[Zope] Help wanted on Zope ZClasses/DTML please.
Hi, I have only just started developing in Zope over this last week. I like it a lot, but I am having problems finding solutions to some of my more specific problems in the various zope documentations. I am hoping that if I describe my problems, one of you more-experienced Zope users out there will be able to help me. First some background: Basically I have written a news page which allows you to add/edit/delete articles from it. It is similar in some ways to the Zope HowTo "Build a searchable job board". It revolves around two classes: (UA stands for Update Australia, the name of the news page) UAArticle : A single article, to be included on the page. - Properties: article_title,article_author and article_text (self-explanatory) DTML Methods: index_html - renders the data from the three properties into HTML ready for inclusion in the news page edit - a page with a form to allow you to modify the content, submits to "update" update - processes the form results from "edit", updates the properties and redirects UAPage : the page itself, inherits from ObjectManager and has Add UAArticle permission defined. Each instance contains 0 or more UAArticles. -- Properties: issue_date, issue_number, intro_text (self-explanatory) Methods: index_html - renders the page to HTML, both from these properties and by calling the index_html of each subcomponent UAArticle. edit - a set of forms for modifications to edit the above three properties and add a new article, or select an article to edit or delete. update - processes updates to the UAPage properties that have been made on the edit page. edit_article - once an article is selected and the Edit button is clicked, this finds the article, calls the edit method and gives feedback. add_article - a form to create a new article and add it to the UAPage. create_article - processes the data from the add_article form and actually makes the object and adds it. delete_article - once an article is selected and the Delete button is clicked, this finds the article, deletes it and gives feedback. Now to the problems I have got: 1) I cannot get my delete_article method to work. I figured I need to use manage_delObjects, but I can't find a working example to copy from and my code doesn't seem to do anything. The following code gets called by a form with a field called article_to_delete which is the title of the article we want to delete: Article not found Could not find the article to delete.Return to maintenance page Article deleted Deleted article '&dtml-the_match;' (id='&dtml-the_id;').Return to maintenance page This gets an error that the_id does not exist. But I can't put because that is quotes within quotes within quotes. I also tried but that doesn't seem to do anything. What is the correct way to use manage_delObjects? 2) I need to be able to make a "Back" button on the UAArticle's edit page that will return to the UAPage's edit page. The problem is that if I use it just goes to the edit page of the object, because our current location is within the UAArticle not the UAPage. Is there a way to get the name of an object's parent (or its own name for that matter) and use it to construct a URL? 3) When redirecting or linking to a page I have already visited, how can I force a refresh? I tried the JavaScript window.location.reload(true) but I think that is only supported by Netscape. It didn't work in IE5 for me anyway. 4) What is the best way to handle security with ZClasses. In my example I want the index_html pages to be public but everything else to require a password. I managed to require a password for a particular instance of the UAPage, but that affects both the index_html and the edit pages. Thanks very much for taking the time to read this - I hope someone can put me out of my misery! - I have been fiddling around with the code for ages, getting nowhere fast, and the documentation wasn't much help in these areas. It just seems to cover the basics of ZClasses. Regards, Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Help wanted on Zope ZClasses/DTML please.
Thanks to everyone who gave me tips in answer to my questions, I have one further question. I have worked out thanks to Seb's comments that the problem I have with the use of manage_delObjects is (I think) that I am passing in the title or id of the object to be deleted rather than the object itself. I want to put the object into the REQUEST so I can still access it from a different namespace - at the point I want to do the deletion, my target object is out of scope. How do you get a reference or pointer to the current object and put it into the REQUEST for later use? Thanks again, Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == > -Original Message- > From: Seb Bacon [mailto:[EMAIL PROTECTED]] > Sent: Friday, November 03, 2000 8:08 PM > To: Bowyer, Alex; [EMAIL PROTECTED] > Subject: RE: [Zope] Help wanted on Zope ZClasses/DTML please. > > > Hi, just some quick pointers (I'm in a hurry...) > > refer to http://zdp.zope.org/projects/zqr/ZopeQR for more details > > > > > > > What is the correct way to use manage_delObjects? > > > > should work. What you wrote looks for an object with id > "the_id". In fact > you want the value of the_id, which is evaluated for you when > it's in quotes > (think of everything in quotes as python). > > > Is there a way to get the > > name of an object's parent (or its own name for that > matter) and use it to > > construct a URL? > > gives you the parent > > > 3) When redirecting or linking to a page I have already > visited, how can I > > force a refresh? I tried the JavaScript > window.location.reload(true) but I > > think that is only supported by Netscape. It didn't work in > IE5 for me > > anyway. > > window.location.reload() works for me... > > > 4) What is the best way to handle security with ZClasses. > In my example I > > want the index_html pages to be public but everything else > to require a > > password. I managed to require a password for a particular > instance of the > > UAPage, but that affects both the index_html and the edit pages. > > you can attach permissions to specific methods in a ZClass by > mapping them > to existing permissions in the 'define permissions' management tab. > > cheers, > > seb. > ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] insert but updates don't work
> but get an authentication challenge that I can not pass. > Is there something special about sql updates? I haven't used SQL in Zope but I experienced the same thing, an authentication request that cannot be satisfied even by the superuser account. For me I found that it happened when I was in a particular dtml-with block and I referred to the id property of the current object. I changed my to and the problem went away. I think there may be a bug in Zope regarding accessing the id properties of certain objects. I hope this is some use to you, it may be that you have a completely different problem though. I would be interested to hear the outcome once you get it working and work out what the problem was. Good luck Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Help wanted on Zope ZClasses/DTML please.
Thanks for the e-mail Seb. I am afraid I am still having problems here, so I will show my code again, and hopefully you or someone else will be able to help. To recap : I am creating a news page and an interface to edit it using two custom ZClasses, Article and Page. A Page object contains several Articles. The following code is from a script that allows the user to delete an Article from the Page. This method belongs to the Page class, so we are currently in the scope of the Page. This script is supplied with the title of a news article to be deleted, it should then delete the Article from the Page and report back. Article not found Could not find the article to delete.Return to maintenance page Article not deleted Deleted article '&dtml-the_match;' (id='&dtml-the_id;').Return to maintenance page Basically I think I am somehow passing the wrong parameters to manage_delObjects The line causes an error 'loop over non-sequence' This made me think that the argument has to be a sequence so I tried but this fails because as you say it looks for an object called the_id and I need to pass in the value of the_id not the name of it. Ideally I want to say but again this fails to find the object. Any ideas? Thanks for helping, Alex > -Original Message- > From: Seb Bacon [mailto:[EMAIL PROTECTED]] > Sent: Monday, November 06, 2000 8:50 PM > To: Bowyer, Alex; [EMAIL PROTECTED] > Subject: RE: [Zope] Help wanted on Zope ZClasses/DTML please. > > > > > I have worked out thanks to Seb's comments that the problem I > > have with the > > use of manage_delObjects is (I think) that I am passing in > the title or id > > of the object to be deleted rather than the object itself. > > Not quite... manage_delObjects takes a string which is the id > of the object > to be deleted. Your example > > > > was passing a string 'the_id' to the method. I might have > interpreted what > you were trying to do wrongly, but I believe you actually > wanted to pass the > _value_ of the_id. > > > I want to put the object into the REQUEST so I can still > access it from a > > different namespace - at the point I want to do the > deletion, my target > > object is out of scope. > > In fact you just have to put the correct string into the > REQUEST and then > make sure you have the object you're trying to reference in > your current > namespace, e.g. by using "manage_delObjects(the_id)">. If you need more > help, post the > snippet you're working on again. > > seb. > ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Newbie question(s)
Hi, I have what I'm sure is a very simple question about Zope programming style: I want to count how many objects are contained in the current container object and then do something with that value, but I can't do the bit I need to do at the point of reading the count variable because I am in the wrong namespace. I can't begin a dtml-let because I would need to close dtml-if before dtml-let, which is not allowed. What is the "accepted" way of passing a value into a different scope? Do I have do a REQUEST.set or is there a tidier way? Also I think I read somewhere that you can use the object.subobject or object.property syntax but I never got that to work, what's the catch? One last thing, I sent a couple of mails to the list about problems I had with manage_delObjects. I still haven't got it to work. Since the best way to learn Zope is by example, I wonder if anyone could direct me to a sample piece of code where a container of some sort deletes one of its children subobjects? Thanks very much for your help, Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Newbie question(s)
> >I want to count how many objects are contained in the > current container > >object and then do something with that value, but I can't do > the bit I > >need to do at the point of reading the count variable > because I am in > >the wrong namespace. > > I would try and do it like this (untested): > > > > Regards > > Max M Thanks Max, that is certainly useful in this case. My query is really more general though, that was just an example, I need to know what the generally accepted method is for transferring values through the code (i.e between namespaces) IMHO as far as Zope documentation goes, the thing that is really lacking is a document introducing people to how to program in Zope, explaining the overlaps between Python and Zope/DTML and explaining the different syntaxes for calling variables, methods etc? There are a lot of references on specific functions, methods etc but no general overview. Maybe the forthcoming Zope book will address this better. I am also still looking for example code using manage_delObjects. Thanks, Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] How to maintain an up-to-date mirror site in Zope? (not-so-newbiequestion!) question!)
Here is the situation, can you offer advice? Machine A is running a Zope server for a wide-area network in Company A. This is an Intranet site which changes regularly. Machine B serves a separate wide-area network in Company B, and Company B employees need access to Company A's intranet. The link between Machine A and Machine B is too slow/low-bandwidth for all of company B's employees to access A's intranet directly. Therefore we want to have a Zope server on Machine B with a mirror copy of the Company A intranet. The problem is, how can we keep this mirror copy updated on a daily basis? Ideally we need an automatic process to run each night and update the mirror on B. The ideas I had were : 1) stop B's Zope server, copy across data.fs and restart B. But can this be done automatically? 2) somehow keep a log of changes made in A, and at the end of day, export the changed files, import them on B, overwriting the originals. Can this be done in Zope code? Can this be automated? Does anyone have any thoughts/opinions on these ideas? Or does anyone know of a better way, perhaps an existing Zope package or solution? Thanks again, Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] modifying objectValues from an external method?
You may remember I have posted a couple of times about problems I have had with manage_delObjects to delete a news article object from a news page which contains several child news article objects. I thought I would try and avoid the problem and make a Python method to remove the item. This method takes the list of articles (i.e. objectValues) and does the deletion on the parameter passed in. The problem I have is, objectValues doesn't seem to exist at Python level, only at DTML level. So instead of: which is not valid, I have to use: The problem with this is that even though the parameter is passed by reference, the changes are only being done to my_list and not passed back to objectValues. So I lose them once my_list is out of scope. Can anyone suggest an alternative or a workaround? I thought about returning the modified list from the function, but DTML provides no functionality to set objectValues equal to this result. Any help would be appreciated! Thanks Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] security problems
I am having some problems with getting the right security settings for my ZClass. I have one method index_html which should be viewable by anonymous. All other methods should only be viewable when a username/password is entered for someone with the role I have called UAAdmin One thing that is causing complications is that the index_html makes use of a few dtml-vars, an external Python method, and one view method also called index_html from another class. It may be I need to change these items' permissions as well. I can only seem to get full access to all pages (if I grant a proxy on index_html) or password access required on all items (by specifying permissions for the class instance) neither of which are the correct solution. Could someone tell me the right combination of permissions, define permissions and roles I need to get this working.. it's all getting a bit confusing. Thanks Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] security problems .. should be fairly easy...
I know I am posting quite a lot of questions to the list lately, sorry about that, it's just that I can save myself hours of trial-and-error coding when I get quick answers from list, so I hope you don't mind. It seems to be the fastest way to learn. I have a news page ZClass and a news article ZClass, both of which have several DTML methods. All methods apart from index_html should require a particular user role, "UAAdmin", to be held by the current user (thee mathods are all for editing anf manging the news page and articles). The index_html methods (which display the news article) should be available for anonymous access. I have been stuck with this for over a week now, I have tried all sort of combinations of permissions, defined permissions and user roles, but I can't figure it out and I can't find any examples in any of the Zope documentation about how to manage permissions for class methods. Does anyone know where I could find such documentation or examples if there are any? The whole thing's very confusing, but here's what I've worked out so far. Maybe someone could put me right and/or fill in the gaps? I think what I need to do is got the Define Permissions tab for each method, and for the View permission dropdown I should select View for the index_html method, and some other permission X for every other method. This other permission X should only be granted to the UAAdmin role. The question is, what is X to put in the dropdown, and how to assign it to UAAdmin. How would I go about creating a new permission, perhaps "Manage news pages", and how could I then assign that to UAAdmin? Would it then appear in the drop-down? Is this the right approach? How would I finish this off? Am I barking up the wrong tree? Any suggestions or advice would be most welcome. Thanks for your patience with newbies like me!! Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] security
Can some one explain how the Define Permissions screen works. I really don't understand the concept behind it, what does it mean for a permission setting to own a permission? All I need to do is to make certain ZClass methods have a certain level of security and the other methods of the class have no security. Any tips, advice or best of all EXAMPLES most appreciated! Thanks Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] ZClass security : a solution
Seb, you were right, I was referring to ZClass security, which is very poorly documented. And no you're not being intellectually lazy, that sentence does make no sense I have kind of got a working solution now, so I will share it for anyone interested: To recap, the scenario is a news page with a DTML method for viewing which is accessible by all but also DTML methods for editing the content, which are only to be available to users holding a certain role, which I happen to have called UAAdmin (if you're wondering what UA is, it's the name of the newsletter "Update Australia"). Each instance of the class is a separate news page. What I did is this, it's a bit of a messy solution but it works for me: 1) Create a role at the root level of Zope called UAAdmin (I keep all roles at this level for simplicity). 2) At the level which instances of the news page class are to be created, go to the Security tab and assign permissions to the UAAdmin role. If possible include at least one permission which is not held by any other roles or users at this level (other than the Manager of course). In my case "Manage properties" could only be done by UAAdmin or Manager roles. This could be anything, even something you don't use such as perhaps "Add ZGadfly Database Connection" (ZODBC is much better!). 3) Within your ZClass class definition, for each DTML method you want to assign security to: a) Go to the 'Define Permissions' tab b) Go to the dropdown next to 'View' and change "View" to "Manage properties" (or whatever permission was unique to the role you want to give access to). For methods that should have anonymous access, leave it as "View" You will find that this will have the desired effect of limiting access to those pages/methods only. Essentially what we are doing is saying "If you want to View this object, you have to have the Manage Properties permission" There are probably better ways, but if it ain't broke don't fix it. I don't understand why you have to choose a permission for each permission (which is a very confusing concept). It would be much better if you could choose a role to say e.g. "If you want to View this object, you have to have the UAAdmin Role" Apparently there's something called ZPermissions where you can create your own, so I could create a permission "Manage News Pages" and then say "If you want to View this object, you have to have the Manage News Pages permission" but I never worked this out fully. If anyone has any suggestions for improvement, by all means put me straight, but this worked for me. Thanks Alex == Alex Bowyer IT Contractor, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ ====== > -Original Message- > From: seb bacon [mailto:[EMAIL PROTECTED]] > Sent: Thursday, November 30, 2000 12:53 AM > To: Dieter Maurer > Cc: Bowyer, Alex; '[EMAIL PROTECTED]' > Subject: Re: [Zope] security > > > * Dieter Maurer <[EMAIL PROTECTED]> [001128 00:12]: > > Bowyer, Alex writes: > > > Can some one explain how the Define Permissions screen > works. I really don't > > > understand the concept behind it, what does it mean for > a permission setting > > > to own a permission? > > > > > > All I need to do is to make certain ZClass methods have > a certain level of > > > security and the other methods of the class have no security. > > > It is quite good explain in the upcoming Zope book. > > In fact, I think Alex was referring to ZClass security, which isn't > covered in the book, and is something I've never go to the > bottom of either. > on the 'define permissions' tab, it says: > >The table below has two columns. The first column lists the >permissions for this object. The second column specifies the >permissions that should have this permission in this product >or ZClass. > > I'm probably being intellectually lazy or something, but that doesn't > make any sense to me at all. > > seb. > ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Advice on searching/indexing Word documents?
Our company has a repository of staff CVs (Resumes) as Word Documents and I am about to embark on creating a new feature for our Zope Intranet to allow project managers to search those documents for keywords such as particular skills or projects. I am thinking about several possibilities such as a skills/CVs database linked in via ODBC, or some task that converts the Word documents to text files which can then be searched by Zope (I think Zope can do this, and I assume it can't search Word format directly?). Has anyone ever approached a similar problem, does anyone have any tips on how to index/search a load of documents in Zope? Any tips/suggestions/comments would be most welcome. Thanks, Alex == Alex Bowyer IT Consultant, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] "SELECT ... AS ..." statement in ZSQL
A simple question, but I can't seem to find a simple answer in any of the documentation... How do you do a SELECT AS statement in a ZSQL method? For example SELECT FirstName + " " + LastName AS FullName Whenever I use AS, I end up getting the SQL error "Two few parameters: x expected" where is the number of AS expressions in my query. I have tried the same query in Access on the same database and it works fine. I even tried to leave Access to do the query and then just let Zope treat the query as a table. SELECT * FROM MyQueryInAccessWhichUsesAsStatements but I get the same error. Can anyone help? Thanks Alex == Alex Bowyer IT Consultant, Logica Australasia Tel: +61 2 9202 8130 Fax: +61 2 9922 7466 E-mail : [EMAIL PROTECTED] WWW: http://www.logica.com.au/ == ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
