Re: [Zope-dev] Methods through the Web (security?)
Brian Lloyd wrote: I don't have a good answer for you, though I tend to agree with you that some things just don't want to be accessed outside of some larger context. I'd like to hear some different viewpoints on how people think something like this should work... What the difference seems to be is exposure to surfer through URL. So, you could equip all items in the object tree with a flag 'expose', that is off by default. When the user should be able to view the thing through an URL (such as index_html), you turn it on. Would this have any unforseen problems? You could even have some user interface help here. Imagine I made an index_html but forgot to expose it. Now, still logged in as manager, I try to view it. Zope detects I'm trying to view something through an URL that I'm not supposed to see, so asks something like "hey, you tried to view this but it's not set to be exposed, expose this?". If the manager chooses 'yes', the expose flag is set to true. Hm, I suppose the problem here would arise with methods that directly return HTML output through an URL. This would seem to be fairly rare, though, and you can always wrap it up in some object that does have the expose flag. Regards, Martijn ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Methods through the Web (security?)
Brian Lloyd wrote: Yes you could, except that you would also make them inaccessible from DTML (or from anywhere else) for the same class of users. Is it really acceptable that in order to use dtml-in objectIds on a page that needs to be accessible to anonymous users that I must grant 'Access contents information' to anonymous users and thus give them the ability to inspect my objects if they want to? So you have something like: 'Access at all' (this is 'Access Contents Information') 'Access through URL' (the 'expose' flag I talked about in previous posts) 'Access through FTP' 'Access through XML-RPC' etc. This would be for individual Zope objects. For objects that expose methods, perhaps you'd need yet another permission, something like: 'Access methods at all' 'Access methods through URL' .. Of course this sounds like it could get unwieldy, unless there was some clear user interface. I have a feeling that intent will need to become more important somehow in the future. As we add more protocols and types of usage to Zope, it becomes harder for a single permission to really cover a resource in a way that makes sense for all of the various usages. Right. From the point of view of an xml-rpc based client app, having objectIds and the like may be an absolute necessity, while from a pure HTTP standpoint many would at best consider it superfluous or at worst consider it a security hole. *sigh*. Maybe the right short-term thing is to just leave it the way it was and tell people who may be concerned about it to turn it off via that permission and live the repercussions that will have in their DTML. I guess at least that way the software isn't taking the choice out of their hands. Um, is there a good workaround then, if you turn it off? I mean, if you turn off 'Access Contents Information' *and* you want a DTML method that generates an index of all subfolders, what do you do? Work with proxies? Regards, Martijn ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Distributed ZODB-Transactions
Zopistas! I want to write an Product that mirrors every ZODB-Transaction to a Backup-Server. The idea was to trap every transaction (i.e. creation, change, deletion of zope-objects) and transfer a copy of the object to another server (via XML-RPC?!?) after the transaction got commited. I've been debugging through various zope-classes (esp. transaction.py, connection.py) but couldn't understand the way, zope manages the transactions. The creation and deletion process always seems to trigger a transaction for the parent object. Has anybody an idea? Thanx, Gregor! ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Distributed ZODB-Transactions
Heine, You'll want to take a look at lib/python/ZODB/FileStorage, lib/python/ZODB/DemoStorage, and lib/python/ZODB/MappingStorage for ideas. You may also want to take a look at the ZODB Wiki at http://www.zope.org/Members/jim/ZODB Heine Gregor wrote: Zopistas! I want to write an Product that mirrors every ZODB-Transaction to a Backup-Server. The idea was to trap every transaction (i.e. creation, change, deletion of zope-objects) and transfer a copy of the object to another server (via XML-RPC?!?) after the transaction got commited. I've been debugging through various zope-classes (esp. transaction.py, connection.py) but couldn't understand the way, zope manages the transactions. The creation and deletion process always seems to trigger a transaction for the parent object. Has anybody an idea? Thanx, Gregor! ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope ) -- Chris McDonough Digital Creations Publishers of Zope - http://www.zope.org ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Methods through the Web (security?)
Martijn Faassen wrote: Brian Lloyd wrote: Yes you could, except that you would also make them inaccessible from DTML (or from anywhere else) for the same class of users. Is it really acceptable that in order to use dtml-in objectIds on a page that needs to be accessible to anonymous users that I must grant 'Access contents information' to anonymous users and thus give them the ability to inspect my objects if they want to? So you have something like: 'Access at all' (this is 'Access Contents Information') 'Access through URL' (the 'expose' flag I talked about in previous posts) 'Access through FTP' 'Access through XML-RPC' etc. This is an interesting idea -- The Zope server is an Object database that exposes objects and attributes via various protocol modules. I can see a future where you'd want to be able to plug in arbitrary protocol modules -- and perhaps more than one instance of each type of protocol (for example, http on ports 80 and 8080). It would make sense to me for each protocol to have its own set of "expose flags" or even "expose rules" for each addressable object/attribute. The user interface to manage the objects could collect these all into one place, so as the manager of an object, you can decide what is allowed to be seen via which protocols. -- Steve Alexander Software Engineer Cat-Box limited ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Methods through the Web (security?)
Martijn Faassen wrote: Various things. What you'd need is turn off 'view' permission by default for just about *everything* except possibly DTML Documents, otherwise it's just too easy to set up a site that exposes too much. Exposure to URLs should be turned off by default. Well, this is why doing it with permissions is great because you can set it to your preference in the root folder and aquire it from there onwards... Everything would still have 'execute' permission, so I don't think that should be a permission at all, as everything really has it and nothing can do without it anyway. Yes, but you may want to restrict WHO can execute something. Perhaps you have a method that only managers should be able to execute, and no-one should be able to 'view'. 'view' and 'access' merge into a single thing called 'access'. I still don't really see any point in the 'access' permission and, in fact I've just been bitten badly by it (see my RecentChanges post to the Zope list...) the question is if you really ever want that in a site. You usually only call such methods from DTML. Not so, try out ZWiki's ;-) I notice there is an FTP permission already. Maybe there should be: - an execute permission - a 'view' permission for each 'server': HTTP, FTP, XML-RPC... cheers, Chris ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope and SMP
Thilo Mezger: hi! Howdy. yesterday, i have test-driven zope on a dual-pentium smp-machine running linux 2.2 and i was very disappointed by the results. the zserver threads are running on both cpu's but it seems to scale really, really badly. i have only done some very cheap benchmarking but it seems that a single cpu is faster than 2 cpu's. but as i said, this is not proper benchmarking (yet). i wanted to ask if someone has already tried zope on more than 1 cpu and/or could point me to a direction where i could find out more about this subject? I have our intranet running off a dual Xenon 350Mhz running 2.2.12-20smp and things are terrific. I haven't ran any comparisons either, but speed isn't an issue. cheers! thilo -- [EMAIL PROTECTED] innominate AG networking people fon: +49-30-308806-0 fax: -77 web: http://innominate.de pgp: /pgp/tm All my best, Jason Spisak CIO HireTechs.com 6151 West Century Boulevard Suite 900 Los Angeles, CA 90045 P. 310.665.3444 F. 310.665.3544 Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Distributed ZODB-Transactions
I want to write an Product that mirrors every ZODB-Transaction to a Backup-Server. The idea was to trap every transaction (i.e. creation, change, deletion of zope-objects) and transfer a copy of the object to another server (via XML-RPC?!?) after the transaction got commited. I've been debugging through various zope-classes (esp. transaction.py, connection.py) but couldn't understand the way, zope manages the transactions. The creation and deletion process always seems to trigger a transaction for the parent object. Has anybody an idea? Data.fs is essentially a log file that is appended with binary data. The only time the data is changed rather than appended is when you pack the database. Therefore, it may be easier to write a script that catches the data that is appended and appends it to the backup file. When the script detects the file has shortened (after a packing operation), it should copy the whole file over. The simple fact that data is appended rather than changed makes Data.fs quite reliable. It can withstand most kinds of failure. And the Zope undo mechanism is very effective. So I would suggest that the backup you intend to perform does not need to be an integral part of Zope. Rather, it is appropriate that it be a background process run periodically. Shane OK, I admit, I didn't tell you the whole truth. ;-) The Backup-Server should not only backup one, but various Zope-installations (sort of 'backup-central'). My idea was to create a folder for each backuped server. This folder holds the complete object-tree of a backup-client. Each time a change in the database of the client occurs, the client informs the server about it (tells the server which object has been changed, created or deleted). Then the server requests that object from the client. The client pickles the object, sends it to the server and the server unpickles it again and puts it in the right place in the client folder. My problem is the first step: how does the client recognize, which object has to be updated? In the case of a creation and deletion of an object, the transaction-class handles the parent object and not the object itself. Thanx, Gregor! ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] DCOracle and floats (was: DCOracle Problem on HPUX)
"R. David Murray" wrote: On Thu, 18 May 2000, Matthew T. Kromer wrote: Yes, this is in the CVS version; Chris Petrilli will probably make an announcment a release soon. The behavior is such that NUMBER with neither scale nor precision is a float. Great! Thanks for the info. From your last sentence I'm wondering if the fix is a simple change to the if test in _description in ociCurs.py...maybe I'll experiment, not knowing how soon 'soon' is grin. In this case, yes, that's all that it is (well, it was a 1-liner in ociCurs.py). ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Distributed ZODB-Transactions
Well, that sort of makes sense. The containing object is the object that needs to be updated to rid itself of the reference to the contained object. I'm not sure I understand the problem. The object to be updated *is* the container. My problem is the first step: how does the client recognize, which object has to be updated? In the case of a creation and deletion of an object, the transaction-class handles the parent object and not the object itself. -- Chris McDonough Digital Creations Publishers of Zope - http://www.zope.org ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] updated Wikki with __call__ issue
I added another note on the Wikki regarding the XSLTMethod __call__ issue, more information on the ZPublisher is neccessesary for any progress. Is there any good documentation on the subject? Here is the link to the issue: http://216.164.72.7:7780/Wiki/Members/jim/ZDOM/Issue%20with%20__call__%20and%20Aquisition -- Chimezie Thomas-Ogbuji Junior Consultant Fourthought Inc. (303) 583 9900 ext 104 [EMAIL PROTECTED] ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Re: Fixed reply Re: [Zope-dev] Trouble setting LoginManager default user class default user class
At 04:04 PM 5/18/00 -0400, Dan L. Pierson wrote: The portal now gets created, but I can't login to the initial account. I also can't display the members roster by clicking on Members (AttributeError for getUsers), but can write a DTML method in the UserSource that lists all one user. The code in DemoPortalBase that trys to display the roster follows, I suspect it's this bug again, but don't know where to put the __of__: Actually, the problem is probably that, as a DTML method, it expects to be passed its containing object as the first parameter. You might try using a PythonMethod, DTML Document, or an ExternalMethod instead. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Adding ZCatalog index programatically
How about: yourcatalog._catalog.addIndex(id, 'FieldIndex') replace FieldIndex with TextIndex or KeywordIndex as desired. "R. David Murray" wrote: I was just looking at the ZCatalog code to figure out how to programatically add an index to a Catalog. I figured out how to do that fairly easily, but the code I was looking at has me a bit mystified. The method manage_addIndex is defined. The form that you use through the management interface to add an index has a submit button whose name is manage_addIndex:method. OK, that all looks like reasonable magic (magic because I don't know exactly what happens when a button gets marshalled as a method). Here's the part I don't understand: the form's action is set to the Catalog itself. manage_addIndex expects the index name and type as its first two parameters. Where does the magic come from that turns the form submission into a correct call to manage_addIndex? Probably I'm missing something obvious, but I will appreciate any aid in increasing my Zope Zen level here grin. --RDM ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope ) -- Chris McDonough Digital Creations Publishers of Zope - http://www.zope.org ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] How does the submit magic work in, eg, ZCatalog manage_addIndex?
On Thu, 18 May 2000, Chris McDonough wrote: yourcatalog._catalog.addIndex(id, 'FieldIndex') Sorry, I started that email when I was about to ask the question you answered, then figured it out myself and changed the email body to ask a new question, but forgot to change the email subject frown. "R. David Murray" wrote: I was just looking at the ZCatalog code to figure out how to programatically add an index to a Catalog. I figured out how to do that fairly easily, but the code I was looking at has me a bit mystified. The method manage_addIndex is defined. The form that you use through the management interface to add an index has a submit button whose name is manage_addIndex:method. OK, that all looks like reasonable magic (magic because I don't know exactly what happens when a button gets marshalled as a method). Here's the part I don't understand: the form's action is set to the Catalog itself. manage_addIndex expects the index name and type as its first two parameters. Where does the magic come from that turns the form submission into a correct call to manage_addIndex? Probably I'm missing something obvious, but I will appreciate any aid in increasing my Zope Zen level here grin. --RDM ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope ) -- Chris McDonough Digital Creations Publishers of Zope - http://www.zope.org ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Re: Strange ZClass permissions problem with 2.2a1
Yep, trying to access a newly instantiated empty zclass instance produces the same error. Looks like a bug. Email me if you want an exported version of my zclass to poke and prod at... Tres Seaver wrote: Does the problem repeat in the "vanilla" version if you just create a new instance of your ZClass, instead of importing the old pickle? If so, it is definitely a "bug"; if not, it may be a "migration problem," with a fix like the one Brian posted for recursively "re-ownering" Zope.org. If I take out manage_tabs from the offending ZClass index_html method, I can view index_html (but of course, I can't use the management stuff built in! making it rather useless), so that's where we're getting into trouble for sure. I've tried starting out with a vanilla 2.2a1 Data.fs and importing all the zclasses and the relevent folders - no difference. Anyone else seeing this? Is this worthy of the collector? -- Dr Ross Lazarus Associate Professor and Sub-Dean for Information Technology Faculty of Medicine, Room 126A, A27, University of Sydney, Camperdown, NSW 2006, Australia Tel: (+61 2) 93514429 Mobile: +61414872482 Fax: (+61 2) 93516646 Email: [EMAIL PROTECTED] ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope] subfolder wrong absolute_url
Ulrich Wisser wrote: The path is used by the browser, not Zope. IE and Netscape will store your login/password to send it with every GET request which is in the path, e.g.: authenticate on / - path is / - all request will be with auth info authenticate on /sub - path is / - see above authentivate on /sub/ - path is /sub/ - only request with /sub/ will be with auth info But all this is done by the browser. I believe the folder object should give a trailing "/" as absolute url. In that case, you're right :-) However, any Zope object can potentially have sub-objects or attributes. As far as a browser is concerned, the any zope object can look like a folder at some point. Add acquisition into the mix, and you can make a URL to a valid object have other stuff on the end to an arbitrary length. Therefore, your suggestion above should apply to just about all URLs Zope receives. If Zope receives a request for "/spam/spam/foo" it should always issue a redirect (or whatever code it should be) to "/spam/spam/foo/" -- regardless of whether foo is of Folder type, ObjectManager type or DTML method type, or whatever. Are there any downsides to having this behaviour for all objects/all URLs? Or perhaps there could be some kind of per-path switch inside Zope that turns the redirect behaviour on or off. -- Steve Alexander Software Engineer Cat-Box limited ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope 2.2.0a1 permission problems
I just installed release 2.2.0a1 on a glibc Linux box, but I keep getting a permission problem when accessing a database query. I have encountered the same problem using ZOracleDA under SPARC Solaris. File /data/www/Zope/Zope-2.2.0a1-src/lib/python/DocumentTemplate/DT_In.py, line 602, in renderwb (Object: jis_query) Unauthorized: 0 I've been especially frustrated by this. I just brought up Zope 2.2.0a1 because we have a few projects that need to be developed and I want them all using Zope. I don't want to have a lot of conversion pain going from 2.1.6, so I took a chance on using alpha software in this environment. I know the risks. That doesn't make this any less painful. I often tell our students that one of the best features of Open Source software is that if there's an error, it can be fixed (by the user or by a helper of the user's choosing) without waiting on the company who controls the source. I'm just starting to learn Python, so I didn't feel like I was up to the task of doing anything usful in this case. I was wrong. After beating on this over the last day or so trying to understand what was happening at the Web interface level (thinking that I must have just screwed up a permissions setting somewhere), I finally looked at the code and simply commented out line 602 in /data/www/Zope/Zope-2.2.0a1-src/lib/python/DocumentTemplate/DT_In.py # raise ValidationError, index Ta da! It works...for now. This little patch will get me up and going. I trust that someone will fix whatever problem necessitated this in a future release and I won't need this awful kludge, but it sure is nice to be able to use it now. --kyler ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Broken ZWiki
when I install ZWiki Product, the FrontPage, HelpPage etc are all brokendoes it rely on another class being present? cheers tom [EMAIL PROTECTED] [EMAIL PROTECTED] http://www.dmrl.com http://www.OTHERmedia.com http://i.am/tom.smith phone://0171 9563160 mobile://07720 288285 video-conf://0171 9563071 location://57a Farringdon Road, London, EC1M 3JB ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Cache
Jonothan Farr wrote:
How can I disable the browser cache in my zope documents ?
One thing you can do is set the 'Expires' header like so:
dtml-call "RESPONSE.setHeader('Expires', _.DateTime().rfc822())"
This works using Netscape. But for IE I had to use:
dtml-call "RESPONSE.setHeader('Expires', '-1')"
dtml-call "RESPONSE.setHeader('Cache-Control', 'no-cache')"
dtml-call "RESPONSE.setHeader('Pragma', 'no-cache')"
I think the last Pragma can be left out. But the Cache-Control header
ist neccessary. I got the information out of rfc2616.
--
connection reset by
Peer
___
Dr. Peer Griebel Tel. +49 7581 4831 23
Geschäftsführer Fax. +49 7581 4831 11
Knoll Informationssysteme GmbH http://www.knoll-is.de
Dreiköniggasse 17 mailto:[EMAIL PROTECTED]
88348 Saulgauprivat: mailto:[EMAIL PROTECTED]
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Cache
Does this work in IE5? I'm using similar META tags which work for IE4 and
Netscape but don't work in IE5.
-=Brad=-
-Original Message-
From: Dr. Peer Griebel [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 18, 2000 10:32 AM
To: [EMAIL PROTECTED]
Subject: Re: [Zope] Cache
Jonothan Farr wrote:
How can I disable the browser cache in my zope documents ?
One thing you can do is set the 'Expires' header like so:
dtml-call "RESPONSE.setHeader('Expires', _.DateTime().rfc822())"
This works using Netscape. But for IE I had to use:
dtml-call "RESPONSE.setHeader('Expires', '-1')"
dtml-call "RESPONSE.setHeader('Cache-Control', 'no-cache')"
dtml-call "RESPONSE.setHeader('Pragma', 'no-cache')"
I think the last Pragma can be left out. But the Cache-Control header
ist neccessary. I got the information out of rfc2616.
--
connection reset by
Peer
___
Dr. Peer Griebel Tel. +49 7581 4831 23
Geschäftsführer Fax. +49 7581 4831 11
Knoll Informationssysteme GmbH http://www.knoll-is.de
Dreiköniggasse 17 mailto:[EMAIL PROTECTED]
88348 Saulgauprivat: mailto:[EMAIL PROTECTED]
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] ZWiki RecentChanges problem with 2.1.6
Chris Withers wrote: [snip rubbish ;-)] This actually isn't the case, someone had just helpfully turned off 'Access Contents Information' higher up the tree... Doh! Chris ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] ZSQL-Methods: last inserted id
You can get a ZSQLMethod that's used for inserting to return the last inserted ID by doing the following: INSERT ...whatever... dtml-var sql_delimiter SELECT LAST_INSERT_ID() AS newid You get the results as you would with any ZSQLMethod: dtml-in my_zsql_method Inserted ID: dtml-var newid /dtml-in ___ Ron Bickers Logic Etc, Inc. [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Andy Sent: Wednesday, May 17, 2000 7:45 PM To: [EMAIL PROTECTED] Subject: [Zope] ZSQL-Methods: last inserted id I wonder how I can find out about the last inserted id of a row in my mysql-database, which I inserted through a ZSQL-Method... I tried mysql's built-in function LAST_INSERT_ID(), but that did not solve my problem... ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Newbie: MS Access ODBC connection strings
i had a similar problem recently. my access DB was not showing up in the data sources list until i deleted the ODBC connection from windows control panel and recreated it - i guess i messed up the first time. make sure your DB shows up in the "User Data Sources" list in the ODBC Data Source Administrator in Windows and in the ODBC Data Source list in the "Add Z ODBC Database Connection" screen in ZOpe. my connection string is simply the database name. now that i have a working connection all of my tests fail. does anyone know why? -mike- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 18, 2000 5:19 AM To: [EMAIL PROTECTED] Subject: [Zope] Newbie: MS Access ODBC connection strings Before you all start, I know, MS Access is pants and I should be using a "real" database. And I shall, once the "proof of concept" stage is passed and I can migrate the existing data over to one. But for now I'm stuck with it. Right, that over, here's my plea: I'm trying to create a connection object to a MS Access 97 database. I've installed the ODBC DA product but I cannot get my connection to actually connect. The error I get is, "invalid connection string: project," (project is the DSN name). According to the docs that come with the ODBC-DA, there's usually no need for a connection string and accordingly I have left it blank; I presume that the DA is defaulting to connecting using the DSN name as its string. The database has no security settings that might limit access. What's going wrong? Help! -- Andy Gates, Learning and Research Technology [EMAIL PROTECTED] - ICQ#74362415 ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] listmate + CSV problem
hi, Heiko it works! i had to replace all whitespaces in column names with under_scores. it's the whitespace that created a problem. now i have to enter "NULL" in all the empty cells to make the table line up properly -( but this is not your fault, it's mine. i think many people in my company are going to be happy now! thank you for all the help you have provided. -mike- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Heiko Stoermer Sent: Thursday, May 18, 2000 3:46 AM To: michael angelo ruberto Subject: Re: [Zope] listmate + CSV problem michael angelo ruberto wrote: Error Type: Bad Request Error Value: Invalid or duplicate property id yes, I see. the first line of the csv will be split up into words and for each word a table column is created. these column names are actually properties of some internal object, so they MUST be unique. So if you have the same word appear twice in the first line of the file, you will get this error. the file size or column number should not be a problem. duplicate column names are. hope this helps, Heiko -- [EMAIL PROTECTED] innominate AG networkingpeople fon: +49.30.308806-0 fax: -77 web: http://innominate.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Zope Product tools.
Bryan Patrick Coleman asked: I was wondering if there were any products for the following Genre's configuration managment, Project managment, bug tracking, cvs browsing etc for Code / Bug Tracking check out : http://www.zope.org/Members/klm/TrackerWiki/FrontPage http://www.zope.org/Members/shalabh/iTrack for Project Management : http://bits.netizen.com.au/Xen/ http://sourceforge.net/project/?group_id=2370 Basically anything that would help with Development and testing. For that matter it would be cool to see what kind of application type products are available for Zope use. Not limited to Zope, but Python related, check out: http://www.software-carpentry.com Later, Jerry S. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] how do you pronounce 'ZOPE'?
At DC, we pronounce it J-I-M F-U-L-T-O-N. :-) But some people pronounce it like "soap" with a Z instead of an S at the beginning. Stephen Nosal wrote: Folks - Just a recurring question around the office, is there an official pronunciation for 'ZOPE'? - Steve __ Get your Private, Anti-Spam, Free Email at http://e3mil.com and Step into a Friendly Universe! ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) -- Chris McDonough Digital Creations Publishers of Zope - http://www.zope.org ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] zsql method??/
Oops, I forgot to mention that the CONV function is used in your ZSQL method. Here's the ZSQL Method I use (returns upcoming birthdays falling within this, and the next, month): SELECT FirstName, LastName, MONTH(Birthday) AS Month, DAYOFMONTH(Birthday)AS Day, DATE_FORMAT(Birthday, '%M %D, %Y') AS BDay, CONV(ROUND((TO_DAYS(NOW())-TO_DAYS(Birthday))/365.25), 10, 10) as WillBeAge FROM users WHERE MONTH(Birthday) = MOD(MONTH(NOW()), 12) + 1 OR (MONTH(Birthday) = MONTH(NOW()) AND DAYOFMONTH(Birthday) = DAYOFMONTH(NOW())) ORDER BY Month, Day // -Original Message- // From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of // Jonathan Park // Sent: Thursday, May 18, 2000 1:35 PM // To: [EMAIL PROTECTED] // Subject: [Zope] zsql method??/ // // // Hello everyone! // // I have a dtml method that calls in the sql method like this //dtml-in sql method // the result I get is what I would expect except in the unique_# // field 'L' // is added at the end of the number // ex: // // unique_#blahblah blah // 1L data data data // 2L data data data // // any reason why it is adding the 'L'??? // // thanks // -jon // // Have a great afternoon! // // // ___ // Zope maillist - [EMAIL PROTECTED] // http://lists.zope.org/mailman/listinfo/zope // ** No cross posts or HTML encoding! ** // (Related lists - // http://lists.zope.org/mailman/listinfo/zope-announce // http://lists.zope.org/mailman/listinfo/zope-dev ) // ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Limits on text posting
Hello again, zopistas! Actually, this is not directly related to Zope, but I just wanted to know. I have a simple form with a textarea, exactly, how much text fits in a text area? I mean, is there an upper limit to the number of characters the end user can type in the textarea? -- [ c a r l o s c a r n e r o ] [ r t v c o m e r c i a l ] [ t e x e l @ r t v c . c o m . c u ] ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Local File System
Hi and thanks, I want to view images in a local fs on a web page so i have: dtml-with images dtml-in images start=0 size=50 orphan=0 reverse img src="dtml-var "(THE IMAGE ID'S)""br /dtml-in /dtml-with I've read that I can get the filenames as id's by using getObject, but I can't seem to make it work. Tom Scheidt | www.falsemirror.com | [EMAIL PROTECTED] --- ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope and PHP
On Thu, May 18, 2000 at 12:13:51PM -0400, Chris Herrnberger wrote: Greetings, In discussions with friends the question came up is zope compatible with php, specifically if zope is run through apache. Check out one way to integrate PHP output within Zope at: www.zope.org/Members/Mamey/PHP written by yours truly. The example needs some work to support the POST method and cookies. -- Andres Corrada-Emmanuel Email: [EMAIL PROTECTED] -- ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope and PHP
On Thu, 18 May 2000, [EMAIL PROTECTED] wrote: On Thu, May 18, 2000 at 12:13:51PM -0400, Chris Herrnberger wrote: Greetings, In discussions with friends the question came up is zope compatible with php, specifically if zope is run through apache. Check out one way to integrate PHP output within Zope at: www.zope.org/Members/Mamey/PHP written by yours truly. The example needs some work to support the POST method and cookies. -- Andres Corrada-Emmanuel Email: [EMAIL PROTECTED] -- Thanks for the reference. Chris ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Newbie - problem connecting to MS Access DSN
Andy, I have this working fine. Are you running NT or \'98? If NT is Zope running as a service? If so, did you create your DSN as a System DSN? Richard part of original message Right, that over, here\'s my plea: I\'m trying to create a connection object to a MS Access 97 database. I\'ve installed the ODBC DA product but I cannot get my connection to actually connect. The error I get is, \"invalid connection string: project,\" (project is the DSN name). ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
