- Zope - Zope lists

basic authorization triggered inside LoginManager context
by Fred Yankowski 28 Jan '01

28 Jan '01

I've set up LoginManager with SQL and it's working OK, but I've run into a case where the browser pops up a basic/HTTP authentication request when I try to access a particular object inside the LoginManager-protected area. I particular, I added the following line to the index_html DTML Document (at the same level as the LoginManager acl_users folder): <dtml-var "_.getattr('AUTHENTICATED_USER', '__class__')"> Without this line I can access the index_html file after logging in via the LoginManager scheme as a user with the 'Members' role. But with this line I get the basic authorization popup and if I cancel that I can see the following exception in the "Zope Error" page: ================ Traceback (innermost last): File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 222, in publish_module File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 187, in publish File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 171, in publish File D:\PROGRA~1\Zope225\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: index_html) File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 112, in call_object (Object: index_html) File D:\PROGRA~1\Zope225\lib\python\OFS\DTMLDocument.py, line 177, in __call__ (Object: index_html) File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_String.py, line 528, in __call__ (Object: index_html) File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_Util.py, line 337, in eval (Object: _.getattr('AUTHENTICATED_USER', '__class__')) (Info: _) File <string>, line 0, in ? File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_Util.py, line 144, in careful_getattr Unauthorized: __class__ ================ So it looks like attempting to access the '__class__' attribute triggered this, but I don't understand why it lead to basic authentication. If this required 'Manager' permissions, why didn't I just get some kind of "forbidden" response? It looks like the careful_getattr() function will raise a ValidationError on any attempt to access a variable whose name starts with '_'. Fine, maybe I was being naughty. But I still don't understand why this wasn't handled using LoginManager. How can I keep Basic/HTTP authentication from running when I've got LoginManager in place? Or is there reason to want both at once? -- Fred Yankowski fred(a)OntoSys.com tel: +1.630.879.1312 Principal Consultant www.OntoSys.com fax: +1.630.879.1370 OntoSys, Inc 38W242 Deerpath Rd, Batavia, IL 60510, USA

1 0

separate zope from site products
by corey＠axcelerant.com 28 Jan '01

28 Jan '01

Ok, I saw it by accident while searching for something else the other day, and now can't find the HOWTO on getting your Zope install separate from your local products, so that future Zope upgrades don't require re-installation of all your already existing products. So where can I find this document I'm looking for? Beers, Corey

1 0

PythonScript question
by Timothy Wilson 28 Jan '01

28 Jan '01

Hi everyone, I'm using the Photo product to diplay some pictures at various resolutions and to display them on a certain date. (Some may recall my questions about a "Picture of the day" recently.) I want to set a 'display_date' property for each Photo instance and I'd like to do it using a PythonScript. I've created a form and PythonScript, but I get this error: Error Type: TypeError Error Value: argument 1: expected read-only character buffer, instance found and this traceback: Traceback (innermost last): File /var/lib/zope/2.3.0/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /var/lib/zope/2.3.0/lib/python/ZPublisher/Publish.py, line 187, in publish File /var/lib/zope/2.3.0/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: Traversable) File /var/lib/zope/2.3.0/lib/python/ZPublisher/Publish.py, line 171, in publish File /var/lib/zope/2.3.0/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: POTD_add) File /var/lib/zope/2.3.0/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: POTD_add) File /var/lib/zope/2.3.0/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__ (Object: POTD_add) File /var/lib/zope/2.3.0/lib/python/Shared/DC/Scripts/Bindings.py, line 353, in _bindAndExec (Object: POTD_add) File /var/lib/zope/2.3.0/lib/python/Products/PythonScripts/PythonScript.py, line 330, in _exec (Object: POTD_add) (Info: ({'script': <PythonScript instance at 87874d0>, 'context': <Folder instance at 89506c0>, 'container': <Folder instance at 89506c0>, 'traverse_subpath': []}, ('This is a test', DateTime('2001/01/30'), <ZPublisher.HTTPRequest.FileUpload instance at 869e170>), {}, None)) File Script (Python), line 8, in POTD_add TypeError: (see above) Here's the relevant part of the form: <form action="POTD_add" method="post" enctype="multipart/form-data"> <table> <tr> <th align="right">Caption</th> <td><input type="text" name="title" size="50" value=""></td> </tr> <tr> <th align="right">Display Date</th> <td><input name="display_date:date" size="20" value=""></td> </tr> <tr> <th align="right">Image</th> <td><input type="file" name="file" size="25" value=""></td> </tr> <tr> <td> </td> <td><br><input type="submit" value=" Add POTD "></td> </tr> </table> </form> And here's my PythonScript 'POTD_add' to which I pass the parameter list 'title, display_date, and file': """ Create a "Picture of the Day" image. """ import string # create a unique object id based on the display date newID = string.split(display_date, '/') id = '' for i in newID: id = id + str(i) # create the image context.manage_addProduct['OFSP'].manage_addPhoto(id, title=title, file=file) # add a display date property doc = getattr(context, id) doc.manage_addProperty('display_date', display_date, 'date') Any ideas? Wouldn't it would be great if there was a PythonScript repository somewhere? It would help me a ton. -Tim -- Tim Wilson | Visit Sibley online: | Check out: Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/ W. St. Paul, MN | | http://slashdot.org/ wilson(a)visi.com | <dtml-var pithy_quote> | http://linux.com/

3 2

Adding Photo instance w/ PythonScript
by Timothy Wilson 28 Jan '01

28 Jan '01

Hey everyone, Now that I'm not trying to use string methods on a date instance anymore, I think I'm close to a solution. I'm trying to add a Photo instance to a folder with an HTML form and a PythonScript. Here's the script: """ Create a "Picture of the Day" image. """ import string # create a unique object id based on the display date dateString = str(display_date) # convert date to string newID = string.split(dateString, '/') id = '' for i in newID: id = id + str(i) # create the image context.manage_addProduct['OFSP'].manage_addPhoto(id, title=title, file=file) # add a display date property #doc = getattr(context, id) #doc.manage_addProperty('display_date', display_date, 'date') Notice I've commented out the part that adds the display_date property. Now the executing this script produces the following error and traceback: Error Type: AttributeError Error Value: manage_addPhoto Traceback (innermost last): File /var/lib/zope/2.3.0/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /var/lib/zope/2.3.0/lib/python/ZPublisher/Publish.py, line 187, in publish File /var/lib/zope/2.3.0/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: Traversable) File /var/lib/zope/2.3.0/lib/python/ZPublisher/Publish.py, line 171, in publish File /var/lib/zope/2.3.0/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: POTD_add) File /var/lib/zope/2.3.0/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: POTD_add) File /var/lib/zope/2.3.0/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__ (Object: POTD_add) File /var/lib/zope/2.3.0/lib/python/Shared/DC/Scripts/Bindings.py, line 353, in _bindAndExec (Object: POTD_add) File /var/lib/zope/2.3.0/lib/python/Products/PythonScripts/PythonScript.py, line 330, in _exec (Object: POTD_add) (Info: ({'script': <PythonScript instance at 87874d0>, 'context': <Folder instance at 89506c0>, 'container': <Folder instance at 89506c0>, 'traverse_subpath': []}, ('Test image', DateTime('2001/01/31'), <ZPublisher.HTTPRequest.FileUpload instance at 874a470>), {}, None)) File Script (Python), line 15, in POTD_add File /var/lib/zope/2.3.0/lib/python/Products/PythonScripts/Guarded.py, line 273, in __getattr__ File /var/lib/zope/2.3.0/lib/python/Products/PythonScripts/Guarded.py, line 143, in __careful_getattr__ AttributeError: (see above) I've looked at the Photo product source and noted that the parameters it expects are listed as self, id, file, title='', displays=None, precondition='', content_type='', REQUEST=None. That looks OK. What about the line: context.manage_addProduct['OFSP'].manage_addPhoto(id, title=title, file=file) What's the purpose of manage_addProduct['OFSP']? Is my error a result of not calling the manage_addPhoto method properly? Any more ideas? -Tim -- Tim Wilson | Visit Sibley online: | Check out: Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/ W. St. Paul, MN | | http://slashdot.org/ wilson(a)visi.com | <dtml-var pithy_quote> | http://linux.com/

1 0

Re: [Zope-dev] ZCatalog and 'fuzzy logic'
by Dieter Maurer 28 Jan '01

28 Jan '01

Morten W. Petersen writes: > Is there anyone who could try to give an estimate of how long it would > take to add fuzzy logic (regexp-like) searching capability to the > ZCatalog? I do not think that "fuzzy logic" is strongly related to "regexp-like". Anyway. Fuzzy searching often means "finding matches with characters omitted, replaced or inserted". Zope's globbing vocabularies support wildcards '*' and '?'. To implement wildcard based searches efficiently, they index words under their two letter consitutents. When you now get a pattern, you derive from the pattern what two letter constituents the matching words must have and retrieve them. This defines a candidate word set. Then you check, whether the retrieved word really match the expression. You can extend this algorithm to get fuzzy searches. Dieter

4 4

BUG: Typo in CopySupport.py in 2.3.0 final
by Jerome Alet 28 Jan '01

28 Jan '01

Hi, Line 282 of lib/python/OFS/CopySupport.py of 2.3.0 final reads: raise 'BadRequst','Please rename each listed object.' Instead this should probably be: raise 'BadRequest','Please rename each listed object.' since all the other .py in this directory raise 'BadRequest' no patch this time. hoping this will help. bye, Jerome Alet

2 1

Siteroot and ZCatalog
by Bob 28 Jan '01

28 Jan '01

I have a production site wich was moved from Zope 2.2.1 to Zope 2.2.4. We use SiteAccess for virtual hosting and the Catalog has many problems since the upgrade. Objects created before the upgrade show up multiple times in the cataloged object or can't be edited through the web. Objects created after the upgrade seem to be ok. I tried the patch that Evan put up, but it doesn't solve the problem. I guess the real question is: will Zope 2.3 solve the problem and is it stable enough yet? TIA Bob Corriher

2 1

Re: [Zope] Zope Entry Flame
by Tres Seaver 28 Jan '01

28 Jan '01

"Jason Cunliffe" <jasonic(a)nomadicsltd.com> wrote: > <site design flame> <snipped/> > </flame> Jason, Flaming the Zope.org site layout is OT for this list; the "someone who cares" in this case is the Zope-web list (mailto:zope-web@zope.org, which I am CC'ing, and whither I would set followups if this were a proper newsgroup, instead of a lame-oh mailing list.) Just my $0.25 worth :) Tres. -- =============================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

manage_listLocalRoles user entry needed
by Kyler B. Laird 28 Jan '01

28 Jan '01

I've read that some people are at least thinking about user management systems that go beyond the "handful of users" systems currently supported by Zope. (I'm working on one today.) As a baby step toward supporting these systems, I propose that manage_listLocalRoles provide a text box for entering users in addition to (or, in my case, instead of) allowing them to be chosen from the select list. The kludge I've been using is another form that is defined in the root folder that imitates manage_listLocalRoles, but has the text input instead of the select list. This works, but it requires the user to know to use it instead of just selecting "local roles." Times like this make me think about an infrastructure that would easily allow admins to override pages without changing them every time a package is installed. Hmmm... Thank you. --kyler

4 3

Script to do various 'manage_' operations
by Tim Hicks 28 Jan '01

28 Jan '01

I have been trying to get hold of a script that can automatically convert various dtml methods to custom zclass instances. I found a script on the zope mailing list (see bottom) I put my file (see below) in the Extensions directory and added an external method from within zope. This all appeared to go fine. To execute the script, I made a method that simply had <dtml-call conscript()> and then standard_h_h etc. The problem is, nothing seems to happen. I can view the method that was supposed to run the script, but the call doesn't seem to work. Within the filesystem, there is no file called tempo (as a kind of log of what's been done), and the methods with extension .shtml certainly do not get changed to dtml documents. Has anyone done this before? Can you shed any light on what I'm doing wrong? Much obliged. tim Script from zope(a)zope.org ------- import re def convert_dtml(self): """Convert DTML Methods and DTML Documents from old syntax to new syntax. Warning: recursive! This assumes that DTML Method and DTML Document haven't been subclassed. """ print 'convert_dtml: id=%s' % self.title_and_id() if hasattr(self, 'meta_type') and \ (self.meta_type == 'DTML Method' or \ self.meta_type == 'DTML Document'): convert(self) # should this be "isPrincipiaFolderish"? if hasattr(self, 'isAnObjectManager') and self.isAnObjectManager: for v in self.objectValues(): v.convert_dtml() _convert_regex = re.compile('''''') def convert(dtml_item): print 'converting...' title = dtml_item.title # like document_src, but doesn't require RESPONSE data = dtml_item.PrincipiaSearchSource() print '----data----' print data newdata = _convert_regex.sub('<\g<1>dtml-\g<2>>', data) print '----newdata----' print newdata print '----end----' dtml_item.manage_edit(newdata, title) ------ And here is how I adjusted it for my purposes: ------ import re get_shtml = re.compile('\w+\.shtml') f = open("tempo", "w+") def convert_dtml(self): """Convert DTML Methods and DTML Documents from old syntax to new syntax. Warning: recursive! This assumes that DTML Method and DTML Document haven't been subclassed. """ if hasattr(self, 'meta_type') and \ get_shtml.match(self.id): convert(self) # should this be "isPrincipiaFolderish"? if hasattr(self, 'isAnObjectManager') and self.isAnObjectManager: for v in self.objectValues(): v.convert_dtml() def convert(dtml_item): id = dtml_item.id+'2' title = dtml_item.title # like document_src, but doesn't require RESPONSE f.write(id /n) data = dtml_item.PrincipiaSearchSource() PARENTS[0].manage_addDTMLDocument(id, title) id.manage_edit(data, title)

1 0