- Zope - Zope lists

Re: [Zope] A thing about roles I don't get...
by massimo 28 Sep '04

28 Sep '04

Alexis Roda wrote: > massimo wrote: > >> Alexis Roda wrote: >> >>> IIRC, if the script has proxy role anyone who has access to the >>> script can access the protected contents. >>> >>> >>> Regards >> >> >> >> only the script has the proxy role set and it only return true or >> false; there could be some problem I don't see? > > > This morning I was very busy at work and I've skipped the code when > reading the message. If it does nothing "dangerous" that's ok. What > I've mean was: if the script with proxy role does something on the > protected content that can reveal restrictred information you should > protect the script too. > > > > Regards ok, thanks for reassuring me (I tend to be a bit paranoid...) massimo

1 0

CacheException
by Tiller, Michael (M.M.) 28 Sep '04

28 Sep '04

I noticed in my event.log that I'm getting tons of these messages: 2004-09-28T04:50:17 PROBLEM(100) Cache ZCache_set() exception Traceback (most recent call last): File "/usr/local/zope-2.7.0/lib/python/OFS/Cache.py", line 215, in ZCacheable_set mtime_func) File "/usr/local/zope-2.7.0/lib/python/Products/StandardCacheManagers/RAMCach eManager.py", line 317, in ZCache_set oc.setEntry(lastmod, index, data, view_name) File "/usr/local/zope-2.7.0/lib/python/Products/StandardCacheManagers/RAMCach eManager.py", line 111, in setEntry self.entries[index] = CacheEntry(index, data, view_name) File "/usr/local/zope-2.7.0/lib/python/Products/StandardCacheManagers/RAMCach eManager.py", line 57, in __init__ raise CacheException('The data for the cache is not pickleable.') CacheException: The data for the cache is not pickleable. Can anybody give me any advice on how to track down this kind of message? I don't see anything in here that hints at what particular object is causing this error or why. What I'm wondering is whether this is an issue where I put something into a cache that shouldn't be there or perhaps that something got corrupted somewhere. Another thing I noticed (probably as a result of this) is that the memory consumed by the process grows constantly. Finally, I'm using Zope-2.7.0 because of http://zope.org/Collectors/Zope/1401 in Zope-2.7.2 in case anybody is wondering why I'm not using the latest Zope. Any help would be appreciated. I tried Googling but it only turned up three matches for that exception and none of them helped me. -- Mike

1 0

Long process in zope - how a long to be ?
by kepes.krisztian 28 Sep '04

28 Sep '04

Hi ! I have a question about zope's python limitation. ZopeBook is say that zope's py is limited. Limited: ranges are not be to loo long, cycles (for, until) are limited, etc. I want to create two unlimited, long process. The first is an database content checker: it is check many records in an interval (1 year, 1 month, etc). So it is very slow, with many db operations. 1: The Zope is really limiting this process ? How to do it ? Terminate the thread ? 2: How to prevent the process double starting (with refresh in the browser ?) If I set a value in the session, that is good, but who delete it, when the process-or request is terminted by an exception, or zope-s termination signal ? 3: How to show the state of process ? a.) .write(), .flush(), long-long html with js tags what rewrite an readonly form input-text with actual percent ? b.) centrally stored actual result with window.setinterval(n), and periodic page reloading ? Or I walk in wrong way, I must create an outer product (a py file) with native commands, and zope only check this ? Thanx for help: ft

3 2

Re: [Zope] A thing about roles I don't get...
by massimo 28 Sep '04

28 Sep '04

Alexis Roda wrote: > massimo wrote: > >> Jonathan Hobbs wrote: >> >>> From: "massimo" <massimop(a)users.berlios.de> >>> >>> >>>> I have a folder that should be 'operated' only by a certain group of >>>> users so I created a local role and then activated the 'Access >>>> contents >>>> information' permission only for this role (and for manager, just in >>>> >>> >>> >>> case). >>> >>> >>>> Now I would like to test with a python script if the folder is >>>> accessible to the current user, to build dynamically a menu so I tried >>>> this script based on the one in the chapter 'Users and Security' of >>>> the >>>> Zope Book: >>>> >>>> ################################################################# >>>> ## Script (Python) "check" >>>> ##bind container=container >>>> ##bind context=context >>>> ##bind namespace= >>>> ##bind script=script >>>> ##bind subpath=traverse_subpath >>>> ##parameters= >>>> ##title= >>>> ## >>>> # Import a standard function, and get the HTML request and response >>>> >>> >>> >>> objects. >>> >>> >>>> from Products.PythonScripts.standard import html_quote >>>> request = container.REQUEST >>>> RESPONSE = request.RESPONSE >>>> >>>> from AccessControl import getSecurityManager >>>> sec_mgr = getSecurityManager() >>>> return sec_mgr.checkPermission('Access contents information', >>>> context.restrictedTraverse('/path/to/folder')) >>>> ################################################################## >>>> >>>> It doesn't work the way I hope, It ask me to authenticate claiming >>>> that >>>> I'm not allowed to access the object. >>>> >>>> I suppose this is the correct behavior, probably I miss something that >>>> is in front of my eyes, but a this point I really need a little >>>> help... >>>> please >>>> >>> >>> >>> >>> It sounds like you need to set the Proxy role for your test python >>> script to >>> allow it to access the target object. >>> >>> >>> Jonathan >>> >>> >>> >>> >> well, I feel kinda stupid... >> I was sure I had already tried it, but now that I checked before >> answering you I found it working.... >> >> I thank and apologize >> massimo > > > IIRC, if the script has proxy role anyone who has access to the script > can access the protected contents. > > > Regards only the script has the proxy role set and it only return true or false; there could be some problem I don't see? massimo

1 0

Acquisition not working for me
by Jim Anderson 28 Sep '04

28 Sep '04

Hi, I have a problem working with acquisition. I'm working with python classes in Zope 2.7.1. These class are zope objects. My class structure has class F derived from Folder and class I derived from SimpleItem. An instance of I is created in class F and then a call to setObject is made with the id and handle to the instance of I. When I bring up zope, the instance of I shows up in the folder, as expected. However, if I execute self.absolute_url_path() in I, it does not return a full path, only the id of the instance object. When I step through the absolute_url_path source code, I find that the instance of I does not have an attribute for self.aq_parent. I was surprised at this because I is a SimpleItem which in turn is derived from Acquisition. Am I mistaken in my expectation that instance I would have an aq_parent that is the folder that contains it? Thank you in advance. Jim Anderson

2 3

Zope and stylesheets
by John Poltorak 28 Sep '04

28 Sep '04

I've pulled something from the zope.org website which I want to iincorporate into my own but don't fully understand what is going on. Here are the lines:- <link rel="Stylesheet" type="text/css" href="http://zope.org/ploneNS4.css" />  <style type="text/css" media="all"> @import url(http://zope.org/plone.css?skin=);</style>  <style type="text/css" media="all">@import url(http://zope.org/ploneCustom.css);</style> I'm not very well up on stylesheets so apologies for my newbie questions, but how should I incorporate the lines above into my own website? Do I just need to import the files ploneNS4.css and ploneCustom.css into my own instance of Zope? And is it recommended to have a common stylesheets folder for all the websites served from a single Zope instance? -- John

3 4

webdav / IE
by John Hunter 28 Sep '04

28 Sep '04

I have a problem that I have struggled with off and on for weeks without success. Goal: Serve files (mainly msword and excel) with authentication, to Microsoft/IE users supporting the ability to logout, without forcing the user to reauthenticate multiple times. Approach: To support the ability to log out, most reading I've found pointed me to CookieCrumbler, which I'm using. Problem: IE on windows appears to want to use WebDAV, which doesn't understand cookies AFAIK and thus tries to reauthenticate using basic http authentication Proposed Solution: Use the webdav source port, eg 1980. Gripe: I have no trouble with any tested browser / OS combination other than Microsoft Windows with IE. 99% of my users will be on this combination, however. Before I launch into a bunch of techo mumbo jumbo below, I am open to alternative solutions. If there is a better way to do this let me know. It seems to me that it shouldn't be impossible to gracefully serve protected files to Microsoft users while supporting logouts, but maybe it is. In particular, I have no interest in supporting webdav, but as far as I understand, I cannot disable this on server side (if I can, please tell me!!). So a lot of stuff below is targeted at getting webdav to work with cookie crumbler. If I can't figure this out, I'll have to jettison cookie crumbler and logouts. I have created a sandbox at http://crcdocs.bsd.uchicago.edu/test. This area has default permissions, except for the following, which require authenticated|manager|owner privs View Access Contents information Manage WebDAV locks WebDAV Lock items WebDAV Unlock items WebDAV access There are two acl_users 'test' and 'testman'. Both have password '123'. The latter has manager permissions. The 'test' directory has a single msword file 'facepage.doc', and an index_html method that serves this file either over 80 or 1980. I am using a default instantiation of CookieCrumbler 1.2 in that dir. I have the following in my zope.conf to enable webdav <webdav-source-server> # valid keys are "address" and "force-connection-close" address 1980 force-connection-close off </webdav-source-server> When the user clicks on either the port 80 link or the port 1980 link in index_html, even though they've already cookie authenticated when initially loading index_html, they get a basic http authentication dialog. Is there some special trick to serve files over the webdav source port? Perhaps I'm naive in thinking all I need to do is add the above lines to zope.conf, restart zope, and then serve the file over 1980. I installed VerboseSecurity-0.6. When the user clicks on the 1980 link, they are presented with the authentication challenge box 2 times and then can read the file. Subsequent attempts to access the file are successful without additional authentication challenges. 4 error log entries are created during the initial attempt to access the document, summarized in order here. 1st error Time 2004/09/25 12:21:51.553 GMT-5 User Name (User Id) Anonymous User (None) Request URL http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc/manage_DAVget Exception Type Unauthorized Exception Value <strong>You are not authorized to access this resource.</strong><p> No Authorization header found. 2nd error Time 2004/09/25 12:21:55.570 GMT-5 User Name (User Id) Anonymous User (None) Request URL http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc/LOCK Exception Type Unauthorized Exception Value <strong>You are not authorized to access this resource.</strong><p> No Authorization header found. 3rd error Time 2004/09/25 12:21:57.156 GMT-5 User Name (User Id) Anonymous User (None) Request URL http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc/LOCK Exception Type Unauthorized Exception Value <strong>You are not authorized to access this resource.</strong><p> No Authorization header found. 4th error Time 2004/09/25 12:21:57.177 GMT-5 User Name (User Id) test (test) Request URL http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc/LOCK Exception Type RuntimeError Exception Value Syntax error at line 9: illegal character in content Included below is the full traceback and REQUEST header from the first error. Please feel free to log to http://crcdocs.bsd.uchicago.edu/test as user 'test' or 'testman' if you are kind enough to help me solve this vexing problem. JDH - Zope 2.7 Exception traceback Time 2004/09/25 12:21:51.553 GMT-5 User Name (User Id) Anonymous User (None) Request URL http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc/manage_DAVget Exception Type Unauthorized Exception Value <strong>You are not authorized to access this resource.</strong><p> No Authorization header found. Traceback (innermost last): * Module ZPublisher.Publish, line 92, in publish * Module ZPublisher.BaseRequest, line 439, in traverse * Module ZPublisher.HTTPResponse, line 671, in unauthorized Unauthorized: <strong>You are not authorized to access this resource.</strong><p> No Authorization header found. Display traceback as text REQUEST form cookies SITESERVER 'ID=38c1d83c249f02a07f0d04cbbf5f1ee5' __ac 'dGVzdDoxMjM%3D' __ac_name 'test' lazy items SESSION <bound method SessionDataManager.getSessionData of <SessionDataManager instance at 2a9bd27350>> other TraversalRequestNameStack [] URL 'http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc/manage_DAVget' SERVER_URL 'http://crcdocs.bsd.uchicago.edu:1980' PUBLISHED <bound method File.manage_DAVget of <File instance at 2a9bd7ecb0>> URL0 http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc/manage_DAVget URL1 http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc URL2 http://crcdocs.bsd.uchicago.edu:1980/test URL3 http://crcdocs.bsd.uchicago.edu:1980 BASE0 http://crcdocs.bsd.uchicago.edu:1980 BASE1 http://crcdocs.bsd.uchicago.edu:1980 BASE2 http://crcdocs.bsd.uchicago.edu:1980/test BASE3 http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc BASE4 http://crcdocs.bsd.uchicago.edu:1980/test/facepage.doc/manage_DAVget environ HTTP_ACCEPT 'application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*' CONNECTION_TYPE 'Keep-Alive' HTTP_USER_AGENT 'Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)' HTTP_REFERER 'http://crcdocs.bsd.uchicago.edu/test/index_html' SERVER_NAME 'localhost.localdomain' GATEWAY_INTERFACE 'CGI/1.1' SERVER_SOFTWARE 'Zope/(unreleased version, python 2.3.4, linux2) ZServer/1.1' REMOTE_ADDR '24.14.147.78' HTTP_ACCEPT_LANGUAGE 'en-us' SCRIPT_NAME '' REQUEST_METHOD 'GET'

4 12

Using IPython for debugging Zope
by Jean Jordaan 28 Sep '04

28 Sep '04

Hi all I just figured this out a couple of days ago. It is VERY cool. """ $ ./bin/zopectl debug Starting debugger (the name "app" is bound to the top-level Zope object) [...] >>> >>> import IPython >>> IPython.Shell.IPShell().mainloop(sys_exit=1) Python 2.3.3 (#1, Mar 17 2004, 01:31:20) Type "copyright", "credits" or "license" for more information. IPython 0.6.3 -- An enhanced Interactive Python. ? -> Introduction to IPython's features. @magic -> Information about IPython's 'magic' @ functions. help -> Python's own help system. object? -> Details about 'object'. ?object also works, ?? prints more. In [3]: @autocall Automatic calling is: OFF In [4]: app = __IP.internal_ns['app'] In [5]: app Out[5]: <Application instance at 411d1470> In [14]: app.plone.object # Tab-completion ... rooooocks! app.plone.objectIds app.plone.objectMap app.plone.objectIds__roles__ app.plone.objectMap_d app.plone.objectIds_d app.plone.objectValues app.plone.objectItems app.plone.objectValues__roles__ app.plone.objectItems__roles__ app.plone.objectValues_d app.plone.objectItems_d In [14]: app.plone.object In [15]: app.plone.objectIds?? Type: Python Method Base Class: <type 'function'> String Form: <bound method PloneSite.objectIds of <PloneSite instance at 411bdd70>> Namespace: Interactive File: /home/jean/Zope-2.7.1-0/lib/python/OFS/ObjectManager.py Definition: app.plone.objectIds(self, spec=None) Source: def objectIds(self, spec=None): # Returns a list of subobject ids of the current object. # If 'spec' is specified, returns objects whose meta_type # matches 'spec'. if spec is not None: if type(spec)==type('s'): spec=[spec] set=[] for ob in self._objects: if ob['meta_type'] in spec: set.append(ob['id']) return set return [ o['id'] for o in self._objects ] """ Is anyone else using this? -- Jean Jordaan http://www.upfrontsystems.co.za

2 1

A thing about roles I don't get...
by massimo 28 Sep '04

28 Sep '04

...perhaps not the only thing I don't get but.. Hi to all, I have a folder that should be 'operated' only by a certain group of users so I created a local role and then activated the 'Access contents information' permission only for this role (and for manager, just in case). Now I would like to test with a python script if the folder is accessible to the current user, to build dynamically a menu so I tried this script based on the one in the chapter 'Users and Security' of the Zope Book: ################################################################# ## Script (Python) "check" ##bind container=container ##bind context=context ##bind namespace= ##bind script=script ##bind subpath=traverse_subpath ##parameters= ##title= ## # Import a standard function, and get the HTML request and response objects. from Products.PythonScripts.standard import html_quote request = container.REQUEST RESPONSE = request.RESPONSE from AccessControl import getSecurityManager sec_mgr = getSecurityManager() return sec_mgr.checkPermission('Access contents information', context.restrictedTraverse('/path/to/folder')) ################################################################## It doesn't work the way I hope, It ask me to authenticate claiming that I'm not allowed to access the object. I suppose this is the correct behavior, probably I miss something that is in front of my eyes, but a this point I really need a little help... please thanks massimo p.s. yes, I'm a zope beginner

2 2

useing the REQUEST variable in python scripts
by Tim Zegir 28 Sep '04

28 Sep '04

Hi All, I'm trying to get some form variables in a python script. The form variables are dynamic (grabbed from a database). I want to use a variable in the script (something like REQUEST[myvar]) to get the input values. But when I use that code I get a key error. Does anyone know how to get a variable from a form with code like that? Thanks Tim Zegir

2 2