT -i $IFACE -p tcp --dport 8021 -m state --state \ >> NEW,ESTABLISHED -j ACCEPT >>iptables -A OUTPUT -o $IFACE -p tcp --storc 8021 -m state --state \ >> ESTABLISHED -j ACCEPT >.#======================================================================= >>I am trying to use ws_ftp to send files to zope sever via port 8021 ( in >>ws_ftp >>session property->advanced i set remote port as 8021 and checked passive >>transfers). If I stop iptables, i can conect to zope via ftp (port >>8021) >>and ftp files to zope. If the iptables is on, it still can connect to >>zope but i can not see the directories in the mote site text filed of >>the ws_ftp >>windows. it seems that it can connect to zope but can not display the >>directories in zope. and i failed to ftp it the zope server. >>Therefore, i believe the above iptalbles rules for zope have problem. >>how >>can i >>fix this problem and let zope ftp work? >>Any suggestion will be greatly appreciated. >>Jianping

2 2

MessageDialog in Python Script
by Elena Schulz 03 Dec '02

03 Dec '02

Hi, is there a possibility to return a message while executing without to interupt the Script or redirect to another one (because of variable-transfer)? As message from Globals.MessageDialog is unauthorized in Python Scripts. -- many thanks for your replies, Elena

3 3

NotFound (404) and Unauthorized (401) error page redirects
by Kamal Gill 03 Dec '02

03 Dec '02

I need some advice on how to create an Unauthorized (401) error page redirect. I've discovered how to create a NotFound (404) error page redirect by adding the following code to the top of the "standard_error_message" DTML method, which is located in the root folder... <dtml-if "error_type=='NotFound'"> <dtml-call expr="RESPONSE.redirect('/notfound.html', lock=1)"> </dtml-if> However, when I replace 'NotFound' with 'Unauthorized' (--please DO NOT try this on your production Zope server--), anyone who tries to log into the Zope management interface (ZopeServer/manage) is redirected to the unauthorized page. Basically, I need to know the Zope analog of Apache's "ErrorDocument 401 /unauthorized.html" directive. Many thanks. - Kamal

2 1

ZPublisher only solution ?
by Jessica Niewint 02 Dec '02

02 Dec '02

I worte an external method ReadFile (open, read ,close) to insert a file to Zope (with :result=context.ReadFile(filepath) container.manage_addProduct['OFSP'].manage_addFile(fileid,file=result,content_type='application/pdf')) My problem is now if I insert an URL (because my file will be created dynamically) instead of an path it does not work ... want can I do ?

2 1

how to get number of users accessing a resource at any given time ...
by ralph s 02 Dec '02

02 Dec '02

hi all, i have this script which is going to be called by a lot of anonymous users to search the database ... is there anyway i can determine how many of them are accessing the script at a given time ...so that as soon as another user comes in ...he can be informed of his status in the queue ... would using the keys method of the TransientObjectContainer class be a solution ? but security restricitions prevent me from accessing this method ... and if this can be used how do i use it ? TIA regards vineeth __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

2 1

Making a Z Class and a Z Catalog get along - PropertyManager?
by Edward Pollard 02 Dec '02

02 Dec '02

I've managed to succesfully create my Z Class product so that it enters itself into the Z Catalog on creation. Hooray for me. Now, the goal of this task I'm undertaking is to allow web pages to have specific properties associated with them, and these properties are automagically searchable. That is why I made the Z Class which is based in PageTemplate, as it needs to behave pretty much like a page template, but have two properties that are searchable. Now, I've seen it mentioned in passing that the PropertyManager is not catalog aware, and as such I'm not so surprised to learn that the objects I create do not have their changes to their properies reflected in the Catalog. Where I saw this mentioned was a post to the effect of "Make sure you make PropertyManager catalog aware!" How do I make PropertyManager catalog aware, and only aware for this specific ZClass? As a more general question: Can anyone direct me to some Zope resources suitable for intermediate questions such as this? I have the Zope Book in front of me, but that only covers the basics, and I can't find much in the way of usefull information on Zope.org. (Or is that just me?) Anything else out there so I don't have to wander around asking silly questions? Ed

1 0

Property Values
by volker.wend＠efgbsh.de 02 Dec '02

02 Dec '02

Hello all, I would like to call the manage_editProperties Method from a Page with a Form without ending up in the Zope Management Interface. Is this possible somehow ? Thanks, Volker

3 2

iptables rules for zope webserver
by Jianping Zhu 02 Dec '02

02 Dec '02

I have a redhat linux 7.1 server with a zope websever on it. I use iptables as firewall. following is the iptables rules for zope: #=========================================================== ## Zope iptables -= INPUT -i $IFACE -p tcp --dport 8080 -j ACCEPT # Allow inbound ftp iptables -A INPUT -i $IFACE -p tcp --dport 8021 -m state --state \ NEW,ESTABLISHED -j ACCEPT iptables -A OUTPUT -o $IFACE -p tcp --storc 8021 -m state --state \ ESTABLISHED -j ACCEPT #======================================================================= I am trying to use ws_ftp to send files to zope sever via port 8021 ( in ws_ftp session property->advanced i set remote port as 8021 and checked passive transfers). If I stop iptables, i can conect to zope via ftp (port 8021) and ftp files to zope. If the iptables is on, it still can connect to zope but i can not see the directories in the remote site text filed of the ws_ftp windows. it seems that it can connect to zope but can not display the directories in zope. and i failed to ftp it the zope server. Therefore, i believe the above iptalbles rules for zope have problem. how can i fix this problem and let zope ftp work? Any suggestion will be greatly appreciated. Jianping

3 2