[Zope-dev] Multilingual websites
Hi there, I'm working on improving the support for multilingual websites in Zope. Already I've found some tools to be of great help: SiteAccess, Translator, and Transparent Folder (and zzLocale, although I'm mostly interested in ZODB objects). The Transparent Folder enabled me to separate the code, content, and design into separate folders (yeah! it should really be part of the core!), the Translator allows me to externalize strings and localize objects that I want to include (via dtml-lvar). I've run into a couple of problems with the Translator product, though, mainly because I want to localize whole documents, but let them keep the same URL. Let's say I have a "product_info" document. I could put it in a separate ISO language folder, e.g., zh/de/fr/en/no, but then the normal traversal engine can't find it (only dtml-lvar can) unless I explicitly say which folder it is in, which kind-of ruins the point. The ideal case is that: http://website/company/info would find and return zh/company/info de/company/info ... company/info based on the user's language preference. I thought about using SiteAccess to do that, but it's proving hard, and also would only allow me to do a "language split" at the top. A more interesting solution would be to patch the traversal engine (could I do it with SiteAccess?) to look for a particular language version of each object (designated by adding the language's ISO code to the name or some other such convention); in that way I could make company/ a global directory, or I would chose to make it into a localized directory, i.e., all of these would work: company:zh/info company/info:zh company:de/info etc... Could this be done with Zope? Another thought was to make a special Transparent Folder (maybe called Localized Folder) that would resolve accesses to subobjects based on the user's language preference. Different language versions of each object could be put in separate sub-folders, as it is for the Translator product. PS! Any chance of seeing an integration of the core (at least language matching) functionality of Translator and zzLocale? These two products should really become part of the core ASAP, in some form or another. Bye, -- Bjorn ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Login updating database (so ZEO is slow)
Hi, We've been experimenting with ZEO for a few months. The intended use is to have a ZEO client on our LAN, one on the Internet backbone in China, and one in the US, but there are two problems preventing us from using it: 1. updates are very slow, slower than accessing the ZEO client closest to the ZEO server directly 2. logging in updates the database, so they are consequently also very slow (in addition: to use it well we need a distributed director, and atomically updating a set of ZEO installations is not trivial.) Why does logins update the database? Is there any way to turn that off easily? We tested running the ZEO server on our LAN, and the ZEO client on the backbone of the Internet, communicating over a 64kbps DDN line... It took several minutes to log in! :) Most people thought our server had crashed. Would it be possible to support asynchronous updates (optimistic locking) and conflict resolution in the future, allowing for no wait time? (sort-of like Notes and CVS) Bye, -- Bjorn [EMAIL PROTECTED] ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Changing hostname and port without SiteAccess
Hello list, I already put my question on the "[EMAIL PROTECTED]" list, but there was no solution in sight, so I'm trying to get deeper (spell: start using) into python. I cannot use SiteAccess (because I need multiple ZCatalogs), and my Zope server (port 8080) is behind squid (in http-accelerated mode - port 80). What I would need is changing the hostname and port in the html-responses like this: http://localname.com:8080/blah to http://officialserver.com/blah , so the client reconnects to squid, not zope itself. Any hints where to start looking for the right python files or even functions/methods? Thanks in advance for your info, Martin ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] new 2.2.4 security/role bug ?? (ZCatalog related ??)
Hello, I'm experimenting some really weird and annoying things since i upgraded to 2.2.4 with 12-08 and even with 12-15a hotfix (seems to be ok in 2.2.2) For all objects, I can access directly (URL) with no problem (according to the roles and the local roles. This is ok). For some of those objects (seems to be all the one i've added in 2.2.4 in folders with local roles) I can't (exeption raise) access the objects while in the context of the catalog (those objects are Catalog Aware via Yihaw product). I epurate the method until this minimal test method who still raise the exeption dtml-in Catalog dtml-with "Catalog.getobject(data_record_id_)" a href="dtml-absolute_url;"dtml-var title_or_id/abr /dtml-with /dtml-in I have a workaround with a dtml-try but i miss all the objects, while they are fully reachable directly via their URL The problems seems to be on objects with local roles (anonymous has no view, no access content and other roles have this autorisations via local roles). The second weird thing (should help for a diagnostic) is : While i have "manager" role (i can do whatever i want on the manage interface), i tried to give a proxy role to my test method, to see if i could investigate further. And trying to change the proxy role raised an execption, despite the fact i have manager role with full autorisations. This last thing makes me think is an acquisition/role/security bug. Any idea/solution because we offcially open tomorrow morning, and i'm in a deep well embarassed ;-)) === This is the FIRST traceback. Zope Error Zope has encountered an error while publishing this resource. Unauthorized You are not authorized to access title_or_id. Traceback (innermost last): File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/Publish.py, line 187, in publish File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/Publish.py, line 171, in publish File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/OFS/DTMLMethod.py, line 172, in __call__ (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/DocumentTemplate/DT_String.py, line 528, in __call__ (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/DocumentTemplate/DT_In.py, line 611, in renderwb (Object: Catalog(bobobase_modification_time=ZopeTime()-14, bobobase_modification_time_usage='range:min', sort_on='bobobase_modification_time', sort_order='reverse')) File /home/georgieff/Zope-2.2.2- src/lib/python/DocumentTemplate/DT_With.py, line 146, in render (Object: Catalog.getobject(data_record_id_)) File /home/georgieff/Zope-2.2.2- src/lib/python/OFS/DTMLMethod.py, line 194, in validate (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/AccessControl/SecurityManager.py, line 139, in validate File /home/georgieff/Zope-2.2.2- src/lib/python/AccessControl/ZopeSecurityPolicy.py, line 209, in validate Unauthorized: (see above) === This is the SECOND traceback. Zope Error Zope has encountered an error while publishing this resource. Forbidden You are not authorized to change test_latest because you do not have proxy roles. Traceback (innermost last): File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, line 187, in publish File /home/georgieff/Zope-2.2.2-src/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: test_latest) File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, line 171, in publish File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: manage_proxy) File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: manage_proxy) File /home/georgieff/Zope-2.2.2-src/lib/python/OFS/DTMLMethod.py, line 278, in manage_proxy (Object: test_latest) File /home/georgieff/Zope-2.2.2-src/lib/python/OFS/DTMLMethod.py, line 271, in _validateProxy (Object: test_latest) Forbidden: (see above) -- Didier Georgieff DDAF du Bas-Rhin - Cellule SIG 2, rue des Mineurs 67070 Strasbourg Cedex tél :
Re: [Zope-dev] Changing hostname and port without SiteAccess
From: Martin Winkler [EMAIL PROTECTED] I cannot use SiteAccess (because I need multiple ZCatalogs) To the extent that you can't use SiteAccess with ZCatalogs, you will also not be able to use any other solution (until ZCatalogs are fixed, hopefully in 2.3). The problem with ZCatalogs is not SiteAccess-specific, it is with virtual hosting in general. Cheers, Evan @ digicool 4-am ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] ZPatterns, ZClasses, Specialists: Assigning responsibilities
At 04:21 PM 12/18/00 +1100, Itai Tavor wrote: This is how I see it: - Products Specialist productRack customizableProductRack - OrderLineItem Specialist lineItemRack lineItemWithGraphicRack - product.addMeToOrder(): order.addLineItem(product_id=id, add='lineItem') - custimazable_product.addMeToOrder(): order.addLineItem(product_id=id, add='lineItemWithGraphic') This should probably be more like: product.addMeToOrder(): item = OrderLineItems.newLineItemFor(self) item.setQuantity(...) etc. order.addLineItem(item) customizable_product.addMeToOrder(): item = OrderLineItems.newLineItemFor(self) item.setGraphic(...) item.setQuantity(...) etc. order.addLineItem(item) This approach makes things more declarative. The product classes can have properties or interfaces that the OrderLineItems specialist can use to decide what kind of line item would serve them best. You can then change your line item assignment rules without necessarily requiring changes to the product classes. I imagine, then, that the UI for uploading the graphic would be included in product.addMeToOrderForm, using a UI snippet from the OrderLineItemsWithGraphic Specialist. Then I could pass REQUEST on to order.addLineItem and to OrderLineItemsWithGraphic.add, which would then upload the file? I think you're right about this being an OrderLineItem. A couple of fine points, however... First, I don't think there needs to be an "OrderLineItemsWithGraphic" specialist, since there is nothing else that would talk to it. It's fine in this case to have the line item classes (either with graphic or without) handle their own UI snippets. UI delegation is for when an object needs to display UI for some *other* object than itself, since you can always use class extenders and other techniques to reshape the apparent class of an object retrieved from a specialist. The interface which other objects deal with is "OrderLineItem", and they simply expect a portion of the form to be rendered, and it's okay for the class to handle that. Second, you need to define that interface so that the Order can give the line item constraints on how it does that UI, so it can share the screen and REQUEST with other objects/data that the Order needs. One easy way to do this is to use a namespace parameter, that simply gives the line item a name prefix to use on its fields. Alternatively, you can use the "record" approach, like this: INPUT TYPE="TEXT" NAME="lineitem1.desiredSize:record:int" VALUE="4" INPUT TYPE="FILE" NAME="lineitem1.imageFile:record:file" ... The resulting REQUEST object from submitting the form will contain a single object, "lineitem1", with "desiredSize" and "imageFile" attributes, so you'll only have to pass a single parameter back to the line item. I've never tried doing a record with a file in it before, so I don't really know how well that works. Woof... so long. I'd appreciate any comments on this - especially on the question on whether it's better to have a specialized type of OrderLineItem, or to link the standard OrderLineItem to a Product object in case of a standard product, or, in the case of a customizable product, to a new object which stores the graphic and tracks the fabrication of the customized item. Here's the question... how many behaviors are different in the order line item itself? Are you also using fulfillment line items? If the only difference to the order line item is that it references some additional data, then I'd say a single class would be fine. Most of the behavior probably comes in on the fulfillment line item, yes? Again, you can ask your FulfillmentLineItems specialist to create "newLineItemFor(orderLineItem)" and let it decide what kind of implementation to hand back. In this case, it probably will be a different class, while for the order line items, it may or may not buy you anything. Anyway... remember that Specialists are there to hide implementation decisions like what classes are being used. If you look at the ZPatterns Wiki you'll see references to some of the design patterns which Specialists are an instance of, which will give you some hints as to the many kinds of things they can "hide" for you (and which therefore you should avoid revealing in other code). One of those patterns is that as an object "trader" or "broker", Specialists can be used to create new instances of objects that meet a certain interface, but whose implementation has been selected on the basis of declarative criteria by the requesters. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] more on keyword indexes
Hello, Thanks for all the replies. Its seems there are two conflicting answers to my questions. Steve Alexander says that it is possible to query indexes using the syntax dtml-in "Catalog.searchResults( doc_keywords = ['one','two','ect'] . However, Dieter says that it is not yet possible to query for more than one keyword at once. It seems to me that these two sentiments are mutually exclusive. Am I mistaken here? -josh Josh Zeidner writes: OK. Is it possible to query keyword indexes for several keywords at once? Not that I know of. You either have to extend ZCatalog or wait some time. There are different people working on ZCatalog enhancements. Again, I am reporting a bug You already know the Collector? It is Zope's bug tracking system. You find it via zope.org. Its old URL has been URL:http://classic.zope.org:8080/Collector but this might have changed after the recent changes on zope.org. I have had very good response to Collector bug reports for Zope itself. At least in the past, bug reports and even patches for ZCatalog probably have been ignored, however. I hope, this has changed meanwhile. By the way: * What does "unpredictable results" mean? Dieter PS: I have just blocked mail from "hotmail.com" (and "excite.com") because I got an increasing number of bulk email ad's with a faked "from: [EMAIL PROTECTED]" header. This means: I will no longer see direct messages from you, only your Zope mailing list messages which reach me with a delay of up to one day. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope ) _ Get your FREE download of MSN Explorer at http://explorer.msn.com ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] RE: objectIds accessiblilty and a proposal
If you type in http://www.zope.org/Members/objectIds you get a list of all Members. Although it is a useful feature.. ;) .. I can't really see why objectIds should be available for everyone, at any given time. Is this a bug or a feature? I was able to do this as anonymous on another Zope site as well. It basically lets you do a directory listing of any folderish object. Using objectValues, you can learn the type of objects that live there too. This lets you learn about all objects, even if you do not have view rights to the object listed. However, you do need view rights to the folder you are calling objectIds for. This does seem to me like a way for clandestine users to learn more information about your site than they need to know. Perhaps this "feature" needs to be locked down. This is something that has come up before. I propose that the real problem here is that 'objectIds' should not be web-traversable. I have, in fact, proposed this before. It caused a bit of grumbling among people using xml-rpc, who were using objectIds remotely, so we never came to closure on it. This comes up often enough that I'm inclined to do something about it for 2.3. I propose that objectIds (and objectValues) will not be directly accessible via the Web in 2.3. For xml-rpc applications, it should be a simple enough task to create a Python Script (or even a DTML Method) that *is* Web accessible to relay that information if it is needed. Thoughts? Brian Lloyd[EMAIL PROTECTED] Software Engineer 540.371.6909 Digital Creations http://www.digicool.com ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] RE: objectIds accessiblilty and a proposal
Brian Lloyd wrote: This comes up often enough that I'm inclined to do something about it for 2.3. I propose that objectIds (and objectValues) will not be directly accessible via the Web in 2.3. For xml-rpc applications, it should be a simple enough task to create a Python Script (or even a DTML Method) that *is* Web accessible to relay that information if it is needed. Thoughts? I have no objections to that. On a related issue, what about other dtml snippets that people generally don't want as web accessible, such as standard_html_header ? On my pie-in-the-sky zope wishlist: What I'd like is a new tab for zope objects that allows me to say which protocols the object is accessible from, and what to do if not. For example: access route accessible?action called from template yes http on port 8080no return 404 ftp yes Another example: access route accessible?action called from template yes http on port 8080no redirect to URL1 If medusa is ever extended to have http and https on different ports, then you could declare different accessible states and actions for the different http ports. -- Steve Alexander Software Engineer Cat-Box limited http://www.cat-box.net ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] RE: objectIds accessiblilty and a proposal
If it is an issue for XML-RPC users, maybe there should be a "Traversable" permission on Folder objects that could default to not allowing web-traversal, but allowing it to be enabled if desired. Would this affect FTP access to folders? -Paul Brian Lloyd wrote: This is something that has come up before. I propose that the real problem here is that 'objectIds' should not be web-traversable. I have, in fact, proposed this before. It caused a bit of grumbling among people using xml-rpc, who were using objectIds remotely, so we never came to closure on it. This comes up often enough that I'm inclined to do something about it for 2.3. I propose that objectIds (and objectValues) will not be directly accessible via the Web in 2.3. For xml-rpc applications, it should be a simple enough task to create a Python Script (or even a DTML Method) that *is* Web accessible to relay that information if it is needed. Thoughts? Brian Lloyd[EMAIL PROTECTED] Software Engineer 540.371.6909 Digital Creations http://www.digicool.com -- Paul Erickson | [EMAIL PROTECTED] Kaivo, Inc. | www.kaivo.com ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] RE: objectIds accessiblilty and a proposal
Paul Erickson wrote: If it is an issue for XML-RPC users, maybe there should be a "Traversable" permission on Folder objects that could default to not allowing web-traversal, but allowing it to be enabled if desired. Would this affect FTP access to folders? -Paul I agree. That would temper any grumbling and solve the problem (although not the problem of the ever growing security list). -- | Casey Duncan | Kaivo, Inc. | [EMAIL PROTECTED] `-- ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] more on keyword indexes
On 12/17/00 3:48 AM, "Dieter Maurer" [EMAIL PROTECTED] wrote: You either have to extend ZCatalog or wait some time. There are different people working on ZCatalog enhancements. At DC, I'm the one working on almost all of it right now, so if people else where are working on Zcatalog enhancements, they may want to talk to me as I believe Zope3 will be *substantially* different. I have had very good response to Collector bug reports for Zope itself. At least in the past, bug reports and even patches for ZCatalog probably have been ignored, however. I hope, this has changed meanwhile. Until recently, the person who best knew the Catalog was no longer working on it actively. I've now taken this over, and while I don't have the bandwidth to track zope-dev constantly, I do try to find things. I've also fixed untold numbers of bugs that were easy to do (there are some that are structural and will have to wait), and 2.3 will have a *substantially* better Catalog. Chris -- | Christopher Petrilli Digital Creations | [EMAIL PROTECTED]Where Zope comes from ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Changing hostname and port without SiteAccess
Martin Winkler writes: I cannot use SiteAccess (because I need multiple ZCatalogs), and my Zope server (port 8080) is behind squid (in http-accelerated mode - port 80). What I would need is changing the hostname and port in the html-responses like this: http://localname.com:8080/blah to http://officialserver.com/blah , so the client reconnects to squid, not zope itself. We have the same situation. We use SiteAccess *AND* ZCatalog. Please, see my message from a few days ago (to [EMAIL PROTECTED]). Dieter ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Changing hostname and port without SiteAccess
On 12/18/00 2:24 PM, "Dieter Maurer" [EMAIL PROTECTED] wrote: Martin Winkler writes: I cannot use SiteAccess (because I need multiple ZCatalogs), and my Zope server (port 8080) is behind squid (in http-accelerated mode - port 80). What I would need is changing the hostname and port in the html-responses like this: http://localname.com:8080/blah to http://officialserver.com/blah , so the client reconnects to squid, not zope itself. We have the same situation. We use SiteAccess *AND* ZCatalog. Please, see my message from a few days ago (to [EMAIL PROTECTED]). Please read the message I sent out an hour ago about Path updates to the Catalog... This is designed specifically to fix this problem. Chris -- | Christopher Petrilli Digital Creations | [EMAIL PROTECTED]Where Zope comes from ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Re: objectIds accessiblilty and a proposal
[Brian Lloyd] | This comes up often enough that I'm inclined to do | something about it for 2.3. I propose that objectIds | (and objectValues) will not be directly accessible | via the Web in 2.3. For xml-rpc applications, it should | be a simple enough task to create a Python Script (or | even a DTML Method) that *is* Web accessible to relay | that information if it is needed. | | Thoughts? This sounds like a good idea. -Morten ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] IMPORTANT! Zcatalog path handling changes in 2.3
On 12/18/00 4:08 PM, "The Doctor What" [EMAIL PROTECTED] wrote: * Christopher Petrilli ([EMAIL PROTECTED]) [001218 14:13]: PLEASE take a look at this, and provide feedback ASAP. I would happy to, it looks like it does what I need (having siteaccess). However, I don't see a clear cut description what's changing and how. What needs to be done (in easy to understand language) to make sure it all goes smooth, etc. It's actually not as big an update as it looks... I simply grabbed the packages, there's much less changed than it looks like :-) The big differences are all explained in the link above the file. It's a big update, with lots of files. Will this work with 2.2.4? Is it dangerous? If you're asking for guinea pigs (bweep!) then I'm not sure I should be it, as I'm still trying to figure out what's going on in many ways. It should work fine with 2.2.4. Chris -- | Christopher Petrilli Digital Creations | [EMAIL PROTECTED]Where Zope comes from ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] RE: objectIds accessiblilty and a proposal
Dieter Maurer wrote: Steve Alexander writes: On my pie-in-the-sky zope wishlist: What I'd like is a new tab for zope objects that allows me to say which protocols the object is accessible from, and what to do if not. For example: access route accessible?action called from template yes http on port 8080no return 404 ftp yes Another example: access route accessible?action called from template yes http on port 8080no redirect to URL Sounds good to me. With the exception that I do not like the explicit port references. I would like to see there an indirection (e.g. use a name which can be mapped to a port at a central place). I agree, that's a good idea. The accessible state, and the action for a particular access-route could be acquired, like the current security settings. So, I'd have to say in only a single folder's accessing tab that all objects below that folder that are invisible to web traversal should return a 404. Isn't there already a fishbowl proposal for this kind of thing? Did it get anywhere? -- Steve Alexander Software Engineer Cat-Box limited http://www.cat-box.net ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] IMPORTANT! Zcatalog path handling changes in 2.3
Christopher Petrilli wrote:
On 12/18/00 4:24 PM, "Steve Alexander" [EMAIL PROTECTED] wrote:
Doesn't work with 2.3 from CVS, 2000-12-18 21:21 UTC
ACK, I forgot that I also revealed afew bugs in other systems :/ I thought
that I could just package up Zcatalog, but apparantly not Let me work on
coming up with something new.
I can get your new ZCatalog to install and run with Zope 2.3 from CVS by
commenting out the last two lines of
lib/python/Products/ZCatalog/__init__.py:
#context.registerHelp()
#context.registerHelpTitle('Zope Help')
Of course, I miss out on getting help with the new API if I do this :-)
--
Steve Alexander
Software Engineer
Cat-Box limited
http://www.cat-box.net
___
Zope-Dev maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Product Authors: If you use ZCatalog, READ! (that means you, Chris W. :-)
From: The Doctor What [EMAIL PROTECTED] I would happy to, it looks like it does what I need (having siteaccess). However, I don't see a clear cut description what's changing and how. What needs to be done (in easy to understand language) to make sure it all goes smooth, etc. It's one step off the link given before, and really the one page you need to read: http://dev.zope.org/Wikis/DevSite/Projects/ZCatalogVirtualHostFix/UpgradeFAQ It's a big update, with lots of files. Will this work with 2.2.4? Is it dangerous? If you're asking for guinea pigs (bweep!) then I'm not sure I should be it, as I'm still trying to figure out what's going on in many ways. If you run a copy of your site on this code, it will be evident immediately whether you have problems or not. If that's hard to do, you may want to at least set up a mini-site and export some test data to it. Authors of Products that use ZCatalog: PLEASE give feedback and try to document any problems or workarounds for your Product on the AffectedProducts page (linked from UpgradeFAQ in several places). Cheers, Evan @ digicool 4-am ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Fault tolerance and thread-loss
At 12/18/00 09:58 PM, Tres Seaver wrote: I'm not really replying to either question, but guessing at the underlying cause of the problem: this smells *exactly* like the behavior induced by the "multiple PUT/POST" race condition bug, corrected by Evan Simpson's patched ZServer/HTTPServer.py: http://www.zope.org/Members/4am/postfixbug Or, even more, http://www.zope.org/Members/4am/postbugfix -- Dennis Nichols [EMAIL PROTECTED] ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Preliminary test of Membership on CVS
Bill Anderson wrote: On a related note, I am considering changing the python methods to Python Scripts, this way when 2.3 comes out, it drops the number of additional installs required by one, leaving Loginmanager and ZPatterns the only (current) requirements. Python Scripts eem much better to use than Python Methods anyway ;) Any thoughts on that from the community? Bill, The move to Python Scripts sounds like a good one. BTW, Can you fold in my local roles changes, and create an additional Type of User Source for use with SMB? I'll contribute the code that I've got. Michael Bernstein. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope] Problems with LocalFS and Zope 2.2.x
Hi everyone, recently I moved to Zope release 2.2.4 (under WinNT). Everything works great, but there is a issue related to LocalFS. If I try to create a new LocalFS object I get the error message: Error Type: AttributeError Error Value: objectValues Traceback (innermost last): File D:\Zope\Zope224\lib\python\ZPublisher\Publish.py, line 222, in publish_module File D:\Zope\Zope224\lib\python\ZPublisher\Publish.py, line 187, in publish File D:\Zope\Zope224\lib\python\Zope\__init__.py, line 221, in zpublisher_exception_hook File D:\Zope\Zope224\lib\python\ZPublisher\Publish.py, line 171, in publish File D:\Zope\Zope224\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: manage_addLocalFS) File D:\Zope\Zope224\lib\python\ZPublisher\Publish.py, line 112, in call_object (Object: manage_addLocalFS) File D:\Zope\Zope224\lib\python\Products\LocalFS\LocalFS.py, line 1248, in manage_addLocalFS File D:\Zope\Zope224\lib\python\OFS\ObjectManager.py, line 267, in _setObject (Object: Traversable) File D:\Zope\Zope224\lib\python\AccessControl\Owned.py, line 276, in manage_fixupOwnershipAfterAdd (Object: LWE) File D:\Zope\Zope224\lib\python\Products\LocalFS\LocalFS.py, line 869, in objectValues (Object: LWE) AttributeError: (see above) Target is a local harddisk and I connected as "normally " manager. Are there similar experiences or workarounds? Best thanks in advance! Uwe Kluge ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: [Zope-Annce] ANNOUNCE: Zope security alert and hotfix release
On Fri, Dec 15, 2000 at 02:02:08PM -0500, Brian Lloyd wrote: A security issue has recently come to our attention (thanks to Erik Enge for identifying this) that affects Zope versions up to and including Zope 2.2.4. ... The hotfix will work for all versions of Zope 2.2.0 and higher. A future version of Zope will contain the fix for this issue, and you will be able to uninstall the hot fix after upgrading. This seems to imply that 2.1.6 is vulnerable as well, but that this Hotfix won't work, and that no fix exists. Is that correct, or is the fix simply not tested with 2.1.6 ? Gregor ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] PoPy1.4 Installed:
Hi
Here Is some tips to install PoPy DA on a RH6.2
First: You have to use Postgres7.0 with PoPy1.4
- download the Postgres7.0 with the development libraries (the development
RPM from the Postgres download)
- Download the Popy1.4.1 and the ZPopyDA0.7
- untar Popy1.4.1
- $./configure
- change the Makefile ... the include path isn't /usr/include/postgres but
it's /usr/include/pgsql
- the file /usr/include/pgsql/os.h is a broken link .. we have to solve this
prob
download the source distribution of Posrgress7.0 (not the RPM) and
substitute the broken link os.h with the file linux.h ... rename
linux.h-os.h and put it in the correct path (/usr/include/pgsql)
- make will now finish without errors!! and you get the Popymodule.so
- copy the popymodule.so in the [zopedir]/lib/python
- Untar the ZPopyDA and go to the ZPoPyDa directory in the
lib/python/Products dir of Zope
- modify the PoPy_db.py file changing,
__compatibility__ = ('1.4','1.4.1')
- Launch Zope and All WORKS!!
Hope this Help
Paolo Quaglia
Information Technology Coordinator
Sitek S.p.A.
[EMAIL PROTECTED]
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Troubles importing module DemoPortal.zexp
[Francisco M. Marzoa Alonso] | Error Type: ImportError | Error Value: No module named PythonMethod.PythonMethod | | Package files that I'm using are: | | Zope-2.2.2-linux2-x86.tgz | ZopePTK-0.9.2-src.tar.gz | | Can someone help me with this? I guess you need to install the PythonMethod product, downloadable from http://www.zope.org/Members/4am/PythonMethod . Cheers, Morten ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Bizarre Netscape Problem
On my Win98 SE Zope 2.2.2 I have some zope permissions which I can view fine in IE 5 or from a networked box with Netscape 4.7. However, when I attempt to view the permission with Netscape it seems as though Netscape starts to use larger and larger amounts of memory. I have no explanation and checking the xml dump of the permission it seems to have a similar structure. In desperation I changed the netscape to 4.76, but the problem persists. I am stumped! Any one got any ideas? -- Robin Becker ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] PoPy1.4 Installed:
Here Is some tips to install PoPy DA on a RH6.2 First: You have to use Postgres7.0 with PoPy1.4 - download the Postgres7.0 with the development libraries (the development RPM from the Postgres download) - Download the Popy1.4.1 and the ZPopyDA0.7 - untar Popy1.4.1 - $./configure mmm... ./configure --postgreql-includes=/usr/include/pgsql is much better (do a ./configure --help to display all the configuration options...) - change the Makefile ... the include path isn't /usr/include/postgres but it's /usr/include/pgsql not required if you do as above. - the file /usr/include/pgsql/os.h is a broken link .. we have to solve this prob yes, this is a problem. - copy the popymodule.so in the [zopedir]/lib/python no. popy should live in the *python* hierarchy. just do a "make install" and make will take care of installing it in the right directory (usually /usr/lib/python1.5/site-packages or the local alternative.) ciao, federico -- Federico Di Gregorio MIXAD LIVE Chief of Research Technology [EMAIL PROTECTED] Debian GNU/Linux Developer Italian Press Contact[EMAIL PROTECTED] All programmers are optimists. -- Frederick P. Brooks, Jr. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] PopyDA and DBMS Transactions
Hi I heve finally installed the PopyDA0.7 that is a Multithreaded DA (multiple concurrent access on the DBMS) Now I'm doing tests to verify the DBMS transactions (Postgress support DB transations): But something doesn't work as expected: I summarize my tests: I have two DTML Documents: first DTML: now called D1 dtml-var header ...1st sql statement: select * from customers where name='white' ...time.sleep(10) #external function that invokea the sleep function (10 sec) ...2dn sql statement: update customer set descr='Updated 1' where customer='white' dtml-var footer Second DTML: now called D2 dtml-var header ...sql statement: update customer set descr='Updated 2' where customer='white' dtml-var footer with two browser I called: D1 and then D2 My expected Behaviour was: -With the first statement of D1, Postgres would locks the table The update of D2 has to wait to write because the table is locked only when D1 has finished, D2 commit As result the updated field has to result "Update 2" and not 'Update 1" With the option Auto-commit mode ON the Behaviour was: -D2 autocommit without waiting the end of D1! (as espected with autocomm. off) As result the updated field has to result "Update 1" (because D1 ended after D1) With the option Auto-commit mode OFF the Behaviour was: -D2 autocommit without waiting the end of D1!! Why??!?!??!? -When D1 finished an error occurs: Error Type: ProgrammingError Error Value: ERROR: Can't serialize access due to concurrent update As result the updated field has to result "Update 2" FAULT!! HOW CAN I HAVE TO DO in order to build a concurrent transaction Application with Popy and Postgress??? Thank you Very Much for your Help! Paolo Quaglia Information Technology Coordinator Sitek S.p.A. [EMAIL PROTECTED] ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] How to make two racks work under one specialist?
Hi Dirksen, Ok.. you need to set the 'load by accessing attribute' field to 'original_object'. You may need to change your SkinScript to something like: WITH getMale(self.id) COMPUTE original_object=(RESULT is _.None) and NOT_FOUND or RESULT So that when getMale returns _.None, the SkinScript returns NOT_FOUND -steve "Dirksen" == Dirksen [EMAIL PROTECTED] writes: Dirksen Hi Steve, Dirksen Both racks are set to be loaded by accessing 'id', which, Dirksen as you guessed right, don't appear in handling attributes Dirksen list! Dirksen This is the simplified skinscript in maleMemberRack: WITH Dirksen getMale(self.id) COMPUTE original_object=RESULT WITH Dirksen self.original_object COMPUTE name=id, gender=gender, Dirksen email=email Dirksen getMale is a python method: member = getMember(id) if Dirksen id.gender == 'male': return member Dirksen Things just go opposite direction in femaleMemberRack. Dirksen What do you think? Dirksen Dirksen Dirksen __ Do You Dirksen Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions Dirksen of Products. http://shopping.yahoo.com/ Dirksen ___ Zope Dirksen maillist - [EMAIL PROTECTED] Dirksen http://lists.zope.org/mailman/listinfo/zope ** No cross Dirksen posts or HTML encoding! ** (Related lists - Dirksen http://lists.zope.org/mailman/listinfo/zope-announce Dirksen http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] new 2.2.4 security/role bug ?? (ZCatalog related ??)
Hello, I'm experimenting some really weird and annoying things since i upgraded to 2.2.4 with 12-08 and even with 12-15a hotfix (seems to be ok in 2.2.2) For all objects, I can access directly (URL) with no problem (according to the roles and the local roles. This is ok). For some of those objects (seems to be all the one i've added in 2.2.4 in folders with local roles) I can't (exeption raise) access the objects while in the context of the catalog (those objects are Catalog Aware via Yihaw product). I epurate the method until this minimal test method who still raise the exeption dtml-in Catalog dtml-with "Catalog.getobject(data_record_id_)" a href="dtml-absolute_url;"dtml-var title_or_id/abr /dtml-with /dtml-in I have a workaround with a dtml-try but i miss all the objects, while they are fully reachable directly via their URL The problems seems to be on objects with local roles (anonymous has no view, no access content and other roles have this autorisations via local roles). The second weird thing (should help for a diagnostic) is : While i have "manager" role (i can do whatever i want on the manage interface), i tried to give a proxy role to my test method, to see if i could investigate further. And trying to change the proxy role raised an execption, despite the fact i have manager role with full autorisations. This last thing makes me think is an acquisition/role/security bug. Any idea/solution because we offcially open tomorrow morning, and i'm in a deep well embarassed ;-)) === This is the FIRST traceback. Zope Error Zope has encountered an error while publishing this resource. Unauthorized You are not authorized to access title_or_id. Traceback (innermost last): File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/Publish.py, line 187, in publish File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/Publish.py, line 171, in publish File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/OFS/DTMLMethod.py, line 172, in __call__ (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/DocumentTemplate/DT_String.py, line 528, in __call__ (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/DocumentTemplate/DT_In.py, line 611, in renderwb (Object: Catalog(bobobase_modification_time=ZopeTime()-14, bobobase_modification_time_usage='range:min', sort_on='bobobase_modification_time', sort_order='reverse')) File /home/georgieff/Zope-2.2.2- src/lib/python/DocumentTemplate/DT_With.py, line 146, in render (Object: Catalog.getobject(data_record_id_)) File /home/georgieff/Zope-2.2.2- src/lib/python/OFS/DTMLMethod.py, line 194, in validate (Object: test_latest) File /home/georgieff/Zope-2.2.2- src/lib/python/AccessControl/SecurityManager.py, line 139, in validate File /home/georgieff/Zope-2.2.2- src/lib/python/AccessControl/ZopeSecurityPolicy.py, line 209, in validate Unauthorized: (see above) === This is the SECOND traceback. Zope Error Zope has encountered an error while publishing this resource. Forbidden You are not authorized to change test_latest because you do not have proxy roles. Traceback (innermost last): File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, line 187, in publish File /home/georgieff/Zope-2.2.2-src/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: test_latest) File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, line 171, in publish File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: manage_proxy) File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: manage_proxy) File /home/georgieff/Zope-2.2.2-src/lib/python/OFS/DTMLMethod.py, line 278, in manage_proxy (Object: test_latest) File /home/georgieff/Zope-2.2.2-src/lib/python/OFS/DTMLMethod.py, line 271, in _validateProxy (Object: test_latest) Forbidden: (see above) -- Didier Georgieff DDAF du Bas-Rhin - Cellule SIG 2, rue des Mineurs 67070 Strasbourg Cedex tél :
Re: [Zope] PopyDA and DBMS Transactions
Paolo Quaglia wrote: I have two DTML Documents: first DTML: now called D1 dtml-var header ...1st sql statement: select * from customers where name='white' As I understand it, to exclusively lock a table in postgresql, use SELECT FOR UPDATE, eg: ...1st sql statement: select * from customers where name='white' for update of customers Regards, Ivan ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] LoginManager - logging out
authentication and that the browser caches the credential. This means unless you shut down your browser, whatever you do, you are back to square one. Besides shutting down your browser, you trash its credential. Create a simple DTML method that raises the 'Unauthorized' exception. Direct your brower to that method. The browser will, in some form or manner, request that you authenticate again. Now the important part, don't cancel the reauthentication! Type in some garbage user name and password and send it. Your brower will give you another chance to authenticate, but this one you cancel and you're back to being anonymous as far as Zope is concerned. Bill. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Stupid File Upload Question
On Fri, Dec 15, 2000 at 04:59:07PM -0800, Jonothan Farr wrote: What sort of problems were you seeing with LocalFS? Maybe I can fix them. Thanks, --jfarr - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 15, 2000 4:22 PM Subject: [Zope] Stupid File Upload Question This is for Jos: I ran into the same problem today. I had previously used this method, and it works better than LocalFS for my purposes. Anyway, be absolutly sure that your form says: Fiest, LocalFS turns out to have the same problem. MSIE does not interact well with method=get and file input methods. form method=post action=whatever method="multipart/form-data" ... /form Then you should be able to access REQUEST.form['attachment'].filename and REQUEST.form['attachment'].read() (Well, I hope). If the method=post is omitted, Netscape (linux at least) will work. MSIE will not. Man I ain't got enough hair for these kinds of problems! Jim Penny I want/need to collect some metadata along with the file. Say I want a file, a title, some keywords. (And I have some idiots with 80MB files). I would like to enforce the following: No two files from a given user can have the same title. A given file may not be uploaded twice by the same user with different titles. With LocalFS, as it stands, it is hard to determine the file that was uploaded. (It is not returned by manage_upload, I could create an id, but that has its own problems (downloading creates unexpected files on the client PC's)). This can be modified, but... More importantly, it is really hard to see how to handle both of the conditios above cleanly. With LocalFS, I found no easy way at all to combine the error checking implied by the metadata and the error checking desired for the file name. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: ANNOUNCE: Zope security alert and hotfix release
The hotfix will work for all versions of Zope 2.2.0 and higher. A future version of Zope will contain the fix for this issue, and you will be able to uninstall the hot fix after upgrading. This seems to imply that 2.1.6 is vulnerable as well, but that this Hotfix won't work, and that no fix exists. Is that correct, or is the fix simply not tested with 2.1.6 ? Gregor Sorry - 2.1.6 _is_ vulnerable, and the Hotfix will work for 2.1.6. I'll update that README. Brian Lloyd[EMAIL PROTECTED] Software Engineer 540.371.6909 Digital Creations http://www.digicool.com ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Python Method and builtin-functions
Hello, I'd like to use Python - Methods but I'm afraid that some builtin-functions are not implemented like type() or list(). Is this a problem of me or are my nightmares fulfilled. Another question is if the Python-Method-product is the same thing as the one shipping with Zope 2.3? Thanks. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] passwords TTW - security hole?
AFAIK, inputs of type password are sent to the server as plain text. In Login Manager, for example, that would mean that passwords are exposed every time someone logs in. In User Folder, the passwords would be exposed whenever they're changed. If my interpretation is correct, then it seems to me to be a call for out-of-the-box ssl support in zope. Bill. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: ANNOUNCE: Zope security alert and hotfix release
On Mon, Dec 18, 2000 at 10:30:56AM -0500, Brian Lloyd wrote: The hotfix will work for all versions of Zope 2.2.0 and higher. A future version of Zope will contain the fix for this issue, and you will be able to uninstall the hot fix after upgrading. This seems to imply that 2.1.6 is vulnerable as well, but that this Hotfix won't work, and that no fix exists. Is that correct, or is the fix simply not tested with 2.1.6 ? Gregor Sorry - 2.1.6 _is_ vulnerable, and the Hotfix will work for 2.1.6. I'll update that README. Thanks! Gregor ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] AW: [Zope] error by adding Poll
Hi Bill, i changed into itemAdd.dtml from form action="manage_addSamplePollItem" method="POST" to form action="manage_addItem" method="POST" but i get the same error like this: Cannot locate object at: http://192.168.190.238:23456/Test_Folder/manage_addProduct/Poll/manage_addIt em how can i use Hotfix_2000-12-8? i untared it into Products directory and restart zope. how can i have to do it correct? bye Shahram -Ursprüngliche Nachricht- Von: Bill Welch [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 15. Dezember 2000 16:36 An: [EMAIL PROTECTED] Betreff: Re: [Zope] error by adding Poll Manage_addSamplePollItem is a 'legacy' mapped to addItem (see Poll/__init__.py) and Hotfix_2000-12-8 shuts down the legacy mechanism. I went into itemAdd.dtml changed it to use addItem directly. Bill. On Fri, 15 Dec 2000, Kaeidinejad, Shahram wrote: Hi i install Poll-0.7.1 and try to add it. but i get an erro like this: Cannot locate object at: http://192.168.190.238:23456/Test_Folder/manage_addProduct/Poll/manage_addSa mplePollItem Traceback (innermost last): File /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/Publish.py, line 187, in publish File /dgn-devel01/opt/Zope-2.2.4/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook File /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/Publish.py, line 162, in publish File /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/BaseRequest.py, line 366, in traverse File /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/HTTPResponse.py, line 539, in debugError NotFound: (see above) what do i false? bye shahram ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] LoginManager - logging out
Where can I get more information on the following methods ( i.e which zope documentation) 1) authenticate() as in dtml-call "AUTHENTICATED_USER.authenticate()" 2) logout() Mohan ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] SiteAccess and Roles
* Michael Bernstein ([EMAIL PROTECTED]) [001215 10:05]: The Doctor What wrote: Ok, then problem may be in your SiteRoot. What are the settings there? Really? I wouldnt't have suspected the SiteRoot. lesse Interesting. It now works, if I fill in the Base. Before, I had *nothing* in the SiteRoot access. Simply putting a Base in and bing-bang-boom, it works! Thanks for the help. Though the impression I got from the documentation is that this should have worked with the defaults Perhaps I don't understand exactly what Base and Path in a SiteRoot actually do Ciao! -- A fail-safe circuit will destroy others. -- Klipstein The Doctor What: Not that 'who' guy http://docwhat.gerf.org/ [EMAIL PROTECTED] KF6VNC ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] LoginManager - logging out
this is my logout DTML method dtml-raise type="Unauthorized" Logout!! /dtml-raise On Mon, 18 Dec 2000, Mohan Baro wrote: Can you please give an example of this code or method? Mohan. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Python Method and builtin-functions
From: Sven Hohage [EMAIL PROTECTED] I'd like to use Python - Methods but I'm afraid that some builtin-functions are not implemented like type() or list(). This is true. If it is really a problem for you, you may wish to wait for Python Scripts. Another question is if the Python-Method-product is the same thing as the one shipping with Zope 2.3? Zope 2.3 has Python Scripts, which are much more developed and capable than Python Methods. Cheers, Evan @ digicool 4-am ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] passwords TTW - security hole?
On Mon, Dec 18, 2000 at 04:02:45PM +, Bill Welch wrote: AFAIK, inputs of type password are sent to the server as plain text. In Login Manager, for example, that would mean that passwords are exposed every time someone logs in. In User Folder, the passwords would be exposed whenever they're changed. You are right, of course. But also note that authentication will send the password in the almost-clear. It is only Base64 encoded. Most Unixes come with a base64 decoder installed by default; Python has a handy base64 module too. Hell, I can decipher base64 encoded text by hand if I have to. This is a common problem with any website. If my interpretation is correct, then it seems to me to be a call for out-of-the-box ssl support in zope. There is an SSL product available for Zope, search Zope.org. Adding SSL to the standard Zope disto has been considered, but kept off for several reasons, all of which I didn't personally partake in. You could always start a Fishbowl proposal of course, and see if yo ucan get it past Brian Lloyd, the Zope product manager. :) -- Martijn Pieters | Software Engineer mailto:[EMAIL PROTECTED] | Digital Creations http://www.digicool.com/ | Creators of Zope http://www.zope.org/ - ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] new 2.2.4 security/role bug ?? (ZCatalog related ??)
Brian, Le 18 Dec 2000, à 11:54, Brian Lloyd a écrit : Note that 'Manager' does not automatically give you "full authorization". It is only a convention that Manager often has all permissions. This is important, because in Zope 2.2, you can't give a proxy role unless you have *that role* yourself. OK. So if i understand well, i need to create a user with manager AND ALL the roles so i'll be able to set any proxy role with that user. Thanks for the explanation. So i guess my other weird problem with not accessing objects via the catalog and accessing them directly has something to do with some new security feature in 2.2 i didn't understood ? But i can't figure wich one, even in re-reading carefully the zope book. Anyway, thanks for your clear explanation. Regards. -- Didier Georgieff DDAF du Bas-Rhin - Cellule SIG 2, rue des Mineurs 67070 Strasbourg Cedex tél : 03.88.25.20.33 - fax : 03.88.25.20.01 email : [EMAIL PROTECTED] SIT du Bas-Rhin : http://www.bas-rhin.sit.gouv.fr GéoWeb http://sertit10.u-strasbg.fr ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] new 2.2.4 security/role bug ?? (ZCatalog related ??)
The second weird thing (should help for a diagnostic) is : While i have "manager" role (i can do whatever i want on the manage interface), i tried to give a proxy role to my test method, to see if i could investigate further. And trying to change the proxy role raised an execption, despite the fact i have manager role with full autorisations. Didier - Note that 'Manager' does not automatically give you "full authorization". It is only a convention that Manager often has all permissions. This is important, because in Zope 2.2, you can't give a proxy role unless you have *that role* yourself. For example, you can't give the proxy role "Editor" to a DTMLMethod unless you have it yourself (this is true even if you have the "Manager" role). The quick fix here is that you need to give yourself the roles you want to set as proxy roles, and then you will be allowed to set them. Brian Lloyd[EMAIL PROTECTED] Software Engineer 540.371.6909 Digital Creations http://www.digicool.com ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] AW: [Zope] error by adding Poll
Please note that the method is addItem, not manage_addItem. The current convention is to untar in the zope installation directory. For example, /usr/bin/zope. The files in the tar have a relative path - lib/python/Products. Other than that, yes - untar and restart. Bill. On Mon, 18 Dec 2000, Kaeidinejad, Shahram wrote: Hi Bill, i changed into itemAdd.dtml from form action="manage_addSamplePollItem" method="POST" to form action="manage_addItem" method="POST" but i get the same error like this: Cannot locate object at: http://192.168.190.238:23456/Test_Folder/manage_addProduct/Poll/manage_addIt em how can i use Hotfix_2000-12-8? i untared it into Products directory and restart zope. how can i have to do it correct? ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] ANNOUNCE: Zope security alert and hotfix release
Hi all - Tis the season for hot - fix - es, fa la la la la, waa waa waa waa... Peter Kelly has brought another potential security issue to our attention that is important enough to make a Hotfix available for those who allow untrusted users to edit DTML on their sites. The issue involves incorrect protection of a data updating method on Image and File objects. Because the method was not correctly protected, it was possible for users with DTML editing priveleges to update the raw data of a File or Image object via DTML though they did not have editing priveleges on the objects themselves. We recommend that any Zope site running versions of Zope up to and including 2.2.4 have this hotfix product installed to mitigate the issue if the site is accessible by untrusted users who have DTML editing privileges. http://www.zope.org/Products/Zope/Hotfix_2000-12-18/README.txt http://www.zope.org/Products/Zope/Hotfix_2000-12-18/Hotfix_2000-12-18.tgz The hotfix will work for all versions of Zope 2.1.x and higher. A Zope 2.2.5 release later this week will contain the fix for this issue (as well as all hot fixes to date) and you will be able to uninstall the hot fix after upgrading. Brian Lloyd[EMAIL PROTECTED] Software Engineer 540.371.6909 Digital Creations http://www.digicool.com ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] user property sheets
Hey everyone, I'd like to make a product so that Zope users' contact info would be available on a "MemberBio" page whenever you click on a hyperlink of their name. The MemberBio page would also contain a form that could be used to send them email. I know there's been some discussion of property sheets for Zope users, but I don't know if this would be the correct approach. Should I create something totally separate, use property sheets, or some combination. The advantage of a separate product is that the person wouldn't have to exist as an official Zope user to have a "MemberBio" page. Any advice? -Tim -- Tim Wilson | Visit Sibley online: | Check out: Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/ W. St. Paul, MN | | http://slashdot.org/ [EMAIL PROTECTED] | dtml-var pithy_quote | http://linux.com/ ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Newbie question: adding a tinyTables object
I'm running Zope on a Win98 machine; downloaded, unstuffed, and installed tinyTablesPlus folder in the lib\python\Products directory. TinyTablesPlus shows up in the product list of the Control_Panel/Products folder of my Zope installation. But it does not show up in the Available Objects pull-down menu in my Zope content folders. I can't figure out how to Add a TinyTables object. Can anyone help? Richard ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] user property sheets
Hi Timothy ! Timothy Wilson wrote: Hey everyone, I'd like to make a product so that Zope users' contact info would be available on a "MemberBio" page whenever you click on a hyperlink of their name. The MemberBio page would also contain a form that could be used to send them email. Look at the zdp.zope.org site. That's exactly what I did for the ZDP-Tools. I know there's been some discussion of property sheets for Zope users, but I don't know if this would be the correct approach. Should I create something totally separate, use property sheets, or some combination. I am using a ZClass with property sheets. The advantage of a separate product is that the person wouldn't have to exist as an official Zope user to have a "MemberBio" page. Any advice? Exactly. Best regards, Maik -Tim -- Tim Wilson | Visit Sibley online: | Check out: Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/ W. St. Paul, MN | | http://slashdot.org/ [EMAIL PROTECTED] | dtml-var pithy_quote | http://linux.com/ ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] sql query results - DTML method problem
"Manuel Amador (Rudd-O) writes: #8 dtml-in expr=\"findClassTitle(code=52.139)\" RING: dont do that, dtml wont work in python namespace instead, remember that in python namespace all vars present in dtml namespace are inherited. I do not see a reason, why not to use this (except, that " should not be escaped, of cause). do this: dtml-in expr=\"findClassTitle(code=_.(\'class_code\'))\" the __.() construct is required since underscore arent allowed in python variable names. if the var was called classcode, you could do "_" are allowed in Python names. They are treated in the same way as a letter. DTML restricts the use of "_": A name must not *START* with an "_" (unless it is the special name "_"). Inside name, you can use "_" freely. dtml-in expr=\"findClassTitle(code=classcode)\" dats it. That said, you can also use: dtml-in expr="findClassTitle(code=class_code)" dtml-in expr=\"findClassTitle(code=dtml-var class_code)\" *** syntax error I agree with Manuel: you cannot nest DTML. And it is this nesting, that triggered his "RING: do not do that!" Use: dtml-in expr="findClassTitle(code=class_code)" I.e. you can simply use the name of the variable. Manuel is right, too, that DTML allows much more characters in names than Python does. If you have a name with a character forbidden in Python names, such as e.g. a "-", then you can use "_[name]" or "_.getitem(name)" (as Manuel said). It is only, that "_" (unlike "-") is allowed in Python names. Dieter ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] how can you tell who created an object in Zope?
Chalu Kim writes: What I would like is to be able to tell who created an object? Is there an easy way to do this? Have a look at "AccessControl.Owned.getOwner". It will give you the object's owner. For most objects, this is initally the creator of the object. This can be changed later with a "takeOwnership". But maybe, that is not a problem for you. Dieter ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: [Zope-dev] IMPORTANT! Zcatalog path handling changes in 2.3
On 12/18/00 4:08 PM, "The Doctor What" [EMAIL PROTECTED] wrote: * Christopher Petrilli ([EMAIL PROTECTED]) [001218 14:13]: PLEASE take a look at this, and provide feedback ASAP. I would happy to, it looks like it does what I need (having siteaccess). However, I don't see a clear cut description what's changing and how. What needs to be done (in easy to understand language) to make sure it all goes smooth, etc. It's actually not as big an update as it looks... I simply grabbed the packages, there's much less changed than it looks like :-) The big differences are all explained in the link above the file. It's a big update, with lots of files. Will this work with 2.2.4? Is it dangerous? If you're asking for guinea pigs (bweep!) then I'm not sure I should be it, as I'm still trying to figure out what's going on in many ways. It should work fine with 2.2.4. Chris -- | Christopher Petrilli Digital Creations | [EMAIL PROTECTED]Where Zope comes from ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: [Zope-dev] IMPORTANT! Zcatalog path handling changes in 2.3
* Christopher Petrilli ([EMAIL PROTECTED]) [001218 14:13]: PLEASE take a look at this, and provide feedback ASAP. I would happy to, it looks like it does what I need (having siteaccess). However, I don't see a clear cut description what's changing and how. What needs to be done (in easy to understand language) to make sure it all goes smooth, etc. It's a big update, with lots of files. Will this work with 2.2.4? Is it dangerous? If you're asking for guinea pigs (bweep!) then I'm not sure I should be it, as I'm still trying to figure out what's going on in many ways. Ciao! -- There are no bad ideas, just bad jokes. The Doctor What: Guru to the Godshttp://docwhat.gerf.org/ [EMAIL PROTECTED] KF6VNC ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] adding Mail Host also legacy, broken by Hotfix_2000-12-08
On Mon, 18 Dec 2000, Bill Welch wrote: Just for the record. As I grepped through sources, I see that SiteAccess (2.0.0b4) also uses 2-argument legacy mechanism :( Anyway: why it still works ? I have Hotfix_2000-12-08 installed and I still can add new SiteRoots. [EMAIL PROTECTED] /--\ | `long long long' is too long for GCC | \--/ ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Newbie question: adding a tinyTables object
Go to the Control Panel and click on Products. The TinyTable product is probably going to have a little "broken box"-icon. Click on it and wish that it will tell you the error so that you can fix it. Good luck, Peter I'm running Zope on a Win98 machine; downloaded, unstuffed, and installed tinyTablesPlus folder in the lib\python\Products directory. TinyTablesPlus shows up in the product list of the Control_Panel/Products folder of my Zope installation. But it does not show up in the Available Objects pull-down menu in my Zope content folders. I can't figure out how to Add a TinyTables object. Can anyone help? Richard ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] adding Mail Host also legacy, broken by Hotfix_2000-12-08
In SiteAccess, the legacy name and the method name are the same, so references to the legacy name still work. Bill. On Mon, 18 Dec 2000, Aleksander Salwa wrote: On Mon, 18 Dec 2000, Bill Welch wrote: Just for the record. As I grepped through sources, I see that SiteAccess (2.0.0b4) also uses 2-argument legacy mechanism :( Anyway: why it still works ? I have Hotfix_2000-12-08 installed and I still can add new SiteRoots. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] passwords TTW - security hole?
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bill Welch Sent: Monday, December 18, 2000 11:03 AM To: [EMAIL PROTECTED] Subject: [Zope] passwords TTW - security hole? AFAIK, inputs of type password are sent to the server as plain text. In Login Manager, for example, that would mean that passwords are exposed every time someone logs in. In User Folder, the passwords would be exposed whenever they're changed. It's even worse than every time someone logs in. With HTTP Basic Authentication, the username and password are sent with every Web request. This means that after authentication, for each and every page you visit and every image and file you request, you're username and password is sent. If my interpretation is correct, then it seems to me to be a call for out-of-the-box ssl support in zope. That would be nice, or at least some authentication method that is more secure. However, I'm not sure what, if any, secure-ish authentication method popular browsers support. It's not hard to use Zope through Apache with SSL support for those that are running Apache, but I know not everyone is doing that. ___ Ron Bickers Logic Etc, Inc. [EMAIL PROTECTED] ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] apache/mod_rewrite and user-logging (semi-OT) - workaround
Whoa,
seems like my problem was not very interesting...
Anyway, I found a solution and hereby make it public.
To get apache to log usernames, one has to invoke
the apache's authentification machinery. I found
out that one can plug perl-modules into apache for
doing auth and that there's even a module which
does exactly what one needs here, Apache::AuthAny,
which always succeeds.
package Apache::AuthAny;
# file: Apache/AuthAny.pm
use strict;
use Apache::Constants qw(:common);
sub handler {
my $r = shift;
my($res, $sent_pw) = $r-get_basic_auth_pw;
return $res if $res != OK;
my $user = $r-connection-user;
unless($user and $sent_pw) {
$r-note_basic_auth_failure;
$r-log_reason("Both a username and password must be provided", $r-filename);
return AUTH_REQUIRED;
}
return OK;
}
1;
__END__
The corresponding entry in http.conf is
Directory Proxy:*
PerlAuthenHandler Apache::AuthAny
AuthType Basic
AuthName "Auth_Realm"
require valid-user
/Directory
One just has to make sure that the realm is the same as
in zope and everything goes fine.
So on to the next, has anybody an idea what would be a good/easy way
to link zope authentication to apache's?
It might be interesting to use mod_python i.e. for extending
zope's authentication to files/directories served by apache
(one could have done the same as above with mod_python, it's just
that I didn't want to install that for a five-liner).
cheers,
oliver
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Product Authors: If you use ZCatalog, READ! (that means you, Chris W. :-)
From: The Doctor What [EMAIL PROTECTED] I would happy to, it looks like it does what I need (having siteaccess). However, I don't see a clear cut description what's changing and how. What needs to be done (in easy to understand language) to make sure it all goes smooth, etc. It's one step off the link given before, and really the one page you need to read: http://dev.zope.org/Wikis/DevSite/Projects/ZCatalogVirtualHostFix/UpgradeFAQ It's a big update, with lots of files. Will this work with 2.2.4? Is it dangerous? If you're asking for guinea pigs (bweep!) then I'm not sure I should be it, as I'm still trying to figure out what's going on in many ways. If you run a copy of your site on this code, it will be evident immediately whether you have problems or not. If that's hard to do, you may want to at least set up a mini-site and export some test data to it. Authors of Products that use ZCatalog: PLEASE give feedback and try to document any problems or workarounds for your Product on the AffectedProducts page (linked from UpgradeFAQ in several places). Cheers, Evan @ digicool 4-am ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] ZopeLDAP 1.1.0 release
"ZopeLDAP 1.1.0", http://www.zope.org/Members/jshell/ZopeLDAP/ is released, bringing in a bevy of changes, including: o New ability to run in a non-transactional mode (this is critical to avoid a known bug when updating more than one entry object per transaction) o Much improved Entry object API that is Python Scripting\DTML Scripting friendly o Some new documentation (not yet in help system format though) about programming Entry objects. The *manage_* style of programming Entry objects has not changed, but the core API has. Anything using methods like '_set()', '_addSubentry()' will be affected. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] To retrieve properties from a dtml document
After some newbie researching I found that whenever I want to retrieve a propertie from a dtml document I must use this: dtml-var "thedocument.thepropertie" If thedocument is index_html or whatever_html it works fine, but how could I retrieve a propertie from a document named whatever.html? We need to use the .html extension for every document because we want to mirror the site using WGET, leaving the automation just on the production stages, in order to upload static pages to our remote server. Any comment? Ausum ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: [Zope-dev] Fault tolerance and thread-loss
Start Zope with the z2.py command line option "-M var/detailed.log" e.g. ./start -M var/detailed.log Detailed.log will contain a transcript of all requests processed by the server and their responses. If you see a method call without "end of request", that's probably the point that the thread is leaking. - Original Message - From: "Jay, Dylan" [EMAIL PROTECTED] To: "'Chris McDonough'" [EMAIL PROTECTED] Sent: Monday, December 18, 2000 7:26 PM Subject: RE: [Zope-dev] Fault tolerance and thread-loss How can I do that when I can't get into the interface because there are no threads left? How do you suggest I debug it? -Original Message- From: Chris McDonough [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 19 December 2000 11:45 AM To: Jay, Dylan; [EMAIL PROTECTED] Subject: Re: [Zope-dev] Fault tolerance and thread-loss No. You shouldn't be leaking threads. Can you trace the thread leakage down to a single Product? - Original Message - From: "Jay, Dylan" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 18, 2000 7:00 PM Subject: [Zope-dev] Fault tolerance and thread-loss I'm finding that my installation is blocking all requests after awhile. By best guess would be that threads are being used and somehow becoming permanently blocked. When all 4 are gone then the server is useless and has to be restarted. Seems to me this is a real problem for fault tolerance. Perhaps a monitor should be run on a separate thread that starts aborting transactions when they have been running too long and there are few remaining threads. Does this exist already? Dylan Jay mailto:[EMAIL PROTECTED] Avaya Communication Tel: +61 2 9886-8961 Level 5, 15 Talavera Road FAX: +61 2 9352 9224 Nth Ryde NSW 2113 Mobile:0409 606 171 AUSTRALIA ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Problem on running the ZOPE with ZmySQLDA
The following is the illegal operation msg details:- PYTHON executed an invalid instruction in module unknown at :01560f54. Registers: EAX=00b3ceb1 CS=016f EIP=01560f54 EFLGS=00010286 EBX=0001 SS=0177 ESP=01dbf5dc EBP=01560f50 ECX=1e10f91f DS=0177 ESI= FS=57df EDX= ES=0177 EDI=011c2a50 GS= Bytes at CS:EIP: f0 a2 1c 01 50 14 35 01 44 20 20 20 02 00 00 00 Stack dump: 00763130 1e16f958 00763130 00763130 1e10f831 01713570 00763130 01713570 00b4497c 1e10e74c 01713570 00763130 00b0d970 and this is my ZSQL method:- 1.For search function:- select *from customerwheredtml-sqltest custid type=stringORdtml-sqltest custname type=string 2.For create table customer:- CREATE TABLE customer(custid VARCHAR(10)NOT NULL,custname VARCHAR(15),custregno VARCHAR(10),custactdate DATE,custadd1 VARCHAR(30),custadd2 VARCHAR(30),custcity VARCHAR(20),custstate VARCHAR(15),custcountry VARCHAR(30),custpostcode INTEGER,custtel INTEGER,custfax INTEGER,custemail VARCHAR(30),custurl VARCHAR(30),custremarks VARCHAR(30),shippingadd1 VARCHAR(30),shippingadd2 VARCHAR(30),shippingcity VARCHAR(20),shippingstate VARCHAR(15),shippingcountry VARCHAR(30),shippingpostcode INTEGER,shippingtel INTEGER,shippingfax INTEGER,shippingemail VARCHAR(30),custstatus VARCHAR(10),custcontname VARCHAR(15),custcontdesg VARCHAR(20),custconttel INTEGER,custcontext INTEGER,custconteml VARCHAR(30),custcontmob INTEGER,custcontfax INTEGER,custcredlimit FLOAT,custcredterm INTEGER,custinterest FLOAT,custopbal FLOAT,custbaldue FLOAT,custsales VARCHAR(15),custpricelev INTEGER, PRIMARY KEY(custid)) 3.For view all records:- select *from customer order by custname So far, i tried to install python1.6 and 1.5.2 but there no changes at all. and i also reinstall my ZOPE because you said my ZOPE is died. Please tell me what should i do?Because i have spend a long time in this problem.
Re: [Zope] To retrieve properties from a dtml document
Try dtml-with thedocument.html dtml-var theproperty /dtml-with -- Andy McKay, Developer. ActiveState. - Original Message - From: "Ausum" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 18, 2000 3:39 PM Subject: [Zope] To retrieve properties from a dtml document After some newbie researching I found that whenever I want to retrieve a propertie from a dtml document I must use this: dtml-var "thedocument.thepropertie" If thedocument is index_html or whatever_html it works fine, but how could I retrieve a propertie from a document named whatever.html? We need to use the .html extension for every document because we want to mirror the site using WGET, leaving the automation just on the production stages, in order to upload static pages to our remote server. Any comment? Ausum ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] To retrieve properties from a dtml document
Hello Andy, thanks for the advice. It didn't work. Maybe I'm wrong at any point, so please tell me whether it worked for you. I'm aware that this problem has been discussed here before, that it happens because of Python's object naming, and also that there's a workaround at least (and just)for expressions, using _['whatever.html'] Due to the kind of workflow we have, we need all of the documents to be editable with Dreamweaver at any moment, directly, after the daily WGET process. Batch-replacing every "_html" with ".html" in file names and content seems to be very complicated within this scenario. Thanks again, Ausum Andy McKay wrote: Try dtml-with thedocument.html dtml-var theproperty /dtml-with -- Andy McKay, Developer. ActiveState. - Original Message - From: "Ausum" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 18, 2000 3:39 PM Subject: [Zope] To retrieve properties from a dtml document After some newbie researching I found that whenever I want to retrieve a propertie from a dtml document I must use this: dtml-var "thedocument.thepropertie" If thedocument is index_html or whatever_html it works fine, but how could I retrieve a propertie from a document named whatever.html? We need to use the .html extension for every document because we want to mirror the site using WGET, leaving the automation just on the production stages, in order to upload static pages to our remote server. Any comment? Ausum ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Newbie question: adding a tinyTables object
No, that's the problem. The icon isn't a broken box, but a regular product icon. Clicking on the link shows that there's one item in TinyTablesPlus, a Help document; when I open that, it tells me that there are no items in TinyTablesPlus. So Zope seems to be seeing the product, but not adding a TinyTable to the list of Available Objects. Is there some setting that I need to change? Sorry to be so dense. It's tantalizing to have all this power so close at hand, and not be able to access it. Richard At 10:25 PM + 12/18/00, Peter Bengtsson wrote: Go to the Control Panel and click on Products. The TinyTable product is probably going to have a little "broken box"-icon. Click on it and wish that it will tell you the error so that you can fix it. Good luck, Peter I'm running Zope on a Win98 machine; downloaded, unstuffed, and installed tinyTablesPlus folder in the lib\python\Products directory. TinyTablesPlus shows up in the product list of the Control_Panel/Products folder of my Zope installation. But it does not show up in the Available Objects pull-down menu in my Zope content folders. I can't figure out how to Add a TinyTables object. Can anyone help? Richard ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] SiteAccess and Roles
The Doctor What wrote: * Michael Bernstein ([EMAIL PROTECTED]) [001215 10:05]: The Doctor What wrote: Ok, then problem may be in your SiteRoot. What are the settings there? Really? I wouldnt't have suspected the SiteRoot. lesse Interesting. It now works, if I fill in the Base. Before, I had *nothing* in the SiteRoot access. Simply putting a Base in and bing-bang-boom, it works! Thanks for the help. Though the impression I got from the documentation is that this should have worked with the defaults Perhaps I don't understand exactly what Base and Path in a SiteRoot actually do Base replaces the portion of your URL comprised of the protocol and fully qualified domain name: 'http://www.servername.com' becomes 'http://www.yourhostedsite.com'. Path replaces the rest of the URL up to and including the folder containing the SiteRoot: '/hosted_sites/site1/' typically becomes '/' So the object that would have been published as 'http://www.servername.com/hosted_sites/site1/', now becomes 'http://www.yourhostedsite.com/'. Both of these settings affect such environment variables as BASEx and URLx which construct URL fragments for use in DTML. The Access Rule only redirects requests from one object to another by manipulating the stack, it doesn't affect the REQUEST namespace. You would generally be better off leaving the SiteRoot out, rather than putting one in and leaving it's properties blank. Does this help? Michael Bernstein. P.S. If you want to see exactly what the SiteRoot is doing, add a DEBUG method to your folder. the DEBUG method should contain dtml-var REQUEST. View the method both with and without the SiteRoot. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Help save my sanity (DTML-in string comparison)
Darin Lee wrote: Zopistas, I am trying to build a simple, 2 tier, tree-style navigation structure for my site. I have puzzled over the following code for hours, and it's just not working right. I have two loops, one that goes through the Parents, and when the parent matches the current folder, I go through the children (There are 2 scripts, one that resides one level up and presents a simple list of objects to click on) The following code lives in the child folders, and displays the parents and all of the HTML documents in the current folder. The output I am looking for resembles below. [snip] ¯-- BTW, I have tried the NFGNav product, but It doesn't work in my application (I suspect) because I am using transparent folders to organize things. I also want my NAV to start farther down the heirarchy (level 2), not from the root. Try ZNavigator, instead. HTH, Michael Berrnstein. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Network hangs
Can anyone give me some clues as to where to look to diagnose network hangs? Case: Installed Zope today (2.2.0 - sorry, I'm conservative on version revs and typically hang back a couple) and ever since starting to move the site to Zope networking seems to hang... Apache sit's on port 80 w/all static pages Zope is now on port 8080 until the move is completed (then it becomes primary on 80). It's seems to me, to be related to ie5x but I'm not sure... I'll connect from a desktop machine to the zope.machine:8080 and then change to zope.machine:8080/manage, login and almost everytime within a minute or two it'll hang! Just not sure where to start debugging... Ideas? Rick ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
