- Zope - Zope lists

OOP Suggestion: allow local roles to restrict and not only extend user's roles.
by Philipp Robbel 31 Aug '01

31 Aug '01

Dear everyone, I'm badly stuck with my problem and while I think that I'm using valid OOP design I don't think that Zope currently supports this. Here's a description of my current design: In our company there are different research groups whom I gave their own subfolders. /databases /bioinformatics etc. Within each group there are pseudo-managers defined (i.e. they have most of the full manager role, i.e. can create/delete documents etc., so I'll use "manager" as role when describing my problem.) I want all groups to share a common set of both DTML methods and SQL functions, so I placed them in the root folder. In the root folder there is for example a new management function that - when called like /databases/show_management_screen - will show the management options for the group specified by the containing folder. It will also allow database inserts depending on the containing folder. I do that in my inherited "show_management_screen" dtml method by using statements like: <dtml-call "sqlAddProjects(ResearchGroupName = id, ...)"> which will do: INSERT INTO table (...) VALUES(...) WHERE ResearchGroupName=<dtml-sqlvar id type=nb> It's critical that a manager from /databases is *not* allowed to access the sql method in the /bioinformatics group, else he would be able to insert values under a fake GroupID by calling the method like /bioinformatics/sqlAddProjects directly. Another thing that's critical is that no researcher from any group nor the anonymous user has direct access to this Database method: that's why I not only placed them in the root folder but also restricted the "Access contents information", "Use Database Methods" and "View" permission of that sqlAddProjects Method to Managers. Problem which is solved by that: no anonymous user can access that method. Problem that comes up: no Researcher (i.e. subfolder manager) can access that method either, because root manager is, of course, != subfolder manager. Possible solution for inherited DTML methods: a) Disable that "Access contents information", "Use DB Methods" and "View" permissions protection in root folder. b) Check for permissions in the method itself. <dtml-if "AuthenticatedUser.has_role(this(), ['Manager'])"> as outlined in http://www.zope.org/Members/tseaver/user_settable_passwords. It's supposed to check, whether the accessing user has the Manager Role in the context the DTML method is called on. But this fails for SQL Methods and I'm pretty confident that there should be a simpler way in Zope itself. My idea to fully support this OOP design was the following: Enable local roles not only to extend the user's roles but also restrict them. I.e. in my case I would define all researchers from the various groups in the root acl_users folder as Managers. But - at the same time - change the local roles of the root folder to _not_ give the researchers the Manager role in the root folder (understandable?) In the /databases folder, however, I would give the database-researcher back his "Manager" role, via local roles. This would solve my whole problem: Step 1: restrict again all critical dtml and sql methods in the root folder to managers (as already outlined above: "...but also restricted the "Access contents information", "Use Database Methods" and "View" permission of that sqlAddProjects Method to Managers"). Step 2: If the database researcher calls the "show_management_screen" dtml method like /databases/show_management_screen it would work because a) he is defined as Manager in the root folder (but local roles restrict them there to be a "real" Manager) b) he has the proper local roles set in his /databases folder so that there he finally is a "real" Manager. He couldn't, however, access the function like /show_management_screen (i.e. in the root folder) or like /bioinformatics/show_management_screen: both would be restricted by the local rules. Shouldn't that be valid OOP design? Please let me know what you think or - if I oversaw another solution to my problem - please let me know how to solve it :-) My original problem was outlined in my previous post at http://groups.yahoo.com/group/zope/message/70099 where I unfortunately didn't get any replies. Thanks in advance, Philipp Robbel

2 1

RE: [Zope] Homesite Plugins for Zope
by Schmidt, Allen J. 31 Aug '01

31 Aug '01

I have attached an email and a file that was sent to me by Tommy Johnson. He may send a similar item but since I saw your note first, I thought I would. The more who get the power of Homesite and Zope the better! An amazing combination. With the attached file installed into Homesite, when you type <dtml-var and then hit the spacebar, every possible tag pops up. Same with most (all?) other dtml tags. Imagine, editing 30 documents and/or methods, doing a search and replace on all the files, saving them, noticing a problem and undoing ALL of the changes with a quick UNDO, resaving and all is right with the world...all in a few seconds. Sure makes me feel better when I have to make changes to a live site. Sorry...I will get off my soapbox now. It just has made working with Zope much more pleasurable. Allen -----Original Message----- From: oliver [mailto:oliver@mopa.at] Sent: Friday, August 31, 2001 3:22 AM To: zope(a)zope.org Subject: [Zope] Homesite Plugins for Zope Hello guys! Does someone know where I get Homesite Plugins for Zope? Thanks in Advance Oliver _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

4 4

AMPMMinutes() returns nothing
by Trevor Toenjes 31 Aug '01

31 Aug '01

Can someone please verify that this variable works in 2.4. Here is my code... <dtml-with "ZopeTime().toZone('EST')"> <dtml-var expr="AMPMMinutes()"> </dtml-with> Everything else seems fine. DayOfWeek() Month() ampm() etc... Thanks IA, -Trevor

1 0

Drag and Drop in ZMI?
by Brad Clements 31 Aug '01

31 Aug '01

I'm thinking about at least adding support for dropping images into IE on Windows (sorry it's such a limited scope) Has anyone else tried this.. or can suggest which module I "HotPatch .. MonkeyPatch .. DynamicPatch" to allow me to inject some HTML in ZMI folder pages? Thanks Brad Clements, bkc(a)murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax netmeeting: ils://ils.murkworks.com AOL-IM: BKClements

3 2

help!!! problem with caching zope generated pages
by Robert Rottermann 31 Aug '01

31 Aug '01

Hi there, I have created a multilingual CMF-site. To switch the language I use a cookie. Each multilingual page looks something like this if lanhuage=GE do german .. else if .. do other language /if noww my problem: This works perfectly fine where ever I test but at the site of the guy that pays the bill. It is a governemental department that is burried behind firewalls an proxies. When one of their user switches the language she have to press the refresh button to make the change apear. I allredy have added the following two lines to the header to no avail: <META HTTP-EQUIV="Pragma" CONTENT="no-cache"> <META HTTP-EQUIV="Expires" CONTENT="-1"> what can I do to force a refresh of the screen ???? any help will be much appreciated Robert

4 3

Modifying Splitter.c and creating the new Splitter.pyd
by Richard Ettema 31 Aug '01

31 Aug '01

Hi, I have modified Splitter.c so it isn't so tough on words containing numbers. I have no idea of how to create the .pyd from this modified Splitter.c. I have Created the Splitter.obj file with MSVC and that is as far as I have got. Can someone walk me through what i need to do now as old messages I have found touching on this subject have confused me completely! I am running Zope2.4 on Win2k Thanks for any help. Richard

2 1

Fairly dumb SecurityCheckPermission question
by Neil Burnett 31 Aug '01

31 Aug '01

Hi I am using the security system for the first time, so this question could be trivial. I want to check in one DTML Method whether the current user has permission to view another one. So I have tried the following, where editContact is the target method. <dtml-if expr="_.SecurityCheckPermission('View', editContact())"> <dtml-var expr="_.SecurityGetUser().getUserName()"> has permission <dtml-else> <dtml-var expr="_.SecurityGetUser().getUserName()"> is unauthorised </dtml-if> It always fails whether the current user has permission to view the target method or not. Worse, if the target method contains any dtml, the above code apparently tries to evaluate it, but can't, and returns an error: Error Type: KeyError Error Value: standard_html_header Note that if I change the target method to be this, as in: <dtml-if expr="_.SecurityCheckPermission('View', this())"> it works how I expect (but not, of course, how I want) Any helpful hints gratefully received. Regards Neil

2 1

extending an acl_user object
by Johan Parmar 31 Aug '01

31 Aug '01

Hi, I just wondering how you have guys have done the member central. For example how have you added properties to to the user profiles?? I can explain how I have done so far. I am using acl_users for my users. The additional information about the users is solved by adding a product (I found on your site) called "userinfo folder". The problem is now that when I'm updating the default userinfo I also want to update the xtra userinfo. I'm using the fcn "acl_users.manage_users" for adding/editing a user and then I call "manage_editProperties" for setting/editing my xtra info. This works fine but I have to it in two steps (i.e. two forms). Also I want to decide where to redirect after my forms and so on... how can I do that hoping for some answers thanx Johan

2 1

RE: [Zope] Netscape 4.7x Redirect problem
by Schmidt, Allen J. 31 Aug '01

31 Aug '01

I changed the redirects from just the file or folder name: RESPONSE.redirect('/Allen/menu') And added the full server name. Works fine in Netscape now. Thanks!! I was going to add like this: RESPONSE.redirect(SERVER_NAME+'/Allen/menu') Then I don't have to change things when moving from development to production. But, it give the real name of the computer server and not the Zope domain name. Any ideas there? Or just leave it alone? Its not used in but a handful of places. Zope Find works great for tracking the locations too, so its not really a big deal. Thanks to all for the tips. Allen -----Original Message----- From: Behrens Matt - Grand Rapids [mailto:Matt.Behrens@Kohler.Com] Sent: Friday, August 31, 2001 8:47 AM To: Peter Bengtsson Cc: Schmidt, Allen J.; zope(a)zope.org Subject: Re: [Zope] Netscape 4.7x Redirect problem Peter Bengtsson wrote: > Don't ask me why but people in the community keep repeating that you should > pass a full url to the redirect() method. > Do instead: > RESPONSE.redirect('http://www.guugle.com/Allen/menu') > ...or... > RESPONSE.redirect(menu.absolute_url()) This is because HTTP specifies that Location must give an absolute URI (<http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.30>), and redirect uses a 302 response and the Location field.

3 2

Zope IDE
by Alan Truesdale 31 Aug '01

31 Aug '01

This is kind of a joke for linux users ruining zope server. Kind of because all features work, but please don't take to seriously. Zope IDE see it here http://zope.mlug.ca/konquerzope_html Alan http://www.mlug.ca alan(a)mlug.ca

1 0