- Zope - Zope lists

Re: Zope Digest, Vol 21, Issue 24
by Michael Shulman 16 Feb '06

16 Feb '06

On 2/16/06, zope-request(a)zope.org <zope-request(a)zope.org> wrote: > The only change I recall to how proxy roles work is that proxy roles > used to *augment* a users' roles; now they *replace* them. > > I don't know that the case you are talking about (S1 has proxy roles, > calls protected S2 fine, but fails when calling PR-less S3 which calls > S2) ever worked under either scenario. Proxy roles have always only > been checked for the "topmost" object on the executable stack (S1 in the > first example, S2 in the second). Regardless of whether it used to work, I think it would be nice if it did. Is there a reason for it not to be made to work? E.g. do something like walk backwards through the call stack and as soon as you find something that has proxy roles, use those, while if you don't find any, use the user's roles. Mike

1 0

Re: [Zope] Zope 2.9 and SSL
by Janusz Zamecki 16 Feb '06

16 Feb '06

zope napisa?(a): > Hi, > > zhttps provides an HTTPS Zserver to Zope-2.9.0. This zope product uses > M2Crypto. I think this may give you a hint towards SSL and Zope-2.9.0 > > http://www.zope.org/Members/lerouxa/zopehttps > > Try it first with test certificates provided with > M2Crypto/demo/zope/{ca.pem,server.pem,dh1024.pem,randpool.dat} > > > Best regards > > Al > Hello, thank you. I've tried to install this software, but it doesn't work. First of all the downloaded package seems to be inclomplete. bunzip complains about garbage at the end of the file. Second, after copying files and patching __init__.py in the ZServer directory, zope doesn't start anymore. It complains about missing HTTPS_Server package. If I borrow this one from m2crypto 0.15, then it complains about missing asyncore, then missing FCNTL. I'm stuck. What else can I do? Best regards, Janusz

2 1

Render image from external method.
by Jason C. Leach 16 Feb '06

16 Feb '06

Hi, I'm wondering how I can render an image from an external method without creating a permanent image object in Zope? What I have is a python script I call in my ZPT. The python script does some things, and calls an external method that returns PNG image data. If I do tal:attributes="src python:python_script()" What I get is the string containing the PNG image data, but it's not rendered. An example of what I get is: <img src="?PNG <PAGE OF BINARY DATA>" /> Any ideas? I don't really want to create a permanent image object, and I know that will work because I have used it to create thumbnail images before. Thanks, Jason. -- ........................................ .... Jason C. Leach .... PGP Key: 0x62DDDF75 .... Keyserver: gpg.mit.edu

3 2

how to create a image from PIL and save into the zope database?
by Allen Huang 16 Feb '06

16 Feb '06

I'm been playing around with python PIL library for a while now but I'm confuse about how to dynamically generated image or modified an image, create a new image object, and save it back into zope database. can someone walk me through the steps? --------------------------------- What are the most popular cars? Find out at Yahoo! Autos

2 1

Importing a ZClass from Zope 2.8.1 to Zope 2.9.0
by Edward Huixquic 16 Feb '06

16 Feb '06

Hi Zopistas: I am trying to import into a Zope 2.9.0 installation, a ZClass that lives and runs fine in a Zope 2.8.1. I am getting an error which I attach below (from my event.log): What I am getting is a "ZClassName" does not support this operation. Does any of you have any idea what is going on and, in any case how can I make to import that ZClass into the Zope 2.9.0 FYI, the Zope 2.8.1 runs in Fedora Core 4 with python 2.3.5, the Zope 2.9.0 runs on the same machine with Fedora Core 4 but under Python 2.4.2 Thanks in advance for any help and/or suggestions. Best regards. Edward. EVENT.LOG print out below: ------ 2006-02-15T14:21:53 ERROR Zope.SiteErrorLog http://server:8080/Control_Panel/Products/manage_importObject Traceback (most recent call last): File "/usr/local/Zope-2.9.0/lib/python/ZPublisher/Publish.py", line 113, in publish request, bind=1) File "/usr/local/Zope-2.9.0/lib/python/ZPublisher/mapply.py", line 88, in mapply if debug is not None: return debug(object,args,context) File "/usr/local/Zope-2.9.0/lib/python/ZPublisher/Publish.py", line 40, in call_object result=apply(object,args) # Type s<cr> to step into published object. File "/usr/local/Zope-2.9.0/lib/python/OFS/ObjectManager.py", line 585, in manage_importObject set_owner=set_owner) File "/usr/local/Zope-2.9.0/lib/python/OFS/ObjectManager.py", line 604, in _importObjectFromFile if verify: self._verifyObjectPaste(ob, validate_src=0) File "/usr/local/Zope-2.9.0/lib/python/OFS/CopySupport.py", line 527, in _verifyObjectPaste action = 'manage_main') Copy Error: <HTML> <HEAD> <TITLE>Not Supported</TITLE> </HEAD> <BODY BGCOLOR="#FFFFFF"> <FORM ACTION="manage_main" METHOD="GET" > <TABLE BORDER="0" WIDTH="100%" CELLPADDING="10"> <TR> <TD VALIGN="TOP"> <BR> <CENTER><B><FONT SIZE="+6" COLOR="#77003B">!</FONT></B></CENTER> </TD> <TD VALIGN="TOP"> <BR><BR> <CENTER> The object <em>Formas</em> does not support this operation. </CENTER> </TD> </TR> <TR> <TD VALIGN="TOP"> </TD> <TD VALIGN="TOP"> <CENTER> <INPUT TYPE="SUBMIT" VALUE=" Ok "> </CENTER> </TD> </TR> </TABLE> </FORM> </BODY></HTML> ------

3 2

Zope and roles and hierarchy
by David 15 Feb '06

15 Feb '06

Hello Zope, Is it true that even though a user Role like 'author' is defined at zope root that users defined lower in the hierarchy *also* with role 'author' cannot access objects at root with role 'author' and permissions of view and access? The online zope book seems to say so. If so, couldn't we have some extra attribute to a role like "upwardly mobile"? (I want to share a code base for several folders sub-folders and I do not wanta to give it anonymous access). David

5 13

Zope/Plone logon security strategy etc
by michael nt milne 15 Feb '06

15 Feb '06

Just a quick question about Zope/Plone logins and security etc. When I go to www.domain.com:8080/manage I get a login box which seems to function in exactly the same way as the www.domain.com:8080/login_form page. My question is, what was the rational for implementing this logon strategy in Zope as it obviously acts as authentication and authorisation but falls down on confidentiality and data integrity? Also would there be any plans at all in the future to make this logon process authenticate, be confidential and have integrity? I know that you can do it in Apache etc but for most people that's probably quite a big step. Most people probably reckon that the appearance of the logon box makes their site secure. I'm only talking about the logon areas here, etc. Thanks Michael

6 13

VerboseSecurity and zope 2.8.5
by Peter Bengtsson 15 Feb '06

15 Feb '06

I'm not getting any verbose security messages in my zope 2.8.5. zope.conf reads: security-policy-implementation python verbose-security on I'm trying to log in as a user but get rejected which is probably because I've incorrectly configured one method or object to require one permission too many. I've tried looking in error_log, event.log and the printed output from ./bin/runzope Any ideas? -- Peter Bengtsson, work www.fry-it.com home www.peterbe.com hobby www.issuetrackerproduct.com

2 2

RE: calling getOwner on an ExtFile instance raises an Unauthori zed ex ception
by Palermo, Tom 15 Feb '06

15 Feb '06

Tres, Thanks. I didn't know about that. I will try that. Also, I just used owner_info['id'] instead of getOwner(). It returns the same thing. I'm not sure why owner_info worked and getOwner did not both methods are in AccessControl.Owner.py Thanks, Tom -----Original Message----- From: Tres Seaver [mailto:tseaver@palladion.com] Sent: Wednesday, February 15, 2006 10:46 AM To: Palermo, Tom Subject: Re: calling getOwner on an ExtFile instance raises an Unauthorized ex ception -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Palermo, Tom wrote: > All, > > Does anyone know why calling getOwner() on an instance of ExtFile > raises an unauthorized exception? > Error Type: Unauthorized > Error Value: You are not allowed to access 'getOwner' in this > context > > ExtFile imports SimpleItem which, in turn, imports AccessControl.Owner > > Here's the code from ExtFile: > from OFS.SimpleItem import SimpleItem > > Here's the code from SimpleItem: > import AccessControl.Role, AccessControl.Owned, App.Common > > I've got some other custom objects in my application which import > SimpleItem and I am able to call getOwner() on them no problem. TUrn on verbose security in your zope.conf and retry; you should get a lot more information about why the security machinery is blocking access in the error log. Tres. - -- =================================================================== Tres Seaver +1 202-558-7113 tseaver(a)palladion.com Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFD80zG+gerLs4ltQ4RAh1HAKCedCG/jVjr+eBtsS++kwdrs18nYwCfXEGq /CQ06fqfosuMDtt0u9NXwtA= =68is -----END PGP SIGNATURE-----

1 0

calling getOwner on an ExtFile instance raises an Unauthorized ex ception
by Palermo, Tom 15 Feb '06

15 Feb '06

All, Does anyone know why calling getOwner() on an instance of ExtFile raises an unauthorized exception? Error Type: Unauthorized Error Value: You are not allowed to access 'getOwner' in this context ExtFile imports SimpleItem which, in turn, imports AccessControl.Owner Here's the code from ExtFile: from OFS.SimpleItem import SimpleItem Here's the code from SimpleItem: import AccessControl.Role, AccessControl.Owned, App.Common I've got some other custom objects in my application which import SimpleItem and I am able to call getOwner() on them no problem. Thanks, Tom

2 1