- Zope - Zope lists

timeout on a page
by Dvir Bar-lev 09 Mar '09

09 Mar '09

Hi all. First of all let me say that I found the solution to my user roles problems by using the coockiecrumbler plugin, so that's behind me now J I need help with something else, I will explain what I want to accomplish: I have a page ( well call it Page a), the user gets to page a and from there goes to another page, now he returns to the page a, What I want to happen is this, I he returned to page a before 3 minutes passed from the last time I want to to redirect him to another page, If more than 3 minutes passed than he will see page a again. The 2nd thing I need is this: The user entered my site, lets say he browsed the site and now is just staying in some page there and went off, and he forgot to log off my site, What I want is that lets say the after 3 minutes of inactivity from his part while hes on my site I want to automatically log him off, meaning I will redirect him to the home page and reset his status. Any ideas how I can do this 2 things?

3 2

fstest reports time-stamp reduction, what does it mean and should I be worried?
by Chris Withers 09 Mar '09

09 Mar '09

Hi All, For one customer, I have a secondary storage server that copies repozo backups, restores them and then runs fstest over the restored result once every few hours. (I'd like to move to zeoraid, but it's not quite there yet!) On a few occasions recently, fstest has complained similar to the following: time-stamp reduction at 25557500079: 0x037c544b2c8defcc <= 0x037c550ba17c7555 What does this mean? Why does it appear to go away later? Should I be worried about it? cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

2 3

Re: [Zope] [Zope-PAS] user login and roles
by Lennart Regebro 08 Mar '09

08 Mar '09

On Sun, Mar 8, 2009 at 10:35, Dvir Bar-lev <dvir.b(a)puresight.com> wrote: > A user goes to the site, he see the log in screen that has 2 entry fields - user name and password. > The user enteres the data and presses the submit button. > Now I want to take what the user entered and see if I have the same user and password defined in acl_users folder, if so I want to give him the role that that user in the acl_users folder have. Yup, this is all automatic. > And than based on that role direct him to the appropriate page Aha. So your questions are two: How can I have a HTML login page, and how can I redirect the user to different pages after login, based on the roles. PAS certainly helps you with this, as it has support for having HTML forms for login. Also, as Andreas mentioned, there is a product called CookieCrumbler that can help you with this without using PAS. So how do you use PAS? You start using PAS by replacing your current acl_user folder with the Pluggable Auth Service. In this you add plugins. The plugins do different things. The User Manager will store users and passwords. The ZODB Role Manager will store role assigments to users. The Cookie Auth Helper will enable you to have a login form. Create all these, enable them, fiddle around a bit. Then you probably need to ask more questions, and I won't know enough about PAS to answer, but somebody else probably will. -- Lennart Regebro: Pythonista, Barista, Notsotrista. http://regebro.wordpress.com/ +33 661 58 14 64

1 0

how to check a user role with data entred by user?
by Dvir Bar-lev 08 Mar '09

08 Mar '09

Hi all. I have a question and I hope someone can help me out. I'm new to zope and the all web thing, I'm using zope2. What I did was this, I created a folder in the ZMI and there I created a user folder(acl_users), in the user folder I defined 2 new roles. Now, I have a log in form where the user fills out user name and password, I want to check if the data he entered matches 1 of the roles I defined in the ZMI . I can't find any info or example how to do it, not on the web nor in the documentation. I would appreciate any help on the matter. Tx in advance

4 8

question about use zc.async in Zope2
by eastxing 07 Mar '09

07 Mar '09

Hi all, In Plone2.5.5(with Zope2.9.6-final) I use zasync as my schedule task framework, it works well. Then I update my site to Plone3.1.7, and go further update to use Zope2.11.2 and ZODB3.9.0. Now I want to replace zasync with zc.async. As I know in Zope3 there is a event 'zope.app.appsetup.IDatabaseOpenedEvent' that you can subscribe to start your zc.async dispatcher. But in Zope2.11.2, the event never be fired, so I have to find other point to start the dispatcher. My method is start it when you first use it, see the snip following: =============== class AsyncTool( UniqueObject, SimpleItem, ActionProviderBase ): ... def addJob( self, *args ): ''' ''' self._startZCAsync() portal = getToolByName(self,'portal_url').getPortalObject() # get queue from portal root queue = zc.async.interfaces.IQueue( portal ) # insert a job job = queue.put( Job(...) ) def _startZCAsync( self ): # create volatile attributes if not hasattr( self, '_v_start_zcasync' ): self._v_start_zcasync = 0 if not self._v_start_zcasync: db = Zope2.DB # zc.async does not startup, start it now zc.async.configure.base() zc.async.configure.start( db, poll_interval=1, twisted=False ) self._v_start_zcasync = 1 =============== It works, but fragile. Any of my jobs execute failure will cause the 'volatile' attribute '_v_start_zcasync' lost, and dispatcher start process will run again, this cause error. So I want to know the right time to start zc.async dispatcher in Zope2? best regards eastxing

1 0

IPublishTraverse adapters and permissions
by Sean Upton 07 Mar '09

07 Mar '09

I've been scratching my head on this one, any help is appreciated: I've been using a traversal adapter implementing IPublishTraverse with an application I am developing, and I want to have certain behaviors of my traversal adapter protected by CMF permissions I'm otherwise using. Right now, my adapter is registered in ZCML: <adapter for="sdut.cportal.interfaces.IPortalMediaAsset zope.publisher.interfaces.http.IHTTPRequest" provides="zope.publisher.interfaces.IPublishTraverse" factory=".editvia.AssetTraverser" /> And my AssetTraverser subclasses Acquisition.Explicit, but I'm not sure how to make this participate in the security machinery. Ideally I want to do this within AssetTraverser.publishTraverse(): sec = getSecurityManager() sec.checkPermission(CMFCore.permissions.ModifyPortalContent, self.context) But this will fail, likely for some acquisition voodoo I'm having trouble figuring out (Five.BrowserView is somehow capable of dealing with this scenario, but I'm not sure how to make my traversal adapter do the same sort of thing). Or, even more simply, I would love to be able to use ClassSecurityInfo.declareProtected(permission, name) for some names my traversal adapter will use (this does not do anything meaningful other than generate warnings). Any ideas/pointers appreciated. Thanks, Sean

1 0

psycopg version mismatch (imported 2.0.6 (dec mx dt ext pq3))
by amol kumbhar 06 Mar '09

06 Mar '09

Hi I am using zope 2.10 , python2.4 and psycopg2-2.0.9 . I had created entry in ZIM successfully but while connecting to db it is giving me following error. Please pull me out from this ASAP. An error was encountered while publishing this resource. Error Type: ImportError Error Value: psycopg version mismatch (imported 2.0.6 (dec mx dt ext pq3)) Thanks & Regards Amol Kumbhar

4 8

Zope2 + Twisted
by Peter Sabaini 06 Mar '09

06 Mar '09

I'd like to run a Twisted client in Zope 2.10 (for a legacy app). How do I do that? Simply loading twisted.internet is probably not a good idea since Twisted would not work well with ZServer threads, right? One thing I tried was enabling Twisted in zope.conf but that gives me the following stacktrace (abbr): ... File "/usr/local/zope/2.10/src/Zope-2.10.7- final/lib/python/ZConfig/matcher.py", line 188, in constuct s = st.datatype(s) File "/usr/local/zope/2.10/src/Zope-2.10.7- final/lib/python/Zope2/Startup/datatypes.py", line 349, in __init__ raise ImportError("You do not have twisted installed.") ImportError: You do not have twisted installed. I've got Twisted on my Pythonpath though. TIA, peter.

3 5

sending a encrypted login URL
by Joseph Thomas (s) 05 Mar '09

05 Mar '09

We'd like to construct a zope login URL of the form on another server: http://zope.domain:port/context/logged_in?__ac_name=uzzzzzz&__ac_passwor d=xxxxxxx&submit=Log+in where the ac_name and ac_password parameters are encrypted using zope public key (?) and have the parameters decrypted when zope receives the request and login the user. Is there an API or some way to encrypt the username and password on the 3rd party app server and configure zope so that it treats the parameters as encrypted values rather than plaintext? Joseph Thomas College of American Pathologists http://www.cap.org <http://www.cap.org/> Consider our environment; please print this e-mail only if truly necessary. Thank you!

4 6

FW: sending a encrypted login URL
by Joseph Thomas (s) 04 Mar '09

04 Mar '09

-----Original Message----- From: Joseph Thomas (s) Sent: Wednesday, March 04, 2009 10:50 AM To: 'lists(a)zopyx.com' Subject: RE: [Zope] sending a encrypted login URL I think I get what you're suggesting, but let me clarify. I actually wanted the sensitive portions of URL to be encrypted..because it will be link on a page that says "login to zope"..but I wouldn't want the user or a snooper to be able to view the page source and figure out the URL pattern and the username/password. SSL will ensure that the transport between the browser and the zope server will be encrypted using PKI, but I really want to obfuscate the user name and password parameters in the login URL. So that that if some1 where to view the source they'd see garbled username/password parameters. I suppose I could use the PKI to encrypt the username/password with my zope server's public key (but is there a API to do this on a J2EE container) and then have my zope server decrypt using its private key (but how would zope know that the username/password parameters are 2 be treated as encrypted data)? -----Original Message----- From: Andreas Jung [mailto:lists@zopyx.com] Sent: Wednesday, March 04, 2009 10:38 AM To: Joseph Thomas (s) Cc: zope(a)zope.org Subject: Re: [Zope] sending a encrypted login URL -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Use SSL and you're done. - -aj On 04.03.2009 17:29 Uhr, Joseph Thomas (s) wrote: > We'd like to construct a zope login URL of the form on another server: > > > > http://zope.domain:port/context/logged_in?__ac_name=uzzzzzz&__ac_password=x… > <http://zope.domain:port/context/logged_in?__ac_name=uzzzzzz&__ac_password=x…> > > > > > > where the ac_name and ac_password parameters are encrypted using zope > public key (?) and have the parameters decrypted when zope receives the > request and login the user. > > > > Is there an API or some way to encrypt the username and password on the > 3^rd party app server and configure zope so that it treats the > parameters as encrypted values rather than plaintext? > > > > Joseph Thomas > > College of American Pathologists > > http://www.cap.org <http://www.cap.org/> > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) - -- ZOPYX Ltd. & Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany Web: www.zopyx.com - Email: info(a)zopyx.com - Phone +49 - 7071 - 793376 Registergericht: Amtsgericht Stuttgart, Handelsregister A 381535 Geschäftsführer/Gesellschafter: ZOPYX Limited, Birmingham, UK - ------------------------------------------------------------------------ E-Publishing, Python, Zope & Plone development, Consulting -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkmurnAACgkQCJIWIbr9KYylKQCgn3WWP5SzGrrAQbJIQXv7Bfac 3fwAoIiI4iwtVBFVRg7jtZu5Vgy5fw3f =MHol -----END PGP SIGNATURE----- Consider our environment; please print this e-mail only if truly necessary. Thank you!

2 1