- Zope - Zope lists

permission and role questions
by Keith Rohrer 15 Apr '99

15 Apr '99

I'm working on designing a web application, and right now I'm particularly scrutinizing Zope's permission model. In trying to think how I'd use it to do what our existing, highly custom system does today, I wonder: 1) How does one examine the logged-in user's username from DTML? I think I just need the variable name here... 2) Once I know the user ID, how can I get a list of places the user is permitted, so that all users can enter via one "front door" that always shows exactly those rooms the user may enter? 3) Is there any form of permission inheritance or impersonation implemented? Our application interfaces with other systems, and maps some local user IDs to remote user IDs. Assistants log in with their own IDs, then pick a "primary" user on whose behalf to work; the system then uses the "primary" user's permissions and presents the "primary" user's remote credentials. I'm thinking I'll have to do this myself, since I need to keep both IDs around for auditing info...fortunately I'm already expecting to use a custom authentication layer (ever try to time out a session with basic authentication?). 4) The security screen's permission settings have "acquire" checkboxes, whose point is obvious, and per-role checkboxes. I take it those enable permissions? So we can allow inherited permissions, and we can explicitly add permissions, but there's no way to add-only-if-inherited or inherit-but-deny-particular-loons-anyway? Also, the permissions on intervening levels of the tree are not checked, only inherited, right? 5) If I define users at a high level, can I grant those users roles defined at deeper levels? This would make my job with point (2) much easier, as I could create roles Foobar_Peon and Foobar_Boss in the Foobar folder, then offer the user buttons into Foobar if they have Foobar_whatever roles... 6) Is there any plan for, or how hard would it be to implement, a "reverse" permission manipulation screen where the role is fixed and the subsystems are columns? I'm largely looking at Zope and ACE--and may wind up using them in conjunction somehow--to recommend as frameworks; ACE (plus TAO) has good RPC and OS abstraction layers for C++, while Zope is a much richer framework for web applications. If I have to write in permission checking and proxy users along with the audit trail and the actual application functionality, no biggie... Keith (I may need to inhale the developer docs now...)

1 0

RE: [Zope] Is someone using Zope in Europe : A new buggy platform/os : linux alpha 5.1???
by Gilles.Lavaux 14 Apr '99

14 Apr '99

Rik Hoekstra wrote: > I know, it is WinNT/95. There There is not much to be done about it .... Hello. No, it's not Windows something: I run Zope on a Dec Alpha Miata + Linux Red-Hat 5.1 + python 1.51. I use a PostgreSQL DB and every SQL date parsing works great. I have discovered this timezone pb. with the calendar tag. If someone has successfully patched the DateTime module (or something else) on this platform, please mail me. I have also a red-hat 5.2 alpha box. So I guess I will have to try it. Thanks for the article reference. Gilles

1 0

Is someone using Zope in Europe?
by Gilles.Lavaux 14 Apr '99

14 Apr '99

if yes, please contact me. I want to know which timezone you get from Zope. I get a blank/empty one and it give me problem. Gilles.lavaux(a)esrin.esa.it Ps:je me rappelle avoir vu quelqu'un de Suisse...

2 1

FYI ZUG.ORG
by Christopher.Abraham＠cio.treas.gov 14 Apr '99

14 Apr '99

For those who ARE interested in making a user's group: ZUG.org is available. *grin* chris

3 3

Confera - Message order
by Scherer, Bill 14 Apr '99

14 Apr '99

I'm swamped with other work and figured somebody must have done this already. How can I reverse the order of the message display in Confera's index_html? By default, the oldest message is on top, the newest at the bottom. I would like new messages to appear at the top. I imagine I can pass a parameter to the tree sort method, but what? Also, I image that this sorting would have to be at the top level only. Thanks Bill

1 0

RE: [Zope] Feature requests and questions
by Ken Manheimer 14 Apr '99

14 Apr '99

On Tuesday, April 13, 1999 4:50 PM Christopher Petrilli wrote: > On Tue, Apr 13, 1999 at 01:45:02PM -0700, Andrew Wooldridge wrote: > > [...] > > 7) implement a mailing list from within Zope > > Woah, different thing entirely. Check out Mailman (www.list.org) and > there's some talk about implementing a sort of integration between the > two, but that should be taken to them, not to the Zope people. Actually, it so happens one of the primary mailman implementers is here at digicool. I've played a tiny bit with substituting some zope-based dtml for mailman's homegrown web interface it's a tantalyzing temptation to just go ahead and do the whole thing. That, however, wouldn't add a whole lot of value (it would just simplify the interface code, at the expense of a whole nother system on which mailman depends), and we'd like to think through what we'd really want to accomplish with such an effort. We're working on the foundation for a notion of membership in our linux expo project, and there's one thing that would be a compelling case for superficial integration. Then there's the persistent object store and other facilities for doing a nice persistent server, which would make my mouth water if i were a particularly obsessive compulsive personality. (No, my mouth is not actually watering.) Plus, having a two-way interface with email in zope is a really interesting prospect, adding value to zope as well as to systems that use it. There are some really interesting opportunities here - email systems like, but less monolithic than, conventional mailling lists, where for instance email-based "discussions" can be embedded in documents, and spawn off new resources as threads spin off. Or whatever - more thinking needs be done. So there's a lot of nice stuff to do here. When we'll pinpoint what, that would have priority, is a question. There's *lotsa* nice stuff to do with zope... > > c)workflow > > 27 ton weight. But not impossible, but I'm not sure it belongs IN Zope, > honestly. I would not dismiss this too quickly. We went into the dreamworld for a day or two, thinking about what could be if we had a versatile workflow engine in zope, and i think a lot of mouths were watering. Imagine if you had a bunch of interfaces and could express your activity logic for expressing the flow between them in a high-level, comprehensible way. That might be a reeeal convenient way to build applicable portions of a web site. This is probably something we'll return to after linux expo. Ken Manheimer klm(a)digicool.com

3 2

Access problems with frameset
by Daniel Staver 14 Apr '99

14 Apr '99

Hi, i have created a site where one of my users will have access to the content objects. I have added a role and a user. The user get 'Authorization failed" everytime he tries to login to http://website/manage but when he logs in to any of the individual pages contained within the frameset of Manage authorization is ok. Daniel

1 0

Re: ZopeHTTP speed problem.
by Stefan Franke 14 Apr '99

14 Apr '99

[This is a crossposting from c.l.p to the zope(a)zope.org mailing list, since it contains a problem report and a proposal/question concerning both] On Mon, 12 Apr 1999 22:57:32 GMT, befletch(a)my-dejanews.com wrote: [...] > I found I have to use >my machine's numeric IP address, not 'localhost' as the docs indicate. Do you get the long response times even *with* using your localhost's IP address? I once had a similar problem with response times even up to a minute for each HTTP request, and I found out that it was due to the logging mechanism in the standard library's BaseHTTPServer.py: BaseHTTPRequestHandler.log_message calls the address_string function, which does a reverse name lookup of the request's IP address. If neither yout DNS nor the etc/hosts table (it lives in \WINNT\system32\drivers\etc\hosts on a NT machine, don't know about 95/98) are configured correctly, timeouts occur on each request. There are two calls to address_string in Zope, one in BaseHTTPRequestHandler.log_message and one in ZopeHTTPServer.BoboRequestHandler.get_environment Both can be changed to self.client_address[0], so that only IP addresses are used for logging and the REMOTE_HOST environment variable is never set. What I would appreciate is to make this behaviour configurable, but it would require changes to both BaseHTTPRequestHandler and BoboRequestHandler. Any ideas? Stefan

1 0

RE: [Zope] Zope with Apache on NT
by TFE MMS JARVIS JOHN 14 Apr '99

14 Apr '99

I don' t know if this will help much but I have version 1.3.4 working. The Zope install is named George so, RewriteEngine on RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^/Zope/(.*) /Apache/cgi-bin/George.exe/$1 [E=HTTP_CGI_AUTHORIZATION:%1,T=application/x-httpd-cgi,L] This doesn't seem much different from yours but I also had to append: <Directory /Zope> Options All AllowOverride None </Directory> <Directory /apache/cgi-bin/george.exe> Options All AllowOverride None </Directory> before I could get it to work. Only adding ExecCGI option still gave me 403 and authorization errors. Options All seems a bit extreme, but I didn't feel like messing with it a whole lot at the time... BTW this is on NTWS 4.0. [My other machine runs Linux :^) ] HTH, John Jarvis > -----Original Message----- > From: Rob Page [SMTP:rob.page@digicool.com] > Sent: Wednesday, April 14, 1999 8:21 AM > To: 'zope(a)zope.org' > Subject: [Zope] Zope with Apache on NT > > Has anyone gotten Zope 1.10.2 to work with the windows version of Apache > (1.3.6)? I've checked, double-checked and triple-checked the notorious > rewrite rule: > > <httpd.conf snippet> > LoadModule rewrite_module modules/ApacheModuleRewrite.dll > # > # > RewriteEngine On > RewriteCond %{HTTP:Authorization} ^(.*) > RewriteRule ^/Zope/(.*) /PROGRA~1/APACHE~1/cgi-bin/Zope1-10-2.exe/$1 > [last,e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l] > </httpd.conf snippet> > > so on: > > http://localhost/Zope/manage or > http://localhost/Zope/anything-else-for-that-matter > > I just get Error 403 Forbidden messages. > > waaaaahhh... it's late and I'm getting cranky... snivel... > > :^) > > --Rob > > -- > Rob Page V: 540 371 6909 > Digital Creations > http://www.digicool.com > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev )

1 0

RE: [Zope] adding Oracle adapter?
by Keith Rohrer 14 Apr '99

14 Apr '99

> > But I want to > > access my Oracle database with Zope SQL methods, so I > > downloaded the Oracle > > database adapter (Z Oracle DA). The "installation > > instructions" only tell > > me how to build DCOracle; no sign of how to install > > ZOracleDA into Zope can > > be found, and Zope has yet to read my mind and detect > > ZOracleDA's presence. > > The .tgz contans a README.txt file in the src directory which details > the all-too-painful process of compiling the Oracle modules. Which, for me, started with getting my own Python.h so I could compile. This entailed getting my own Python, so I concluded I was supposed to untar ZOracleDA into my Python directory, not Zope's private Python directory... > Even in > its current state you should be able to visit the Control > Panel/Products > folder and see a broken ZOracleDA product. Not if you think it goes in your Python directory, as opposed to Zope's Python directory. I'll move it and see what shakes loose. You might want to amend the installations to say to start by untarring in the Zope directory, not the Python directory... > Check the README.txt for > step-by-step compilation instructions. DCOracle works, though I had to get my own > BTW, what platform are you running (Win/Sparc Solaris)? Solaris. Keith

2 1