- Zope - Zope lists

RE: [Zope] AUTHENTICATED_USER?
by Martijn Pieters 14 Feb '00

14 Feb '00

> -----Original Message----- > From: Guy Davis [mailto:davis@arc.ab.ca] > > I am trying to disallow anonymous access for all but a handful of > domains. This is easy to do with Apache, but how can it be done with > Zope? > > The only thing I could think of was to have the following in the > standard_html_header. > > <dtml-if "AUTHENTICATED_USER == 'Anonymous User'" > > {if remote address is acceptable} > {show the true page} > {else show an error message} > <dtml-else> > {show the true page} > </dtml-if> > > However the above expression never evaluates to true even when > <dtml-var AUTHENTICATED_USER> shows 'Anonymous User' on the > same page. > If I try to use string.find(), Zope complains that > AUTHENTICATED_USER is > a bad arguement. > > Is there someway to salvage what I'm doing, or better yet is there a > simpler mechanism to achieve this goal? Thanks. Yes. You can make a new Role, let's call it DomainUser. You give this Role all privileges that the Anonymous Role has, and you revoke all rights from the Anonymous Role. Now you create a new user, and call this AnonymousDomainUser. This user you give _no_ password, just leave the password fields blank. You do specify the domains however; it is a space separated list of domain specs, where each domain spec can be either a domain name, or an IP address, where wildcards can be used anywhere between the dots. For example: *.zope.org *.digicool.com 192.8.*.* is a valid domain spec. And you also give the user the DomainUser Role. Now, as soon as a visitor comes to your site from a domain that matches the domain spec, Zope will, without asking for a password, match him against the AnonymousDomainUser User, give him the DomainUser Role, and grant that visitor access. Anyone from any other domain will be prompted for a username and password. -- Martijn Pieters, Software Engineer | Digital Creations http://www.digicool.com | Creators of Zope http://www.zope.org | mailto:mj@digicool.com ICQ: 4532236 | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 -------------------------------------------

2 1

Zope Job in Charlotte, NC
by Jeff K. Hoffman 14 Feb '00

14 Feb '00

Going Virtual, L.L.C., an internet company serving the non-profit industry, is immediately seeking a Python/Zope developer in the greater Charlotte area and the surrounding Carolinas to add to our small, tightly knit development team. This position requires 2-3 years of programming experience, in general; 1 year of experience with Python; and 6 months of experience with Zope. Must have good working knowledge of relational databases. Candidates with a strong background in Object Oriented development will be preferred. Salary commensurate with skills and experience. If you live outside the local area and wish to relocate, please advise accordingly. Applicants must be authorized to work in the USA. For further information please e-mail your most current resume to mailto:jeff@goingv. Plain text preferred, StarWriter, Word, and RTF accepted. --- Jeff K. Hoffman 704.849.0731 x108 Chief Technology Officer mailto:jeff@goingv.com Going Virtual, L.L.C. http://www.goingv.com/

1 0

Parents
by Pedro Silva 14 Feb '00

14 Feb '00

Hi, I need to know which link is calling one page. What I mean is, for example: I had a page with many links: Group1 sub1 link to messages page (msg_subgroup) sub2 link to messages page (msg_subgroup) sub3 link to messages page (msg_subgroup) Group2 sub1 link to messages page (msg_subgroup) sub2 link to messages page (msg_subgroup) sub3 link to messages page (msg_subgroup) All the subs are links to msg_subgroup. In msg_subgroup, will appear the messages in which sub from which group Example: Group1 - Sub 1 Messages: 1 - dtml-tree 2 - dtml-if Group1 - Sub 2 Messages: 1 - dtml-in 2 - dtml-let And so on. Now, how can I in the msg_subgroup, know which link call this DTML Method? I know that is with PARENTS[something], but I don't understand how this work. Can anyone help me with this? Please send your answers to: psilva(a)ruido-visual.pt Thanks, Pedro

1 0

Re: [Zope] GenericUserFolder Question
by James W. Howe 14 Feb '00

14 Feb '00

At 02:49 PM 2/14/00 +1100, Stuart 'Zen' Bishop wrote: >On Sat, 12 Feb 2000, R. David Murray wrote: > > > On Fri, 11 Feb 2000, James W. Howe wrote: > > > got the simple login screen. I entered the values 'jorge' for the > username > > > and 'secret' for the password. When I pressed Ok, I didn't see the > > > index_html file for the folder, instead I got the login screen once > > > again. Can someone help me out with some ideas on what I might have > done > > > wrong (or not done at all?) > > > > I can't help, 'cause I need the same assistance you do. I'm seeing > > exactly the same thing. [...] > > > > So, what are James and I doing wrong? We just followed the cookbook > > for the simplest test case... > >Sounds like you havn't granted permission for user jorge to view the >documents. Simple way to test this is to edit userRoles so that >jorge is a member of the Manager role. I must be missing a key thing. I've created a normal folder for the purposes of testing GUF. Inside this folder I have a GUF called acl_users. I open the acl_users folder. I click on the User List tab and I get a message telling me that "there are no users defined". If I edit the userList DTMLMethod, I see that this method has two names, fred and jorge. If I edit userRoles, I see that if the userid is "jorge" the role "specialrole" is answered, otherwise defaultrole is answered. I added "specialrole" as one of my roles and gave this role the ability to view contents. Still nothing. I have a feeling there is some key concept or item that I'm not configuring properly but I have yet to figure out what it is. Can anyone provide any clues as to what I'm missing? Thanks. James W. Howe mailto:jwh@allencreek.com Allen Creek Software, Inc. pgpkey: http://ic.net/~jwh/pgpkey.html Ann Arbor, MI 48103

1 0

Tree tag
by Pedro Silva 14 Feb '00

14 Feb '00

Hi, I'm trying to use a dtml tree tag with an External Method, but it isn't working. The code that I'm using is: <dtml-in obj_fs> -> this is the external Method <dtml-tree branches_expr="objectValues(['Folder','External Method'])" assume_children=1> <dtml-var sequence-item> </dtml-tree> </dtml-in> And the code in obj_fs is: def obj_fs(self): import os, os.path lst=os.listdir("/var/spool/news/articles") return lst What I'm trying with this, is that the zope programme go get me the folders in the directory "/var/spool/news/articles", show those folders and with the tree, it will appear a plus sign that when we click on this plus sign, it will display the subfolders in the folder that we have clicked. The result must be like the Windows Explorer, with folder and subfolders. Is the tree tag compatible with the External Method? If yes, this is not working. Can anyone help me to figure where is the error and tell me another way to can make this result? Please send your answers to: psilva(a)ruido-visual.pt Thanks, Pedro

1 0

Owner role in zope 2.1.3
by Cornelis J. de Brabander 14 Feb '00

14 Feb '00

I have a zope powered educational application that allows authenticated users to create subfolders and to upload documents of various types. In the 2.0.0 version of my application local roles of owner were attached to these user created folders and documents, featuring the user responsible. In the 2.1.3 version of zope the owner local role is only created in documents and not in user created folders. Bug or feature? The behaviour of the application depends to some extent on ownership. Or did I miss something while upgrading? I just copied data.fs.* cb

1 0

Oggetto: RE: [Zope] An advice for take data
by Alessandra Pessolano 14 Feb '00

14 Feb '00

The other machine is a Unix box. I want to serve the file.html through Zope, but I don't want take it on Zope. Thanks in advance for Your help

1 0

Authenticating many users to manage only their own folders?
by Darran Edmundson 14 Feb '00

14 Feb '00

My first real foray into security ... root People (define Admin role here) robert acl_users (robert,Admin) douglas acl_users (douglas,Admin) william acl_users (william,Admin) . . I want to configure my site such that users can only edit their own property sheets. My naive way of accomplishing this is to create an Admin role in People's permissions that has management_screen access. I then add a UserFolder in each person's ZClass with them as the sole user (Admin role). It works but there are problems with my naive approach: 1) It's cumbersome. I have to create a UserFolder and User for each person I add (though I guess I can do this programatically in my constructor). To create this, I need to allow UserFolder additions in my ObjectManager-derived class. Now the logged-in user also has UserFolders as an addable object ... 2) Users can see the acl_users folder in the management screen. They can delete it. And if I change Admin so that they can't "delete objects", they can't delete *any* objects, including instances of other objects they've themselves created in this folder. It's 1:40am here in Oz and I'm shattered having taken the day off from my "real" job to make it a long weekend of Zoping. I'd love to awake in the morning to an email chorus of advice. This has got to be a common-enough scenario, authentication, not people skipping work to Zope ... Cheers, Darran.

1 0

https and ZClient
by Jim Sanford 14 Feb '00

14 Feb '00

Would it be correct to assume that ZClient cannot access URLs via https (SSL)? Jim Sanford

1 0

RE: [Zope] An advice for take data
by Martijn Pieters 14 Feb '00

14 Feb '00

From: Alessandra Pessolano [mailto:Alessandra_Pessolano@gidi.it] > > Python is installed in /usr/local/Python-1.5.2 > Zope is installed in /usr/local/zope/2-1-2/ > I would like to get a file.html on my browser from another > machine (where I have > my file.html). > What can I make? > Is it possible? Everything is possible (TM). Whether it's worth the effort? What other machine? Can you reach that file.html via a URL? Or do you want to serve it through Zope? Please give us more information on what you are trying to accomplish. -- Martijn Pieters, Software Engineer | Digital Creations http://www.digicool.com | Creators of Zope http://www.zope.org | mailto:mj@digicool.com ICQ: 4532236 | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 -------------------------------------------

1 0