- Zope - Zope lists

CoreSessionTracking-based LoginMethod for LoginManager
by Andy Gimblett 15 Aug '01

15 Aug '01

Hi there Zopers, I'm currently trying to develop a LoginMethod for LoginManager which uses CoreSessionTracking to store/access credentials, rather than Basic HTTP Authorization or Basic Cookie Authorization. Here's why: - Basic HTTP auth is unacceptable because we need form-based login. - I've looked at other user folders which support cookies, and at CookieCrumbler, and at the BasicCookieLogin class bundled with LoginManager, but they all share the problem (in my mind) that they store the username/password encoded in the cookie itself, which isn't very secure - and doesn't extend well into storing other information if I wanted to. - I'd much rather use a token-based scheme where all sensitive information is stored on the server, and the cookie is just a token which can be mapped to that data. This seems to me to be what CoreSessionTracking offers. - The CST documentation mainly talk about CST as a way of tracking anonymous sessions, but I see no reason why it couldn't be used in this way too...? If we assume that the above reasoning is sound and that this is A Good Thing To Do, then I have the following problems: - I haven't written a fully-fledged disk-based product yet. I've looked at the tutorials and howtos but they're pretty basic. Helpful, but basic. I've successfully created a stripped-down do-nothing copy of the BasicCookieLogin class, but it's adding the extra (CST-related) parts that I'm having difficulty with. - If I could do it with a ZClass I reckon I could make it work, but I can't see a way to create a ZClass which LoginManager can use as a LoginMethod. There are subclasses for UserSources, but not LoginMethods. - Ideally I want it to be self-contained, so the LoginMethod instance would contain a SessionIdManager and a SessionDataManager - but I don't know how to do this properly/ morally/legally, or if it's even possible. - Another approach would be to have the LoginMethod pick up a SessionDataManager outside of it, but I'm having problems with this too... I tried hard-coding an expected ID in the LoginMethod and created a SessionDataManager with that ID in the LoginManager, but the acquisition didn't work. Maybe I'm missing something simple? Basically I have too many gaps in my knowledge to pull this together properly on my own, so it's time to ask for help. I'll be happy to expand on any of the above if necessary... I've sure learnt a lot about LoginManager and CST over the last few days, but I don't quite the skills to suit action to intent... :-( I'm assuming that this would be useful to other people if I could get it to fly? If that's the case, I'd love to release it. Similarly, if anyone wants to see the source of what I've tried so far, let me know. Other than that, all input appreciated. Thanks in advance, Andy -- Andy Gimblett - Programmer - Frontier Internet Services Limited Tel: 029 20 820 044 Fax: 029 20 820 035 http://www.frontier.net.uk/ Statements made are at all times subject to Frontier's Terms and Conditions of Business, which are available upon request.

4 3

Attempted hotfix to structured text
by ksmith＠99hats.com 15 Aug '01

15 Aug '01

I'm trying to do a Hotfix to remove the the space between bulleted lists in structured text. Does anyone know why this isn't working as a Hotfix? Thanks, Kevin __init__.py """ Remove P tag from unordered lists""" from StructuredText.StructuredText import HTML def ul(self, before, p, after): """Save some space""" if p: p="%s" % strip(ctag(p)) return ('%s<ul><li>%s\n%s\n</li></ul>\n' % (before,p,after))

3 2

RE: [Zope] CoreSessionTracking-based LoginMethod for LoginManager
by Andy Gimblett 15 Aug '01

15 Aug '01

> Sure. Release early, release often! Definitely! But I'm guessing "release broken" doesn't fit into this scheme. :-) -Andy -- Andy Gimblett - Programmer - Frontier Internet Services Limited Tel: 029 20 820 044 Fax: 029 20 820 035 http://www.frontier.net.uk/ Statements made are at all times subject to Frontier's Terms and Conditions of Business, which are available upon request.

2 1

Undo Again
by Phil Harris 15 Aug '01

15 Aug '01

Hi all, I'm using a few methods of my own design to add objects to the ZODB. I then want to use the undo stuff in Zope to, well, undo ;). I'm using this code (kndly suggested by Chris Withers): t=get_transaction() t.begin() self.manage_addFolder(id=objID,title=objTitle) t.note('Added Folder %s' % objID) t.commit() OK so far, it indeed adds the folder and adds a note to the undo list. Now my problem is that the note is added at the root level and never shows up in the local undo list of the parent folder of the new folder (if that makes any sense at all). My question is, how would I get it to show in the 'local' undo list of the parent folder. Any suggestions? tia Phil phil.harris(a)zope.co.uk

3 2

Re: [Zope] Zope behind a firewall.
by H.de.Wit＠SFK.NL 15 Aug '01

15 Aug '01

What do I have to do to make Zope behave with the same speed using the firewall ?? "C:\Program\WebSite\bin\python.exe" "C:\Program\WebSite\z2.py" -D -f - -p - -w80 "$@" %1 %2 %3 %4 %5 %6 %7 %8 %9 I don't have an explanation for the behaviour with the firewall, but your start.bat has the -D debug option turned on. If you turn it off, it should be really faster than it is now. Probably you noticed it, but if you are caring for speed... Hans de Wit Stichting Farmaceutische Kengetallen Postbus 30460 2500 GL DEN HAAG Tel. 070-3737448 Fax 070-3737445

1 0

Zope behind a firewall.
by Rubinstein Fredrik 15 Aug '01

15 Aug '01

Hi there, I have developed a Zope application wich when it is run in our internal net behaves like a dream. It also runs like a dream on the outside ( on the internet ). However when the Zope application is run behind our firewall ( Borderware 6.1.1 ) it is very,very slow. I'm running Zope on a NT box and have done the following in the start.bat file. And running Zope 2.3.0. "C:\Program\WebSite\bin\python.exe" "C:\Program\WebSite\z2.py" -D -f - -p - -w80 "$@" %1 %2 %3 %4 %5 %6 %7 %8 %9 What do I have to do to make Zope behave with the same speed using the firewall ?? With kind regards Fred Rubinstein

2 1

RE: [Zope] property:date
by Max Møller Rasmussen 15 Aug '01

15 Aug '01

In my experience users tend to like seperate input fields like: Day: <input type=="text" name="day"> / Month: <input type=="text" name="month"> / Year: <input type=="text" name="year"> Then you can assemble it again in the "action" script like: <dtml-call "REQUEST.set('dateString', day+month+year)"> <dtml-call "REQUEST.set('date', DateTime(dateString))"> regards Max M > From: Giuseppe Bonelli [mailto:g.bonelli@pn.itnet.it] > I want to use a date property to store a user entered date > into a ZClass property; the date must be entered in > "%d/%m/%&y" format (I am from Europe (-;)).

1 0

RE: [Zope] Hallelujah!
by Max Møller Rasmussen 15 Aug '01

15 Aug '01

Yehaw ... > > + - default for 'orphan' attribute of <dtml-in> is > now 0 instead 3. > There was much rejoicing :-) Indeed! Max M

1 0

Re: [Zope] Popy Problems
by jyd0vu001＠sneakemail.com 15 Aug '01

15 Aug '01

Russell, download the following tarball. Unzip/tar, read the README or INSTALL for the python command used to install it (it doesn't use configure;make method - instead it's something like python install.py ..). http://www.lemburg.com/files/python/eGenix-mx-Extensions.html#Download-mxBA… Once that's done, you'll have mxDateTime.h in two places... in the source you just untarred and in the /usr/local hierarchy. Mine is at: /usr/local/lib/python2.1/site-packages/mx/DateTime/mxDateTime/mxDateTime.h To double check that it's there, type the following: cd /usr/local/lib find ./ -name mxDateTime.h -print Once that is done, you should be able to build PoPy (assuming Python's paths aren't entirely messed up). With PoPy built, you may run into problems with Zope finding the shared library for mxDateTime. A workaround is to copy (or possibly link): cp /usr/local/lib/python2.1/site-packages/mx/DateTime/mxDateTime/mxDateTime.so \ /usr/local/lib/python2.1/site-packages hth, Paul. -----Original Message----- From: Russell Hires rhires(a)earthlink.net [softsign/zope-mailing-list] [mailto:ticket_ab753c61mm861s6997792391222@sneakemail.com] Sent: August 14, 2001 06:25 To: horbal(a)enel.ucalgary.ca Subject: Re: [Zope] Popy Problems Hmmm...maybe more details are in order: I've got a PowerPC running Debian-woody. I don't have a clue what egenix is, and I can't seem to find a Debian package for it, either. A find / -name egenix turns up nothing. Neither does a "locate". I looked in the debian archive, and it ain't there that I can tell. So, what's egenix, and where can I get that? Part II: bak (kedai) says: > this is where i got mxDateTime.h on my system. > egenix-mx-base-2.0.1/mx/DateTime/mxDateTime/ > this is a standard mx tar ball Since I don't have this, I can't get the mxDateTime.h file. Neither can I seem to locate the "standard mx tar ball". I do have the mx/DateTime/mxDateTime stuff, and move the .so to the different place that was mentioned, but no dice. Thanks for the help so far. Russell On Tuesday 14 August 2001 01:46, wrote: > Whoops! I'm getting ahead of myself! > > After you solve the .h problem, you'll probably run into the problem for > which I gave you a solution... =) > > At any rate, try installing the egenix 2.0.2 package into its default > place... My mxDateTime.h is located in: > > /usr/local/lib/python2.1/site-packages/mx/DateTime/mxDateTime/mxDateTime.h > > > > -----Original Message----- > From: Russell Hires rhires(a)earthlink.net XXXXXXXXXXXXXXXXXXXXXXXXXXXX > [mailto:XXXXXXXXXXXXXXXXXXXXXXXXX] > Sent: August 13, 2001 22:03 > To: XXXXXXXXXXXXXXXXXXXXXXX > Subject: Re: [Zope] Popy Problems > > > Well, no luck with egenix. It seems that the only mxDateTime.h I was able > to find was included with PoPy-2.0.1, which I'm trying to avoid. Any more > clues on this? > > Russell > > On Monday 13 August 2001 23:14, bak (kedai) wrote: > > On Tuesday 14 August 2001 10:46, Russell Hires wrote: > > > I'm trying, and not succeeding, to compile PoPy-2.0.6 and it won't > > > compile (or configure, really) without mxDateTime headers...I've got > > > the python-mxDateTime package, but not the headers...I don't get that. > > > > > > Can anyone help me? The exact error message is: > > > checking for mxDateTime.h... no > > > configure: error: PoPy needs mxDateTime headers > > > > i got the same error msg initially when trying to compile psycopg. i > > guess > > > ./configure should have --with-mxDateTime=, so put the path to it. if > > you grabbed egenix, it should be in the package. cant remember off the > > top of my head. > > > > do a find. > > hth > > > > > Thanks! > > > > > > Russell > > >

2 1

ZPT: How do I see if something is in a sequence?
by alan runyan 15 Aug '01

15 Aug '01

I am new to pagetemplates, and have to admit -- I have banged my head until its blue. I am very tired, and I need help. I have a sequence , hl_roles=['can', 'have', 'different', 'strings'], its also a attribute hanging off a object called member. I am trying to test to see if a string is in the hl_roles sequence. how do I do this? in DTML its *straight forward* <dtml-if "'different' in member.hl_roles"> I've tried tal:condition="python:'different' in member.hl_roles" and tal:condition="exists:'different' in member.hl_roles neither work. please help ~runyaga

3 3