- Zope - Zope lists

RE: [Zope] LoginManager - logging out
by Oliver Bleutgen 20 Dec '00

20 Dec '00

> Thanks for the tips: > 1)the logout method work with shift+reload in IE (how would clear cached > pages from zope?) > 2)the <dtml-raise type="Unauthorized"> method does not allow me to log > back > in even when I try a redirect to a different page. > I am wondering if something is set incorrectly on my browser. If (2) works > for you it must work for me to?? No, actually I hadn't thought of redirecting, but I guess it can't work. Either because the browser ignores the redirect after an 401 Unauthorized, or because of the nature of dtml-raise which maybe prevents zope from interpreting following code. Maybe someone can shed some light on that. Perhaps you could try this: <dtml-unless "AUTHENTICATED_USER.getUserName()=='Anonymous User'"> <dtml-raise type="Unauthorized"> Logout!! </dtml-raise> </dtml-unless> You are now logged out! Not very elegant (you have to enter one false login/pw combination for the unless to work), but perhaps someone else has a better idea. This may depend on why you want to log out - for just reaching Anonymous "status" this seems the right thing. Otherwise introducing a new kind of role might help "logout_user", so you could test for that. cheers, oliver

1 0

Stupid Newbie: Define permissions
by Milos Prudek 20 Dec '00

20 Dec '00

Hi all, I understand permissions and proxying, but I feel like mentally challenged when trying to understand the following Define permissions tab in ZClass: ********* This interface is used to define how the operations of this object (or objects that acquire permission settings from this object) correspond to the operations defined by your product or ZClass. The table below has two columns. The first column lists the permissions for this object. The second column specifies the permissions that should have this permission in this product or ZClass. For ZClass methods, only permissions that are defined for the ZClass are permitted. In general, any permissions that include operations that change (mutate) an object should be disabled. The listing below shows the current permission mappings for this item. ********* I've read the online help but it still makes no sense. Could someone rephrase it in plain English? Or perhaps give an example or two? Zope blocks all my attempts of calling manage_changeProperties because of insufficient permissions. The property belongs to a subfolder contained in a Z Class contained in a Product. The manage_changeProperties is called from a method "changeLST" belonging to the Z Class. Zope also blocks attempts to display the property using simple <dtml-var> from a method "display" belonging to the Z Class. 1. If I map "Manage properties" permission from (disabled) to "View" permission, does that mean that anyone who has "View" permission (i.e. even anonymous users) can manage properties here? 2. Is the Define permissions the right place to solve this? Which one? A. the Define permissions tab of the containing Product?| B. Permission tab of ZClass? (the Manage properties is already listed as "inherited") C. the Define permissions tab of ZClass (Manage properties is mapped to (disabled)) D. the Define permissions tab of the subfolder (this tab actually displays ../propertysheets/methods/subfolder, and Manage properties is mapped to (disabled)) E. the Define permissions tab of "changeLST" method. After a few experiments, it looks like: - to allow anyone run the "display" method, D is right. ("Access contents information" assign to "View") - to allow anyone run the changeLST method, E is right ("Manage properties" assign to "View") To sum it up, the Define permission says "what right (in the second column) must user possess in order to be able to do the thing specified in the first column". And also: "If the second column does not have a specific permission you need, you have to go to the containing Z Class, click on Permissions and add the desired permission in the 'Class permissions' list box." Frankly, the sentence "The second column specifies the permissions that should have this permission in this product or ZClass." from the online help still makes no sense to me. Is my translation to plain English correct? I'm very, very confused :-) -- Milos Prudek

1 0

I guess i found a new ZCatalog problem (on meta-type) ??
by Didier Georgieff 20 Dec '00

20 Dec '00

Hello, * I have a regular Catalog. * It is used by Yihaw (ZClass product, CatalogAware, with contained ZClasses). * I done the normalize_paths (0 updated) * I can browse the catalog without any problem and acces the objects *** method testCatalog1 OUTSIDE<br> <dtml-in "Catalog(meta_type='any type')"> INSIDE<br> </dtml-in> produce only : OUTSIDE while *** method testCatalog2 OUTSIDE<br> <dtml-in Catalog> INSIDE<br> </dtml-in> produce A LOT of INSIDE I'm on 2.2.4 with the 3 latest Hotfix, Transparent Folder 0.3 and your catalog path. Regards Didier.

1 0

RE: [Zope] LoginManager - logging out
by Oliver Bleutgen 20 Dec '00

20 Dec '00

>> reminded of a previous post in which someone suggested >> http://garbage:xxxxx@yourSite would also clear the browser's credential. >> Much faster and works in IE and Konqueror, but not Navigator or lynx. Very >> easy to test, too. >Its just not working for me. > >I am going to try LoginManager + ZPatterns (hope it has a handy logout >feature) Remember to press shift+reload in IE, this nasty thing just takes the cached pages otherwise. About LoginManager and ZPatterns, they won't help you for the Basic http-authentication. This is really a client-side problem. And finally, I reread a previous mail of yours: >Thanks, > >I have tried it. > ><dtml-raise type="Unauthorized"> >Logout!! ></dtml-raise> > >I guess it logs me out. But it also gives me a login dialog box .... it does >not accept any of the account. So I cannot log back in! Why? Just a quick guess, is it possible that you reenter your credentials and just reload the page which contains the above code which again causes an "Unauthorized" to be raised (and therefore causes the browser to show the login-dialog again)? Have you tried pointing your browser to another URI on that server? cheers, oliver

2 1

Fwd: [Zope-dev] kill_zombies
by J�lio Dinis Silva 20 Dec '00

20 Dec '00

I read in HISTORY.txt that something was fixed for Zope 2.0 but I'm not having sucess with this channel killing. Is there another way, external_method or something, to kill a specific channel which is zombie? Thanx, Júlio Dinis Silva >From: "Júlio Dinis Silva" <juliodinis(a)hotmail.com> >To: zope-dev(a)zope.org, zope-zeo(a)zope.org >Subject: [Zope-dev] kill_zombies >Date: Wed, 20 Dec 2000 17:58:52 -0000 > >Hi, > >since I started to use zeo, my medusa debug, close_zombies >stop to work. Is there another way to call this method close_zombies >or kill_zombies? > >thanx, >Júlio Dinis Silva > _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0

Javascript won't refresh - Flush Cache??
by Jonathan Byron 20 Dec '00

20 Dec '00

I have a few pages of javascript laden dtml for getting syndicated headlines from moreover.com. The first time I opened the pages in Zope, everything was fine. Since then, I get only the headlines from that day (Dec 14) - is there a cache that can be flushed to get the most up to date headlines?? The original javascript works if it is opened directly in Netscape Navigator.

1 0

ftp ZSQL Methods
by Olaf Zanger 20 Dec '00

20 Dec '00

hi there, is it possible to externally edit ZSQL Methods? they show 0 bytes and no rights in my ftp client! thanks olaf -- soli-con Engineering Zanger Dipl.-Ing. (FH) Olaf Zanger Nusch Lorrainestrasse 23 3013 Bern / Switzerland Fon: +41-31-332 9782 Mob: +41-76-572 9782 mailto:info@soli-con.com mailto:olaf.zanger@soli-con.com http://www.soli-con.com

2 2

RE: [Zope] LoginManager - logging out
by Bill Welch 20 Dec '00

20 Dec '00

Up to this point, I've been talking about mechanisms for you, personally, to log out to switch between developer and user roles for testing. Clearly, these mechanisms aren't appropriate for the users of your site. I think LoginManager isn't the only choice, but I can't say, off hand, what the other choices are. Bill. On Wed, 20 Dec 2000, Mohan Baro wrote: > for me I need to log out completely. > similar to what they do at ZOPE.ORG (login/logout) > > In fact I wouldn't mind a form based login system similar to zope.org > > Mohan. > > what you guys are saying is that > 1) using standard authentication ( I have a problem with logout) > 2) and I must use LoginManager + ZPatterns

1 0

read_raw() not allowed below root ?
by Didier Georgieff 20 Dec '00

20 Dec '00

Hello, I have a new problem wich i suspect is related with the weird things i didn't solved yet. I still don't found if it's a misunderstanding about new 2.2 security (like setting a local role ONLY if you have this local role) or a real problem. I have a view_code method (stolen from Yihaw) wich basically look at code, properties, folders and print it. It was working like a charm under 2.1.6. Now on 2.2.4 (with the 12-08, 12-15a and 12-18 hotfix) and TransparentFolder 0.3: * I don't have access to read-raw() (Unauthorized traceback below) , even if i'm manager (and even on folders without local roles) and even with manager as proxy role for this method. * ownership is implicit * and i deleted the remaining "superuser" having a local role on this method. Until i understand what is going on (a bug or a misunderstanding), i guess i'll (gently ;-) flood the list. I'm deeply sorry to post again, but i found no information on the archive (read_raw), the explanations on the new security model didn't ring a bell, so .... Thanks for any help or tip. Unauthorized You are not authorized to access read_raw. Traceback (innermost last): File /zope/2-2-2/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /zope/2-2-2/lib/python/ZPublisher/Publish.py, line 187, in publish File /zope/2-2-2/lib/python/ZPublisher/Publish.py, line 171, in publish File /zope/2-2-2/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: view_code) File /zope/2-2-2/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: view_code) File /zope/2-2-2/lib/python/OFS/DTMLMethod.py, line 172, in __call__ (Object: view_code) File /zope/2-2-2/lib/python/DocumentTemplate/DT_String.py, line 528, in __call__ (Object: view_code) File /zope/2-2-2/lib/python/DocumentTemplate/DT_In.py, line 691, in renderwob (Object: objectItems('DTML Method')) File /zope/2-2-2/lib/python/DocumentTemplate/DT_Var.py, line 278, in render (Object: read_raw()) File /zope/2-2-2/lib/python/DocumentTemplate/DT_Util.py, line 331, in eval (Object: read_raw()) (Info: read_raw) File /zope/2-2-2/lib/python/OFS/DTMLMethod.py, line 194, in validate (Object: view_code) File /zope/2-2- 2/lib/python/AccessControl/SecurityManager.py, line 139, in validate File /zope/2-2- 2/lib/python/AccessControl/ZopeSecurityPolicy.py, line 183, in validate Unauthorized: (see above) -- Didier Georgieff DDAF du Bas-Rhin - Cellule SIG 2, rue des Mineurs 67070 Strasbourg Cedex tél : 03.88.25.20.33 - fax : 03.88.25.20.01 email : didier.georgieff(a)agriculture.gouv.fr SIT du Bas-Rhin : http://www.bas-rhin.sit.gouv.fr GéoWeb http://sertit10.u-strasbg.fr

2 1

Re: [Zope] LoginManager
by Oliver Bleutgen 20 Dec '00

20 Dec '00

> Impo rtError: No module named DynPersist > does the LoginManager dependent from other product of zope? > Do you know which product of zope contians "DynPersist"? Reread the instructions for installing ZPatterns, they tell you how to compile Dynpersist.c. cheers, oliver

3 2