- Zope - Zope lists

Re: [Zope] restricting permissions for direct access only
by Michael Shulman 14 Feb '06

14 Feb '06

Thanks Lennart! Proxy roles do sound like the answer, but I cannot get them working. When I restrict my private script so that only Managers have View permissions and give my public script Manager proxy roles, I am still prompted for a login box when I try to view the public script. When I cancel, I get the following error: Error Type: Unauthorized Error Value: You are not allowed to access 'meta_type' in this context This is different from the standard "You are not authorized to access this resource. No Authorization header found." error which I get when I try to access the private script directly, but conveys little to me. What does it mean and how do I fix it? On 2/11/06, Lennart Regebro <regebro(a)gmail.com> wrote: > On 2/11/06, Michael Shulman <shulman(a)mathcamp.org> wrote: > > Is there a way in Zope to restrict permissions for direct access only > > (i.e. calling an object through the web) but still allow indirect > > access (i.e. executing an object that was called by another object > > that was called through the web)? > > Yes. If that "other object" is disk-based python, it is most likely > able to do it already. If it is a python-script, you can set it up to > have a proxy role. That way your auxiliary scripts can all require > manager roles, and you can give the scripts that need to call them the > Manager proxy-role > > > Feel free to tell me that I am misunderstanding the way security > > works, or is supposed to work, in Zope, or that if this is something I > > need to do I am designing my site incorrectly from the point of view > > of Zope security (and if so, what is the correct way to design it?). > > No you seem to have got it. Although the next time you do something > that complex you might want to look into making a disk-based prodct > instead. It's often easier for complex features. > > -- > Lennart Regebro, Nuxeo http://www.nuxeo.com/ > CPS Content Management http://www.cps-project.org/ > >

2 1

Strange problem with WebDAV and Zope
by Ivan "Rambius" Ivanov 14 Feb '06

14 Feb '06

Hello, I am observing a strange problem when trying to use MKCOL WebDAV method with a specific url. I can reproduce it with two WebDAV clients: Jakarta Slides[1] and the command-line client nd[2]. The problem: Invoking MKCOL method against Zope's WebDAV server with an url ending with "title" fails. Usind nd I can reproduce it with the following command: nd -k http://localhost:8280/title (From nd man page -k option sends MKCOL request) This command fails with Error: MKCOL failed, `Not Found' If I change the command to end with anything different than "title" it works: nd -k http://localhost:8280/title1 and I can see in ZMI that title1 folder is created. Some background: I initially noticed this behaviour Plone (version 2.0.5) under Windows XP while I was executing a large number of MKCOLs. I tried to reduce the problem, so I installed on my personal FreeBSD laptop Zope 2.7.8 for FreeBSD ports. I created a zope instance and I configured in its zope.conf that http server runs on 8080 port and webdav server runs on 8280 port. I checked this problem agains Apache Httpd and mod_dav and creating such a collection works. This makes me think that Zope uses title suffix for internal aims. My question is how I can workaround this problem? Regards Rambius [1]http://jakarta.apache.org/slide/ [2]http://www.gohome.org/nd/ __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 2

Can java applet interact with Zope ZODB database?
by Allen Huang 14 Feb '06

14 Feb '06

Can java applet interact with Zope ZODB database? does it need any kind of connecter and driver? --------------------------------- What are the most popular cars? Find out at Yahoo! Autos

2 1

Transfer Data to New Zope Server
by Peter Evans 14 Feb '06

14 Feb '06

I am Zope newbie so please bear with me. As a part of my job I just inherited control of an extremely old Zope server running on FreeBSD. I would like to move to a new instance of Zope runninf on Windows Server 2003. So basically I need help transferring all the data from the old box to the new one. Any help would be greatly appreciated. -pete

4 3

Progress bar for file upload (code available)
by Andrew Milton 14 Feb '06

14 Feb '06

I've released the code that does this. It used to be part of a complicated billing system, so it's been cut down quite a bit. It's functional, and there's a small demo showing how it works. It should be quite easy to modify to suit anyone's needs. Make sure to read the Readme.txt file in the docs directory. It's available here (BSD License); http://www.zope.org/Members/TheJester/ThreadedTransferAgent <shameless plug> I'm looking for a new job, I'd like to keep doing Zope work, so if you're looking for someone... d8) </shameless plug> -- Andrew Milton akm(a)theinternet.com.au

1 0

Applying updates to zope site
by Brian Sullivan 13 Feb '06

13 Feb '06

I am involved in maintaining a remote Zope site that is behind a firewall where I have no remote access. I have a (parallel) site that I use to test changes and upgrades that is accessible to me. I am a looking for a straightforward way to package tested changes, send and have changes applied at the other end -- without my physical presence (there is a systems maintenance person a the other with reasonable broad systems knowledge but no in depth Zope experience). The changes in this case consist of changes to or new python scripts, dhtml methods and documents, or images spread throughout a hierarchy of folders on the site. The only thing I can come up with so far is a (probably fairly painful and error prone) set of instructions for updating files one by one. Anybody have any other ideas?

5 11

missing add version in Zope
by Luca Dall'Olio 13 Feb '06

13 Feb '06

I have been looking (almost) everywhere, but I can't find the "Version" line in the main combo box (the one for adding products). This means that I cannot start working in a Version. I can't find the "Add Version" line in the security tab, either. In Control Panel I can see the Version Management, which is, of course, empty. Zope Version (Zope 2.9.0-, python 2.4.2, sunos5) Python Version 2.4.2 (#1, Oct 3 2005, 01:55:05) [GCC 3.3.2] System Platform sunos5 Cookies are enabled on browser (Firefox and IE6) Any hint would be greatly appreciated, Thanks In Advance! Luca

3 2

Using ParsedXML from Python script
by Brian Sullivan 13 Feb '06

13 Feb '06

I am attempting to extract information from a ParsedXML object using Python script. I can't seem to get my mind around exactly how this works. Can anyone point non trivial examples in Python of maniupulating a ParsedXML object?

2 1

get ALL local roles for a user
by Palermo, Tom 13 Feb '06

13 Feb '06

Is there an easy way to grab all of the local roles a user might have throughout a site? It's looking like I need to check objects recursively. I've not had luck with get_local_roles_for_userid method. Thanks, Tom

2 1

Progress bar for file upload
by Bruno Grampa 13 Feb '06

13 Feb '06

Hello, what is the better way to implement a simple progress bar when uploading a file in Zope? Thanks (also for all the answers, hints and tips i've received from this wonderful community in the past times!) Bruno

4 12