- Zope - Zope lists

strange request
by Andy McKay 31 Aug '01

31 Aug '01

Im investigating a Zope installation that just hung for a while, and looking through the log I found this very strange request: 2001-08-31 01:26:29 151.197.229.183 - 192.168.2.165 80 Content-type: application/x-www-form-urlencoded - 404 265 - None - 0.015000 ie the and cs-method cs-uri-stem were: Content-type: application/x-www-form-urlencoded instead of for example: GET /manage Ughh. Im not sure if this caused the hang, but I was curious if anyone else has seen this...? Cheers. -- Andy McKay.

1 0

Re: OOP Suggestion: allow local roles to restrict and not only extend user's roles.
by Philipp Robbel 31 Aug '01

31 Aug '01

Hi Laurie, thanks for your quick reply. Yes, that is one option I just tried, but - in my case - it has a major drawback (see below). First, here's what i did: - I created a 'test' role with only the permissions to "access contents information" and "view". - I created the researchers in the root folder and gave them the "test" permission. - I protected the critical dtml and sql methods by making them only accessible to test & manager - assigned people. - Then in their specific subfolders I gave the researchers the *local_role* of a Manager. It works but there is one major drawback in my case. I only quickly checked but in my case the /database researcher was able to call the /bioinformatics/show_management_screen and while he couldn't add Documents in the /bioinformatics directory on that screen (a login box popped up) he could execute the database methods that inserted the various data under the /bioinformatics ID just fine. Did you encounter the same problem? PS.: the bioinformatics staff is working at the European Media Laboratory in Heidelberg, Germany (www.eml.org [careful, those pages are old :-) ]) Greetings, Philipp Robbel -----Original Message----- > Hi Philipp - I'm afraid that I don't think I can help you but am struggling > with the same kind of problem - I have different research groups who cannot > see each others data, but have shared information/methods that they need to > execute in context in their respective groups and projects (which also only > some people can see) > My method so far is to define a new role that when the user is created they > are added to 'LabLoggedIn'. Then this role has the appropriate permissions > in the root folder to run the methods that are needed. Then in their own > groups or projects they have the appropriate local roles granted (these are > defined at the root level). We are working on the assumption that the users > wont know enough to hack in but I am trying to do it as though they can. > I don't know if this has helped any, but I am struggling through myself! > Laurie > > PS where is the bioinformatics that you are working with based? I am in the > same kind of lab.

1 0

OOP Suggestion: allow local roles to restrict and not only extend user's roles.
by Philipp Robbel 31 Aug '01

31 Aug '01

Dear everyone, I'm badly stuck with my problem and while I think that I'm using valid OOP design I don't think that Zope currently supports this. Here's a description of my current design: In our company there are different research groups whom I gave their own subfolders. /databases /bioinformatics etc. Within each group there are pseudo-managers defined (i.e. they have most of the full manager role, i.e. can create/delete documents etc., so I'll use "manager" as role when describing my problem.) I want all groups to share a common set of both DTML methods and SQL functions, so I placed them in the root folder. In the root folder there is for example a new management function that - when called like /databases/show_management_screen - will show the management options for the group specified by the containing folder. It will also allow database inserts depending on the containing folder. I do that in my inherited "show_management_screen" dtml method by using statements like: <dtml-call "sqlAddProjects(ResearchGroupName = id, ...)"> which will do: INSERT INTO table (...) VALUES(...) WHERE ResearchGroupName=<dtml-sqlvar id type=nb> It's critical that a manager from /databases is *not* allowed to access the sql method in the /bioinformatics group, else he would be able to insert values under a fake GroupID by calling the method like /bioinformatics/sqlAddProjects directly. Another thing that's critical is that no researcher from any group nor the anonymous user has direct access to this Database method: that's why I not only placed them in the root folder but also restricted the "Access contents information", "Use Database Methods" and "View" permission of that sqlAddProjects Method to Managers. Problem which is solved by that: no anonymous user can access that method. Problem that comes up: no Researcher (i.e. subfolder manager) can access that method either, because root manager is, of course, != subfolder manager. Possible solution for inherited DTML methods: a) Disable that "Access contents information", "Use DB Methods" and "View" permissions protection in root folder. b) Check for permissions in the method itself. <dtml-if "AuthenticatedUser.has_role(this(), ['Manager'])"> as outlined in http://www.zope.org/Members/tseaver/user_settable_passwords. It's supposed to check, whether the accessing user has the Manager Role in the context the DTML method is called on. But this fails for SQL Methods and I'm pretty confident that there should be a simpler way in Zope itself. My idea to fully support this OOP design was the following: Enable local roles not only to extend the user's roles but also restrict them. I.e. in my case I would define all researchers from the various groups in the root acl_users folder as Managers. But - at the same time - change the local roles of the root folder to _not_ give the researchers the Manager role in the root folder (understandable?) In the /databases folder, however, I would give the database-researcher back his "Manager" role, via local roles. This would solve my whole problem: Step 1: restrict again all critical dtml and sql methods in the root folder to managers (as already outlined above: "...but also restricted the "Access contents information", "Use Database Methods" and "View" permission of that sqlAddProjects Method to Managers"). Step 2: If the database researcher calls the "show_management_screen" dtml method like /databases/show_management_screen it would work because a) he is defined as Manager in the root folder (but local roles restrict them there to be a "real" Manager) b) he has the proper local roles set in his /databases folder so that there he finally is a "real" Manager. He couldn't, however, access the function like /show_management_screen (i.e. in the root folder) or like /bioinformatics/show_management_screen: both would be restricted by the local rules. Shouldn't that be valid OOP design? Please let me know what you think or - if I oversaw another solution to my problem - please let me know how to solve it :-) My original problem was outlined in my previous post at http://groups.yahoo.com/group/zope/message/70099 where I unfortunately didn't get any replies. Thanks in advance, Philipp Robbel

2 1

RE: [Zope] Homesite Plugins for Zope
by Schmidt, Allen J. 31 Aug '01

31 Aug '01

I have attached an email and a file that was sent to me by Tommy Johnson. He may send a similar item but since I saw your note first, I thought I would. The more who get the power of Homesite and Zope the better! An amazing combination. With the attached file installed into Homesite, when you type <dtml-var and then hit the spacebar, every possible tag pops up. Same with most (all?) other dtml tags. Imagine, editing 30 documents and/or methods, doing a search and replace on all the files, saving them, noticing a problem and undoing ALL of the changes with a quick UNDO, resaving and all is right with the world...all in a few seconds. Sure makes me feel better when I have to make changes to a live site. Sorry...I will get off my soapbox now. It just has made working with Zope much more pleasurable. Allen -----Original Message----- From: oliver [mailto:oliver@mopa.at] Sent: Friday, August 31, 2001 3:22 AM To: zope(a)zope.org Subject: [Zope] Homesite Plugins for Zope Hello guys! Does someone know where I get Homesite Plugins for Zope? Thanks in Advance Oliver _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

4 4

AMPMMinutes() returns nothing
by Trevor Toenjes 31 Aug '01

31 Aug '01

Can someone please verify that this variable works in 2.4. Here is my code... <dtml-with "ZopeTime().toZone('EST')"> <dtml-var expr="AMPMMinutes()"> </dtml-with> Everything else seems fine. DayOfWeek() Month() ampm() etc... Thanks IA, -Trevor

1 0

Drag and Drop in ZMI?
by Brad Clements 31 Aug '01

31 Aug '01

I'm thinking about at least adding support for dropping images into IE on Windows (sorry it's such a limited scope) Has anyone else tried this.. or can suggest which module I "HotPatch .. MonkeyPatch .. DynamicPatch" to allow me to inject some HTML in ZMI folder pages? Thanks Brad Clements, bkc(a)murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax netmeeting: ils://ils.murkworks.com AOL-IM: BKClements

3 2

help!!! problem with caching zope generated pages
by Robert Rottermann 31 Aug '01

31 Aug '01

Hi there, I have created a multilingual CMF-site. To switch the language I use a cookie. Each multilingual page looks something like this if lanhuage=GE do german .. else if .. do other language /if noww my problem: This works perfectly fine where ever I test but at the site of the guy that pays the bill. It is a governemental department that is burried behind firewalls an proxies. When one of their user switches the language she have to press the refresh button to make the change apear. I allredy have added the following two lines to the header to no avail: <META HTTP-EQUIV="Pragma" CONTENT="no-cache"> <META HTTP-EQUIV="Expires" CONTENT="-1"> what can I do to force a refresh of the screen ???? any help will be much appreciated Robert

4 3

Modifying Splitter.c and creating the new Splitter.pyd
by Richard Ettema 31 Aug '01

31 Aug '01

Hi, I have modified Splitter.c so it isn't so tough on words containing numbers. I have no idea of how to create the .pyd from this modified Splitter.c. I have Created the Splitter.obj file with MSVC and that is as far as I have got. Can someone walk me through what i need to do now as old messages I have found touching on this subject have confused me completely! I am running Zope2.4 on Win2k Thanks for any help. Richard

2 1

Fairly dumb SecurityCheckPermission question
by Neil Burnett 31 Aug '01

31 Aug '01

Hi I am using the security system for the first time, so this question could be trivial. I want to check in one DTML Method whether the current user has permission to view another one. So I have tried the following, where editContact is the target method. <dtml-if expr="_.SecurityCheckPermission('View', editContact())"> <dtml-var expr="_.SecurityGetUser().getUserName()"> has permission <dtml-else> <dtml-var expr="_.SecurityGetUser().getUserName()"> is unauthorised </dtml-if> It always fails whether the current user has permission to view the target method or not. Worse, if the target method contains any dtml, the above code apparently tries to evaluate it, but can't, and returns an error: Error Type: KeyError Error Value: standard_html_header Note that if I change the target method to be this, as in: <dtml-if expr="_.SecurityCheckPermission('View', this())"> it works how I expect (but not, of course, how I want) Any helpful hints gratefully received. Regards Neil

2 1

extending an acl_user object
by Johan Parmar 31 Aug '01

31 Aug '01

Hi, I just wondering how you have guys have done the member central. For example how have you added properties to to the user profiles?? I can explain how I have done so far. I am using acl_users for my users. The additional information about the users is solved by adding a product (I found on your site) called "userinfo folder". The problem is now that when I'm updating the default userinfo I also want to update the xtra userinfo. I'm using the fcn "acl_users.manage_users" for adding/editing a user and then I call "manage_editProperties" for setting/editing my xtra info. This works fine but I have to it in two steps (i.e. two forms). Also I want to decide where to redirect after my forms and so on... how can I do that hoping for some answers thanx Johan

2 1