- Zope - Zope lists

- Newbie Question About Sessions
by Bernardo Lopes 21 Jan '99

21 Jan '99

Hello! Sorry i've forgot to put a subject in my last mail. It will not happen again! I'm a newcomer to the Zope's world. For now i'm just checking out some features and trying to build some programs on my own. After this blablabla here is main main concern for now: How can i define session properties or objects? What i whant to do is to be able to define any object (say, client id in a web store) as a session variable. The tricky thing is that i do not whant the content of this object to go back and forth between the browser and the server. I do have to put it in the server and access its contents in some session context. The client id in my case is very important and represents a security flaw if i allow to be altered during a browser session. This object is must be defined when the client logs in the application. If i did allowed it, any user could for example update or access some record in a SQL database that did not concerned him. Just because this client id is indeed the identification number of the user in my database model.

2 1

RE: [Zope] - newbie module management question
by Paul Everitt 21 Jan '99

21 Jan '99

Bruce wrote: > Thanks for working on Open Source products, folks. Zope is impressive. Thanks. Wait till you see tomorrow's release for accessing objects via ftp :^) > I find myself in clueless newbie mode dispite having read > various documents. > > I am confused regarding how to install a Python module via > the manager. > I'm able to set properties of folders and I see how to > install an external > method. What I'd like to do is _upload_ an entire Python > module, so that > this module will be an object within my folder and will have > its methods > available for use by other objects in the folder. Zope has had a policy (which Jim Fulton and I re-discussed over lunch at the chinese buffet yesterday) that Python code doesn't get stuffed in the object database. I'll leave it to him to detail the reasons. > What little I have been able to acquire by looking at example > products is > that the module should be put in Zope/lib/python/, working in > the shell and > not the manager - it seems odd that I would not be uploading > the module as > I upload documents, using your nice multi-tiered security > set-up. Once that > is done, it's not clear to me how to associate that file with > a folder - am > I using the installer of external methods to install one > "factory" method > that brings in the rest of the module? The quickest way to integrate Python code is External Methods: 1) Create an Extensions directory in your Zope directory. 2) Add your module there with a function that *has a docstring* !! 3) In a Zope Folder, choose External Method from the add list. This will create a Zope object that binds your function as a method of the folder. Arguments are passed in and type-casted. The object also has all of Zope's security machinery. To do full-fledged Products, check out Amos' fantastic tutorial: http://www.zope.org/Documentation/Reference/Tutorial --Paul Paul Everitt Digital Creations paul(a)digicool.com 540.371.6909

1 0

- newbie module management question
by bruce＠pixar.com 21 Jan '99

21 Jan '99

Hi, Thanks for working on Open Source products, folks. Zope is impressive. I find myself in clueless newbie mode dispite having read various documents. I am confused regarding how to install a Python module via the manager. I'm able to set properties of folders and I see how to install an external method. What I'd like to do is _upload_ an entire Python module, so that this module will be an object within my folder and will have its methods available for use by other objects in the folder. What little I have been able to acquire by looking at example products is that the module should be put in Zope/lib/python/, working in the shell and not the manager - it seems odd that I would not be uploading the module as I upload documents, using your nice multi-tiered security set-up. Once that is done, it's not clear to me how to associate that file with a folder - am I using the installer of external methods to install one "factory" method that brings in the rest of the module? Thanks Bruce Perens ~v -- The $70 Billion US "budget surplus" hardly offsets our $5 Trillion national debt. The debt increased by $133 Billion in the same year we found a "surplus". More debt is predicted for 1999. See www.concordcoalition.org . Bruce Perens K6BP bruce(a)pixar.com 510-620-3502 NCI-1001

1 0

- trouble with external methods
by Wolf Logan 21 Jan '99

21 Jan '99

(i apologize in advance for attaching code, particularly *this* code...) i'm having trouble with external methods. i have an "index_html" document in zope that looks like this: ----- <form action="ctl_addSite"> <input name="name"><P> <input name="url"><P> <input type="submit"> </form> ----- and an external method "addSite" from this file: ----- from dbConnection import dbConnection from control import control def addSite(self, name, url): d = dbConnection() c = control(d) c.installWebsite(name, [url]) return '<html><body>done! added %s with url=%s</body></html>' % (name, url) ----- now, when i fill out the form in "index_html" and hit "submit", i get the following: ----- Sorry, an error occurred. Traceback (innermost last): File /home/brian/temp/build/tmp_build/Zope-1.9.0-linux2-x86/lib/python/ZPublisher /Publish.py, line 879, in publish_module File /home/brian/temp/build/tmp_build/Zope-1.9.0-linux2-x86/lib/python/ZPublisher /Publish.py, line 595, in publish (Info: /webctl/ctl_addSite) File /home/brian/temp/build/tmp_build/Zope-1.9.0-linux2-x86/lib/python/Products/E xternalMethod/ExternalMethod.py, line 266, in __call__ (Object: Item) (Info: ((<Folder instance at 0x850e9b8>, 'blah', 'blah'), {}, None)) TypeError: read-only buffer, class ----- this happens with "GET"s as well as "POST"s. i sure hope i'm just doing something stupid here.

1 0

- Servlet PCGI client?
by Jim Fulton 21 Jan '99

21 Jan '99

A recent question on servlets made me wonder how hard it would be to implement a servlet that forwarded requests via PCGI? That is, a servlet that packaged up request input, made a PCGI request to a long-running app, and sent the response back to the browser. This would provide an alternative to the PCGI wrapper, perhaps providing better performance and avoiding stuffing authentication info in a Unix environment. Do servlets have access to the HTTP Authorization header? Does anyone on this list have experience writing servlets and feel inclined to try wrining this thing? I think it could be pretty useful, since I think that a number of web servers support servlets. Jim -- Jim Fulton mailto:jim@digicool.com Technical Director (540) 371-6909 Python Powered! Digital Creations http://www.digicool.com http://www.python.org Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats.

6 7

RE: [Zope] - IIS Authentication!
by Wolf Logan 21 Jan '99

21 Jan '99

here's some info about how IIS handles authentication: * if "anonymous" is the only method selected, authentication information is passed directly to the web application -- which is how zope wants it. * if "basic" or "challenge/response" is selected, IIS uses the authentication information itself, to verify access to the *requested files* in the NT filesystem. the web application doesn't get the information, since it's expected that the access control lists on the files are being used to restrict access. * the only difference between "basic" and "c/r" is the protocol used to retrieve the authentication from the client. as far as i know, only internet explorer can handle c/r, but i could be wrong about that. * if more than one method of authentication is selected, IIS starts with the most restrictive and works backwards. in other words, if "c/r" is selected, it will be used first, then "basic" (if it's selected). what all this means is that if zope expects to get any authentication info from IIS, the only option you can specify is "anonymous". than means, however, that the *files* in your filesystem that represent zope have to be accessable by the "anonymous" user (the user account specified as such in the service manager). i have a sneaking suspicion that this is one of the things that's stopping you. > -----Original Message----- > From: Phil Harris [SMTP:pharris@forfree.at] > Sent: Thursday, January 21, 1999 7:59 AM > > I have already tried that, but I get the error message as shown in the > original post 8^( > > I'm now trying to get this thing to work on Linux with Apache and am > having > similar problems, oh god I wish I knew what I was doing 8^). > > Thanks anyway. > > Phil > wmlph(a)d032.ml.uwcm.ac.uk > > ----- Original Message ----- > From: Brian Lloyd <Brian(a)digicool.com> > To: 'Phil Harris' <wmlph(a)d032.ml.uwcm.ac.uk>; Jim Fulton > <jim.fulton(a)digicool.com> > > >> I checked the user info and even created a new user, > >> everything looks OK to > >> me. > >> > >> The user's created are in the top level userfolder and have a role of > >> 'manager'. > >> > >> As I said in my original post, I couldn't get anyone to log > >> in with the > >> instructions in the docs. So I have activated > >> basic-authentication, would > >> this have anything to do with it? > > > >Phil, > > > >Under IIS, you need to _both_ Basic and NT authentication > >turned *off*. If either is turned on, IIS will attempt to > >handle the authentication itself - it will never even consult > >Zope :( > > > > > >Brian Lloyd brian(a)digicool.com > >Software Engineer 540.371.6909 > >Digital Creations http://www.digicool.com > > > > > >

1 0

- ZopeHTTPServer winsock errors on Win32?
by Stefan Franke 21 Jan '99

21 Jan '99

When I run Zope using ZopeHTTPServer on my Win NT4 SP3 Box (both multi and single threaded) I get lots of winsock error-exceptions like those below, when I open the management screen with any browser and click the reload button very heavily (or synchronously on two machines even not so heavily). Is this normal, due to interrupted requests? I've no idea about socket communication (my knowledge start on the http text stream level) so this could just be an upset naive "Oh my God, this Red Light started flashing" post. stefan ---------------------------------------- Exception happened during processing of request from ('194.163.81.32', 2017) Traceback (innermost last): File "D:\Programme\Zope\Koelnzope\ZopeHTTPServer\ZopeHTTPServer.py", line 419, in handle_request self.process_request(request, client_address) File "D:\Programme\Zope\Koelnzope/lib/python1.5\SocketServer.py", line 239, in process_request self.finish_request(request, client_address) File "D:\Programme\Zope\Koelnzope/lib/python1.5\SocketServer.py", line 243, in finish_request self.RequestHandlerClass(request, client_address, self) File "D:\Programme\Zope\Koelnzope/lib/python1.5\SocketServer.py", line 362, in __init__ self.handle() File "D:\Programme\Zope\Koelnzope/lib/python1.5\BaseHTTPServer.py", line 228, in handle self.raw_requestline = self.rfile.readline() File "D:\Programme\Zope\Koelnzope\lib\python1.5\plat-win\socket.py", line 117, in readline new = self._sock.recv(self._rbufsize) error: (10054, 'winsock error') ---------------------------------------- FRANKE1 - - [21/Jan/1999 19:44:53] "GET /manage HTTP/1.1" 200 - ---------------------------------------- Exception happened during processing of request from ('194.163.81.32', 2018) Traceback (innermost last): File "D:\Programme\Zope\Koelnzope\ZopeHTTPServer\ZopeHTTPServer.py", line 419, in handle_request self.process_request(request, client_address) File "D:\Programme\Zope\Koelnzope/lib/python1.5\SocketServer.py", line 239, in process_request self.finish_request(request, client_address) File "D:\Programme\Zope\Koelnzope/lib/python1.5\SocketServer.py", line 243, in finish_request self.RequestHandlerClass(request, client_address, self) File "D:\Programme\Zope\Koelnzope/lib/python1.5\SocketServer.py", line 362, in __init__ self.handle() File "D:\Programme\Zope\Koelnzope/lib/python1.5\BaseHTTPServer.py", line 258, in handle method() File "D:\Programme\Zope\Koelnzope\ZopeHTTPServer\ZopeHTTPServer.py", line 328, in do_GET self.publish_module() File "D:\Programme\Zope\Koelnzope\ZopeHTTPServer\ZopeHTTPServer.py", line 342, in publish_module publish_module( File "D:\Programme\Zope\Koelnzope\lib\python\ZPublisher\Publish.py", line 895, in publish_module if response: stdout.write(response) File "D:\Programme\Zope\Koelnzope\ZopeHTTPServer\ZopeHTTPServer.py", line 277, in write self.handler.send_response(string.atoi(code),message) File "D:\Programme\Zope\Koelnzope/lib/python1.5\BaseHTTPServer.py", line 304, in send_response self.wfile.write("%s %s %s\r\n" % File "D:\Programme\Zope\Koelnzope\lib\python1.5\plat-win\socket.py", line 91, in write self.flush() File "D:\Programme\Zope\Koelnzope\lib\python1.5\plat-win\socket.py", line 78, in flush self._sock.send(self._wbuf) error: (10054, 'winsock error') ----------------------------------------

2 1

- Sorry, but...
by Magnus Lie Hetland 21 Jan '99

21 Jan '99

Zope is so GREAT!!! :)))) (I just got my site up and running, and tried the TinyTable/sidebar-trick, and it works so wonderfully... >sigh<... :) -- Magnus Lie Hetland www.pvv.org/arcadia <arcadia(a)pvv.org>

1 0

- (no subject)
by Bernardo Lopes 21 Jan '99

21 Jan '99

Hello! I'm a newcomer to the Zope's world. For now i'm just checking out some features and trying to build some programs on my own. After this blablabla here is main main concern for now: How can i define session properties or objects? What i whant to do is to be able to define any object (say, client id in a web store) as a session variable. The tricky thing is that i do not whant the content of this object to go back and forth between the browser and the server. I do have to put it in the server and access its contents in some session context. The client id in my case is very important and represents a security flaw if i allow to be altered during a browser session. This object is must be defined when the client logs in the application. If i did allowed it, any user could for example update or access some record in a SQL database that did not concerned him. Just because this client id is indeed the identification number of the user in my database model.

1 0

- Authorization aside...
by Magnus Lie Hetland 21 Jan '99

21 Jan '99

... I still get problems with proxying... Whenever I have a relative link somewhere in my Zope pages, they always end up on the server machine, and not the proxy, because Zope insists (naturally) on using the server machine as base URL. Now... Is there any way I can change the base URL? (There should be...) Otherwise... Will there be in the future? And as for authorization... Does anyone know how to use the proxying/rewriting-mechanisms of Apache to fool browsers into sending the Authorization from the proxy to the real server as well? -- Magnus Lie Hetland www.pvv.org/arcadia <arcadia(a)pvv.org>

4 6