- Zope - Zope lists

Re: user roles & authentication
by Paul Tiemann 10 Nov '02

10 Nov '02

I had the same experience, and after researching it a little, I found that if Zope is asked to perform an action (render a dtml method, call a python script, etc) and that action can be done by the 'Anonymous' role, then Zope doesn't even bother to look at the user's credentials, because it knows that the action is already allowed, no matter what other roles the user has. In those cases, I believe Zope performs the action, passing in a generic anonymous user instead of passing in the actual credentials. That caused trouble for me, when I wanted to call the getUser method and it was giving me the Anonymous user. BUT... If I remember right, you can get the user explicitly by using the 'AUTHENTICATED_USER' of your REQUEST. Here's a little bit of my code that I think might work for what you're asking. <dtml-call "REQUEST.set('roles',['Anonymous',]) <dtml-if AUTHENTICATED_USER> <dtml-call "REQUEST.set('roles',AUTHENTICATED_USER.getRoles())"> </dtml-if> This works for me, but while I'm only trying to be helpful, I might be both misunderstanding your needs, as well as feeding you false information, because I'm only as experienced in this part of Zope to get my own stuff working to my liking. I hope it helps, but If I'm wrong, somebody please correct me... :Paul > the problem is this: if one authenticates at a location > deeper than their user account, authorization should > apply up to the level of the account. it does - any > method requiring authorization is allowed to run between > the point of login and the user account - but when I test > with *any* of these routines between the point of login > and the user account it shows only 'Anonymous' - not the > expected roles. > > user.getRoles() > _.SecurityGetUser().getRoles() > user.has_role( roleName ) > > visiting /manage or any other objects which require > authorization works between the user account and the > point of login - in fact, after rendering an object > which would prompt for authorization if the only role > were *really* Anonymous the roles for that object and > ones it contains are fixed and show the expected > results with getRoles() and has_role(). > > this problem occurred with ZOPE 2.5.0 or 2.5.1, > and IE 5.5 or NN 7.0

2 1

variables in path expressions
by Mark Gibson 10 Nov '02

10 Nov '02

For your consideration: <span tal:omit-tag="" tal:repeat="thepage python:['pageA','pageB']"> <span tal:condition="nocall:here/thepage | nothing" tal:content="structure here/thepage"></span> </span> Basicaly, I want to test if 'pageA' exists, and if so, render it. I'd like to do something like tal:condition="nocall:here/$thepage | nothing", but this doesn't seem to work. Any ideas of how to do this? Thanks, Mark

2 1

Re: [Zope] dtml-with problem
by Steffen Hausmann 09 Nov '02

09 Nov '02

On Sat, Nov 09, 2002 at 12:54:20PM -0700, Mark Gibson wrote: > Steffen Hausmann wrote: > >I want to display some attributes of an object in a Form. > > > >It works fine if I use > > > ><dtml-with 20021109202414.0.0739256744506> > > <dtml-var title> > ></dtml-with> > > > >but if I replace 20021109202414.0.0739256744506 (name of the object) > >by name (variable containing the name) im gettin a key error. > > Sounds like you're referencing a string containing an object name, not > the object. > > You probably need to reference the object, not the name of the object. > So try somthing like this: > > <dtml-let myobjectname="'20021109202414.0.0739256744506'"> > > <dtml-with "_[myobjectname]"> > <dtml-var title> > </dtml-with> > > </dtml-let> I tried <dtml-with "_['myobjectname']"> before :( I didn't think about it properly... Thanks. Does someone know why <dtml-var expr="objectname.title"> dosn't work. MfG Steffen -- Manche Maenner bemuehen sich ein ganzes Leben lang, das Wesen einer Frau zu verstehen. Andere befassen sich mit weniger schwierigen Dingen, z.B. der Relativitaetstheorie.

2 1

Call for finnish Zope users, companies and want-to-be users!
by Heimo Laukkanen 09 Nov '02

09 Nov '02

Yes, you. Just you! I know you are there. And you have been hiding long enough! Now it is time to come forward, and meet others alike. Also - if you just happen to know someone using Zope in Finland, please send me an email. Co-operation can be fun and profitable. Even though there is no free beer. --- And in finnish: Käytätkö tai tutkitko Zopea, joko töissä tai omana projektinasi? Nyt olisi hyvä aika tulla ja tavata muita Zopea hyödyntäviä henkilöitä. Järjestetään tapaaminen tässä lähitulevaisuudessa ja katsotaan mitä kaikkea täällä pohjoisessa tehdäänkään. Zope on voimissaan euroopassa ja suomalaisiakin käyttäjiä on varovaisesti arvioiden parikymmentä. Jos enemmän, sen parempi. Heittäkää emailia, niin pistetään keskustelut pystyyn! -huima

1 0

TIP: Robots.txt
by BZ 09 Nov '02

09 Nov '02

I have many websites running off of one Zope installation and so it was not too bright to put a robots.txt fill in the Zope root and let all the sites inherit it down. Today, though, I wanted to customize one of them so I did this. # Robots file for <dtml-var absolute_url> User-agent: * Disallow: /Manage Disallow: /acl_users Disallow: /images <dtml-if robot_local> <dtml-var robot_local> </dtml-if> Again, nothing hugely brilliant, but I thought it was interesting enough to publish. I will put it up on Zope.org. Cheers, BZ

3 4

dtml-with problem
by Steffen Hausmann 09 Nov '02

09 Nov '02

Hi, I want to display some attributes of an object in a Form. It works fine if I use <dtml-with 20021109202414.0.0739256744506> <dtml-var title> </dtml-with> but if I replace 20021109202414.0.0739256744506 (name of the object) by name (variable containing the name) im gettin a key error. KeyError: dateStart <dtml-var expr="name.title"> doesn't work either. It is used by the userFolder comming with Zope and I can't find any differences to my code. Any Ideas what I'm doing wrong? MfG Steffen -- Manche Maenner bemuehen sich ein ganzes Leben lang, das Wesen einer Frau zu verstehen. Andere befassen sich mit weniger schwierigen Dingen, z.B. der Relativitaetstheorie.

1 0

Install product
by Projekt01, Roger Ineichen 09 Nov '02

09 Nov '02

Does somebody know a product for install Extensions/Install scripts? I read somthing a couple days ago, but can't remeber where in the list. Nice weekend and thanks. Mit freundlichen Grüssen Roger Ineichen ___________________________ Projekt01 GmbH www.projekt01.ch Langackerstrasse 8 6330 Cham phone +41 (0)41 781 01 78 mobile +41 (0)79 340 52 32 fax +41 (0)41 781 00 78 email r.ineichen(a)projekt01.ch ___________________________ END OF MESSAGE

1 0

Converting an input date string
by McDonnell, Larry 09 Nov '02

09 Nov '02

Hi, How do I convert an input date string "10/22/02" to "2002/10/22" in a date format? The variable I am checking against is in a timestamp format. Even if I time in the string to 2002/10/22, the check is not performed (text vs. timestamp). A pointer would be great, I will still continue to search the archives. Thanks. Larry McDonnell Proton Energy Systems 10 Technology Drive Wallingford, CT 06492 (203) 678-2181 Email:lmcdonnell@protonenergy.com www.protonenergy.com

4 4

Newbie: Confusion at sequence-odd, sequence-even and sequence-start
by Alfredo P. Ricafort 09 Nov '02

09 Nov '02

Hi, I have this code that display images in a 2-column table. The idea is for <dtml-in> to loop inside a folder containing these images. When the counter is odd, an opening <tr> will be inserted; and when a the counter is even a closing </tr> is inserted as well. --------------------- | Image 1 | Image 2 | --------------------- | Image 3 | Image 4 | --------------------- The code is like this: <table width=100% border=1> <dtml-in objectValues> <dtml-if sequence-odd> # Check if the sequence no. is even <tr> and create a row. </dtml-if> <td> # Create a column and <dtml-var sequence-number> insert the image or text </td> <dtml-if sequence-even> # Close the table if even </tr> </dtml-if> </dtml-in> </table> When I ran this code, I noticed that in the first iteration, when the sequence-number is 1, the condition <dtml-if sequence-odd> is not satisfied while the <dtml-if sequence-even> is! So the first few lines of the generated HTML would appear like this. Notice that the 1 column (<td></td>) is created first before the row. <table width=100% border=1> <td> 1 </td> </tr> # <tr> : : So, could somebody explain to me what is going on here. Why can't Zope recognize the first iteration as an odd number, when the value of the sequence-number is 1. And why is the statement <dtml-if sequence-even> is satisfied at this point? Thanks. AL

2 1

Import ACL User
by McDonnell, Larry 09 Nov '02

09 Nov '02

Hi, I have a Zope server dying on me and I will need to move it to another server. I have done this before and rebuilt from scratch. I do not have a large system and the imports are easy to do. BUt adding in all the user is a pain. I have exported them is there a way to import them on a new system. Thanks Larry McDonnell Proton Energy Systems 10 Technology Drive Wallingford, CT 06492 (203) 678-2181 Email:lmcdonnell@protonenergy.com www.protonenergy.com

3 2