[Zope] Product Creation and Permission

3 May 2001

      I started working on this the other day and posted some questions regarding
this, and I apologize ahead of time for the length of this message, but this
has me absolutely baffled and if anyone can offer some insight into Zope's
ObjectManger and how it works in regards to this, it would be extremely
appreciated.

I am constructing a product that is basically in essence a SQL-Zclass, where
you can manipulate SQL in a Object Manager.  I have two classes, A and B,
where B works off of A.

So, after you create a instance of A in Zope (in a folder or such), it appears
.. and then you click on it, it brings up a management screen (assuming that
we're allowable to do such) that runs a SQL command that displays the results
as "objects" in the instance of A.  These instances displayed in A are related
to B.  Clicking on one of these new instances of B should bring up a list of
further related objects contained in B (in the SQL database) and allow you to
manage objects C, D, E... etc.  The problem that I am getting is A works fine,
and shows the objects of B contained within.  However, when I click on one of
these in the management screen, I get a request to login again, and I can
never enter in a correct authentication despite having full privledges to this
Zope server, and after three tries, I am dropped to a Unauthorized screen
saying that Username and Password are not correct.

Can anyone shed any light on this issue?  Is there something I am missing,
some class that I am not inheriting that's allowing Zope access to it's
authentication methods?  Or is what I am doing just plain impossible in Zope? 
I have included examples of what I am trying to do below and apologize for the
length of this message.

Jason

A:

import Globals
from Globals import Persistent, Acquisition
import AccessControl
import OFS
from B import *
from pg import DB
from AccessControl import ClassSecurityInfo
from Acquisition import Implicit

__allow_access_to_unprotected_subobjects__ = 1

class objectChunk(Implicit):
        security = ClassSecurityInfo()
        security.declareObjectPublic()
        security.setDefaultAccess('allow')
        security.__allow_access_to_unprotected_subobjects__ = 1

def SQLquery(query):
        db = "zope"
        server = "192.168.1.1"
        port = 5432
        sqluser = "zope"
        sqlpassword = "********"

        data = []

	if query[0:6] == "SELECT":
	        for output in
DB(db,server,port,'',sqluser,sqlpassword).query(query).dictresult():
        	        result = objectChunk()
	                masterkeys = output.keys()
	                for key in masterkeys:
	                        f = setattr(result, key, output[key])
	                data.append(result)
	else:
		SQLOUTPUT = DB(db,server,port,'',sqluser,sqlpassword).query(query)

        return (data)

def manage_addA(self,id,name,description,REQUEST=None):
    obja = A(id,name,description)
    self._setObject(id, obja)
    if REQUEST is not None:
        return self.manage_main(self, REQUEST)

manage_addAForm = Globals.HTMLFile('dtml/add_obja', globals())

class A(
    OFS.ObjectManager.ObjectManager,
    OFS.PropertyManager.PropertyManager,
    Acquisition.Implicit,
    Persistent,
    AccessControl.Role.RoleManager,
    OFS.SimpleItem.Item,
    ):

    a=()
    manage_options=(
        {'label':'Properties', 'action':'manage_main'},
        {'label':'View', 'action':''},
        ) + OFS.SimpleItem.SimpleItem.manage_options

    meta_type = 'Product'

    index_html = Globals.HTMLFile("dtml/obja", globals())
    #manage_main = Globals.HTMLFile("dtml/edit_obja", globals())

    def __init__(self, id, name,description):

	self.id = id
        self.name = name
        self.desc = description

    def objectItems(self):

	objQUERY = "SELECT * FROM B WHERE dgid = '" + self.id + "'"

	QUERYRESULT = []
	QUERYRESULT = SQLquery(objQUERY)	
	a = []
	for objects in QUERYRESULT:
		tp =
B(objects.id,objects.dgid,objects.obj_name,objects.obj_desc,objects.obj_creator,objects.obj_created,objects.obj_moddate)
		tpwrapper = [objects.id,tp]
		a.append(tpwrapper)
        return a        

    def manage_beforeDelete(self,item,container):
	QUERYSTRING = "DELETE FROM B WHERE dgid = '" + item.id + "'"
	queryresult = SQLquery(QUERYSTRING)

    def _getOb(self,id,dp=2):
	__allow_access_to_unprotected_subobjects__ = 1
        nextobject =
B(self.id,id,"name","desc","creater","createrdate","moddate") 
        return nextobject

    def _delObjects(self,id):
       "This deletes the objects specified" 
       print "In the _delObjects"	    

    def _delOb(self,id):
        "This deletes the objects specified" 
	SQLQUERY = "DELETE FROM B WHERE id = '" + id + "'"
	INQUIRE = SQLquery(SQLQUERY)

Globals.default__class_init__(A)
Globals.default__class_init__(B)
Globals.InitializeClass(objectChunk)

B:

import Globals
from Globals import Persistent, Acquisition
import AccessControl
import OFS
from pg import DB
from AccessControl import ClassSecurityInfo
from Acquisition import Implicit

__ac_permissions__ = (
	('View',
		('index_html', '__getitem__', 'id', 'pageCount', 'getAllPages',
		'getPage', 'navigationBar')),
        ('Management Screens',
		('manage_main','manage_edit', 'manage_addPage', 'manage_editPage',
		'manage_deletePages')),
	('Anonymous','Anonymous'),
)

__allow_access_to_unprotected_subobjects__ = 1

class objectChunk(Implicit):
        security = ClassSecurityInfo()
        security.declareObjectPublic()
        security.setDefaultAccess('allow')
        security.__allow_access_to_unprotected_subobjects__ = 1

def SQLquery(query):
        ## change these when you change servers
        db = "zope"
        server = "192.168.1.1"
        port = 5432
        sqluser = "zope"
        sqlpassword = "********"

        data = []

	if query[0:6] == "SELECT":
	        for output in
DB(db,server,port,'',sqluser,sqlpassword).query(query).dictresult():
        	        result = objectChunk()
	                masterkeys = output.keys()
	                for key in masterkeys:
	                        f = setattr(result, key, output[key])
        	        data.append(result)
	else:
		SQLOUTPUT = DB(db,server,port,'',sqluser,sqlpassword).query(query)
        return (data)

def
manage_addB(self,dg_id,id,name,desc,creater,createrdate,moddate,REQUEST=None):
	The argument 'self' will be bound to the parent Folder.
	QUERYSTRING = "INSERT INTO C
(id,dgid,obj_name,obj_desc,obj_creator,obj_created,obj_moddate) VALUES
('"+id+"','"+dg_id+"','"+name+"','"+desc+"','"+creater+"','"+createrdate+"','"+moddate+"')"
	print QUERYSTRING
	SQLRETURN = SQLquery(QUERYSTRING)
	if REQUEST is not None:
        	return self.manage_main(self, REQUEST)

manage_addTopicForm = Globals.HTMLFile('dtml/add_obj', globals())

class B(
	OFS.ObjectManager.ObjectManager,
	OFS.PropertyManager.PropertyManager,	
	Acquisition.Implicit,
	Persistent,
	AccessControl.Role.RoleManager,
	OFS.SimpleItem.Item,
	):

	__ac_permissions__ = (
		('Change Management',
			('manage_main','manage_edit', 'manage_addPage', 'manage_editPage',
			'index_html')),
	)

	a=()

	security = ClassSecurityInfo()
	security.declareObjectPublic()
	##security.setDefaultAccess('allow')
	security.__allow_access_to_unprotected_subobjects__ = 1
	manage_workspace__roles__=('Manager','Anonymous',)

	manage_options=(
		{'label':'Properties', 'action':'manage_main'},
		{'label':'View', 'action':''},
		) + OFS.SimpleItem.SimpleItem.manage_options

	meta_type = 'Product 2'

	index_html = Globals.HTMLFile("dtml/obj", globals())
	manage_main = Globals.HTMLFile("dtml/edit_obj", globals())

	def __init__(self,dg_id,id,name,desc,creater,createrdate,moddate):
		self.dg_id = dg_id     
		self.id = id
		self.name = name
		self.desc = desc
		self.creater = creater
		self.createdate = createrdate
		self.moddate = moddate
		__allow_access_to_unprotected_subobjects__ = 1
		manage_workspace__roles__=('Manager','Anonymous',)

	def objectItems(self):
		print "In the objectItems method of Tp"

		objQUERY = "SELECT * FROM B WHERE dgid = '" + self.id + "'"

		QUERYRESULT = []
		QUERYRESULT = SQLquery(objQUERY)
		a = []
		for objects in QUERYRESULT:
			tp =
B(objects.id,objects.dgid,objects.obj_name,objects.obj_desc,objects.obj_creator,objects.obj_created,objects.obj_moddate)
			tpwrapper = [objects.id,tp]
			a.append(tpwrapper)
		return a

Globals.InitializeClass(objectChunk)

____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1

[Zope] Product Creation and Permission

Jason Joy