- Zope - Zope lists

Re: [Zope] has_permission for arbitrary user
by Mark N. Gibson 09 Sep '01

09 Sep '01

> > Mark N. Gibson writes: > > <dtml-if expr="acl_users.getUser('someuser').has_permission('Change DTML > > Document',this())"> > > Yes > > <dtml-else> > > No > > </dtml-if> > > > > Unfortunately, has_permissions seems to be implented to call > > has_permission on the currently logged in user; i.e. AUTHENTICATED_USER. > I doubt this very much! > > But "getUser" is probably protected. > You may consider using a proxie role... > Here's the code for has_permission from the BasicUser Class def has_permission(self, permission, object): """Check to see if a user has a given permission on an object.""" return getSecurityManager().checkPermission(permission, object) Draw your own conclusions. I wrote my own to deal with the problem: def hasPermissions( user, obj, permissions ): """ check to see if user has permissions for object """ if type(permissions) == type(''): roles = [roles] #get roles for user, include local roles on obj userRoles=user.getRoles() + obj.get_local_roles_for_userid(user.getUserName()) for perm in permissions: objRoles=obj.rolesOfPermission(perm) for oRole in objRoles: if oRole['name'] in userRoles: if oRole['selected']: return 1 return 0 > Dieter >

3 2

BECAUSE YOU DESERVE THE CHANCE
by Rick Cuesta 09 Sep '01

09 Sep '01

Hello, my name is Rick Cuesta, and I send you this message because I have been informed of your desire to INCREASE YOUR INCOME. I can help you. If you have a family to support, debts to pay off, or just need more money than your job can pay, then by all means, ACCEPT MY GUIDANCE. I am already well into the home-based business, and would like to share with you the same benefits that I have discovered. My money grows, but I do NOT sell anything... I am not rich, but I am comfortable... ...and best of all... ...I DID NOT have to invest my life savings, burrow money from anyone, or sell my car to get started. LET'S FACE IT... *you DON'T want to sell (me neither!) *you DON'T have lots of money (or you wouldn't be reading this) *you DON'T have time to be wasting .......GOOD! Then I want YOU to EARN with our company. **NO RIDICULOUS COST INVOLVED... **WE WON'T WASTE YOUR TIME... **NO NEED TO QUIT YOUR JOB... Our business makes you the MONEY!!! Come on in, join us on this profitable journey! To find out how, email me with "TELL ME HOW" at the subject line. My email address is: IRESPOND101(a)hotmail.com FEED YOUR INCOME TODAY!!! If you received this message in error, we apologize. Our remove mailbox is: GIVEMEUP101(a)hotmail.com

1 0

authentication problem
by Mitchell L Model 09 Sep '01

09 Sep '01

I would greatly appreciate it if people knowledgeable about the Zope user authentication process would consider helping me with a problem even though the context for the problem is extremely limited (Omniweb 10.0.5 on Mac OS X 10.0.4), because the answer will help me understand an important part of Zope in addition to helping me get past my problem and in fact, I think the answer probably has to do with the mechanism by which web browsers communicate user authorization to server-side programs generally, independent of Omniweb or Zope, so many people might find this answer interesting. I couldn't use Zope at all on Omniweb before the just released version 10.0.5, because although I could successfully connect to a specific port included in the URL, Omniweb was not using that port for the frames within the page. That seems to have been fixed with the newest version, but I still have a problem: I can successfully log in to Zope, but all attempts to use ZMI get redirected to View pages instead. I have traced through the code in ZPublisher/BaseRequest.py and ZServer/PubCore/ZServerPublisher.py to determine that the request's _auth is coming in as None in Omniweb, but a more meaningful value in other browsers. However, I'm having trouble finding where that information is coming from (the indirections in the Python code make it tricky to catch everything stepping through the code in pdb), and I've run out of time. I would GREATLY appreciate an explanation of where the authorization information is coming from. I don't see the currently logged in user in my CGI environment, including cookies. How does any server-side program get the user authorization information from the browser after the user has logged in and gone to a different frame or window? -- --- Mitchell

7 7

Complete dtml-var Reference?
by Dan Shafer 09 Sep '01

09 Sep '01

Is there a list anywhere of all the built-in dtml-vars? I have searched the How-Tos, the Tips, and the site to no avail. I'm sure this exists but I'm darned if I can find it. Without such a reference, coding dtml into your pages seems to be kind of a hit-and-miss situation. -- Hire a world-class ghostwriter to create your entire information product line! Dan Shafer, author of 57 books (and counting) - Ghostwriting Unlimited, Inc. dan(a)gui.com - 831-643-0590 (V) - 831-401-2531 (F) http://www.gui.com

2 1

Giving Zope more profile in Oz (ie Australia)
by Richard Volpato 09 Sep '01

09 Sep '01

I am looking for Australian Zope developers and would also like to get an estimate of the current state of the Zope developer base in Australia. I have gone to the new Australian Users group site OzZope.org but it's too new to give a good indication. A reasonably large organisation in Australia is currently exploring whether to fund a major Zope based application. It is probably the largest such Zope project in Australia. A prototype Zope application has been demonstrated and has revealed the power of Zope. While key business units within this organisation are very keen on Zope, others are skeptical about the spread and depth of Zope skills in Australia. Those who have invested in a 'one-size fits all' platform based on Lotus Notes need more convincing. The failure of the existing (mostly Lotus) platforms in this organisation to deal with the complexities of the content management problem in the first place led to a Zope based solution appearing so compelling. Other, smaller Zope based applications in other organisations, are also generating similar blends of fascination and skepticism. I need more examples of Australian applications. It will help me, and presumably other organisations, if developers in Australia, would go to the recently established OzZope.org and register. In this way, those interested in exploring Zope solutions can make contact with a developer base. If you are keen to offer services for Zope related work, please contact me. The more we can show that a developer community exists in Australia, the more likely I can convince corporate skeptics that Zope is part of something vibrant, growing and here for the long term. And, of course, if I can assist in getting this larger project running, then further spin off projects will emerge which in turn can fund more Zope development. Looking forward to hearing from you - and see you over at OzZope.org. Richard Volpato

1 0

Re: [Zope] External script generates xml - how to turn it into an xml file object
by Andy Bulka 08 Sep '01

08 Sep '01

> > I have an external script that generates an xml string - how do I > > turn that xml text into an zope xml file object ? > What do you mean by an "zope xml file object"? Yes, a file object with "content_type='text/xml'" > it should make no problems at all when the "file" parameter > of "manage_addFile" is a string containing "<" or ">". Ok, that's promising. All I have to do is get the xml string into zope - and that's the problem. The trouble is, xml returned by external scripts doesn't arrive successfully into zope. It seems that any tags in the string returned by my external python method are stripped out by zope!! Something to do with xml-rpc, no doubt? e.g the following external method def ParseDummy2(): return 'Hi <fred>from the external method</fred>' will actually return 'Hi from the external method' (note the <fred> tags are missing.) Even if my external method encodes the < and > symbols, using, say s = sub('<','<',s) s = sub('>','>',s) there is no easy way to un-substitute inside zope since the re module and sub function is not available inside zope (security etc. issues). Further, there are some some occurences of '<' in my string that I want to keep, since these occurences are actual valid content (as opposed to being part of a tag). Perhaps, ideally there would be a pair of encode/decode methods available to both python and zope that would deeply encode/decode the xml string returned by my external method so that it bypasses all these problems? -Andy

1 0

A Method To My Madness?
by Ben Ocean 08 Sep '01

08 Sep '01

Hi; I'm trying to implement a textbook example using a DTML Method with a <dtml-in> tag: <ul> <dtml-in expr="objectValues('DTML Document')"> <li><a href="&dtml-absolute_url;"><dtml-var title_or_id></a></li><br> </dtml-in> </ul> Pretty straight-forward stuff, but strangely it works within DTML Methods but *not* within DTML Documents. Other DTML Methods work just fine. What am I doing wrong? TIA, BenO

4 5

Re: External script generates xml - how to turn it into an xml file object
by Dieter Maurer 08 Sep '01

08 Sep '01

abulka(a)netspace.net.au writes: > Ok sounds good. Trouble is how to get that string into zope! You > see, passing back xml text containing "<" or ">" from my external > script doesn't seem to work. If my external script passes back a > normal string - fine. If there are tags in the string, they > magically get stripped out :-( > I assume this has something to do > with trying to send xml text within zope's xml-rpc mechanisms - but I > am just guessing here. Maybe, I start to understand.... With "external script" you do not mean an "External Method" but a script run outside Zope? What method do you use to send the string to Zope? HTML, XML-RPC? > e.g. my external method is > > def returnBigString(): > return 'Hi <fred>from the external method</fred>' > > but zope only ends up seeing the string > "Hi from the external method" Seems, you do speak of an External Method. Then, I can assure you that the "<...>" are *NOT* stripped! What you see is almost surely an illusion because you view the method's return value as HTML. Because the HTML browser does not recognize your tags (e.g. '<fred>'), it silently ignores them. Look at the HTML source and you will see them... Alternatively, set the Content Type to "text/plain": RESPONSE.setHeader('Content-Type','text/plain') Dieter

1 0

External script generates xml - how to turn it into an xml file object
by Andy Bulka 08 Sep '01

08 Sep '01

I have an external script that generates an xml string - how do I turn that xml text into an zope xml file object ? 1. If the external script returns the xml as a string, zope doesn't like tags in the string. xml within xml issues, I guess 2. If I encode the < and > symbols in the xml returned by my script, then search and replace them back again - this search and replace only works for a DTML document and not a file object. Perhaps my script should generate a file instead, then I could import the file into an xml file object directly. But I want to do this programatically, not though a form file upload. thanks for any guru thoughts. -Andy Bulka

2 1

problem with retrieving Archives with user input from the form
by Hamzat kamal 08 Sep '01

08 Sep '01

Dear Zopatistals I am have one serious problem which I will like you to assist me. I am keeping archives which is reference by the users by typing the file name into a form displayed on the web. i stored the user input into a var name called date_code. <input type="text" name="date_code">. Thereafter in my index_html, i then use <dtml-var expr="_.getitem(_.string.lower(date_code),1)"> to render the file. This work perfectly when a user type in the value for the date_code var. My problem is this. I have some other links which suppose to use the date_code value which the user type to display their contents as well, and i have already stored those content in their various folders, but to my surprise when clicked on these links this is the error message i got: Error Type: NameError Error Value: date_code Please i need your assistance as soon as posssble. This is the url of the site :http://www.champion-newspapers.com click on archive button when a newpage is displayed ignore the instruction and press logon button . Another page will be displayed asking you to enter the date code, for the purpose of this test type friday_1008_html and click view button. This will display the teaser archive for the news item, there after try to click on editorial on the left navi you will then see the error, despite the fact that i have the copy of friday_1008_html in the editorial folder. My impression is that since i have been able to use the date_code to display the teaser for the news item i should be able to use for all other link items on this page. thanks for your care. Hamzat Kamal.

1 0