- Zope - Zope lists

Managed Meeting semi-broken in 2.2.1
by Bill Anderson 05 Sep '00

05 Sep '00

It appears that there has been _some_ change in security somewhere. As Manager, I cannot add a Managed Meeting object in a Zope 2.2.1 server. Nor can someone with the role 'Member', who has been given the neccessary permission. It tells me I don't have uthroization to access 'ManagedMeeting'. Bill -- Do not meddle in the affairs of sysadmins, for they are easy to annoy, and have the root password.

1 0

Arrrgh!!! *Weird* SQLSession problem
by Charlie Wilkinson 05 Sep '00

05 Sep '00

Ok, all weekend I've been chasing my tail. Now I scream for help... I cannot get SQLSession to insert values into the zsession_data table to save my freeking life. I'm not getting errors of any kind, just no inserted session data. However, the zsessions table shows the sessions being created, so that table is working ok. I mangled the SQL syntax for sqlSetValue, *then* I got a pg. error, so sqlSetValue *is* running, yes? I installed Logger and logged the values from sqlSetValue to the zope log. I cut and pasted those values from the log into the test query screen for sqlSetValues and when I submit the query it inserts just fine. At that point I can see the manually inserted values from session_test.dtml, so sqlGetValues is working. But if I try to insert values with session_test, they show up in the very next screen, but are gone thereafter and of course they do not show up in the database. I'm really at quite a loss here. I made sure to give SQLSession its very own ZPyGresQLDA connection. After beating on that unsuccessfully for awhile, I installed ZPoPyDA, and set SQLSession to use that, which of course didn't change anything. Here's the version particulars: Zope version: Zope 2.1.6 (source release, python 1.5.2, linux2) Python version: 1.5.2 (#1, Sep 17 1999, 20:15:36) [GCC egcs-2.91.66 19990314/Linux (egcs- System Platform: linux-i386 ZPyGreSQLDA 0.3 ZPoPyDA 0.5.1 PoPy 1.3.2 beta SQLSession 0.3.0 PostgreSQL 7.0.2 Other installed products (if it matters...): ZPyGreSQLDA Fortune Calendar Logger Photo ZPatterns Confera LoginManager SQLSession ZPoPyDA WorldPilot iTrack Mild rant: I've got a big, scary, and now behind schedule database-enabled website to build for a client. Most everything I've read, and even my earlier, simpler experiences with Zope have been fantastic. I've been going on to my client about how great Zope is, rapid deployment, etc, blah. So I committed, but after fighting with LM (It took weeks to get it working once and I have not been able to duplicate that feat since), a failed upgrade to Zope 2.2 (LM wouldn't work there yet(?), doh!), and now SQLSession... I'm *not* having an overall good feeling about all this. I'm even starting to get thoughts of retreating to Perl or learning PHP3 and never looking back. But I really want to get over what's probably mostly newbie learning curve & lack of docs and make this work in Zope. Please help!!! -cw- -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Charlie Wilkinson - cwilkins(a)boinklabs.com - N3HAZ Parental Unit, UNIX Admin, Homebrewer, Cat Lover, Spam Fighter, HAM, SWLer... Visit the Radio For Peace International Website: http://www.rfpi.org/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ CLOBBER INTERNET SPAM: See!! <http://spam.abuse.net/> Join!! <http://www.cauce.org/> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ QOTD: Failure is not an option. It's bundled with your software.

1 0

newbie question: installing ZSiteMap and ZPhotoAlbum
by Tamara Temple 05 Sep '00

05 Sep '00

Hi all, My first posting here, please forgive if this is obvious, cause it isn't to me. I already checked the How-To's and searched the zope-list archives and came up with nothing. I downloaded the two zexp files for ZSiteMap and ZPhotoAlbum, and put them in the import directory. When I try to import them, I get an error and a traceback saying that "this operation isn't support by ZSiteMap" (or ZPhotoAlbum, depending). There are no instructions with either one on how to install them. What do I need to do in order for these to work? This newbie thanks you in advance. -- Tamara Temple <^)~ tambulk(a)email.com Perhaps loving something is the only starting place there is for making your life your own. -- Alice Koller

2 1

RE: [Zope] Folder and SQL security
by Chris McDonough 05 Sep '00

05 Sep '00

On Tue, 5 Sep 2000, George Osvald wrote: > My sql works now and security is satisfactory so thank you. The only thing > that remains in question is that one subfolder. I created a user folder > inside, set all the security and it does not do what I want. I want to > restrict any access including viewing for nobody. Only authorised customers > would be able to view the page. After turning off all the security options > though I am still able to view the pages as nobody. How do I prevent that? Do you have "acquire permissions" set on all the permissions of the folder? Have you tried turning it off? This may be a wild goose chase because I'm sort of guessing at your problem. Your message has generalizations like "that one subfolder" (what subfolder? what are its settings?), "set all the security" (how?), "does not do what I want" (what do you want? exactly how does it fail, can you give a concrete example?) and "the page" (what page?). It'd be helpful to define these, because as much as I try, I can't read minds. :-) HTH, C > > > > George wrote: > > > > > > Security in ZOPE is very puzzling. If I have certain rules set for the > > > root folder, can I set something different for the sub folders? > > > > Sure... for general security information see both > > http://www.zope.org/Members/michel/ZB (the Zope book security chapter, > > mostly finished) and http://www.zope.org/Members/mcdonc/PDG (security > > chapter mostly finished). > > > > > Any > > > changes seem to have no effect at all. > > > > can you be more specific? > > > > > I am especially wandering about > > > setting for anonymous user. I'd like to give them only 'viewing' > > > privilege but that does not work. > > > > How doesn't it work? > > > > > The site is not functional at all and > > > asks for the password even for the viewing. Then I enable 'access the > > > content' and the site works as long as I do not try to use sql. > > > > Yes, "access contents information" is equivalent to allowing the user to > > list the objects in an object manager. It's given to anonymous by > > default most of the time, and is probably required for most operations. > > > > > When I > > > how ever enable 'use sql methods' permission they can access my > > > database, delete and add entries to it. > > > > This should have nothing to do with 'access contents information'. > > There should be permissions available to restrict the use of sql > > methods. Have you seen them? > > > > > What do I have to do to allow > > > anonymous viewers to just view the site > > > > Give them "view" and "access contents information" permissions. > > Depending on the products you've got installed and the operations you > > want the users to be able to carry out, you may need to give them other > > permissions. > > > > > (keep in mind that I am using a > > > couple of zsql methods for embedding of data in my html) I also want to > > > have one of the sub folders not accessible to any one but me. > > > Can you help anyone? > > > Chris McDonough Digital Creations, Publishers of Zope http://www.zope.org

1 0

Fourth Posting, is this really that difficult or have I been black balled :) balled :)
by Daniel Rusch 04 Sep '00

04 Sep '00

I've created a folderish product. When I select that product from the available objects list, thus creating an instance of that product, I can create objects like dtml document and dtml method in the new folderish object (very similar to what happens when you instantiate a folder object, you can have a dtml method created in the new folder). The question is why can't I create objects from the Products directory, such as Local File System????? The code below works great, I get a dtml document, two folders each with a dtml method in them.... HOW CAN I CREATE A LOCAL FILE SYSTEM OR ANY OTHER OBJECT FROM THE PRODUCTS DIRECTORY IN THIS MANAGE_ADD FUNCTION??????? def manage_addSimpleSite(self, id, title='', createNewFolder=0, createEditFolder=0, REQUEST=None): """Add a new SimpleSite object with id *id*. If the 'createNewFolder' and 'createEditFolder' parameters are set to any true value, an 'New sub Folder' and an 'edit sub Folder' objects are created respectively in the new SimpleSite. """ ob=SimpleSite() ob.id=id ob.title=title self._setObject(id, ob) try: user=REQUEST['AUTHENTICATED_USER'] except: user=None ob.manage_addDTMLDocument(id='index_html', title='') if createNewFolder: if (user is not None) and not ( user.has_permission('Add User SimpleSites', self)): raise 'Unauthorized', ( 'You are not authorized to add User SimpleSites.' ) ob.manage_addFolder(id='New'+id, title='', createPublic=1) if createEditFolder: if (user is not None) and not ( user.has_permission('Add Documents, Images, and Files', self)): raise 'Unauthorized', ( 'You are not authorized to add DTML Documents.' ) ob.manage_addFolder(id='Edit'+id, title='', createPublic=1) if REQUEST is not None: return self.manage_main(self, REQUEST, update_menu=1) Thanks, Dan

3 5

Re: [Zope] Regaining lost privileges
by Dieter Maurer 04 Sep '00

04 Sep '00

Andrew Kenneth Milton writes: > Is there anyway to regain 'root' privs from inside a zope product? > > Using the -u flag to start causes the privs to be permanently gone because > z2.py uses setuid + setgid (and python doesn't seem to define sete[ug]id, at > least not on my system). > > Other than running zope as root permanently (which I really would like to > avoid), does anyone have any quick ideas on how to achieve this? The same trick could be used by any process to gain root privileges.... It is easy to implement a Python wrapper for the sete[ug]id. Dieter

2 1

.
by Matthew Burleigh 04 Sep '00

04 Sep '00

-- - Matthew Burleigh - Systems Administrator, Digital Creations - publishers of Zope. - (888)344-4332 -- http://www.digicool.com - http://www.zope.org

2 1

How does one rename document ids?
by Sean Kelley 04 Sep '00

04 Sep '00

Hi, I have a number of dtml documents without the form "name_html". I would like to rename everything in a particular folder to name_html from name. Is there a way to do this? Thanks

1 0

Re: [Zope] Migrating passwords from Apache to Zope?
by Dieter Maurer 04 Sep '00

04 Sep '00

Marcin Kasperski writes: > Is it possible to smoothly migrate accounts and passwords from Apache to > Zope? > > More details: I keep Apache accounts in some file of the format > > username:encoded_password > > where username is plaintext username and encoded_password is the > password encoded in the normal Unix way (via crypt function).... There is a GUF (Generic User Folder) HowTo that explains how to use encryted passwords in the same way as you do. After you have set up GUF (very good explanation in the HowTo), all you need to do is place your "username,password" pairs into the database. A small Python script can be used for this. It probably would use the DB Api to control the database. Dieter

1 0

domains (acl_users) and access via proxy
by Didier Georgieff 04 Sep '00

04 Sep '00

Hello, Our users are acessing to the Zope server thru corporate (ministers) proxys. I can't get the "domains" working, while trying (agriculture.gouv.fr, gouv.fr, fr) even with simple one. I'm suspecting some changes in the REQUEST made by the corporate proxys. Is there any doc about what REQUEST variable is used in the "domains" restriction ? (I have a HTTP_FORWARDED with the *proxy* name (unfortunately without the .gouv.fr). I can't find anything on the site and the list either. Thanks in advance.

1 0