[Zope] Why doesn't this work?

28 Jul 2003

      This is a simple project example.  I'm trying to wrap an object
generated on the fly and publish methods from it.  However,
as I'm doing it, I get an HTTP authentication challenge, and it
does not recognize any usernames, including the superuser, so
I always have to click "cancel" which gives me a "you are not
allowed to access index_html in this context" in this case.

The main module is included below, and I've put a tar file of
the product here:
http://manage.narya.net/Anansi/Download/PBTest.030728.tgz

To test it:

* Add a "My Container" object ("folderish").
* Inside the "My Container" object, create a python script called
  "test_html", with the following contents:
"""
return context.get_obj("Green").index_html
"""
* Access the URL of the test_html script.

What should happen is that the server should return text saying
"Test version of index_html for Green object."

But what I actually get is a challenge popup, which I can't
satisfy with any valid usernames on the server, and thus I get the
message:
"""
Error Type: Unauthorized
Error Value: You are not allowed to access index_html in this context
"""

Obviously, there's something incomplete about the PB_Object
instance,  but I can't figure out what it might be.

Source of PBTest.py:
---snip------------------------------------------
#  Test returning PB transitory object from a folder-like object.
#  This is a technique I want to use in Narya, but it's running into
#  permissions problems.
"""
Test PB return object publishing.
"""

# Probably don't need all of these imports -- this is taken from Home.py

# Python Standard Library:
import string

# Zope:
import Acquisition
from Globals import DTMLFile
from OFS.Folder import Folder
from OFS.Traversable import Traversable
from Globals import Persistent
from OFS.SimpleItem import SimpleItem
from AccessControl.DTML import DTMLSecurityAPI
SecurityGetUser = DTMLSecurityAPI.SecurityGetUser
from AccessControl import ClassSecurityInfo
import AccessControl

from Interface import Base, Attribute

class MyContainer(Folder):
    """
    The container object will contain Zope objects, but also some objects generated on the fly.
    """
    meta_type =  "My Container"

    security = ClassSecurityInfo()
    security.setDefaultAccess("allow")

    security.declarePublic("get_obj")
    def get_obj(self, name, REQUEST=None, RESPONSE=None):
	"""
	Get an object by name.  Probably to be replaced by __getattr__?
	"""
	if hasattr(self, name):
	    return getattr(self, name)
	elif name in ("Red", "Green", "Blue"):
	    return PB_Object(name).__of__(self)

manage_addMyContainerForm = DTMLFile('MyContainerForm', globals())

def manage_addMyContainer(self, id, title='', REQUEST=None):
    """
    Add a new MyContainer folder.
    """
    ob=MyContainer(id, title=title)
    ob.id=str(id)
    ob.title=title
    self._setObject(id, ob)
    ob=self._getOb(id)

    if REQUEST is not None:
        return self.manage_main(self, REQUEST, update_menu=1)

class PB_Object(Acquisition.Implicit):
    """
    The object to be generated on the fly.
    """
    meta_type = "PB Object"

    security = ClassSecurityInfo()
    security.setDefaultAccess("allow")

    def __init__(self, pb_name):
	self.pb_name = pb_name
	self.id = pb_name
	self.title = pb_name

    security.declarePublic("index_html")
    def index_html(self, REQUEST=None, RESPONSE=None):
	"""Silly docstring for index_html"""
	return "Test version of index_html for %s object." % self.pn_name

    security.declarePublic("getId")
    def getId(self):
	"""
	Apparently required but undocumented interface for Zope traversal.
	#$(&#*!!!!
	"""
	return self.id
---snip----------------------------------------------------

I'd really like to understand what's going on here, so any help
will be much appreciated.

Cheers,
Terry

--
Terry Hancock ( hancock at anansispaceworks.com )
Anansi Spaceworks  http://www.anansispaceworks.com