[Zope-dev] Re: [Zope3-dev] Pluggins vs Application Definition

2006-02-14 Thread Rocky Burt
Stephan Richter wrote:
 On Saturday 11 February 2006 16:50, Jim Fulton wrote:
 
- Application developers need to build an application.  They will
   generally want fairly tight control over what goes into the
   application.  For them, it's valuable to say in an explicit
   way what they want.

- If the application is extensible, then application users
   will want to be able to extend the application by adding
   pluggins.  If application users are not technically
   sophisticated, or, more importantly, not technically interested,
   they peobably would prefer to just drop something into a special
   directory and be done with it.

In summary, I think we need *both* approaches, as they serve different
needs.
 
 
 This is interesting. I agree with Philipp though that a simple install tool 
 would be better than one magic location. I think the ZCML slugs are very cool 
 and if we have a tool (as make does now) that does this one step, then we 
 effectively have drop-in packages. BTW, I think that a tool is also better, 
 because it would allow us to keep track of the installed packages and do 
 dependency checking, package-db maintenance, etc. Just randomly thinking...

I also think an install script is a good way of facading the actual
process.  In fact for my pythonproducts product (allows one to use
python packages as zope2 products without the Products directory) I was
considering providing a py script to do this for zope2 products.  Zope 2
developers see zcml slugs and say, what, things have gotten harder
going to zope3?.

- Rocky


-- 
Rocky Burt
ServerZen Software -- http://www.serverzen.com
ServerZen Hosting -- http://www.serverzenhosting.net
News About The Server -- http://www.serverzen.net

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Re: [Zope3-dev] Pluggins vs Application Definition

2006-02-14 Thread Benji York

Rocky Burt wrote:

Zope 2 developers see zcml slugs and say, what, things have gotten
harder going to zope3?.


This isn't a contradiction of what Rocky Burt said, but I feel the need 
to assert that harder doesn't necessarily mean worse.  It's also not 
necessarily better either.


Now back to your regularly scheduled, non-truistic messages.
--
Benji York
Senior Software Engineer
Zope Corporation
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope )


[Zope] Can java applet interact with Zope ZODB database?

2006-02-14 Thread Allen Huang
Can java applet interact with Zope ZODB database? does it need any kind of connecter and driver?
		  
What are the most popular cars? Find out at Yahoo! Autos 
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Can java applet interact with Zope ZODB database?

2006-02-14 Thread Andreas Jung

With Zope or the ZODB? With ZODB, unlikely. With Zope, using standard
protocols as HTTP, XMLRPC).

-aj

--On 14. Februar 2006 01:17:42 -0800 Allen Huang [EMAIL PROTECTED] wrote:


Can java applet interact with Zope ZODB database? does it need any kind
of connecter and driver?
-

 What are the most popular cars? Find out at Yahoo! Autos






pgp1Xw3xtXsEw.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Transfer Data to New Zope Server

2006-02-14 Thread Chris Withers

Peter Evans wrote:

I am Zope newbie so please bear with me. As a part of my job I just
inherited control of an extremely old Zope server running on FreeBSD. I
would like to move to a new instance of Zope runninf on Windows Server 2003.


Sorry, but why would you want to move to Windows? That seems like a step 
back, even from BSD :-S



So basically I need help transferring all the data from the old box to the
new one.


That's pretty easy, but I'd urge you to consider Linux for the box 
instead of Windows. This isn't a political thing, it's just there's a 
lot more support for useful stuff on Linux...


Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Chris Withers

michael nt milne wrote:

Yes, I do realise that it's hard. Regarding the cookie comment that
was the reason I wanted to use Apache location based login. 


Huh? I'm sure some people would love to know how those two things relate 
in your head...



I do
realise that leaving a logon cookie is insecure and that comment was
perhaps misguided. I started to think about usability etc.


If you're lucky, you might get a system that's both insecure _and_ 
unusable ;-)



I'm going to block 8080 at the router/firewall level as Zope obviously
needs to keep serving through 8080 to Apache.


using iptables in the box is probably a better idea...


As for the issue with IE6 and editing pages over SSL it all works fine
in Firefox 1.5, so it's a browser issue which I just can't quite
fathom just now. 


I doubt it, my guess would still be that you're doing something wrong 
somewhere...


Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Chris Withers

Dario Lopez-Kästen wrote:
Nevertheless, it is not simple to implement proper security with 
cookie-based logins. I had to make my own hacked version of 
SinmpleUserFodler with seesioning on the zeo server to get it secure 
enough (it is actually a trade off from what I would have liked to have 
in the first place, but it works ok).


I know from personal experience that using sessions for this kind of 
information doesn't necessarilly scale very well... check for conflict 
errors in your event log ;-)


cheers,

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] restricting permissions for direct access only

2006-02-14 Thread Chris Withers

Michael Shulman wrote:

Thanks Lennart!  Proxy roles do sound like the answer, but I cannot
get them working.  When I restrict my private script so that only
Managers have View permissions and give my public script Manager proxy
roles, I am still prompted for a login box when I try to view the
public script.  When I cancel, I get the following error:

Error Type: Unauthorized
Error Value: You are not allowed to access 'meta_type' in this context


On what line in either of your scripts do you access meta_type?


What does it mean and how do I fix it?


I means something tried to access an object's meta_type but didn't have 
the necessary roles to do so. You may wish to look at the 
verbose-security options in zope.conf...


cheers,

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Strange problem with WebDAV and Zope

2006-02-14 Thread Chris Withers

Ivan Rambius Ivanov wrote:
nd -k http://localhost:8280/title 
(From nd man page -k option sends MKCOL request)


This command fails with
Error: MKCOL failed, `Not Found'


This is probably because 'title' exists as an attribute on most Zope 
objects, so it's already in use, so the MKCOL fails.


Admittedly, it could provide a more accurate error message...

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Igor Stroh
michael nt milne wrote:
 Yes, I do realise that it's hard. Regarding the cookie comment that
 was the reason I wanted to use Apache location based login. I do
 realise that leaving a logon cookie is insecure and that comment was
 perhaps misguided. I started to think about usability etc.
 
 I'm going to block 8080 at the router/firewall level as Zope obviously
 needs to keep serving through 8080 to Apache.

No need to do that, just configure your zope (etc/zope.conf) to
listen only on your loopback interface:

http-server
  address 127.0.0.1:8080
/http-server

An btw, Zope doesn't *need* to serve on 8080...

HTH,
Igor
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope and roles and hierarchy

2006-02-14 Thread Lennart Regebro
On 2/13/06, Kees de Brabander [EMAIL PROTECTED] wrote:
 [cb] And what are my options if I want to call f1_index directly from f11?

Placing your acl_users folder higher up.

--
Lennart Regebro, Nuxeo http://www.nuxeo.com/
CPS Content Management http://www.cps-project.org/
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread michael nt milne
 Yes, I do realise that it's hard. Regarding the cookie comment that was the reason I wanted to use Apache location based login.Huh? I'm sure some people would love to know how those two things relate
in your head...

I wanted to use an Apache served login box before the Zope/Plone site is served but I've decided against that now as authentication should be closely linked to the application. Also Apache location based authentication isn't cookie based. Now going with Zope/Plone auth over SSL alone with cookies set to expire.
 I do realise that leaving a logon cookie is insecure and that comment was perhaps misguided. I started to think about usability etc.If you're lucky, you might get a system that's both insecure _and_
unusable ;-)

My aim is security with a good level of usability and I'll achieve that :-) I'm going to block 8080 at the router/firewall level as Zope obviously needs to keep serving through 8080 to Apache.

using iptables in the box is probably a better idea...

thanks for the advice but I'll probably go with router level As for the issue with IE6 and editing pages over SSL it all works fine in Firefox 1.5, so it's a browser issue which I just can't quite
 fathom just now.I doubt it, my guess would still be that you're doing something wrongsomewhere...

Sorry but I don't agree on this one. I haven't altered any of the Plone 'edit page' functionality. It's out of the box. Works fine without SSL but on SSL trying to edit a page causes 'can't find server'. Firefox though works perfectly viewing and editing so it's a browser issue. I know of other people who have issues with IE and posting images over SSL. Must be something to do with POST security over IE. I'm going to take it up with them but don't expect too much of a response. I'm now about to try with Opera.

On 2/14/06, Igor Stroh [EMAIL PROTECTED] wrote:
michael nt milne wrote: Yes, I do realise that it's hard. Regarding the cookie comment that was the reason I wanted to use Apache location based login. I do
 realise that leaving a logon cookie is insecure and that comment was perhaps misguided. I started to think about usability etc. I'm going to block 8080 at the router/firewall level as Zope obviously
 needs to keep serving through 8080 to Apache.No need to do that, just configure your zope (etc/zope.conf) tolisten only on your loopback interface:http-serveraddress 
127.0.0.1:8080/http-serverAn btw, Zope doesn't *need* to serve on 8080...HTH,Igor___Zope maillist-
Zope@zope.orghttp://mail.zope.org/mailman/listinfo/zope** No cross posts or HTML encoding!**(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announcehttp://mail.zope.org/mailman/listinfo/zope-dev )-- 
Michael 
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Barry Drake
Owen,
This is still not working for me either.  I installed
C++.net also hoping that it might go through.  No
change; same error messages.  How can we bring this
forward?  I'd like to help as well.

Barry

--- Owen K wrote:

 Andreas, Barry, and all,
 
 I have the same TextIndexNG2 install error as Barry
 (see Error text 
 below).
 My setup:
 MS VisualC++ 7 .
 Zope 2.7.8-final, python 2.3.5, win32
 Also installed are
 TextIndexNGExtensions-2.02.win32-py2.3.exe and 
 python-Levenshtein-0.10.win32-py2.3.exe.
 My windows registry points to the python
 installation that I have under 
 Plone 2.1.2, and that is the only python on my
 Windows XP Pro machine.
 
 Barry, any luck?
 
 The TextIndexNG2 windows binaries were explicitly
 labelled python2.3; so 
 the mismatch with python 2.3.5 is surprising.
 
 In terms of following Andreas Jung's advice to
 recompile the extensions, 
 What can I do with MS Visual Studio .Net 2003 to
 move this forward? The 
 associated compiler is CL.exe and I found it in
 ..Vc7\CL.exe so I think the 
 visual C version is 7.
 
 Do I need to recompile all of python + TextIndexNG2?
 Or somehow make the 
 compiler look like VC6 and then compile TextIndexNG2
 extensions. Or somehow 
 help TextIndexNG2python setup.py install to see
 my VC++ compiler?
 
 Many thanks,
 
 Owen
 
 
 Error text:
 C:\Program Files\Plone
 2\Data\Products\TextIndexNG2python setup.py install
 -DUNICODE_WIDTH=2
 running install
 running build
 running build_ext
 error: Python was built with version 6 of Visual
 Studio, and extensions need 
 to
 be built with the same version of the compiler, but
 it isn't installed.
 
 
 
 Barry Drake [EMAIL PROTECTED] wrote in 
 message

news:[EMAIL PROTECTED]
 I have PloneLocalFolderNG installed, which works
 great.  But, I can't run python setup.py install for
 TextIndexNG2.  I get the following error:
 
 running install
 running build
 running build_ext
 error: Python was built with version 6 of Visual
 Studio, and extensions need to be built with the
 same
 version of the compiler, but it isn't installed.
 
 The documentation says to install the win32
 extensions,
 TextIndexNGExtensions-2.02.win32-py2.3.exe, so I did
 that.  Still can't run the setup script.
 
 Any ideas?
 
 System: Zope 2.7.6-final, python 2.3.5, win32
 
 Thanks.
 Barry Drake
 
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )
 
 
 
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )
 

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Andreas Jung



--On 14. Februar 2006 04:43:07 -0800 Barry Drake [EMAIL PROTECTED] 
wrote:



Owen,
This is still not working for me either.  I installed
C++.net also hoping that it might go through.  No
change; same error messages.  How can we bring this
forward?  I'd like to help as well.



No idea...I won't spend any time on windows issues at this point.

Life-is-too-short-to-waste-it-with-windows-issues,
Andreas



pgpgQ18qOVVot.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Dario Lopez-Kästen

michael nt milne said the following on 2006-02-14 12:30:

 As for the issue with IE6 and editing pages over SSL it all works fine
 in Firefox 1.5, so it's a browser issue which I just can't quite
 fathom just now.


 I doubt it, my guess would still be that you're doing something wrong
somewhere...
 
 Sorry but I don't agree on this one. I haven't altered any of the 
Plone 'edit page' functionality. It's out of the box. Works fine without 
SSL but on SSL trying to edit a page causes 'can't find server'. Firefox 
though works perfectly viewing and editing so it's a browser issue. I 
know of other people who have issues with IE and posting images over 
SSL. Must be something to do with POST security over IE. I'm going to 
take it up with them but don't expect too much of a response. I'm now 
about to try with Opera.


This part is *only* about setting up the servers, apache and zope in 
this context, properly.


There is nothing in Zope that works differently when serving over ssl or 
not. SSL is just a transport layer, so it does *not* affect 
zope-capabilities in any way.


I am sure you know this, but since we have learned very little (or at 
least I have - maybe I am not paying attention well enough :-):


*HOWEVER*, IIRC, plone, especially on windows (if installed with the 
windows installer) uses a trick, which is not documented at all, as far 
as I know, uses a Site Access rule.


Have you modified that rule to take advantage of the SSL -server? 
Perhaps the SiteAccess rule is triggering adn trying to redirect you to 
an address/port where there is no service listeing?


/dario

--
-- ---
Dario Lopez-Kästen, IT Systems  Services Chalmers University of Tech.
Lyrics applied to programming  application design:
emancipate yourself from mental slavery - redemption song, b. marley

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Owen K wrote:
 Andreas, Barry, and all,
 
 I have the same TextIndexNG2 install error as Barry (see Error text 
 below).
 My setup:
 MS VisualC++ 7 .
 Zope 2.7.8-final, python 2.3.5, win32
 Also installed are TextIndexNGExtensions-2.02.win32-py2.3.exe and 
 python-Levenshtein-0.10.win32-py2.3.exe.
 My windows registry points to the python installation that I have under 
 Plone 2.1.2, and that is the only python on my Windows XP Pro machine.
 
 Barry, any luck?

Python 2.3.x was built with VC++ version 6; Python 2.4.x with version 7.
   If you can't lay your hands on that version, then perhaps Mingw would do:

 http://sebsauvage.net/python/mingw.html


Tres.
- --
===
Tres Seaver  +1 202-558-7113  [EMAIL PROTECTED]
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFD8dRS+gerLs4ltQ4RAumKAKCPszCd+VeCWjxQQPIIPFJLUXS8TgCeJ/fC
akN89KE6basU2l+47UBcpt8=
=42eM
-END PGP SIGNATURE-

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Alexander Limi
On Tue, 14 Feb 2006 04:59:07 -0800, Dario Lopez-Kästen  
[EMAIL PROTECTED] wrote:


*HOWEVER*, IIRC, plone, especially on windows (if installed with the  
windows installer) uses a trick, which is not documented at all, as far  
as I know, uses a Site Access rule.


http://plone.org/documentation/faq/multiple-sites-installers

What part is not documented at all? :)

--
_

 Alexander Limi · Chief Architect · Plone Solutions · Norway

 Consulting · Training · Development · http://www.plonesolutions.com
_

  Plone Co-Founder · http://plone.org · Connecting Content
  Plone Foundation · http://plone.org/foundation · Protecting Plone

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Dario Lopez-Kästen

Alexander Limi said the following on 2006-02-14 14:05:



On Tue, 14 Feb 2006 04:59:07 -0800, Dario Lopez-Kästen  
[EMAIL PROTECTED] wrote:


*HOWEVER*, IIRC, plone, especially on windows (if installed with the  
windows installer) uses a trick, which is not documented at all, as 
far  as I know, uses a Site Access rule.



http://plone.org/documentation/faq/multiple-sites-installers

What part is not documented at all? :)



ähh... woopsy-daisy! my mistake. Sorry! 8^)

/dario - crawls back under a rock... ;)

--
-- ---
Dario Lopez-Kästen, IT Systems  Services Chalmers University of Tech.
Lyrics applied to programming  application design:
emancipate yourself from mental slavery - redemption song, b. marley

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] zope+zms+java

2006-02-14 Thread Irek M.
Haj I hope Someone can help me,
i have a Problem recognizing JAVA from
ZMS-Configuration.
SDK is installed correctly on this System, Java
Environment Variables
are set. Zope is Restarted. But the ZMS Konfiguration
dont List the
Java environment in its config.

My Config:
SuSE 9.3 x64
Zope 2.7.4 r5
ZMS 2.3.2b45
Python 2.4.14


thanks
iras






___ 
Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread michael nt milne
I am sure you know this, but since we have learned very little (or atleast I have - maybe I am not paying attention well enough :-):

Have you modified that rule to take advantage of the SSL -server?Perhaps the SiteAccess rule is triggering adn trying to redirect you toan address/port where there is no service listeing?

No I haven't modified anything apart from upgrading Apache, installing and configuring SSL, doing VirtualHost rules and then locking down Plone using the 'private site' documentation.

Why would Firefox 1.5.1work perfectly and be able to edit pages and upload images? As I've said I know of more issues with IE and posting attachments througha private contact on this list. Doesn'ts seem like a coincidence to me. At least you've learned that :-)



On 2/14/06, Dario Lopez-Kästen [EMAIL PROTECTED] wrote:
Alexander Limi said the following on 2006-02-14 14:05: On Tue, 14 Feb 2006 04:59:07 -0800, Dario Lopez-Kästen
 [EMAIL PROTECTED] wrote: *HOWEVER*, IIRC, plone, especially on windows (if installed with the
 windows installer) uses a trick, which is not documented at all, as faras I know, uses a Site Access rule. 
http://plone.org/documentation/faq/multiple-sites-installers What part is not documented at all? :)ähh... woopsy-daisy! my mistake. Sorry! 8^)/dario - crawls back under a rock... ;)
 ---Dario Lopez-Kästen, IT Systems  Services Chalmers University of Tech.Lyrics applied to programming  application design:
emancipate yourself from mental slavery - redemption song, b. marley___Zope maillist-Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope** No cross posts or HTML encoding!**(Related lists -http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )-- Michael 
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread michael nt milne
No idea...I won't spend any time on windows issues at this point.Life-is-too-short-to-waste-it-with-windows-issues,

Well of course Windows isn't the ideal platform and sucks on many levels but the fact that many, many, businesses have their own Windowssmall business serverboxes in house and can install and base their small to medium traffic sites on then, means that in reality, anti-Windows snobbishness doesn't really get you anywhere on a business level. Even though it has a logical core.

On 2/14/06, Tres Seaver [EMAIL PROTECTED] wrote:
-BEGIN PGP SIGNED MESSAGE-Hash: SHA1Owen K wrote: Andreas, Barry, and all,
 I have the same TextIndexNG2 install error as Barry (see Error text below). My setup: MS VisualC++ 7 . Zope 2.7.8-final, python 2.3.5, win32 Also installed are 
TextIndexNGExtensions-2.02.win32-py2.3.exe and python-Levenshtein-0.10.win32-py2.3.exe. My windows registry points to the python installation that I have under Plone 2.1.2, and that is the only python on my Windows XP Pro machine.
 Barry, any luck?Python 2.3.x was built with VC++ version 6; Python 2.4.x with version 7.If you can't lay your hands on that version, then perhaps Mingw would do:
http://sebsauvage.net/python/mingw.htmlTres.- --===Tres Seaver+1 202-558-7113
[EMAIL PROTECTED]Palladion Software Excellence by Designhttp://palladion.com-BEGIN PGP SIGNATURE-Version: GnuPG v1.4.1 (GNU/Linux)Comment: Using GnuPG with Thunderbird - 
http://enigmail.mozdev.orgiD8DBQFD8dRS+gerLs4ltQ4RAumKAKCPszCd+VeCWjxQQPIIPFJLUXS8TgCeJ/fCakN89KE6basU2l+47UBcpt8==42eM-END PGP SIGNATURE-___
Zope maillist-Zope@zope.orghttp://mail.zope.org/mailman/listinfo/zope** No cross posts or HTML encoding!**
(Related lists -http://mail.zope.org/mailman/listinfo/zope-announcehttp://mail.zope.org/mailman/listinfo/zope-dev
 )-- Michael 
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Re: TextIndexNG2 problems

2006-02-14 Thread Owen K
Building on Andreas' theory regarding the shortness of life, I'm going to 
try to avoid the problem by upgrading to Zope 2.8 so that I can use 
TextIndexNG3. Should I expect to run into the same extensions problem there?

Thanks Tre for showing one path forward with TextIndexNG2.

Regarding recompiling TextIndexNG2, I looked in the C++.net GUI to find a 
way to emulate VC6, no luck so far.

.02,

Owen



Andreas Jung [EMAIL PROTECTED] wrote in 
message news:[EMAIL PROTECTED]
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )
 



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Andreas Jung



--On 14. Februar 2006 14:31:21 + michael nt milne 
[EMAIL PROTECTED] wrote:



No idea...I won't spend any time on windows issues at this point.



Life-is-too-short-to-waste-it-with-windows-issues,


Well of course Windows isn't the ideal platform and sucks on many levels
but the fact that many, many, businesses have their own Windows small
business server boxes in house and can install and base their small to
medium traffic sites on then, means that in reality, anti-Windows
snobbishness doesn't really get you anywhere on a business level. Even
though it has a logical core.




Well, my first job back in the mid-90s was a position as developer for
windows network drivers. At that time Microsoft produced tons of erroneous
documentation and they lied to developers at conferences. Since that time
Microsoft is just a disgusting company and as result I try to get around 
Windows wherever I can...just for protocol.


-aj




pgp7XBytKY4Cf.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: Re: TextIndexNG2 problems

2006-02-14 Thread Andreas Jung



--On 14. Februar 2006 09:40:16 -0500 Owen K [EMAIL PROTECTED] wrote:


Building on Andreas' theory regarding the shortness of life, I'm going to
try to avoid the problem by upgrading to Zope 2.8 so that I can use
TextIndexNG3. Should I expect to run into the same extensions problem
there?


Right, the same problems will arise.

-aj

pgpcKFobLaxVS.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] workflow products

2006-02-14 Thread Palermo, Tom



All,

Are there any workflow products 
available for Zope 2.x that do not require either Plone or CMF? It looks like 
there aren't but I thought I'd ask first.

Thanks,
Tom
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Zope won't start on Windows XP

2006-02-14 Thread Holger Butschek
I'am triing to install Zope 2.9 on my laptop to work withit when not
connected the the internet. The installation-routine runs through without
any errors. An instance is created in the folder C:\instance.

When I now want to start zope in c:\instance\bin by typing runzope.bat the
only thing that happens is a big exception thrown by zope.

Do you have any ideas what to do? No other service is actually running on
port 8080. The service of zope is not installed/activated.

Many thanks,
Holger Butschek

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Zope-Instance\binrunzope.bat

C:\Zope-Instance\binC:\Programme\Zope-2.9.0\bin\python.exe
C:\Programme\Zope
-2.9.0\lib\python\Zope2\Startup\run.py -C C:\Zope-Instance\etc\zope.conf

Traceback (most recent call last):
  File C:\Programme\Zope-2.9.0\lib\python\Zope2\Startup\run.py, line 56,
in ?
run()
  File C:\Programme\Zope-2.9.0\lib\python\Zope2\Startup\run.py, line 19,
in ru
n
opts = _setconfig()
  File C:\Programme\Zope-2.9.0\lib\python\Zope2\Startup\run.py, line 48,
in _s
etconfig
opts.realize(doc=Sorry, no option docs yet.)
  File C:\Programme\Zope-2.9.0\lib\python\zdaemon\zdoptions.py, line 273,
in r
ealize
self.load_schema()
  File C:\Programme\Zope-2.9.0\lib\python\zdaemon\zdoptions.py, line 321,
in l
oad_schema
self.schema = ZConfig.loadSchema(self.schemafile)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\loader.py, line 31, in
loadS
chema
return SchemaLoader().loadURL(url)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\loader.py, line 65, in
loadU
RL
return self.loadResource(r)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\loader.py, line 159, in
load
Resource
schema = ZConfig.schema.parseResource(resource, self)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 27, in
parse
Resource
xml.sax.parse(resource.file, parser)
  File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\__init__.py, line 33, in
parse
parser.parse(source)
  File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\expatreader.py, line 107,
in pa
rse
xmlreader.IncrementalParser.parse(self, source)
  File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\xmlreader.py, line 123, in
pars
e
self.feed(buffer)
  File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\expatreader.py, line 207,
in fe
ed
self._parser.Parse(data, isFinal)
  File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\expatreader.py, line 300,
in st
art_element
self._cont_handler.startElement(name, AttributesImpl(attrs))
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 99, in
start
Element
getattr(self, start_ + name)(attrs)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 475, in
star
t_schema
keytype, valuetype, datatype = self.get_sect_typeinfo(attrs)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 201, in
get_
sect_typeinfo
datatype = self.get_datatype(attrs, datatype, null, base)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 194, in
get_
datatype
return self._registry.get(dtname)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\datatypes.py, line 398,
in g
et
t = self.search(name)
  File C:\Programme\Zope-2.9.0\lib\python\ZConfig\datatypes.py, line 423,
in s
earch
package = __import__(n, g, g, component)
  File C:\Programme\Zope-2.9.0\lib\python\Zope2\Startup\datatypes.py, line
21,
 in ?
import OFS.Uninstalled
  File C:\Programme\Zope-2.9.0\lib\python\OFS\Uninstalled.py, line 16, in
?
import  SimpleItem, Globals, Acquisition
  File C:\Programme\Zope-2.9.0\lib\python\OFS\SimpleItem.py, line 26, in ?
import AccessControl.Role, AccessControl.Owned, App.Common
  File C:\Programme\Zope-2.9.0\lib\python\AccessControl\__init__.py, line
17,
in ?
from Implementation import setImplementation
  File C:\Programme\Zope-2.9.0\lib\python\AccessControl\Implementation.py,
lin
e 98, in ?
setImplementation(C)
  File C:\Programme\Zope-2.9.0\lib\python\AccessControl\Implementation.py,
lin
e 51, in setImplementation
from AccessControl import ImplC as impl
  File C:\Programme\Zope-2.9.0\lib\python\AccessControl\ImplC.py, line 30,
in
?
from ImplPython import RestrictedDTML, SecurityManager,
ZopeSecurityPolicy
ImportError: No module named ImplPython

C:\Zope-Instance\bin
BEGIN:VCARD
VERSION:2.1
N:Consulting ([EMAIL PROTECTED]);Butschek IT
FN:Butschek IT Consulting ([EMAIL PROTECTED])
ORG:Butschek IT Consulting
TEL;WORK;VOICE:+49 (0261) 9634988
TEL;CELL;VOICE:+49 (0151) 16740643
TEL;WORK;FAX:+49 (0261) 9637757
URL;WORK:http://www.butschek-consult.de
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
REV:20050117T094041Z
END:VCARD
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Florent Guillaume

Michael Vartanyan wrote:
In the very beginning of my Zope career, I once shot myself in the 
foot with a very stupid thing... I kept it to myself then but if we are 
talking about Zope security settings and usability of the ZMI at the 
same time, perhaps it is an ideal place to raise this issue.


If you use the famous manage_access page with all the checkboxes to set 
permissions on an object, it then calls manage_changePermissions to 
using POST method to apply your settings. The result is that 
http://your_object_url/manage_changePermissions (without any parameters) 
stays in your browser visited url history. Now imagine what happens if 
you click this url by mistake being logged as someone with Change 
permissions permission.


I guess changing the form method to GET is not going to be liked by 
browsers that put additional restrictions on URL length. So I would 
propose to introduce a basic request sanity check in the 
manage_changePermissions itself. I cannot think of any use for resetting 
all permissions and acquisition for everyone, so the easiest way to do 
that is to simply check that at least something exists in the form:


...
   def manage_changePermissions(self, REQUEST):
   Change all permissions settings, called by management screen.
   
 if  len(REQUEST.form)2: raise ...
   self._isBeingUsedAsAMethod(REQUEST, 0)
   valid_roles=self.valid_roles()
   indexes=range(len(valid_roles))
   have=REQUEST.has_key
   permissions=self.ac_inherited_permissions(1)
   fails = []
...

or something like that.


Actually the proper way to do it, and for exactly the reasons you outlined 
above, is to always do a redirect to a result page url after a POST that 
has side effects. It's even mandated by the HTTP/HTML specs.


Florent


--
Florent Guillaume, Nuxeo (Paris, France)   Director of RD
+33 1 40 33 71 59   http://nuxeo.com   [EMAIL PROTECTED]
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] restricting permissions for direct access only

2006-02-14 Thread Michael Shulman
Okay, I must be the most moronic user ever.  The default text in a
newly created Python Script, which I did not bother to change for my
test case, accesses meta_type, but I did not notice this; thus I was
confused.  (Just out of curiosity, what permissions are required to
access meta_type?)

But... it's still not working for my real site.  I think the issue is
this.  If script1 has proxy role Manager, and script2 has view
permissions set only for Manager, then script1 can call script2, no
problem.  But if script1 instead calls script3, which then calls
script2, it doesn't work unless script3 *also* has proxy role Manager.
 Is there a way to make scripts inherit proxy roles from their
callers?  Or am I confused once again?

mike

On 2/14/06, Chris Withers [EMAIL PROTECTED] wrote:
 Michael Shulman wrote:
  Thanks Lennart!  Proxy roles do sound like the answer, but I cannot
  get them working.  When I restrict my private script so that only
  Managers have View permissions and give my public script Manager proxy
  roles, I am still prompted for a login box when I try to view the
  public script.  When I cancel, I get the following error:
 
  Error Type: Unauthorized
  Error Value: You are not allowed to access 'meta_type' in this context

 On what line in either of your scripts do you access meta_type?

  What does it mean and how do I fix it?

 I means something tried to access an object's meta_type but didn't have
 the necessary roles to do so. You may wish to look at the
 verbose-security options in zope.conf...

 cheers,

 Chris

 --
 Simplistix - Content Management, Zope  Python Consulting
 - http://www.simplistix.co.uk



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Method to return the properties of an object

2006-02-14 Thread Florent Guillaume

You could use any of a various set of introspection/debugging tools.

One of them is
http://svn.nuxeo.org/trac/pub/browser/ZMIntrospection/trunk/

There are others, like
http://www.zope.org/Members/shh/DocFinderEverywhere

Florent


George wrote:

Is there a method to return the properties of an object?

Sorry if it's sth obvious!*
*





___
Zope maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce

 http://mail.zope.org/mailman/listinfo/zope-dev )



--
Florent Guillaume, Nuxeo (Paris, France)   Director of RD
+33 1 40 33 71 59   http://nuxeo.com   [EMAIL PROTECTED]
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] TextIndexNG extensions for Windows, please share if you have them

2006-02-14 Thread Owen K
Do you have TextIndexNG  (2 or 3) extensions for Windows that work with 
Python 2.3.5 ?
If yes, please share them !:)

Although there are some files on sf.net that are labelled for python 2.3 
(TextIndexNGExtensions-2.02.win32-py2.3.exe, 
python-Levenshtein-0.10.win32-py2.3.exe) one of these throws the following 
error

error: Python was built with version 6 of Visual Studio, and extensions need 
to be built with the same version of the compiler, but it isn't installed.


Or perhaps you are already using exactly those files with Python 2.3.5, in 
which case I would conclude that the error I see is somehow misleading.

Thanks,

Owen 



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: restricting permissions for direct access only

2006-02-14 Thread Florent Guillaume

Michael Shulman wrote:

Hi,

I am new to Zope, and so far I like it very much.  But I think I am
confused about how security works, or is supposed to work.
Specifically I want to know the following.

Is there a way in Zope to restrict permissions for direct access only
(i.e. calling an object through the web) but still allow indirect
access (i.e. executing an object that was called by another object
that was called through the web)?


Objects called by a URL have a REQUEST parameter. What I usually do is make 
the script accept an optional REQUEST=None, and if it's non-None then I 
raise Unauthorized.


Florent

  I have many Zope scripts but most

of them are only auxiliary functions; only a few are designed to be
accessed by a user through a URL.  I don't want users to be able to
call my auxiliary scripts directly, only the ones that are designed to
be published.  But changing the security settings on the auxiliary
scripts (e.g. removing View access from Anonymous role) prevents
anonymous users from executing them even indirectly, so the public
objects which depend on those auxiliary methods also stop working.

Feel free to tell me that I am misunderstanding the way security
works, or is supposed to work, in Zope, or that if this is something I
need to do I am designing my site incorrectly from the point of view
of Zope security (and if so, what is the correct way to design it?).

Thanks!!
Mike


--
Florent Guillaume, Nuxeo (Paris, France)   Director of RD
+33 1 40 33 71 59   http://nuxeo.com   [EMAIL PROTECTED]
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Barry Drake
Tres and Owen,
Using Tres's advice below, I was able to recompile
TextIndexNG2 on my Windows machine using the MingW
compiler.  Works great!

I used the Python that came with Zope and the latest
MingW compiler.  Just follow the instructions at the
link provided by Tres below.  With one additional
instruction:

Copy the .pyd files from the
C:\Zope-Instance\Products\TextIndexNG2\build\lib.win32-2.3
directory to C:\Zope-Instance\Products\TextIndexNG2

Zope won't start unless you do this last step.

System:
 Zope Version (Zope 2.7.6-final, python 2.3.5, win32)
Python Version 2.3.5 (#62, Feb 8 2005, 16:23:02) [MSC
v.1200 32 bit (Intel)]
System Platform win32

Barry Drake


--- Tres Seaver wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Owen K wrote:
  Andreas, Barry, and all,
  
  I have the same TextIndexNG2 install error as
 Barry (see Error text 
  below).
  My setup:
  MS VisualC++ 7 .
  Zope 2.7.8-final, python 2.3.5, win32
  Also installed are
 TextIndexNGExtensions-2.02.win32-py2.3.exe and 
  python-Levenshtein-0.10.win32-py2.3.exe.
  My windows registry points to the python
 installation that I have under 
  Plone 2.1.2, and that is the only python on my
 Windows XP Pro machine.
  
  Barry, any luck?
 
 Python 2.3.x was built with VC++ version 6; Python
 2.4.x with version 7.
If you can't lay your hands on that version, then
 perhaps Mingw would do:
 
  http://sebsauvage.net/python/mingw.html
 
 
 Tres.
 - --

===
 Tres Seaver  +1 202-558-7113 
 [EMAIL PROTECTED]
 Palladion Software   Excellence by Design   
 http://palladion.com
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.1 (GNU/Linux)
 Comment: Using GnuPG with Thunderbird -
 http://enigmail.mozdev.org
 

iD8DBQFD8dRS+gerLs4ltQ4RAumKAKCPszCd+VeCWjxQQPIIPFJLUXS8TgCeJ/fC
 akN89KE6basU2l+47UBcpt8=
 =42eM
 -END PGP SIGNATURE-
 
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )
 

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Barry Drake wrote:
 Tres and Owen,
 Using Tres's advice below, I was able to recompile
 TextIndexNG2 on my Windows machine using the MingW
 compiler.  Works great!
 
 I used the Python that came with Zope and the latest
 MingW compiler.  Just follow the instructions at the
 link provided by Tres below.  With one additional
 instruction:
 
 Copy the .pyd files from the
 C:\Zope-Instance\Products\TextIndexNG2\build\lib.win32-2.3
 directory to C:\Zope-Instance\Products\TextIndexNG2
 
 Zope won't start unless you do this last step.
 
 System:
  Zope Version (Zope 2.7.6-final, python 2.3.5, win32)
 Python Version 2.3.5 (#62, Feb 8 2005, 16:23:02) [MSC
 v.1200 32 bit (Intel)]
 System Platform win32

Glad that worked.  I don't run Windows boxen any longer, so it was a
shot in the dark.


Tres.
- --
===
Tres Seaver  +1 202-558-7113  [EMAIL PROTECTED]
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFD8gRH+gerLs4ltQ4RAiMJAKDP5ccLck1Uqsa8dh6wfCUoGfZTIgCfc4dS
hZP4eFQuNFRUsksUaFEf594=
=z7f7
-END PGP SIGNATURE-
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Owen K
Regarding compiling under Microsoft VC6, should I expect that TextIndexNG 
setup would launch VC6 compiler if I had that tool installed?

Thanks,

Owen 



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Andreas Jung



--On 14. Februar 2006 08:20:51 -0800 Barry Drake [EMAIL PROTECTED] 
wrote:



Tres and Owen,
Using Tres's advice below, I was able to recompile
TextIndexNG2 on my Windows machine using the MingW
compiler.  Works great!



Could you contribute your work? Can you work on an archive?
I think there is some distutils option for creating an archive
or even an installer on windows.

-aj

pgpzlVkn6p87Y.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Barry Drake
Owen,
I think that once you have the .pyd files, Zope uses
those from that point on; no need for the compilers
any longer.  That's why I'm glad to have found out
about the MingW solution, bypassing MS!

Barry

--- Owen K wrote:

 Regarding compiling under Microsoft VC6, should I
 expect that TextIndexNG 
 setup would launch VC6 compiler if I had that tool
 installed?
 
 Thanks,
 
 Owen 
 
 
 
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )
 

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: workflow products

2006-02-14 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Palermo, Tom wrote:

 Are there any workflow products available for Zope 2.x that do not require
 either Plone or CMF? It looks like there aren't but I thought I'd ask first.

OpenFlow:  http://www.openflow.it/wwwopenflow/EN/Overview/index_html


Tres.
- --
===
Tres Seaver  +1 202-558-7113  [EMAIL PROTECTED]
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFD8gZG+gerLs4ltQ4RAqNJAKCNU5mSek1UqtF1ZuMFgueqFUy4bACcDqHW
mcKjATWF7gLtTGjlw61x0O8=
=NxMk
-END PGP SIGNATURE-

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Andreas Jung wrote:
 
 
 --On 14. Februar 2006 08:20:51 -0800 Barry Drake [EMAIL PROTECTED]
 wrote:
 
 Tres and Owen,
 Using Tres's advice below, I was able to recompile
 TextIndexNG2 on my Windows machine using the MingW
 compiler.  Works great!

 
 Could you contribute your work? Can you work on an archive?
 I think there is some distutils option for creating an archive
 or even an installer on windows.

'bdist_win'?


Tres.
- --
===
Tres Seaver  +1 202-558-7113  [EMAIL PROTECTED]
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFD8grV+gerLs4ltQ4RAhrmAKC5myb1u1di5wjYDzaTyj99THOs0gCfYT+E
DOBLReQpoS+LW/fKGSROav0=
=eu2p
-END PGP SIGNATURE-
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Zope won't start on Windows XP

2006-02-14 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Holger Butschek wrote:
 I'am triing to install Zope 2.9 on my laptop to work withit when not
 connected the the internet. The installation-routine runs through without
 any errors. An instance is created in the folder C:\instance.
 
 When I now want to start zope in c:\instance\bin by typing runzope.bat the
 only thing that happens is a big exception thrown by zope.
 
 Do you have any ideas what to do? No other service is actually running on
 port 8080. The service of zope is not installed/activated.
 
 Many thanks,
 Holger Butschek
 
 Microsoft Windows XP [Version 5.1.2600]
 (C) Copyright 1985-2001 Microsoft Corp.
 
 C:\Zope-Instance\binrunzope.bat
 
 C:\Zope-Instance\binC:\Programme\Zope-2.9.0\bin\python.exe
 C:\Programme\Zope
 -2.9.0\lib\python\Zope2\Startup\run.py -C C:\Zope-Instance\etc\zope.conf
 
 Traceback (most recent call last):
   File C:\Programme\Zope-2.9.0\lib\python\Zope2\Startup\run.py, line 56,
 in ?
 run()
   File C:\Programme\Zope-2.9.0\lib\python\Zope2\Startup\run.py, line 19,
 in ru
 n
 opts = _setconfig()
   File C:\Programme\Zope-2.9.0\lib\python\Zope2\Startup\run.py, line 48,
 in _s
 etconfig
 opts.realize(doc=Sorry, no option docs yet.)
   File C:\Programme\Zope-2.9.0\lib\python\zdaemon\zdoptions.py, line 273,
 in r
 ealize
 self.load_schema()
   File C:\Programme\Zope-2.9.0\lib\python\zdaemon\zdoptions.py, line 321,
 in l
 oad_schema
 self.schema = ZConfig.loadSchema(self.schemafile)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\loader.py, line 31, in
 loadS
 chema
 return SchemaLoader().loadURL(url)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\loader.py, line 65, in
 loadU
 RL
 return self.loadResource(r)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\loader.py, line 159, in
 load
 Resource
 schema = ZConfig.schema.parseResource(resource, self)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 27, in
 parse
 Resource
 xml.sax.parse(resource.file, parser)
   File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\__init__.py, line 33, in
 parse
 parser.parse(source)
   File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\expatreader.py, line 107,
 in pa
 rse
 xmlreader.IncrementalParser.parse(self, source)
   File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\xmlreader.py, line 123, in
 pars
 e
 self.feed(buffer)
   File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\expatreader.py, line 207,
 in fe
 ed
 self._parser.Parse(data, isFinal)
   File C:\Programme\Zope-2.9.0\bin\Lib\xml\sax\expatreader.py, line 300,
 in st
 art_element
 self._cont_handler.startElement(name, AttributesImpl(attrs))
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 99, in
 start
 Element
 getattr(self, start_ + name)(attrs)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 475, in
 star
 t_schema
 keytype, valuetype, datatype = self.get_sect_typeinfo(attrs)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 201, in
 get_
 sect_typeinfo
 datatype = self.get_datatype(attrs, datatype, null, base)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\schema.py, line 194, in
 get_
 datatype
 return self._registry.get(dtname)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\datatypes.py, line 398,
 in g
 et
 t = self.search(name)
   File C:\Programme\Zope-2.9.0\lib\python\ZConfig\datatypes.py, line 423,
 in s
 earch
 package = __import__(n, g, g, component)
   File C:\Programme\Zope-2.9.0\lib\python\Zope2\Startup\datatypes.py, line
 21,
  in ?
 import OFS.Uninstalled
   File C:\Programme\Zope-2.9.0\lib\python\OFS\Uninstalled.py, line 16, in
 ?
 import  SimpleItem, Globals, Acquisition
   File C:\Programme\Zope-2.9.0\lib\python\OFS\SimpleItem.py, line 26, in ?
 import AccessControl.Role, AccessControl.Owned, App.Common
   File C:\Programme\Zope-2.9.0\lib\python\AccessControl\__init__.py, line
 17,
 in ?
 from Implementation import setImplementation
   File C:\Programme\Zope-2.9.0\lib\python\AccessControl\Implementation.py,
 lin
 e 98, in ?
 setImplementation(C)
   File C:\Programme\Zope-2.9.0\lib\python\AccessControl\Implementation.py,
 lin
 e 51, in setImplementation
 from AccessControl import ImplC as impl
   File C:\Programme\Zope-2.9.0\lib\python\AccessControl\ImplC.py, line 30,
 in
 ?
 from ImplPython import RestrictedDTML, SecurityManager,
 ZopeSecurityPolicy
 ImportError: No module named ImplPython
 
 C:\Zope-Instance\bin

It looks as though you have a borked Zope installation:  how did you
install Zope?


Tres.
- --
===
Tres Seaver  +1 202-558-7113  [EMAIL PROTECTED]
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFD8gbC+gerLs4ltQ4RAsjmAKCfqfk1r3P+yFEbBtTM0zeHEOEiVACfXVlT

[Zope] Re: TextIndexNG extensions for Windows, please share if you have them

2006-02-14 Thread Owen K
Problem solved! Thanks to Tres Seaver and Barry Drake.
See the solution in Barry Drake's message Re: Re: TextIndexNG2 problems 
Tuesday, February 14, 2006 11:20 AM.

Regards,

Owen




Owen K [EMAIL PROTECTED] wrote in message 
news:[EMAIL PROTECTED]
 Do you have TextIndexNG  (2 or 3) extensions for Windows that work with 
 Python 2.3.5 ?
 If yes, please share them !:)

 Although there are some files on sf.net that are labelled for python 2.3 
 (TextIndexNGExtensions-2.02.win32-py2.3.exe, 
 python-Levenshtein-0.10.win32-py2.3.exe) one of these throws the following 
 error

 error: Python was built with version 6 of Visual Studio, and extensions 
 need to be built with the same version of the compiler, but it isn't 
 installed.


 Or perhaps you are already using exactly those files with Python 2.3.5, in 
 which case I would conclude that the error I see is somehow misleading.

 Thanks,

 Owen


 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )
 



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


AW: [Zope] Re: Zope won't start on Windows XP

2006-02-14 Thread Holger Butschek


It looks as though you have a borked Zope installation:  how did you
install Zope?

What does borked mean? I installed it with the windows installer. The file
ist from zope.org.

Bye,
Holger


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] MailDropHost on windows

2006-02-14 Thread Erik Myllymaki

I'm trying to get MailDropHost running under windows, but it errors with:

Traceback (most recent call last):
  File .\maildrop.py, line 296, in ?
pid = os.fork()
AttributeError: 'module' object has no attribute 'fork'

Altering it to run without threading seems to work quite well.


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] MailDropHost on windows

2006-02-14 Thread Jens Vagelpohl


On 14 Feb 2006, at 17:58, Erik Myllymaki wrote:

I'm trying to get MailDropHost running under windows, but it errors  
with:


Traceback (most recent call last):
  File .\maildrop.py, line 296, in ?
pid = os.fork()
AttributeError: 'module' object has no attribute 'fork'

Altering it to run without threading seems to work quite well.


It's forking not to use threading per se but to use threads as a way  
to completely detach from the console.


I will update the documentation to specifically mention that Windows  
is not officially supported, that was my oversight.


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: AW: Re: Zope won't start on Windows XP

2006-02-14 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Holger Butschek wrote:
 
It looks as though you have a borked Zope installation:  how did you
 
 install Zope?
 
 What does borked mean? I installed it with the windows installer. The file
 ist from zope.org.

The traceback indicated that AccessControl.ImplC couldn't import
AccessControl.ImplPython, which sounds to me as though the installation
is corrupt.


Tres.
- --
===
Tres Seaver  +1 202-558-7113  [EMAIL PROTECTED]
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFD8jMU+gerLs4ltQ4RAiK1AKCHdquumBbxzvl1pc+6nagXpnNmlACgqgJk
R9KUvKkXBRdbiRf65ZHZmMw=
=ISRa
-END PGP SIGNATURE-

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope and roles and hierarchy

2006-02-14 Thread Kees de Brabander
But my subfolders are for different groups of users and I want to keep them
apart (so I can throw them away with the subfolder, when their use has
become obsolete).
cb
- Original Message - 
From: Lennart Regebro [EMAIL PROTECTED]
To: Kees de Brabander [EMAIL PROTECTED]
Cc: zope user list zope@zope.org
Sent: Tuesday, February 14, 2006 11:33 AM
Subject: Re: [Zope] Zope and roles and hierarchy


On 2/13/06, Kees de Brabander [EMAIL PROTECTED] wrote:
 [cb] And what are my options if I want to call f1_index directly from f11?

Placing your acl_users folder higher up.

--
Lennart Regebro, Nuxeo http://www.nuxeo.com/
CPS Content Management http://www.cps-project.org/

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: MailDropHost on windows

2006-02-14 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jens Vagelpohl wrote:
 
 On 14 Feb 2006, at 17:58, Erik Myllymaki wrote:
 
 I'm trying to get MailDropHost running under windows, but it errors 
 with:

 Traceback (most recent call last):
   File .\maildrop.py, line 296, in ?
 pid = os.fork()
 AttributeError: 'module' object has no attribute 'fork'

 Altering it to run without threading seems to work quite well.
 
 
 It's forking not to use threading per se but to use threads as a way  to
 completely detach from the console.
 
 I will update the documentation to specifically mention that Windows  is
 not officially supported, that was my oversight.

A sufficiently clever / motivated person could probably adapt the code
from 'zopeservice.py' to run the MailDropHost daemon as a service in
Windwos.


Tres.
- --
===
Tres Seaver  +1 202-558-7113  [EMAIL PROTECTED]
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFD8jOn+gerLs4ltQ4RArqqAJ9IVWyV8EG3T2mE3s4mrGOIHMiaIACdFup8
t24Rw/jw0JHYfvj03pmb8vc=
=9x+D
-END PGP SIGNATURE-

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: MailDropHost on windows

2006-02-14 Thread Erik Myllymaki

Tres Seaver wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jens Vagelpohl wrote:

On 14 Feb 2006, at 17:58, Erik Myllymaki wrote:

I'm trying to get MailDropHost running under windows, but it errors 
with:


Traceback (most recent call last):
  File .\maildrop.py, line 296, in ?
pid = os.fork()
AttributeError: 'module' object has no attribute 'fork'

Altering it to run without threading seems to work quite well.


It's forking not to use threading per se but to use threads as a way  to
completely detach from the console.

I will update the documentation to specifically mention that Windows  is
not officially supported, that was my oversight.


A sufficiently clever / motivated person could probably adapt the code
from 'zopeservice.py' to run the MailDropHost daemon as a service in
Windwos.


thanks for the tip - I was about to use srvany for this...
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] context and URLs

2006-02-14 Thread Ole Johan Tennvassås
Thanks, it really helped (but the syntax seems to be a tal:attributes=hrefstring:${here/folderB/absolute_url}/ - not the _path ending...OleOn 2/14/06, 
Peter Bengtsson [EMAIL PROTECTED] wrote:
This will worka tal:attributes=hrefstring:${here/folderB/absolute_url_path}/scriptobject?Parameter=$variableText/aOn 2/13/06, Ole Johan Tennvassås 
[EMAIL PROTECTED] wrote: Sorry for late reply - have been away. Cant get this to work!I hope I can avoid to use an absolute URL path. What i want is, as you say, to let the server generate as much of the URL as
 possible. To be more spesific, the zpt whith the calling href (located in folderA) calls a script with a constructlike this: a tal:attributes=href string:folderB/scriptobject?Parameter=$variableText/a
 The effect of this is that Zope generates a link to the URL http://myserver/application/folderA/folderB/scriptobject?... and after this link is used to call the script in folderB, the script calls
 a zpt in folderA again.Now, all links in this zpt gets /folderB added in their path! If you have some more tips about this, or could point me to some examples or documentation that could explain to me how this is supposed to
 work, it would be great! Regards Ole Instead of writing links like this::   a href="">  write them like this::
   a tal:attributes=href folderB/object/absolute_url_pathobject/a  I know it's more typing but it will solve all your problems. I always
 let the server have a part in generating URLs and I never suffer from problems like this.--Peter Bengtsson,work www.fry-it.com
home www.peterbe.comhobby www.issuetrackerproduct.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Michael Vartanyan
I agree. A little bit of a problem is that both Zope 2 Book and the ZMI 
do not seem to agree. I guess was/is not the practice that Zope 2 
developers endorsed/followed. But Zope2 is beyond help (C) Chris M., 
(taken out of context by me :-))



Florent Guillaume wrote:




Michael Vartanyan wrote:



I guess changing the form method to GET is not going to be liked by 
browsers that put additional restrictions on URL length. So I would 
propose to introduce a basic request sanity check in the 
manage_changePermissions itself. I cannot think of any use for 
resetting all permissions and acquisition for everyone, so the 
easiest way to do that is to simply check that at least something 
exists in the form:



Actually the proper way to do it, and for exactly the reasons you 
outlined above, is to always do a redirect to a result page url 
after a POST that has side effects. It's even mandated by the 
HTTP/HTML specs.


Florent




___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] context and URLs

2006-02-14 Thread Peter Bengtsson
On 2/14/06, Ole Johan Tennvassås [EMAIL PROTECTED] wrote:
 Thanks, it really helped (but the syntax seems to be a tal:attributes=href
 string:${here/folderB/absolute_url}/ -  not the _path
 ending...

someobject/absolute_url returns http://localhost:8080/somefolder/someobject;
someobject/absolute_url_path returns /somefolder/someobject
As far as a browser is concern there's absolutely no difference. The
advantage of absolute_url_path is less output in the HTML source and
that links still work as before if you change the domain and serve
cached or static content.


 Ole


 On 2/14/06, Peter Bengtsson [EMAIL PROTECTED] wrote:
  This will work
  a tal:attributes=href
 
 string:${here/folderB/absolute_url_path}/scriptobject?Parameter=$variableText/a
 
 
  On 2/13/06, Ole Johan Tennvassås  [EMAIL PROTECTED] wrote:
   Sorry for late reply - have been away.
  
   Cant get this to work!  I hope I can avoid to use an absolute URL path.
   What i want is, as you say, to let the server generate as much of the
 URL as
   possible. To be more spesific, the zpt whith the calling href (located
 in
   folderA) calls a script with a construct  like this:
   a tal:attributes=href
  
 string:folderB/scriptobject?Parameter=$variableText/a
   The effect of this is that Zope generates a link to the URL
  
 http://myserver/application/folderA/folderB/scriptobject?...
   and after this link is used to call the script in folderB, the script
 calls
   a zpt in folderA again.  Now, all links in this zpt gets /folderB added
 in
   their path! If you have some more tips about this, or could point me to
 some
   examples or documentation that could explain to me how this is supposed
 to
   work, it would be great!
  
   Regards
   Ole
   Instead of writing links like this::
   
a href=folderB/objectobject/a
   
   write them like this::
   
a tal:attributes=href
   folderB/object/absolute_url_pathobject/a
  
   
   I know it's more typing but it will solve all your problems. I always
   let the server have a part in generating URLs and I never suffer from
   problems like this.
  
  
 
 
  --
  Peter Bengtsson,
  work www.fry-it.com
  home www.peterbe.com
  hobby www.issuetrackerproduct.com
 




--
Peter Bengtsson,
work www.fry-it.com
home www.peterbe.com
hobby www.issuetrackerproduct.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] workflow products

2006-02-14 Thread Michael Vartanyan

We use Openflow:

http://www.openflow.it

to manage enormous workflows with many dozens of states/activities and 
hundreds of process instances going through. Works well when you find 
your way to use it. Some points to consider if you are considering using 
it for something serious:


- it is not very actively developed/maintained at present
- the documentation is not detailed/usable enough, you'll have to read 
the source to find out how things work sometimes
- one needs to think more than twice about how to store workitem data 
and how to bind it to the workflow instance - otherwise it'll bite badly 
when you have hundreds of process instances ant thousands of workitems 
in your system
- openflow heavily relies on Catalog. When upgrading Zope or installing 
new indices etc test thoroughly what you have in your workflow for integrity
- do not trust the visual design tool (the OpenFlow Editor), check your 
activities/transitions yourself.


Regards,
MV


Palermo, Tom wrote:


All,
 
Are there any workflow products available for Zope 2.x that do not 
require either Plone or CMF? It looks like there aren't but I thought 
I'd ask first.
 
Thanks,

Tom



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Advice needed before settling on Zope

2006-02-14 Thread Rainsford, David
Title: Advice needed before settling on Zope






Hi Zope users!


We have to build a content/document management system for our company, and I have been assigned to look into this and make a start. The system has quite a few requirements, which I'll outline below.

Version Control: we need quite complex version control. Lets say we have document x. This document will be developed and worked on by multiple users. At the same time, this will also be translated into other languages. If a change is made to the English version, then that change will have to be made in other languages too. I think that in Version Control speak, the different languages can be thought of as different renditions.

Workflow Control: because of the number of people involved, we need to have a decent workflow control system. The workflow could be A-B-C-D, D rejects so back to B, B makes mods and sends to E for final review. Or something, the point is we need to be able to have quite a lot of control over it, and the workflow isn't necessarily a linear 'up and down the chain' type of thing.

Document Management - the system is all about documents. They would like the ability to organise the documents into different pages for people to download. They should be able to download older versions or different renditions. Also each document will be available only to certain groups or roles.

Our client is quite specific about what they require and how they want it to be presented, so ease of customisation and extensibility is a major factor. We have looked around at existing CMSes but have not found one that fulfills all of our requirements or that is customisable enough that we can fulfill our requirements with a bit of work. We looked at Plone, and then I decided we might be better off going down a level and building on Zope.

Does this sound like a good idea to you guys? Do you know of any better suited frameworks or even existing systems that we should use? Finally if we do settle on Zope, would we be wiser using the 2.x version or the 3.x version? I imagine that 2.x has more documentation and more addons (e.g. for versioning, workflow etc.).

Another consideration is that the skillset here is mainly in PHP and Java, however I don't think anybody is fazed by having to use Python if Zope is the best option for us.


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Advice needed before settling on Zope

2006-02-14 Thread Andrew Milton
+---[ Rainsford, David ]--
| Hi Zope users!
| 
| We have to build a content/document management system for our company, and I
| have been assigned to look into this and make a start.  The system has quite a
| few requirements, which I'll outline below.

[snip]

| Our client is quite specific about what they require and how they want it to 
be
| presented, so ease of customisation and extensibility is a major factor.  We
| have looked around at existing CMSes but have not found one that fulfills all
| of our requirements or that is customisable enough that we can fulfill our
| requirements with a bit of work.  We looked at Plone, and then I decided we
| might be better off going down a level and building on Zope.
| 
| Does this sound like a good idea to you guys? 

There's nothing that you've outlined that can't be done in Zope, in fact CA
were developing (or have developed) a document management system in Zope (well
in Plone) that they are intending to contribute back to the Zope community.
The project is called BrightStor. You might want to poke the CA guys in
Melbourne to see if they can give you a timeframe for when the rights will be
assigned to the Plone Foundation (the Plone guys might also know d8)

| Do you know of any better suited
| frameworks or even existing systems that we should use?  Finally if we do
| settle on Zope, would we be wiser using the 2.x version or the 3.x version?  I
| imagine that 2.x has more documentation and more addons (e.g. for versioning,
| workflow etc.).

At this point you'd probably find more resources that you could adapt for
Zope2 as opposed to Zope3. If you're going to develop from the ground up,
Zope2 + Five (Zope3 interface layer for Zope2) might help you get started,
with an easier transition to Zope3 if/when it's more mature for you.

| Another consideration is that the skillset here is mainly in PHP and Java,
| however I don't think anybody is fazed by having to use Python if Zope is the
| best option for us.

We're all biased on this list, you probably won't find too many people who
won't tell you to use Zope d8)

-- 
Andrew Milton
[EMAIL PROTECTED]
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Zope 2.9 and SSL

2006-02-14 Thread Janusz Zamecki
Hello,

Is anyone tried to access Zope 2.9 via SSL? I've tried m2crypto, but
this doesn't work with the newest zope. And I've tried to use stunnel,
but I'm stuck with some problems - I cannot find the way to force zope
to use https://xxx urls with choosen stunnel port number.

The easiest way is to use Apache, but I have reasons to not go that way.

Any clues?

Best regards,
Janusz



signature.asc
Description: OpenPGP digital signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: TextIndexNG2 problems

2006-02-14 Thread Chris Withers

michael nt milne wrote:

No idea...I won't spend any time on windows issues at this point.



Life-is-too-short-to-waste-it-with-windows-issues,


Well of course Windows isn't the ideal platform and sucks on many levels but
the fact that many, many, businesses have their own Windows small business
server boxes in house and can install and base their small to medium traffic
sites on then, means that in reality, anti-Windows snobbishness doesn't
really get you anywhere on a business level. Even though it has a logical
core.


Michael,

Do you ever quite trolling?

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Chris Withers

michael nt milne wrote:

cookie based. Now going with Zope/Plone auth over SSL alone with cookies set
to expire.


I hope you're making sure the secure bit is set on those cookies ;-)


My aim is security with a good level of usability and I'll achieve that

:-)


Considering you can't even quote a response correctly, I somehow doubt 
that...



I'm going to block 8080 at the router/firewall level as Zope obviously
needs to keep serving through 8080 to Apache.

using iptables in the box is probably a better idea...



thanks for the advice but I'll probably go with router level


Fine, don't take our advice, but don't expect help either...


works perfectly viewing and editing so it's a browser issue. I know of other
people who have issues with IE and posting images over SSL. Must be
something to do with POST security over IE. I'm going to take it up with
them but don't expect too much of a response. I'm now about to try with
Opera.


Sheesh, sorry, but I've come to the conclusion you're just trolling and 
so won't be wasting my time with any more of your posts...


Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] proxy roles on Product methods

2006-02-14 Thread Chris Withers

Tom,

Please keep CC'ing in the list... last warning ;-)

Palermo, Tom wrote:

edit_html just returns a dtml form edit_html.dtml.


If you don't want to show us the *code* for edit_html, we can't help you...


I think the auth error is
happening when edit_html tries to load the wywiwyg editor.


I thought you said edit_html is method on a disk-based python class?!

cheers,

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: Re: major problems placing authentication on an extranet site-security flaw?

2006-02-14 Thread Chris Withers

Alexander Limi wrote:
On Tue, 14 Feb 2006 04:59:07 -0800, Dario Lopez-Kästen 
[EMAIL PROTECTED] wrote:


*HOWEVER*, IIRC, plone, especially on windows (if installed with the 
windows installer) uses a trick, which is not documented at all, as 
far as I know, uses a Site Access rule.


http://plone.org/documentation/faq/multiple-sites-installers

What part is not documented at all? :)


*sigh*

If it uses an Access Rule, it's likely still a dirty trick that will 
confuse retards like Michael, I'd suggest removing it...


Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope-DB] strange date problem: 2015-11-23 08:10

2006-02-14 Thread Andreas Jung

You might check your system clock first.

-aj

--On 14. Februar 2006 09:17:17 +0100 Marc Petitmermet 
[EMAIL PROTECTED] wrote:



dear list members

i have a strange date problem: when creating zope objects, like a  zope
file or folder, the date is always set to 2015-11-23 08:10. this  is
zope-2.7.3. we have a content management system (silva) where the  dates
of new created silva objects in the silva content management  system is
correct, but down in the zmi it is always 2015-11-23 08:10.  the
consequence of this problem is that i cannot pack the ZODB anymore.

can anybody tell me how to fix this problem? does an upgrade to
zope-2.7.8 fix this problem? and how can i change the date of the
objects in the future?

thanks for any advice.

regards,
marc

___
Zope-DB mailing list
Zope-DB@zope.org
http://mail.zope.org/mailman/listinfo/zope-db






pgpKDY66CGq89.pgp
Description: PGP signature
___
Zope-DB mailing list
Zope-DB@zope.org
http://mail.zope.org/mailman/listinfo/zope-db