- Zope - Zope lists

"segregated" users
by Tim Evans 06 Apr '05

06 Apr '05

I apologize if this issue is something that has been discussed before, but I searched the archives to no avail. I'm evaluating zope for a project, and I have some questions regarding the extensibility of the user security model. The company I work for would like to provide documents to clients via the web, and only allow one particular client (or group of users from the same client) access to those documents. I don't want any user to be able to detect the presence of any other user. I essentially want several "sites", one for each client, with a group of administrative users responsible for maintaining these sites and publishing content to all of them. What this would require is a group of administrators that can see all sites, as well as restricted users with privileges to exactly one site. I'd also like to avoid having a role for each site, as that could get ugly for almost 1000 clients. It would also be great if we could designate a user to administer only one site, so that they could only publish data to one client. I guess I want "zope-level" users and "application-level" users. Is this something that sane people do? I don't really need a step-by-step, just a "yes, that is possible" or a "no, you're an idiot" before I start digging in to try and do it. Tim

4 3

Multiple Browser Id Managers question
by David H 06 Apr '05

06 Apr '05

Hi Zope List, The current SESSION Chapter in the Zope Book 2.7 says the following: " ... once you've instantiated one browser id manager or if you keep the default browser id manager, you will not be able to instantiate another browser id manager in a place where the new browser id manager can acquire the original browser id manager via its containment path" But I find that I *can* add additional Browser Id Managers in folders that can acquire the original browser id manager - without deleting the default copy in Zope root. Any thought ideas on this? Does the principal still stand, e.g. "Not good to put a browser id manager in a place that can also acquire another browser id manager? Thanks, David

3 2

Product creation difficulty
by Pete Taylor 06 Apr '05

06 Apr '05

Does anyone have a recommendation for a Product creation guide/tutorial they've used and made work, preferably one with examples and explanations of _ac_permissions? I've tried three or four, all of which work after a fashion... I have a very simple class that I've been using to test product creation. It's basically just an xmlrpc connection returned as a class instance (which serves no real purpose currently since importing xmlrpclib isn't exactly difficult to do in a method). I've logged in as my admin user, so rights to the site shouldn't be a problem, which makes me think it's got to be security in the module itself that i'm not establishing correctly. The problem is that every time I actually try to instantiate an instance of the class and make use of the object's methods, I get the following traceback: Traceback (innermost last): Module ZPublisher.Publish, line 101, in publish Module ZPublisher.mapply, line 88, in mapply Module ZPublisher.Publish, line 39, in call_object Module Shared.DC.Scripts.Bindings, line 306, in __call__ Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec Module Products.PythonScripts.PythonScript, line 323, in _exec Module None, line 1, in testrpc - <PythonScript at /pro4/testrpc> - Line 1 Module AccessControl.ZopeGuards, line 237, in guarded_import Module AccessControl.ZopeGuards, line 300, in load_module Unauthorized: You are not allowed to access 'XMLRPCClient' in this context I'd be more than happy to copy in blocks of code if it seems like it will help, but all things considered, I'd be happier just to know where best to look. I've looked at the ZDG, the Zope Book 2.7, and a number of "Python Product Creation" tutorials... but since they're all geared toward getting a product to initialize and such (which works great), and it's a security error I'm getting, I don't really know where to go next. Thanks all, Pete Taylor THIG Systems (desk) 352.333.1722 (cell) 352.359.0073 CONFIDENTIAL NOTICE: This email including any attachments, contains confidential information belonging to the sender. It may also be privileged or otherwise protected by work product immunity or other legal rules. This information is intended only for the use of the individual or entity named above. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on the contents of this emailed information is strictly prohibited. If you have received this email in error, please immediately notify us by reply email of the error and then delete this email immediately.

3 2

ClockServer 0.1 released
by Chris McDonough 06 Apr '05

06 Apr '05

Hi folks, I was creeped out by Zope scheduling products that started a separate thread to call methods at scheduled intervals and I got tired of setting up cron+wget to call Zope methods via HTTP, thus: http://plope.com/software/ClockServer It works by posing as a medusa server, and injects things that look like http requests into the publisher every so often. Have fun! - C

4 6

Plone/Zope on Debian Sarge
by Peter Bittner 06 Apr '05

06 Apr '05

Hi there! I am running a Debian Linux box with Debian/testing (Sarge) and I am trying to get Plone up and running. I have made a clean, new install of the whole system last week, so all packages are really up-to-date and there was no dirty installation that was updated. I have noticed that the Plone package on Debian is or was somewhat broken, but there was a notice about that on the Plone website (download page) which has disappeared. For me that looked like this problem was fixed by the package maintainer. Unfortunately still, after installing Plone (and implicitly thus Zope 2.7) Zope did not want to come up, saying: Zope starting all instances.... '*' is an old/purged instance, not started What is wrong here? I know I have to set up a new Plone site (obviously using the Zope interface at http://localhost:9673) but how can I when Zope is not running. Any help is greatly appreciated! Cheers, Peter -- "Free software is like free speech, not free beer" (Richard Stallman)

7 10

Re: [Zope] Plone/Zope on Debian Sarge
by Chris Withers 06 Apr '05

06 Apr '05

Robert (Jamie) Munro wrote: >>Don't install Zope from OS packages like debian, they never get it right >>and you will just end up getting confused ;-) > > I don't come to this conclusion at all. That's 'cos you haven't run into the problems that come with using OS packages and the added level of maintenence they require (by the os package maintainers) - yet! > The only problem with the debian > package is that people on this list who don't know what is going on give > unhelpful answers. Are you including yourself in that group? ;-) The recommendations not to use OS packages come from bitter experience of people who've experienced weird edge case errors and totally out of date software versions as a result of using OS packages, Debian and RedHat being prime examples... > This is the message that is printed by debian's /etc/init.d/zope2.7 when > no instances exist yet. Run mkzope2.7instance to make an instance. As was > already mentioned, all this is explained by debconf when you install > debian on Zope. It's probably a bug worth fixing, though. It should say > "No instances have been created yet". Yes, my point exactly. If you use a standard source install, many more people will have seen any message you see and are likely to be able to help. Adding non-standard setup scripts like this means there's another opportunity for bugs to creep in and something else that needs to be maintained. > I think it's worth installing the zope package, but not the products from > the debian packages, unless they are zope2.7 packages, but there aren't > many of those. Yes, layering a pluggable distribution system over a plugin system seems somewhat bizarre... cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

1 0

RE: [Zope] Does anyone care whether we deprecate ZClasses?
by Pascal Peregrina 06 Apr '05

06 Apr '05

About archetypes... Documentation http://plone.org/documentation/archetypes Nice presentation (in French) : http://lsm2004.abul.org/IMG/pdf/slides_-_zope_archetypes_-_Gilles_Lenfant_.p df (look at the links on page 35) Pascal -----Message d'origine----- De : zope-bounces(a)zope.org [mailto:zope-bounces@zope.org]De la part de Sascha Welter Envoyé : mercredi 6 avril 2005 09:44 À : zope(a)zope.org Objet : Re: [Zope] Does anyone care whether we deprecate ZClasses? (Tue, Apr 05, 2005 at 06:46:23PM -0400) zope-request(a)zope.org wrote/schrieb/egrapse: > From: Dieter Maurer <dieter(a)handshake.de>: > "ZClasses" feature prominently in the Zope book. > > Seems they are more recommended than the new development paradigm (which > does not yet feature at all in the Zope book). I don't know if I'm living under a rock or something, but I'm using Zope on and off since about 2.5.1, and I've barely heard about archetypes. So far I did not come across a simple introduction, tutorial, or even explanation of them. Of course I haven't searched, but I guess that is the point of Dieters remark. ZClasses, external methods and to some extend Python products byte you the moment you get to the Zope documentation. The "new stuff" is that stuff I hear the buzzwords flying around, but once I touch something of it, I'm lost pretty fast. If something is the "new and recommended way" of doing things, it should be first place in the docs. The "Zope Bible" has Python products before other stuff IIRC, good. If the "new stuff" is so great and easy to use, it should also be easy to put some documentation of it in Chapter 2 or 3 of whatever the Zope Docs will be. As for the question of depreciating ZClasses: I had started out with ZClasses once, got to know the limitations and am now doing Python products. I've learned a lot using ZClasses, as one can jumble and play around with object orientation much easier. Python products offer a much steeper wall, there is much more that has to be just right just to get started. So if the "new stuff" offers that easy intro playground and has adequate docs, then replace ZClasses. And btw, keep up the good work, thanks! Sascha -- http://betabug.ch/blogs/ch-athens _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

1 0

Re: [Zope] Set MIME type using ZPT
by Cliff Ford 06 Apr '05

06 Apr '05

srikanth wrote: > Hi, > > I tried this one. But the html page takes the parameter as a string > but doenst > Execute the pyhton function. I got all the functions (External methods) > all set. > > The img tag I used is: > <span tal:define="imagename result/filename"><Img > src="loadImage?filename=imagename"></span> Have a look at the generated html source. You have not said wither the probem is a mal-formed image tag, or the image tag failing to fetch the image. Also, pay attention to Tino's comments on seurity. I only ever use a Serial Number, not Filename - that comes from a database. Don't forget that image tags should have width, height and alt attributes. Cliff > Because I am getting the filename from the resultset. > Once again thanks for all your time and patience. > Any help would be gr8. > > Ta. > Srikanth. > > -----Original Message----- > From: zope-bounces(a)zope.org [mailto:zope-bounces@zope.org] On Behalf Of > Cliff Ford > Sent: Monday, April 04, 2005 11:15 PM > Cc: zope(a)zope.org > Subject: Re: [Zope] Set MIME type using ZPT > > > srikanth wrote: > >>Hi, >> >> I am using an external method to load an Image from the harddrive. >>The external method is as follows: >> >>from email.MIMEImage import MIMEImage >>##parameters=filename >>def getDocument(filename): >> fname = '/mnt/'+filename; >> input = open(fname,'r') >> content = MIMEImage( input.read( ) ) >> input.close( ) >> return content >> >> >>When I try to display the content in the webpage what I actually got >>is all raw data of the file rather the image. So how can I convert the > > >>raw data to be dispalyed as image in the webpage. I am using ZPT to >>display the web page (image). If its dtml I could have used >><dtml-mime> tag is there any equivalent to that in ZPT. >> >>Any suggestion would be a gr8 help. > > > It is not clear exactly how you are using the Page Template. Typically > the page would have an img tag that calls a python script that calls the > > External Method. Remember the web browser fetches the image separately > after the html has been received - so your img tag might look like this: > <img src="getImage?filename=whatever" ...> and your getImage python > script would look like this: > > (type, encoding) = context.getMimeType(context.REQUEST.filename) > context.REQUEST.RESPONSE.setHeader('Content-Type', type) > context.REQUEST.RESPONSE.setHeader('Content-Disposition', 'inline; > return context.getDocumentCall(context.REQUEST.filename) > > where getDocumentCall is the name of your External Method that calls the > > getDocument External Method and getMimeType is another External Method > that looks like this: > > import mimetypes > def getMimeType(filename): > return mimetypes.guess_type(filename) > > and your own external method would look like this: > > > ##parameters=filename > > def getDocument(filename): > > fname = '/mnt/'+filename; > > input = open(fname,'r') > > content = input.read( ) > > input.close( ) > > return content > > At the moment you seem to have skipped a step. > > HTH > > Cliff > > >>Ta. >> >> >>_______________________________________________ >>Zope maillist - Zope(a)zope.org >>http://mail.zope.org/mailman/listinfo/zope >>** No cross posts or HTML encoding! ** >>(Related lists - >> http://mail.zope.org/mailman/listinfo/zope-announce >> http://mail.zope.org/mailman/listinfo/zope-dev ) > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > >

1 0

Programatically setting advanced settings in zsql methods
by Jeff Gentry 06 Apr '05

06 Apr '05

Hello ... I have a python based product where I am creating a few zsql methods at the time of instantiation. I recently realized that there is the default 1000 row maximum limit on query rows. While this can be changed through the management interface, I am trying to figure out how to do this when I create the SQL method in the python code. Is this possible? Thanks -Jeff

3 3

CMFSin time errors
by MILLER Eva 05 Apr '05

05 Apr '05

Hi, I'm getting some errors with certain feeds, but not others, in CMFSin. The errors seem to have something to do with the portaltime and localized time. Someone suggested changing the permissions for anonymous to fix this. Doing that made all my feeds malfunction, so that's not the right answer. I know CMFSin is old and it seems to be getting flaky. But I really need an aggregator for my project, and it doesn't seem like there's anything much better out there right now. Here's what happens when I use a feed from National Public Radio (http://www.npr.org/rss/rss.php?topicId=3) I know the feed is working. CMFSin's debug panel shows the results of the feed very plainly. The problem is in the display of the feed (which is either Zope or Plone's fault, though I can't tell which right now): Traceback (innermost last): Module ZPublisher.Publish, line 101, in publish Module ZPublisher.mapply, line 88, in mapply Module ZPublisher.Publish, line 39, in call_object Module Shared.DC.Scripts.Bindings, line 306, in __call__ Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec Module Products.CMFCore.FSPageTemplate, line 191, in _exec Module Products.CMFCore.FSPageTemplate, line 124, in pt_render Module Products.PageTemplates.PageTemplate, line 96, in pt_render - <FSPageTemplate at /plinkit/sinList used for /plinkit/interestsideas/headlines> Module TAL.TALInterpreter, line 190, in __call__ Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 671, in do_useMacro Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 409, in do_optTag_tal Module TAL.TALInterpreter, line 394, in do_optTag Module TAL.TALInterpreter, line 389, in no_tag Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 702, in do_defineSlot Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 409, in do_optTag_tal Module TAL.TALInterpreter, line 394, in do_optTag Module TAL.TALInterpreter, line 389, in no_tag Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 650, in do_defineMacro Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 694, in do_defineSlot Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 409, in do_optTag_tal Module TAL.TALInterpreter, line 394, in do_optTag Module TAL.TALInterpreter, line 389, in no_tag Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 613, in do_loop_tal Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 637, in do_condition Module TAL.TALInterpreter, line 234, in interpret Module TAL.TALInterpreter, line 484, in do_insertText_tal Module Products.PageTemplates.TALES, line 227, in evaluateText Module Products.PageTemplates.TALES, line 221, in evaluate - Line 35, Column 92 - Expression: <PythonExpr here.toPortalTime(obj['date'])> - Names: {'container': <PloneSite instance at b5c87740>, 'context': <PloneFolder instance at b2d87d40>, 'default': <Products.PageTemplates.TALES.Default instance at 0xb69758cc>, 'here': <PloneFolder instance at b2d87d40>, 'loop': <SafeMapping instance at b2b685d0>, 'modules': <Products.PageTemplates.ZRPythonExpr._SecureModuleImporter instance at 0xb696ed8c>, 'nothing': None, 'options': {'args': ()}, 'repeat': <SafeMapping instance at b2b685d0>, 'request': <HTTPRequest, URL=http://demo.plinkit.org/interestsideas/headlines/sinList>, 'root': <Application instance at b5c87710>, 'template': <FSPageTemplate at /plinkit/sinList used for /plinkit/interestsideas/headlines>, 'traverse_subpath': [], 'user': Anonymous User} Module Products.PageTemplates.ZRPythonExpr, line 47, in __call__ - __traceback_info__: here.toPortalTime(obj['date']) Module Python expression "here.toPortalTime(obj['date'])", line 1, in <expression> Module Products.CMFCore.FSPythonScript, line 104, in __call__ Module Shared.DC.Scripts.Bindings, line 306, in __call__ Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec Module Products.CMFCore.FSPythonScript, line 160, in _exec Module None, line 5, in toPortalTime - <FSPythonScript at /plinkit/toPortalTime used for /plinkit/interestsideas/headlines> - Line 5 Module Products.CMFCore.FSPythonScript, line 104, in __call__ Module Shared.DC.Scripts.Bindings, line 306, in __call__ Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec Module Products.CMFCore.FSPythonScript, line 160, in _exec Module None, line 4, in toLocalizedTime - <FSPythonScript at /plinkit/toLocalizedTime used for /plinkit/interestsideas/headlines> - Line 4 Module Products.CMFPlone.PloneUtilities, line 118, in localized_time Module DateTime.DateTime, line 522, in __init__ Module DateTime.DateTime, line 745, in _parse_args Module DateTime.DateTime, line 1032, in _parse SyntaxError: Tue, 05 Apr 2005 14:21:06 EDT Thanks, Eva Miller, Librarian

3 2