[Zope-dev] Inhibit URL-traversal

2006-02-10 Thread Dario Lopez-Kästen
Greetings, for a product I am writing, i need to experiment with inhibiting URL-traversal to the methods and subobjects of it. I still wnat the methods and objects to be available via direct call, for instance: from a script or template: container.my_product_instance.some_method(...) but

[Zope-dev] Python warnings behavior and stacklevel=2

2006-02-10 Thread Julien Anguenot
Hi there, I'm having some problems with the warnings module behavior. (Python-2.4.2 and Zope-2.9 trunk) [... traceback ... ] - Line 71 Module zLOG, line 140, in LOG Module warnings, line 61, in warn Module warnings, line 67, in warn_explicit TypeError: unsubscriptable object It seems

[Zope-dev] Introspector package in zope 2.9

2006-02-10 Thread Jean-François Roche
Hello, I can't find the Introspector package in zope.app in 2.9 (Zope shipped with Zope-2.9.0.tgz) but can find it on svn. Forgot something ? Can you help? Thanks! Regards, Jeff ___ Zope-Dev maillist -

Re: [Zope-dev] Inhibit URL-traversal

2006-02-10 Thread Dieter Maurer
Dario Lopez-Kästen wrote at 2006-2-10 10:56 +0100: ... for a product I am writing, i need to experiment with inhibiting URL-traversal to the methods and subobjects of it. I still wnat the methods and objects to be available via direct call, for instance: You can use a SiteAccess AccessRule for

Re: [Zope-dev] Python warnings behavior and stacklevel=2

2006-02-10 Thread Tim Peters
[Julien Anguenot] I'm having some problems with the warnings module behavior. (Python-2.4.2 and Zope-2.9 trunk) [... traceback ... ] - Line 71 Module zLOG, line 140, in LOG Module warnings, line 61, in warn Module warnings, line 67, in warn_explicit TypeError: unsubscriptable

Re: [Zope] Using ParsedXML from Python script

2006-02-10 Thread Sascha Welter
(Thu, Feb 09, 2006 at 12:00:08PM -0500) [EMAIL PROTECTED] wrote/schrieb/egrapse: From: Brian Sullivan [EMAIL PROTECTED] Subject: [Zope] Using ParsedXML from Python script I am attempting to extract information from a ParsedXML object using Python script. I can't seem to get my mind around

Re: [Zope] Zope and roles and hierarchy

2006-02-10 Thread Kees de Brabander
- Original Message - From: David [EMAIL PROTECTED] To: zope user list zope@zope.org Sent: Friday, February 10, 2006 4:44 AM Subject: [Zope] Zope and roles and hierarchy Hello Zope, Is it true that even though a user Role like 'author' is defined at zope root that users defined

[Zope] zope file system folder(severe problem)

2006-02-10 Thread Giorgos Dimitriou
Hello Zope, I am new to zope and I'm exploring different products an functions. A couple of days ago I tried to install a zope product called zope file system folder, on a zope 2.8.4 linux(Red Hat core 4) installation. What this attemt caused was a severe damage of the linux partition. The exact

Re: [Zope] zope file system folder(severe problem)

2006-02-10 Thread Chris Withers
Hi, Suggest firstup you read: http://www.catb.org/~esr/faqs/smart-questions.html ...especially the bit about Don't flag your question as “Urgent”, even if it is for you... Giorgos Dimitriou wrote: I am new to zope and I'm exploring different products an functions. A couple of days ago I

Re: [Zope] zope file system folder(severe problem)

2006-02-10 Thread Giorgos Dimitriou
2006/2/10, Chris Withers [EMAIL PROTECTED]: Hi,Suggest firstup you read:http://www.catb.org/~esr/faqs/smart-questions.html...especially the bit about Don't flag your question as "Urgent", even if it is for you... Ok I'm sorry about the severe part. Giorgos Dimitriou wrote: I am new to zope and I'm

Re: [Zope] zope file system folder

2006-02-10 Thread Chris Withers
Giorgos Dimitriou wrote: Suggest firstup you read: http://www.catb.org/~esr/faqs/smart-questions.html Ok I'm sorry about the severe part. Yup, there's loads of other good stuff in there too ;-) http://sourceforge.net/projects/fsfolder I just searched in www.zope.org for file system and

[Zope] Re: zope file system folder(severe problem)

2006-02-10 Thread Maik Ihde
http://sourceforge.net/projects/fsfolder I just searched in www.zope.org for file system and it came out as a product. I don't think you can help me actually, I just re-installed everything Well, I still have difficulties in believing that Zope will damage your filesystem, but I do

[Zope] Method to return the properties of an object

2006-02-10 Thread George
Is there a method to return the properties of an object?Sorry if it's sth obvious! ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists -

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread michael nt milne
Well I said it was over and out but I have to respond to this latest post. I appreciate the help here and will be trying out some of the suggestions. Basically though, Zope permissions and security could be made a lot more usable. It's far too technically focused and this is the opinion of a few

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Jonathan
You can create a small utility external method to call dir() and type() - very useful!Jonathan - Original Message - From: George To: zope@zope.org Sent: Friday, February 10, 2006 8:11 AM Subject: [Zope] Method to return the properties of an object Is there a

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread Chris Withers
michael nt milne wrote: Well I said it was over and out but I have to respond to this latest post. You liar! Basically though, Zope permissions and security could be made a lot more usable. Cool, we look forward to your documented proposal to dev.zope.org including implemented code on a

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread bruno desthuilliers
George wrote: Is there a method to return the properties of an object? Not sure what you're talking about... Properties as defined by the PropertySheet/PropertyManager API, or just attributes ? -- bruno desthuilliers développeur [EMAIL PROTECTED] http://www.modulix.com

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Tino Wildenhain
Jonathan schrieb: You can create a small utility external method to call dir() and type() - very useful! There are easier ways to shot yourself in the foot :-) ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No

[Zope] Re: Zope and roles and hierarchy

2006-02-10 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David wrote: Is it true that even though a user Role like 'author' is defined at zope root that users defined lower in the hierarchy *also* with role 'author' cannot access objects at root with role 'author' and permissions of view and access?

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Jonathan
How would you shoot yourself? - Original Message - From: Tino Wildenhain [EMAIL PROTECTED] To: Jonathan [EMAIL PROTECTED] Cc: George [EMAIL PROTECTED]; zope@zope.org Sent: Friday, February 10, 2006 8:36 AM Subject: Re: [Zope] Method to return the properties of an object Jonathan

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Tino Wildenhain
Jonathan schrieb: How would you shoot yourself? dont you think these methods arent accessible from ZMI code by purpose? :-) Btw, for Properties and their types there are already API methods. So no need to put holes into your site security. Regards Tino

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Jonathan
The idea of using an external method for dir/type is simply to allow a developer to quickly investigate attributes/methods of objects - if you are silly enough to actually incorporate this mechanism into 'production' code then you should shoot yourself. - Original Message - From:

[Zope] Re: Method to return the properties of an object

2006-02-10 Thread George
On 2/10/06, George [EMAIL PROTECTED] wrote: propertyMap() Returns a tuple of mappings, giving meta-data for properties. The meta-data includes id, type, and mode.Thx! Sorry for my blindness! :) On 2/10/06, Tres Seaver [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED

Re: [Zope] Zope and roles and hierarchy

2006-02-10 Thread Lennart Regebro
On 2/10/06, Kees de Brabander [EMAIL PROTECTED] wrote: If so, couldn't we have some extra attribute to a role like upwardly mobile? (I want to share a code base for several folders sub-folders and I do not wanta to give it anonymous access). I second that. This used to be possible, at

[Zope] Re: Method to return the properties of an object

2006-02-10 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 George wrote: Is there a method to return the properties of an object? Sorry if it's sth obvious!* For properties defined via the Properties tab, use the API defined in OFS.PropertyManager, e.g. 'propertyMap'. Tres. - --

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Tino Wildenhain
Jonathan schrieb: The idea of using an external method for dir/type is simply to allow a developer to quickly investigate attributes/methods of objects - if you are silly enough to actually incorporate this mechanism into 'production' code then you should shoot yourself. And how did you

[Zope] about zope and mouse event handling

2006-02-10 Thread Allen Huang
I want to make a web page that could handle mouse events. My primary goal is to do some image processing like zooming and panning on an image displayed and redisplay it on the same page. But I don't really know how to approach this and at the same time interacting with Zope to retrieve relevent

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Jonathan
Jonathan schrieb: The idea of using an external method for dir/type is simply to allow a developer to quickly investigate attributes/methods of objects - if you are silly enough to actually incorporate this mechanism into 'production' code then you should shoot yourself. And how did you

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Jonathan
Handling mouse eventsis a _javascript_/DOM issue. If you are interested in having _javascript_ communicate with zope you could look into Ajax (although I prefer Json to XML). This might help: http://www.zope.org/Members/ree/jsonserver2 Jonathan - Original Message - From:

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Lennart Regebro
On 2/10/06, Allen Huang [EMAIL PROTECTED] wrote: I want to make a web page that could handle mouse events. My primary goal is to do some image processing like zooming and panning on an image displayed and redisplay it on the same page. But I don't really know how to approach this and at the

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Tino Wildenhain
Allen Huang schrieb: I want to make a web page that could handle mouse events. My primary goal is to do some image processing like zooming and panning on an image displayed and redisplay it on the same page. But I don't really know how to approach this and at the same time interacting with Zope

Re: [Zope] Using ParsedXML from Python script

2006-02-10 Thread Brian Sullivan
On 2/10/06, Sascha Welter [EMAIL PROTECTED] wrote: Is that the kind of thing you were looking for? Better than what I have now -- it might get me over the initial hump -- thanks. ___ Zope maillist - Zope@zope.org

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread Paul Winkler
Can we all stop with the public name-calling and personal insults? It's embarassing. -- Paul Winkler http://www.slinkp.com ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! **

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread michael nt milne
You liar! I couldn't resist :-) You seem so entertained. Bit of sport and all that.I've spoken to many people on various lists and can confirm the feeling about usability on the ZMI etc. You call them 'halfwits'. That puts you on rather high ground and this attitude is obviously part of the

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread michael nt milne
I agree. I didn't start it and I find it un-professional. I came here with a genuine issue, have received some help which I thank people for and have made some legitimate points. I find the Zope and Plone lists are generally very good and an not interested in slanging matches. ThanksMichaelOn

Re: [Zope] Using ParsedXML from Python script

2006-02-10 Thread Patrick Decat
Hi Brian, unless it is mandatory for you to use ParsedXML for your XML needs, you might want to check out Uche Ogbuji's Amara Toolkit ( http://uche.ogbuji.net/tech/4suite/amara/ ). It provides a much more pythonic way of dealing with XML. Regards, Patrick. On 2/10/06, Brian Sullivan [EMAIL

Re: [Zope] Using ParsedXML from Python script

2006-02-10 Thread Brian Sullivan
On 2/10/06, Patrick Decat [EMAIL PROTECTED] wrote: Hi Brian, unless it is mandatory for you to use ParsedXML for your XML needs, you might want to check out Uche Ogbuji's Amara Toolkit ( http://uche.ogbuji.net/tech/4suite/amara/ ). It provides a much more pythonic way of dealing with XML.

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread Lennart Regebro
On 2/10/06, michael nt milne [EMAIL PROTECTED] wrote: I've spoken to many people on various lists and can confirm the feeling about usability on the ZMI etc. You call them 'halfwits'. That puts you on rather high ground and this attitude is obviously part of the problem. 1. By complaining

Re: [Zope] Using ParsedXML from Python script

2006-02-10 Thread Patrick Decat
I use it with Zope and Zope/CMF Content (Documents, Files, ExternalFiles) from a custom filesystem product. Regards, Patrick. On 2/10/06, Brian Sullivan [EMAIL PROTECTED] wrote: On 2/10/06, Patrick Decat [EMAIL PROTECTED] wrote: Hi Brian, unless it is mandatory for you to use ParsedXML

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Allen Huang
Dear Lennart RegebroThanks for replying. If I use the pythonGUI, which you mention that it no longer use a brower, how would I use GUI to interact with zope database? How does the client end interact with the GUI? Lennart Regebro [EMAIL PROTECTED] wrote: On 2/10/06, Allen Huang <[EMAIL

Re: [Zope] Re: Transfer Data to New Zope Server

2006-02-10 Thread Paul Winkler
On Thu, Feb 09, 2006 at 07:01:15PM -0500, Tres Seaver wrote: 4. Finally, shut down Zope on the both boxes. Copy the 'Data.fs*' files from the 'var' subdirectory of the instance home on the old box to the equivalent 'var' directory on the new box. Start Zope on the new box, and

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread Floyd May
On 2/10/06, michael nt milne [EMAIL PROTECTED] wrote: I agree. I didn't start it and I find it un-professional. I came here with a genuine issue, have received some help which I thank people for and have made some legitimate points. I find the Zope and Plone lists are generally very good and

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread michael nt milne
I take the point that I approached this issue from the wrong standpoint and apologise for that. This was perhaps born out of a little frustration. I was never rude though. Also I feel that Plone has usabillity which sits above it's prettyness. It is a well designed interface graphically but also

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread michael nt milne
Yes I've apologised for the initial tone which was the wrong way to begin and yes I agree I should have routed out more documentation. I've read Andy Mackay, Plone Live, printed out screeds of how tos, chapters of the Zope book, installed Zope on my Unix server etc so I do have a reasonable, if

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Lennart Regebro
On 2/10/06, Allen Huang [EMAIL PROTECTED] wrote: Dear Lennart Regebro Thanks for replying. If I use the python GUI, which you mention that it no longer use a brower, how would I use GUI to interact with zope database? That depends on what method you decide to use to interact. There are

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Allen Huang
Dear LennartSorry... I'm still pretty new at this, I'm only worked with java templet.Is it possible for you to show me some example using GUI and ZODB together.. Some other guy replyed and said it couldn't be done.Lennart Regebro [EMAIL PROTECTED] wrote: On 2/10/06, Allen Huang <[EMAIL

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread Philip Kilner
Hi Michael, michael nt milne wrote: Also I feel that Plone has usabillity which sits above it's prettyness. It is a well designed interface graphically but also has very strong non graphical usability elements. You are correct - but you are not comparing like with like, as Plone is an

[Zope] Research on collaborative navigation (z9)

2006-02-10 Thread Andre Rodrigues
Hi all, My name is André. I'm workingon aresearch prototype that tries to cluster web pages by tracking the interests of users (by recording the users' searches and accepted links) and relates that with an adaptive crawling mechanism. The address is http://andrers52.dyndns.org:8080/z9 The

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Floyd May
On 2/10/06, Tino Wildenhain [EMAIL PROTECTED] wrote: ... maybe if there is a chapter about image manipulation on the fly with PIL (python imaging lib) I believe that Plone (or Plohn as it seems to be called by Zope people ;-) ) has some product(s) somewhere that make use of PIL. Here's a VERY

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread J Cameron Cooper
Floyd May wrote: On 2/10/06, Tino Wildenhain [EMAIL PROTECTED] wrote: ... maybe if there is a chapter about image manipulation on the fly with PIL (python imaging lib) I believe that Plone (or Plohn as it seems to be called by Zope people ;-) ) If by Zope people you mean Chris Withers.

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread J Cameron Cooper
michael nt milne wrote: Well I said it was over and out but I have to respond to this latest post. I appreciate the help here and will be trying out some of the suggestions. Basically though, Zope permissions and security could be made a lot more usable. It's far too technically focused and

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Tino Wildenhain
Floyd May schrieb: On 2/10/06, Tino Wildenhain [EMAIL PROTECTED] wrote: ... maybe if there is a chapter about image manipulation on the fly with PIL (python imaging lib) I believe that Plone (or Plohn as it seems to be called by Zope people ;-) ) has some product(s) somewhere that make

Re: [Zope] Re: major problems placing authentication on an extranet site-security flaw?

2006-02-10 Thread Michael Vartanyan
In the very beginning of my Zope career, I once shot myself in the foot with a very stupid thing... I kept it to myself then but if we are talking about Zope security settings and usability of the ZMI at the same time, perhaps it is an ideal place to raise this issue. If you use the famous

[Zope] zope 3 and web services

2006-02-10 Thread Dilley, Hara
Title: zope 3 and web services Is there any recent documentation available for soap and web services in general using python 2.4.2 and zope 3 thanks ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross

[Zope] restricting permissions for direct access only

2006-02-10 Thread Michael Shulman
Hi, I am new to Zope, and so far I like it very much. But I think I am confused about how security works, or is supposed to work. Specifically I want to know the following. Is there a way in Zope to restrict permissions for direct access only (i.e. calling an object through the web) but still