- Zope - Zope lists

Re: [Zope] RESPONSE.redirect not working
by Andrew Hedges 24 May '06

24 May '06

Actually, that is exactly what is happening. It's the current URL with the contents of login_html rendered. I changed it to the following and it worked: <dtml-unless pyCheckSession> <dtml-return expr="1"> </dtml-unless> Thanks again for your help! -Andrew On May 23, 2006, at 5/23/2006 5:02 PMMDT, Jo Meder wrote: > Am 24.05.2006, 00:57 Uhr > schriebte Andrew Hedges <andrew(a)clearwired.com>: > >> <dtml-unless pyCheckSession> >> <dtml-return login_html> >> </dtml-unless> > > Are you sure you're seeing the redirect there and not just the login > page rendered for the address you were originally accessing? > > Just wondering... > > Jo.

3 3

RE: [Zope] AJAX and Zope
by Pascal Peregrina 24 May '06

24 May '06

Well, that's why I mentioned this in my initial mail: http://jtauber.com/blog/2006/05/23/primitive_python_version_of_gwt_working (the python to javascript translator part) Of course I know how to make some AJAX to in Zope for some specific application. But I wanted to know if some of the core Zope developers had ever thought about a more generic approach. For example I am sure that having this "python to javascript translator" and objects like PythonScripts that would have a "javascript" view is something that would make AJAX enabled pages development on Zope much easier (just a matter of including the JS library and then make some python code). Pascal -----Message d'origine----- De : Lennart Regebro [mailto:regebro@gmail.com] Envoyé : mercredi 24 mai 2006 15:27 À : Pascal Peregrina Cc : zope(a)zope.org Objet : Re: [Zope] AJAX and Zope On 5/24/06, Pascal Peregrina <Pperegrina(a)lastminute.com> wrote: > By Zope objects I meant: > > You've got a page template for example, and you include such an "AJAX enabled object", basically rendering an HTML fragment, and the resulting page will include the page template code + the fragment (similar to a macro call), but will also include the needed javascript code to handle the asynchronous communication. That is a macro call. There is no difference. It just that the macro includes the HTML needed to suck in the JS library you use. > Then another thing would be something like a PythonScript object (so you define python code and return python structures) and get it rendered as javascript to be included in somepage for processing the data returned by an asynchronous XML-RPC call to Zope within the browser. Thare has been discussions and efforts to make a library where you can write python code and get Ajax out, yes. It is very non-trivial. :) -- Lennart Regebro, Nuxeo http://www.nuxeo.com/ CPS Content Management http://www.cps-project.org/ ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

1 0

AJAX and Zope
by Pascal Peregrina 24 May '06

24 May '06

Hi, I was wondering if there is any plan to have built-in support (i.e. helpers, built-in Zope objects, etc) in order to support AJAX in Zope at some point. Zope is already XML-RPC compliant, so it should not be very difficult to do so... Has anyone seen this? http://jtauber.com/blog/2006/05/23/primitive_python_version_of_gwt_worki ng Pascal ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

3 2

apache rewrite rules redux
by David Bear 24 May '06

24 May '06

the more I try to get this to work, the less I understand. Sorry to bug these groups again, but I still need a little help. I would like my zope content (and plone) available to both http adn https urls. I went to betabug/zope/witch and was able to generate the following rule sets. # see http://betabug.ch/zope/witch RewriteRule ^/z2$ http://127.0.0.1:9080/VirtualHostBase/\ https/%SERVER_NAME}:80/VirtualHostRoot/_vh_z2/ [L,P] RewriteRule ^/z2/(.*) http://127.0.0.1:9080/VirtualHostBase/\ https/%{SERVER_NAME}:80/VirtualHostRoot/_vh_z2/$1 [L,P] RewriteRule ^/z2$ http://127.0.0.1:9080/VirtualHostBase/\ http/%SERVER_NAME}:80/VirtualHostRoot/_vh_z2/ [L,P] RewriteRule ^/z2/(.*) http://127.0.0.1:9080/VirtualHostBase/\ http/%{SERVER_NAME}:80/VirtualHostRoot/_vh_z2/$1 [L,P] The rules listed above only work to serve content from http://servername/z2.. They refuse to work for https://servername/z2 (that generates a not found error) Any other advice on make both urls work? I also found the following rule from scanning through zope-list postings, to force any logon authentication requests to go over https. However, since the above rules fail, the following does nothing. RewriteRule ^/login_form(.*) https://%{SERVER_NAME}/login_form$1 [NE,L] -- David Bear What's the difference between private knowledge and public knowledge?

3 2

Re: [Zope] RESPONSE.redirect not working
by Jo Meder 23 May '06

23 May '06

Am 24.05.2006, 00:24 Uhr schriebte Andrew Hedges <andrew(a)clearwired.com>: > I'm at my wit's end. Any help is appreciated. Yes, I have worn > Google out trying to figure this out. > > In my (yeah, yeah, I know) DTML method, I have structured things like > so: > > <dtml-call pyCheckSession> <-- a Python script that checks Hi there! Given your code in pyCheckSession try the following (not tested): <dtml-unless pyCheckSession> <dtml-return ""> </dtml-unless> and change pyCheckSession to: > if url <> '': > "If we have need to, bump the user out" > RESPONSE.redirect(url) return 0 .... else: .... return 1 The call to "redirect" doesn't magically stop processing of everything else you programmed. Hope it helps, Jo. -- internetmanufaktur jo----------------------------- Berlin, Germany |||||||||||||||meder------------------- fon: ++49-30-44 04 27 82 http://www.meder.de/ -------------------- fax: ++49-30-44 04 30 95 Kollwitzstr. 66 ------------------------ mob: ++49-170- 2 98 89 97 10435 Berlin ---------------http://www.meder.de/keys/jo-pubkey.txt

2 1

RESPONSE.redirect not working
by Andrew Hedges 23 May '06

23 May '06

I'm at my wit's end. Any help is appreciated. Yes, I have worn Google out trying to figure this out. In my (yeah, yeah, I know) DTML method, I have structured things like so: <dtml-call pyCheckSession> <-- a Python script that checks whether the user is allowed to see the page <dtml-var mvp_header> <-- header include ... Sundry HTML/DTML ... I am running Zope 2.9.2 and Python 2.4.2 on Mac OS X 10.4.6. I have the stock session manager objects installed (Transient Object Container, Session Data Manager, and Browser Id Manager). When I am not logged in and I go to an unauthorized page, the response location appears to get set as desired, but the redirect does not happen. Instead, the page from the original URL still renders (not very secure, I'd say). The URL I hit was: http://localhost:8080/www/nmact/MVP/website/mymvp_html Here are the relevant bits from pyCheckSession: request = container.REQUEST RESPONSE = request.RESPONSE session = request.SESSION url = '' if len(session.keys()) == 0: "User is not logged in" url = '/www/nmact/MVP/website/login_html' if url <> '': "If we have need to, bump the user out" RESPONSE.redirect(url) Here are the contents of the response object: HTTP/1.1 302 Moved Temporarily Server: Zope/(Zope 2.9.2-, python 2.4.2, darwin) ZServer/1.1 Date: Tue, 23 May 2006 22:05:51 GMT Content-Length: 0 Location: /www/nmact/MVP/website/login_html To reiterate, the response location appears to get set to login_html, but the content of mymvp_html still renders. What am I doing wrong? TIA, -Andrew ----- andrew(a)clearwired.com / http://clearwired.com

2 1

REMOTE_USER Security Issue
by Cliff Ford 22 May '06

22 May '06

My people want to adopt a single sign-on system for web applications that is based on the REMOTE_USER environment variable. I have tried out RemoteUserFolder and also adapted exUserFolder to work similarly. My problem is that I figured out how a user who has permission to create python scripts (might work with dtml and page templates too) could access otherwise forbidden content by making calls that pretend to come from another user. Has any one else come across this problem and devised a solution, either in software or organisation? Problem verified with Zope 2.9.2 and latest RemoteUserFolder. Cliff

8 15

Re: what is the tag to get Zope 2.8.x per svn
by robert rottermann 20 May '06

20 May '06

ohh, there seems to be missing much more.. I seem to need a bundle. Is there something like a Zope.2.8 bundle to get from svn.? tanks Robert robert rottermann wrote: > Thanks Tres and Andreas, > now I have the Zope-2_8-branch running, albeit without ZEO. > > I just did usual the configur make make install tripple. > > how would i convice the scripts also to make ZEO? > Or is there a separate ZEO to download (i did not find anything) > > tanks > robert > > > Tres Seaver wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> robert rottermann wrote: >> >>> I would like to get Zope 2.8.x per svn. (its head so to speak) >>> how can I do that >>> >> >> $ svn ls svn+ssh://svn.zope.org/repos/main/Zope/branches | grep 8 >> Zope-2_8-branch/ >> tseaver-2.8-external_test/ >> $ svn co \ >> svn+ssh://svn.zope.org/repos/main/Zope/branches/Zope-2_8-branch >> >> >> Tres. >> - -- >> =================================================================== >> Tres Seaver +1 202-558-7113 tseaver(a)palladion.com >> Palladion Software "Excellence by Design" http://palladion.com >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.1 (GNU/Linux) >> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org >> >> iD8DBQFEbevh+gerLs4ltQ4RAlHCAJ9ZwwBz1HX2LnaqqVsBX8wKaZMtTwCePNIR >> uio9yyWIhC3QE+E7MQ5DkG8= >> =t7GJ >> -----END PGP SIGNATURE----- >> >> >> >

2 3

what is the tag to get Zope 2.8.x per svn
by robert rottermann 19 May '06

19 May '06

I would like to get Zope 2.8.x per svn. (its head so to speak) how can I do that tahnks robert

3 2

windows python differences
by garry saddington 19 May '06

19 May '06

This code on linux works without a problem ispell = os.popen("echo " + word + | /opt/scholarpack/ancillary/ispell/bin/ispell -a") ispell.readline sentence = ispell.readline() if (sentence[0] == '&'): parts = string.split(sentence, ": ") gluedwords = parts[1] words = string.split(gluedwords,", ") length = len(words) words[length-1] = words[length-1][0:len(words[length-1]) - 1] return [word] + words elif (sentence[0] == '#') or (sentence[0] == '?'): return [word] else: return [] however on windows it throws a string index out of range at the sentence[0] constructs. the popen command on windows is: ispell=os.popen("echo" +word+ "\scholarpack\ancillary\ispell\bin\ispell -a") Anyone know what the difference is on the two platforms? regards garry

6 9