- Zope - Zope lists

Re: User Authentication
by Andrey V Khavryutchenko 10 Jan '00

10 Jan '00

Hi, Borno! >>>>> "BJ" == Borno Janekovic writes: BJ> My Problem: I want to do an UserAuthentication against a Database. I BJ> want the Users to set up their own accounts with parameters. 1. Should BJ> I do it with the Zope User Mechanism? And if I choose this how can I BJ> implement that. BJ> 2. Or should I do it with my own User Database authentisation. And how BJ> can I do it that way? BJ> I tyed 2.) You'd better use some of availabe User Folder products, like mysqlUserFolder or GenericUserFolder. The later is great (and is what I'm using now), but ought to have better debugging facilities (hey, zen! ;) -- SY, Andrey V Khavryutchenko http://www.kbi.kiev.ua/~akhavr Software & SPI Engineer Visit my site Shick's Law: There is no problem a good miracle can't solve.

2 1

Getting parent of a method
by Chris Goldie 10 Jan '00

10 Jan '00

OK, my method needs to know the folder ( PARENT[0]) it resides in. My method creates navigation links, I could be using a document instead, but a method is nicer for users to implement. <dtml-var "PARENTS[0].id"> returns the id of the calling objects folder not the methods folder. What is the correct way of finding the folder a method resides in? Thasnks dudez

1 0

Re: [Zope] new howto: choosing sql vs ZODB.
by Tres Seaver 10 Jan '00

10 Jan '00

Anthony Baxter <anthony(a)interlink.com.au> wrote: > At http://www.zope.org/Members/anthony/sql_vs_ZODB/ I've started to > put together a howto listing some of the things to think about when > you're deciding whether to put data into the ZODB or an SQL database. > > > feedback, additional data points welcome... I like it! Another point to consider is how well the data "fits" the storage model. As an example, in a former life I built a system storing "standard operating procedures" into an RDBMS. Each procedure had one or more steps, each of which might be recursively decomposed into substeps -- they also might reference diagrams, illustrations, and multimedia content. Although I managed to make this work in SQL, the impedance mismatch was very high, compared with doing it in a hierarchical database like ZODB. RDBMS's excel at allowing "slice and dice" queries, at the expense of requiring expensive joins to implement parent-child links; hierarchical DB's optimize the parent-child relationships, making "cross-family" queries difficult or even infeasible. Best, Tres. -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

1 0

Force reload from dtml method
by Andrey V Khavryutchenko 10 Jan '00

10 Jan '00

Hi! I'm using GenericUserFolder and at acl_users/docLoginSuccess I redirect to the desired page. How I can forcibly refresh this page? Now, the browser is correctly redirected, but the cached page (login form) is loaded. Browser (NN 4.5, Linux) is set to check the modification date at every access. Thanks in advance! -- SY, Andrey V Khavryutchenko http://www.kbi.kiev.ua/~akhavr Software & SPI Engineer Visit my site Shick's Law: There is no problem a good miracle can't solve.

3 2

RE: [Zope] browser security
by Brian Lloyd 10 Jan '00

10 Jan '00

> Hi everyone, > > Here's a quick security question. I'm using ZServer w/ Apache. > > Someone pointed out to me today that it's possible to access > a site like > this: > > http://username:password@mysite.com/ > > and the user is logged in automatically. Apparently there are cracking > tools available that will attempt to guess passwords using this method > thereby gaining access to the system. > > Is there any easy fix for this? I don't believe that the username:password part of the url ever actually go out on the wire - my understanding of this is that IE (or other browsers that support this construct) just accept this as a convenient shorthand and that they remove the username/pw and send it in a header as usual... As far as cracking tools, I can't imagine how this would have any impact one way or the other - it's really just a client convenience. Hope this helps! Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

3 2

ummmm ... no password option for new user?
by Bill Anderson 10 Jan '00

10 Jan '00

OK, clean install of 2.1.2. There is _no_ password option for new user, nor is there an option to change the old password (or set one) for current users. I read the docs, but they only say: - SECURITY: Viewing existing user no long displays current password, only space for putting in the new password. This will be more critical as we move toward fully encrypted passwords. When I look at the source of the page, the input types are hidden. Am I missing something? how do I set a password for a new user? Or change an existing one? -- In flying I have learned that carelessness and overconfidence are usually far more dangerous than deliberately accepted risks. -- Wilbur Wright in a letter to his father, September 1900

1 0

Installation suggestion.
by Bill Anderson 10 Jan '00

10 Jan '00

Given the number of times permission on the var directory comes up, why not just have the w_pgci.py and wo_pcgi.py process set the permissions to nobody.nobody ? Perhaps an option to pass to it to indicate the user and group? Seems fairly simple to me ... but I may be missing something as I have not delved in to these files. Bill Anderson -- In flying I have learned that carelessness and overconfidence are usually far more dangerous than deliberately accepted risks. -- Wilbur Wright in a letter to his father, September 1900

1 0

How do I get a list of all methods in a ZClass from DTML ?
by Maik Roeder 10 Jan '00

10 Jan '00

Hi ! Is there a way to get a list of all methods in a ZClass from DTML ? By this I don't mean the constructor methods, but the methods in Products/MyProduct/MyZClass/propertysheets/methods I have tried to walk to the methods with dtml-with calls, but it does not work. Unfortunately, ZCatalog also does not find the methods of ZClasses, so I wonder if the methods are actually hidden on purpose ? BTW: I want to document a Product, and for this I need the list of methods, and once I have that, also the content of the methods. TIA, Maik Röder

1 0

bug in GenericUserFolder
by Timothy Wilson 10 Jan '00

10 Jan '00

Hello everyone, I've discovered what appears to be a bug in GenericUserFolder and I'm wondering if someone else can verify it. (Who knows, it might just be me.) I'm running Linux on a 2.2.x kernel with a fresh source install of Zope 2.1.2 (w_pcgi). No problem there. Copying my old Data.* brings up my site with no problem. Immediately after that, I untarred GenericUserFolder 1.0.6, stopped the Zope server and restarted it to make GenericUserFolder available. My site became instantly unavailable with the following message: Zope Error Zope has encountered an error while publishing this resource. ImportError Sorry, a Zope error occurred. The traceback includes: Traceback (innermost last): File /usr/local/src/Zope-2.1.2-src/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /usr/local/src/Zope-2.1.2-src/lib/python/ZPublisher/Publish.py, line 179, in publish File /usr/local/src/Zope-2.1.2-src/lib/python/Zope/__init__.py, line 202, in zpublisher_exception_hook (Object: ApplicationDefaultPermissions) File /usr/local/src/Zope-2.1.2-src/lib/python/ZPublisher/Publish.py, line 165, in publish File /usr/local/src/Zope-2.1.2-src/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: index_html) File /usr/local/src/Zope-2.1.2-src/lib/python/ZPublisher/Publish.py, line 102, in call_object (Object: index_html) File /usr/local/src/Zope-2.1.2-src/lib/python/OFS/DTMLMethod.py, line 145, in __call__ (Object: index_html) File /usr/local/src/Zope-2.1.2-src/lib/python/DocumentTemplate/DT_String.py, line 443, in __call__ (Object: index_html) File /usr/local/src/Zope-2.1.2-src/lib/python/DocumentTemplate/DT_String.py, line 381, in cook (Object: index_html) File /usr/local/src/Zope-2.1.2-src/lib/python/DocumentTemplate/DT_String.py, line 219, in parse (Object: index_html) File /usr/local/src/Zope-2.1.2-src/lib/python/DocumentTemplate/DT_String.py, line 166, in _parseTag (Object: index_html) File <string>, line 1, in ? ImportError: No module named DT_With It seems like the install of GenericUserFolder is nuking parts of the DocumentTemplate directory. -Tim -- Timothy Wilson | "The faster you | Check out: Henry Sibley H.S. | go, the shorter | http://slashdot.org/ W. St. Paul, MN, USA | you are." | http://linux.com/ wilson(a)visi.com | -Einstein | http://www.mn-linux.org/

5 5

Copying from one machine to another
by Steve Froggatt 10 Jan '00

10 Jan '00

I have a development site www2.cbsolutions.co.uk and a live site www.cbsolutions.co.uk is it possible to copy from www2 to www. Thanks Steve

2 1