[Zope] subscribe

2006-02-16 Thread Khachatur Yengibaryan
[EMAIL PROTECTED] wrote: Send Zope mailing list submissions to zope@zope.org To subscribe or unsubscribe via the World Wide Web, visit http://mail.zope.org/mailman/listinfo/zope or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach

Re: [Zope] where to install rtf2xml script to work with Zope and TextIndexNG?

2006-02-16 Thread Andreas Jung
Please RTFM. The documentation tells you cleary that every external converter must be available through $PATH. This means it has to be installed in some directory that is part of your $PATH. And there is no documentation telling you anything about 'Extensions' or 'Products'. Thanks for reading, -

[Zope] Re: installing PIL on Window Zope

2006-02-16 Thread Owen K
If you want to register your python in the Windows registry, try this URL http://effbot.org/zone/python-register.htm   I just installed PIL this afternoon using the script above, then using the PIL installer. No complaints/errors. But I have not verified PIL function.   Regards, Owen "Alle

[Zope] where to install rtf2xml script to work with Zope and TextIndexNG?

2006-02-16 Thread Owen K
Hi all, Where should I install rtf2xml script, or will python setup.py install take care of that? My setup: zope 2.8.5 windows XP Pro Should I install it under Zope "Products" or under Zope "Extensions" ? Ultimately this script is for use with TextIndexNG(3, I hope) which I have not installed

Re: [Zope] restricting permissions for direct access only

2006-02-16 Thread Stefan H. Holek
There is no way, proxy roles are not passed-on to callees. Stefan On 14. Feb 2006, at 17:04, Michael Shulman wrote: But... it's still not working for my real site. I think the issue is this. If script1 has proxy role Manager, and script2 has view permissions set only for Manager, then script

[Zope] [Getting OT] major problems placing authentication on an extranet site-security flaw?

2006-02-16 Thread Floyd May
On 2/16/06, michael nt milne <[EMAIL PROTECTED]> wrote: > yeah, take his advice Chris :-) > > > On 2/16/06, Floyd May <[EMAIL PROTECTED]> wrote: > > It's been said a million times in a million different ways, so let's > > tick that counter one more time and make it a million and one: > > > > DON'T

[Zope] Does Zope 3.2 need to use a separate instance of twisted?

2006-02-16 Thread Mark, Jonathan (Integic)
Title: Does Zope 3.2 need to use a separate instance of twisted? My website already had an existing install of twisted. I then installed Zope 3.2, and it looks to me as if Zope 3.2 installed a second version of twisted. Does Zope 3.2 install a modified or hacked version of twisted? If not

Re: [Zope] Re: Re: major problems placing authentication on an extranet site-security flaw?

2006-02-16 Thread michael nt milne
yeah, take his advice Chris :-) On 2/16/06, Floyd May <[EMAIL PROTECTED]> wrote: It's been said a million times in a million different ways, so let'stick that counter one more time and make it a million and one: DON'T FEED THE TROLLS.http://img18.photobucket.com/albums/v55/krazykit/2004-03-22_10455

[Zope] Re: Zope Digest, Vol 21, Issue 24

2006-02-16 Thread Michael Shulman
On 2/16/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > The only change I recall to how proxy roles work is that proxy roles > used to *augment* a users' roles; now they *replace* them. > > I don't know that the case you are talking about (S1 has proxy roles, > calls protected S2 fine, but fail

Re: [Zope] Zope 2.9 and SSL

2006-02-16 Thread Ron Bickers
On Thu February 16 2006 03:31, you wrote: > > http://www.lighttpd.net/ > > How many millions of people use this a day? I have no idea. Far less than use Apache, of course, but the number appears to be growing steadily. http://trac.lighttpd.net/trac/wiki/PoweredByLighttpd has a short list of t

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Hello again, I works! I just managed to get everything as I expected it to be. How I did it: form OFS.Image import File - I build a class _File(File): - pimped it up a little bit. - instatiated it - _setObject'ed it ... et voila I have nice File-objects with nice CMI interface... Thanks for

Re: [Zope] Re: Re: major problems placing authentication on an extranet site-security flaw?

2006-02-16 Thread Floyd May
It's been said a million times in a million different ways, so let's tick that counter one more time and make it a million and one: DON'T FEED THE TROLLS. http://img18.photobucket.com/albums/v55/krazykit/2004-03-22_104550_troll.gif -- Floyd May Senior Systems Analyst CTLN - CareerTech Learning N

[Zope] Re: restricting permissions for direct access only

2006-02-16 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Withers wrote: > Tres Seaver wrote: > >> The prior behavior (allowing users to access protected resources "above" >> the domain of their user folders) was a security hole caused by a bug, >> and was never documented as allowable: correcting it

[Zope] Re: restricting permissions for direct access only

2006-02-16 Thread Michael Shulman
I don't understand what inheriting proxy roles from callers has to do with allowing users to access protected resources above their user folders. They seem like totally different questions to me. Could you please explain? On 2/16/06, Tres Seaver <[EMAIL PROTECTED]> wrote: > >>>But... it's still

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Hello, one more thing ... Roman Klesel schrieb: >>Your error *may* mean that 'system' is not yet wrapped. Are your >>positive that 'system' is a folder that already exists in the ZODB, >>i.e. has already been _setObject'ed? > > > As far as I can tell: Yes! Actually I'm pretty shure, because

[Zope] Re: installing PIL on Window Zope

2006-02-16 Thread Josef Meile
Yes, I got that too long time ago when working with Zope 2.7.2 and python 2.3.3. At that time I did the following in the python shell: import PIL PIL.Image But I got as well: AttributeError: 'module' object has no attribute 'Image' Then I tried this: from PIL import Image as PilImage and it w

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Stefan H. Holek schrieb: > Please learn to read and to provide the *complete* traceback. The error > text alone is not enough most of the time. Ok, shure, I can do that, I just thought I'll clean out the parts that are not neccesary... > > Your error *may* mean that 'system' is not yet wrapped

Re: [Zope] SSL & Digest Auth

2006-02-16 Thread michael nt milne
Ok, I'm likely mistaken on this. I'm checking on the source. However I agree that you wouldn't want Digest Auth over SSL anyway. On 2/16/06, Andrew Milton <[EMAIL PROTECTED]> wrote: +---[ michael nt milne ]--| No, I read that for digest authentication to work the authenticat

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Stefan H. Holek
Please learn to read and to provide the *complete* traceback. The error text alone is not enough most of the time. Your error *may* mean that 'system' is not yet wrapped. Are your positive that 'system' is a folder that already exists in the ZODB, i.e. has already been _setObject'ed? Stef

Re: [Zope] Re: Re: major problems placing authentication on an extranet site-security flaw?

2006-02-16 Thread michael nt milne
sorry Chris but if I was 'retarded' as you indeed claim I wouldn't have been able to achieve so much with Plone and Zope over the last 6 months. I've gone from zero knowledge of the plaftorms to installing Zope, and Plone on a Unix box from source (not easy and required a alot of perseverance), set

Re: [Zope] SSL & Digest Auth

2006-02-16 Thread Andrew Milton
+---[ michael nt milne ]-- | No, I read that for digest authentication to work the authentication data can't | be encrypted. Therefore it seems perfect for implementing more security on | non-SSL sites or sites that don't need SSL but need more security on logon. This is b

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Hello, Jens Vagelpohl schrieb: > If that object subclasses > from the normal Zope Folder class (or is a Zope Folder) you *will* have > manage_addProduct. Yes, actually you guys a right! self.manage_addProduct is available... Hmmm ... wonder what made me think it's not ... Still I can't get wha

Re: [Zope] SSL & Digest Auth

2006-02-16 Thread michael nt milne
No, I read that for digest authentication to work the authentication data can't be encrypted. Therefore it seems perfect for implementing more security on non-SSL sites or sites that don't need SSL but need more security on logon. On 2/16/06, Chris Withers <[EMAIL PROTECTED]> wrote: Hi All,Someth

Re: [Zope] installing PIL on Window Zope

2006-02-16 Thread Allen Huang
Hi... I assume that you mean to make modification to the path to the python interpreter in Zope at the \etc\zope.conf right?   what lines should I add or modify? Tino Wildenhain <[EMAIL PROTECTED]> wrote: Allen Huang schrieb:> I want to install PIL into zope but I couldn't use the installation

[Zope] Re: Zope 2.9 and SSL

2006-02-16 Thread Michael Haubenwallner
Janusz Zamecki wrote: zope napisa?(a): Hi, zhttps provides an HTTPS Zserver to Zope-2.9.0. This zope product uses M2Crypto. I think this may give you a hint towards SSL and Zope-2.9.0 http://www.zope.org/Members/lerouxa/zopehttps Try it first with test certificates provided with M2Crypto/de

Re: [Zope] Zope 2.9 and SSL

2006-02-16 Thread Janusz Zamecki
zope napisa?(a): > Hi, > > zhttps provides an HTTPS Zserver to Zope-2.9.0. This zope product uses > M2Crypto. I think this may give you a hint towards SSL and Zope-2.9.0 > > http://www.zope.org/Members/lerouxa/zopehttps > > Try it first with test certificates provided with > M2Crypto/demo/zope/{

Re: [Zope] Re: installing PIL on Window Zope

2006-02-16 Thread Tino Wildenhain
Josef Meile schrieb: Hi Allen I started importing External Script using PIL but all I get is -- 'module' object has no attribute 'Image' Yes, I got that too long time ago when working with Zope 2.7.2 and python 2.3.3. At that time I did the following in the python shell: import PIL PIL.Ima

[Zope] SSL & Digest Auth

2006-02-16 Thread Chris Withers
Hi All, Something from another thread which I forgot to ask about... Can you really not use digest auth with an ssl connection? cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk ___ Z

[Zope] Re: installing PIL on Window Zope

2006-02-16 Thread Josef Meile
Hi Allen I started importing External Script using PIL but all I get is -- 'module' object has no attribute 'Image' Yes, I got that too long time ago when working with Zope 2.7.2 and python 2.3.3. At that time I did the following in the python shell: import PIL PIL.Image But I got as well:

Re: [Zope] Re: restricting permissions for direct access only

2006-02-16 Thread Chris Withers
David wrote: I just disagree. If theres a paranoia with the standard set of roles then prevent *those* from upward acquisition. But if I add a role *specifically* so it can access a common code pool, Security is hard enough as it is, special cases like this are something that Zoep 2 has en

Re: [Zope] Granting access by reading http headers

2006-02-16 Thread Chris Withers
Marc Schnapp wrote: We're running Plone for internal departmental use. I'm going to lock down most of the content, requiring a login to view sensitive documents. But I also want our Google Mini appliance to crawl all content. Google Mini can do http basic auth, right? If so, you're fine, just

Re: [Zope] Zope 2.9 and SSL

2006-02-16 Thread Chris Withers
Ron Bickers wrote: On Wed February 15 2006 02:42, Janusz Zamecki wrote: The easiest way is to use Apache, but I have reasons to not go that way. If you don't want big Apache, lighttpd is small and has made a good SSL front-end proxy to Zope for me. http://www.lighttpd.net/ How many milli

Re: [Zope] Re: restricting permissions for direct access only

2006-02-16 Thread Chris Withers
Tres Seaver wrote: The prior behavior (allowing users to access protected resources "above" the domain of their user folders) was a security hole caused by a bug, and was never documented as allowable: correcting it was a matter for a rather urgent fix, as it broke the explicitly-documented mode

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Jens Vagelpohl
On 16 Feb 2006, at 09:33, Roman Klesel wrote: Hello Bruno, bruno desthuilliers schrieb: What's wrong with: container.manage_addProduct['OFSP'].manage_addFile(id, file='', title='', precondition='', content_type='', REQUEST=None) Well, in a fs product I don't have container nor self.manag

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread bruno desthuilliers
Roman Klesel wrote: > Hello, > > Roman Klesel schrieb: > >>Hello, >> >>in a product I try to make a file object persistent with the _setObject() >>method. What's wrong with: container.manage_addProduct['OFSP'].manage_addFile(id, file='', title='', precondition='', content_type='', REQUEST=None

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Hello Bruno, bruno desthuilliers schrieb: > What's wrong with: > > container.manage_addProduct['OFSP'].manage_addFile(id, file='', > title='', precondition='', content_type='', REQUEST=None) Well, in a fs product I don't have container nor self.manage_addProduct or something (AFAIK). Therefor

Re: [Zope] installing PIL on Window Zope

2006-02-16 Thread Tino Wildenhain
Allen Huang schrieb: I want to install PIL into zope but I couldn't use the installation package since python that came with zope isn't register on windows. so I installed python 2.3 seperately and I found some artical on the zope website and it said to - decompress and PIL package and

[Zope] installing PIL on Window Zope

2006-02-16 Thread Allen Huang
I want to install PIL into zope but I couldn't use the installation package since python that came with zope isn't register on windows.   so I installed python 2.3 seperately and I found some artical on the zope website and it said to  -  decompress and PIL package and move  -  Copy the PIL f

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Hello, Roman Klesel schrieb: > Hello, > > in a product I try to make a file object persistent with the _setObject() > method. > > However I get the error: > Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd' I managed to fix this by crating my own _File class and subcl