- Zope - Zope lists

Re: [Zope] Zope/Plone logon security strategy etc
by Dieter Maurer 01 Mar '06

01 Mar '06

michael nt milne wrote at 2006-2-28 15:51 +0000: >I'm probably missing something really obvious but am wondering how you >actually implement your product on a live plone site. I've got it installed. >Do you just customise the login form that comes with the product and use >that on the site? I fear you do not understand the essence of HTTP authentication: For any kind of HTTP authentication (whether "basic" or "digest"), it is the browser which gathers the login information. Therefore, you do not have a login form (you can customize on the server). Instead, the browser uses its login dialog (which you might customize, if you are using e.g. Mozilla or Firefox, but is usually out of the server's reach). As written in the documentation on my website, "DigestAuth" currently only contains a "DigestAuthCrumbler" which works similar to the "CookieCrumbler". More precisely: It takes digest auth information, verifies it and (if successful) presents it like basic auth information to the remaining parts of Zope. The "CookieCrumbler" works very similar: it takes the information from a cookie and presents it like basic auth information to the remaining parts of Zope. The "DigestAuthCrumbler" is a bit less transparent. It *MUST* know the user's password in order to verify the validity of the presented auth information (more precisely, a special hash would be sufficient, but usual user folders do not support such hashes). Therefore, it can only be used together with UserFolders providing access to the clear text password. -- Dieter

2 1

Re: ImageFile weirdness? (addendum)
by Chris Withers 01 Mar '06

01 Mar '06

Jürgen Herrmann wrote: > btw. i'll learn to formulate my questions better... > > the actual question way back then should have read (and not more): > "who (which method) is responsible for delivering an ImageFile instances > content when called, as index_html obviously is NOT called?" The publisher chooses what method to publish, and it usually chooses index_html. You did something which made the publisher not do that... Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

1 0

Re: ImageFile weirdness?
by Chris Withers 01 Mar '06

01 Mar '06

Jürgen Herrmann wrote: > to not clutter the zodb-dev list, i'll write you personally... It's what the list is here for, please keep CC'ing it or you're unlikely to get a response in the future... > arent't these two code snippets doing the same? > > class MyClass: > myTemplate = PageTemplateFile(...) > > and: > > class MyClass: > def initTemplates(self): > myTemplate = PageTemplateFile(...) > setattr(self.__class__, 'myTemplate', myTemplate) > # calling initTemplates() once at startup. Almost certainly not. I have no idea where 'self' in your second example comes from, but I'd almost bet it isn't what you expect... > i'm actually doing this since long, That doesn't make it right ;-) > because i initialize page template > files found in a certain directory by calling initTemplates() once on > zope startup. this way i don't have to add a line for each template, > the code simply iterates over all .pt files in the directory... Interesting, but there are likely to be problems with it. Not least of which: how are you adding security declarations for those new methods? > actually i have fixed my initial problem by replacing ImageFile with > ExternalFile, which behaves differently and sets the correct content- > type headers if it has a content_type property. That doesn't sounds like such a hot idea. My understanding was that ExternalFile was for storing _content_ files on the filesystem... cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

1 0

Re: [Zope] Acquisition not working as expected
by Roman Klesel 01 Mar '06

01 Mar '06

Andrew Milton schrieb: > Did you paste this code, because it has errors... Ahh sorry, I missed the last charakter, a ")". Here it is again: def genId(self,context): "asdf" items = [ int(e[2:]) for e in context.objectIds('Folder') ] if items == []: return 'lt100000' return 'lt%s' % str(max(items)+1) Greetings Roman

1 0

product security changes from 2.8 to 2.8.5 ?
by Ed Colmar 01 Mar '06

01 Mar '06

Hello I recently moved my zope product developed on a 2.8 server on to a 2.8.5 server, and all of my python code is no longer being published out. In the past I had been using a doc string """ doc """ to make methods accessible. I realize this is not the proper procedure, but it worked. Now, on the 2.8.5 server, all of these are refused. I've been going through and doing security.declarePublic('methodname') on everything I want to be public, but it does not appear to have any effect. Are there any other changes that I need to make to my product in order to get back the functionality I had previously? Am I even looking in the right place? Thanks for any tips -e-

3 5

External Methods newbie question
by Alric Aneron 01 Mar '06

01 Mar '06

Hello, I see I can only execute python functions in external methods. Is there any way to execute the whole file, not just a certain function? In linux I created a python script, and it doesn't have functions. I just want to execute the whole file. I tried using "self" or "init" for function names in Zope and it doesn't want to do it, telling me "The specified object, init, was not found in module, test." Is there a way to execute a file? (another question: is there a way to execute bash commands in linux? or is external methods only good for python?) Thanks in advance guys!! --------------------------------- Yahoo! Mail Use Photomail to share photos without annoying attachments.

5 6

Trapping exceptions
by Tony Middleton 28 Feb '06

28 Feb '06

Sorry if this is a silly question but I've not found anything via Google or zope.org. I am using a MailHost in a Python script. I need to trap error conditions. When I run without trapping I can get exception SMTPSenderRefused. I inserted trapping - eg try: context.mailman.send(vmessage,mto=vto,mfrom=vfrom,subject='Message from web site') except SMTPSenderRefused: vsenderok=False else: vsenderok=True This gave error global name 'SMTPSenderRefused' is not defined I tried importing smtplib and adding it to the except line and then got a permissions problem. You are not allowed to access SMTPSenderRefused in this context I'd appreciate any help with this. Regards Tony

2 1

RE: [Zope] ac_acquire error happens after inheriting from Folder
by Palermo, Tom 28 Feb '06

28 Feb '06

Hi Dieter, I figured it out after googling around for a few hours. In my manage_addContact method, I'm now getting the object after it's instantiated like so: #instantiate a contact object self._setObject(id, newContact) #get the new instance obj = self._getOb(id) #change permissions based on value of private if private==True: obj.manage_permission('View',['Authenticated','Content Manager','Manager']) else: obj.manage_permission('View',acquire=1) It's still kinda weird though, because when Contact was just a SimpleItem (ie. Not an ObjectManager) I did not need to do this. I was able to write the above as "newContact.manage_permission..." and it worked. At least that's how I remember it. Why is my Contact class considered an acquisition wrapper after inheriting Folder, when prior to this, it was not? Anyhow, for those of you who, like me, are somewhat new to writing Zope products, I've found this site to be pretty useful (particularly chapter 4): http://www.upfrontsystems.co.za/courses/zope/ One more question, when I get my object via self._getOb(id), is that any different than doing dispatcher.getOb(id). If there is difference, what is it and which way is better/worse? Thanks, Tom -----Original Message----- From: Dieter Maurer [mailto:dieter@handshake.de] Sent: Tuesday, February 28, 2006 1:54 PM To: Palermo, Tom Cc: 'zope(a)zope.org' Subject: Re: [Zope] ac_acquire error happens after inheriting from Folder Palermo, Tom wrote at 2006-2-28 11:25 -0500: >I have a class called Contact that is now inheriting from Folder. After >I did this, I get the following error when attempting to add a new Contact: > >Exception Type AttributeError >Exception Value aq_acquire Only acquisition wrappers have the "aq_acquire" method. Looks at if your object were not an acquisition wrapper... -- Dieter

1 0

ac_acquire error happens after inheriting from Folder
by Palermo, Tom 28 Feb '06

28 Feb '06

All, I have a class called Contact that is now inheriting from Folder. After I did this, I get the following error when attempting to add a new Contact: Exception Type AttributeError Exception Value aq_acquire Traceback (innermost last): * Module ZPublisher.Publish, line 101, in publish * Module ZPublisher.mapply, line 88, in mapply * Module ZPublisher.Publish, line 39, in call_object * Module Shared.DC.Scripts.Bindings, line 306, in __call__ * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec * Module Products.PythonScripts.PythonScript, line 323, in _exec * Module None, line 27, in validateContact <PythonScript at /validateContact used for /contacts> Line 27 * Module Shared.DC.Scripts.Bindings, line 306, in __call__ * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec * Module Products.PythonScripts.PythonScript, line 323, in _exec * Module None, line 39, in addContact <PythonScript at /addContact used for /contacts> Line 39 * Module Products.CMS.cmsContact, line 42, in manage_addContact * Module AccessControl.Role, line 172, in manage_permission * Module AccessControl.Role, line 82, in ac_inherited_permissions * Module OFS.ObjectManager, line 211, in _subobject_permissions AttributeError: aq_acquire I thought it might be due to not having an __ac_permissions__ in my class definition but that didn't seem to change anything and Folder already has this so my Contact class should pick up __ac_permissions__ from Folder. In the above traceback, line 42 in manage_addContact is this (the part inside the if statement is line 42): #change permissions based on value of private if private==True: self.manage_permission('View',['Authenticated','Content Manager','Manager']) else: self.manage_permission('View',acquire=1) Any ideas would be much appreciated. The error is clearly related to inheriting from Folder as it wasn't there before. I just don't know why the error happens. Thanks, Tom Palermo Senior Web Developer Constella Group, LLC

2 1

Memory Leak Debugging
by Jonathan Bowlas 28 Feb '06

28 Feb '06

Hi All, We're having serious problems with performance running Silva CMS on Zope 2.7.8-final, python 2.3.5, linux2 set up on a machine with 2.5GB RAM. There are currently only about 65 users and around 2000 documents in the CMS but it seems to run for a week, then the RAM fills up and crashes so we have to restart the server manually. The Zope logs aren't much help as I enquired on the Zope list and their response was we need more RAM. But surely 2.5GB is enough. I've also checked Control_Panel/DebugInfo for any refcounts with significant jumps and Products.Silva.Image.Image seems to be the culprit: 11.32am 11.36am Products.Silva.Image.Image 56203 58153 +1950 Acquisition.ImplicitAcquirerWrapper 44825 45151 +326 So we've tried to figure out which kind of request triggers these refcount jumps by creating a separate instance with a very small ZODB Cache (so it gets filled up soon), and clicked around a little, watching the refcounts but we cannot seem to replicate it. So basically this is a plea for help from an expert Zope debugger who can assist us in finding the source of the problem so we can resolve it. Or alternatively someone who can give us a set of instructions that we can follow that will enable us to locate the problem, I've googled it and there are no clear answers. FYI we have the following products installed on our Zope instance. Annotations 0.4.3 BTreeFolder2-1.0.1 DocFinderTab (0.5.2) External Method-1-0-0 FileSystemSite 1.4.2 Formulator 1.10 Groups 0.4 IssueTrackerProduct (0.6.13) LDAPUserFolder (2.3) MIMETools MailHost-1-3-0 OFSP-1-0-0 PageTemplates-1-4-0 ParsedXML 1.4 PlacelessTranslationService (1.0) PluginIndexes ProxyIndex 1.2 PythonScripts-2-0-0 Sessions Silva 1.4.1 SilvaBlog 0.4.2 SilvaCustomAutoTOC 0.9 SilvaDocument 1.4.1 SilvaDocumentPatches 1.3b6-1 SilvaExtETHLDAP 0.7 SilvaExternalSources 0.10.3 SilvaMetadata 0.10 SilvaNewsNetwork 2.0 SilvaReferenceChecker 0.2 SilvaStylesheets 0.6.2 SilvaUCLAttributes 0.7 - (A UCL product*) Silva UCL Gallery 0.1 - (A UCL product*) SilvaUCLSubjectAudienceFilters 0.6 - (A UCL product*) SilvaViews 0.11 SiteAccess-2-0-0 SiteErrorLog Sprout 0.6.2 StandardCacheManagers-1-1-0 TemporaryFolder Transience Tropos (1.9.12) XMLWidgets-Pluggable 0.13 (CVS/UNRELEASED) ZCTextIndex ZCatalog-2-2-0 ZGadflyDA ZMySQLDA 2.0.8 ZODBMountPoint ZOracleDA ZReST (1.1) ZSQLMethods Zope Tutorial 1.2 kupu 1.3.2 z3locales 0.1 If you require any further information do not hesitate to ask. Hope someone can help. Jon Bowlas University College London

2 3