[Zope-dev] Multilingual websites

2000-12-18 Thread Bjorn Stabell

Hi there,

I'm working on improving the support for multilingual websites in Zope.
Already I've found some tools to be of great help: SiteAccess,
Translator, and Transparent Folder (and zzLocale, although I'm mostly
interested in ZODB objects).  The Transparent Folder enabled me to
separate the code, content, and design into separate folders (yeah!  it
should really be part of the core!), the Translator allows me to
externalize strings and localize objects that I want to include (via
dtml-lvar).

I've run into a couple of problems with the Translator product, though,
mainly because I want to localize whole documents, but let them keep the
same URL.  Let's say I have a "product_info" document.  I could put it
in a separate ISO language folder, e.g., zh/de/fr/en/no, but then the
normal traversal engine can't find it (only dtml-lvar can) unless I
explicitly say which folder it is in, which kind-of ruins the point.
The ideal case is that:

http://website/company/info

would find and return

zh/company/info
de/company/info
...
company/info

based on the user's language preference.  I thought about using
SiteAccess to do that, but it's proving hard, and also would only allow
me to do a "language split" at the top.  A more interesting solution
would be to patch the traversal engine (could I do it with SiteAccess?)
to look for a particular language version of each object (designated by
adding the language's ISO code to the name or some other such
convention);  in that way I could make company/ a global directory, or I
would chose to make it into a localized directory, i.e., all of these
would work:

company:zh/info
company/info:zh
company:de/info
etc...

Could this be done with Zope?

Another thought was to make a special Transparent Folder (maybe called
Localized Folder) that would resolve accesses to subobjects based on the
user's language preference.  Different language versions of each object
could be put in separate sub-folders, as it is for the Translator
product.

PS! Any chance of seeing an integration of the core (at least language
matching) functionality of Translator and zzLocale?  These two products
should really become part of the core ASAP, in some form or another.

Bye,
-- 
Bjorn

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Login updating database (so ZEO is slow)

2000-12-18 Thread Bjorn Stabell

Hi,

We've been experimenting with ZEO for a few months.  The intended use is
to have a ZEO client on our LAN, one on the Internet backbone in China,
and one in the US, but there are two problems preventing us from using
it:

1. updates are very slow, slower than accessing the ZEO client closest
to the ZEO server directly

2. logging in updates the database, so they are consequently also very
slow

(in addition: to use it well we need a distributed director, and
atomically updating a set of ZEO installations is not trivial.)

Why does logins update the database?  Is there any way to turn that off
easily?

We tested running the ZEO server on our LAN, and the ZEO client on the
backbone of the Internet, communicating over a 64kbps DDN line...  It
took several minutes to log in! :)  Most people thought our server had
crashed.

Would it be possible to support asynchronous updates (optimistic
locking) and conflict resolution in the future, allowing for no wait
time?  (sort-of like Notes and CVS)

Bye,
-- 
Bjorn [EMAIL PROTECTED]

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Changing hostname and port without SiteAccess

2000-12-18 Thread Martin Winkler

Hello list,

I already put my question on the "[EMAIL PROTECTED]" list, but there was no 
solution in sight, so I'm trying to get deeper (spell: start using) into 
python.

I cannot use SiteAccess (because I need multiple ZCatalogs), and my Zope 
server (port 8080) is behind squid (in http-accelerated mode - port 80).

What I would need is changing the hostname and port in the html-responses 
like this: http://localname.com:8080/blah  to 
http://officialserver.com/blah , so the client reconnects to squid, not 
zope itself.

Any hints where to start looking for the right python files or even 
functions/methods?

Thanks in advance for your info,

Martin


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] new 2.2.4 security/role bug ?? (ZCatalog related ??)

2000-12-18 Thread Didier Georgieff

Hello,

I'm experimenting some really weird and annoying things since i upgraded 
to 2.2.4 with 12-08 and even with 12-15a hotfix (seems to be ok in 2.2.2) 

For all objects, I can access directly (URL) with no problem (according to 
the roles and the local roles. This is ok).

For some of those objects (seems to be all the one i've added in 2.2.4 in 
folders with local roles) I can't (exeption raise) access the objects while in 
the context of the catalog (those objects are Catalog Aware via Yihaw 
product).

I epurate the method until this minimal test method who still raise the 
exeption 

dtml-in Catalog
  dtml-with "Catalog.getobject(data_record_id_)"
a href="dtml-absolute_url;"dtml-var title_or_id/abr
  /dtml-with
/dtml-in

I have a workaround with a dtml-try but i miss all the objects, while they 
are fully reachable directly via their URL

The problems seems to be on objects with local roles (anonymous has no 
view, no access content and other roles have this autorisations via local 
roles).

The second weird thing (should help for a diagnostic) is :

While i have  "manager" role (i can do whatever i want on the manage 
interface), i tried to give a proxy role to my test method, to see if i could 
investigate further. 
And trying to change the proxy role raised an execption, despite the fact i 
have manager role with full autorisations.

This last thing makes me think is an acquisition/role/security bug.

Any idea/solution because we offcially open tomorrow morning, and i'm in 
a deep well embarassed ;-))

=== This is the FIRST traceback.
Zope Error

 Zope has encountered an error while publishing this resource. 

 Unauthorized

 You are not authorized to access title_or_id. 

 Traceback (innermost last):
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/Publish.py, line 222, in publish_module
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/Publish.py, line 187, in publish
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/Publish.py, line 171, in publish
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/mapply.py, line 160, in mapply
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/Publish.py, line 112, in call_object
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/OFS/DTMLMethod.py, line 172, in __call__
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/DocumentTemplate/DT_String.py, line 528, in __call__
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/DocumentTemplate/DT_In.py, line 611, in renderwb
 (Object: Catalog(bobobase_modification_time=ZopeTime()-14,
   bobobase_modification_time_usage='range:min',
   sort_on='bobobase_modification_time',
   sort_order='reverse'))
   File /home/georgieff/Zope-2.2.2-
src/lib/python/DocumentTemplate/DT_With.py, line 146, in render
 (Object: Catalog.getobject(data_record_id_))
   File /home/georgieff/Zope-2.2.2-
src/lib/python/OFS/DTMLMethod.py, line 194, in validate
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/AccessControl/SecurityManager.py, line 139, in validate
   File /home/georgieff/Zope-2.2.2-
src/lib/python/AccessControl/ZopeSecurityPolicy.py, line 209, in validate
 Unauthorized: (see above)


=== This is the SECOND traceback.

Zope Error

  Zope has encountered an error while publishing this resource. 

  Forbidden

  You are not authorized to change test_latest because you do not have 
proxy roles. 

  Traceback (innermost last):
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, 
line 222, in publish_module
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, 
line 187, in publish
File /home/georgieff/Zope-2.2.2-src/lib/python/Zope/__init__.py, line 
221, in zpublisher_exception_hook
  (Object: test_latest)
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, 
line 171, in publish
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/mapply.py, 
line 160, in mapply
  (Object: manage_proxy)
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, 
line 112, in call_object
  (Object: manage_proxy)
File /home/georgieff/Zope-2.2.2-src/lib/python/OFS/DTMLMethod.py, 
line 278, in manage_proxy
  (Object: test_latest)
File /home/georgieff/Zope-2.2.2-src/lib/python/OFS/DTMLMethod.py, 
line 271, in _validateProxy
  (Object: test_latest)
  Forbidden: (see above)


--
Didier Georgieff
DDAF du Bas-Rhin - Cellule SIG 
2, rue des Mineurs 67070 Strasbourg Cedex
tél : 

Re: [Zope-dev] Changing hostname and port without SiteAccess

2000-12-18 Thread Evan Simpson

From: Martin Winkler [EMAIL PROTECTED]
 I cannot use SiteAccess (because I need multiple ZCatalogs)

To the extent that you can't use SiteAccess with ZCatalogs, you will also
not be able to use any other solution (until ZCatalogs are fixed, hopefully
in 2.3).  The problem with ZCatalogs is not SiteAccess-specific, it is with
virtual hosting in general.

Cheers,

Evan @ digicool  4-am


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] ZPatterns, ZClasses, Specialists: Assigning responsibilities

2000-12-18 Thread Phillip J. Eby

At 04:21 PM 12/18/00 +1100, Itai Tavor wrote:

This is how I see it:

- Products Specialist
 productRack
 customizableProductRack

- OrderLineItem Specialist
 lineItemRack
 lineItemWithGraphicRack

- product.addMeToOrder():
 order.addLineItem(product_id=id, add='lineItem')

- custimazable_product.addMeToOrder():
 order.addLineItem(product_id=id, add='lineItemWithGraphic')

This should probably be more like:

product.addMeToOrder():
  item = OrderLineItems.newLineItemFor(self)
item.setQuantity(...)
  etc.
  order.addLineItem(item)

customizable_product.addMeToOrder():
  item = OrderLineItems.newLineItemFor(self)
  item.setGraphic(...)
item.setQuantity(...)
  etc.
  order.addLineItem(item)

This approach makes things more declarative.  The product classes can have
properties or interfaces that the OrderLineItems specialist can use to
decide what kind of line item would serve them best.  You can then change
your line item assignment rules without necessarily requiring changes to
the product classes.



I imagine, then, that the UI for uploading the graphic would be 
included in product.addMeToOrderForm, using a UI snippet from the 
OrderLineItemsWithGraphic Specialist. Then I could pass REQUEST on to 
order.addLineItem and to OrderLineItemsWithGraphic.add, which would 
then upload the file?

I think you're right about this being an OrderLineItem.  A couple of fine
points, however...  First, I don't think there needs to be an
"OrderLineItemsWithGraphic" specialist, since there is nothing else that
would talk to it.  It's fine in this case to have the line item classes
(either with graphic or without) handle their own UI snippets.  UI
delegation is for when an object needs to display UI for some *other*
object than itself, since you can always use class extenders and other
techniques to reshape the apparent class of an object retrieved from a
specialist.  The interface which other objects deal with is
"OrderLineItem", and they simply expect a portion of the form to be
rendered, and it's okay for the class to handle that.

Second, you need to define that interface so that the Order can give the
line item constraints on how it does that UI, so it can share the screen
and REQUEST with other objects/data that the Order needs.  One easy way to
do this is to use a namespace parameter, that simply gives the line item a
name prefix to use on its fields.  Alternatively, you can use the "record"
approach, like this:

INPUT TYPE="TEXT" NAME="lineitem1.desiredSize:record:int" VALUE="4"
INPUT TYPE="FILE" NAME="lineitem1.imageFile:record:file"
...

The resulting REQUEST object from submitting the form will contain a single
object, "lineitem1", with "desiredSize" and "imageFile" attributes, so
you'll only have to pass a single parameter back to the line item.  I've
never tried doing a record with a file in it before, so I don't really know
how well that works.


Woof... so long. I'd appreciate any comments on this - especially on 
the question on whether it's better to have a specialized type of 
OrderLineItem, or to link the standard OrderLineItem to a Product 
object in case of a standard product, or, in the case of a 
customizable product, to a new object which stores the graphic and 
tracks the fabrication of the customized item.

Here's the question...  how many behaviors are different in the order line
item itself?  Are you also using fulfillment line items?  If the only
difference to the order line item is that it references some additional
data, then I'd say a single class would be fine.  Most of the behavior
probably comes in on the fulfillment line item, yes?  Again, you can ask
your FulfillmentLineItems specialist to create
"newLineItemFor(orderLineItem)" and let it decide what kind of
implementation to hand back.  In this case, it probably will be a different
class, while for the order line items, it may or may not buy you anything.

Anyway...  remember that Specialists are there to hide implementation
decisions like what classes are being used.  If you look at the ZPatterns
Wiki you'll see references to some of the design patterns which Specialists
are an instance of, which will give you some hints as to the many kinds of
things they can "hide" for you (and which therefore you should avoid
revealing in other code).  One of those patterns is that as an object
"trader" or "broker", Specialists can be used to create new instances of
objects that meet a certain interface, but whose implementation has been
selected on the basis of declarative criteria by the requesters.


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] more on keyword indexes

2000-12-18 Thread Josh Zeidner


Hello,

  Thanks for all the replies.  Its seems there are two conflicting answers 
to my questions.  Steve Alexander says that it is possible to query indexes 
using the syntax dtml-in "Catalog.searchResults( doc_keywords = 
['one','two','ect'] .  However, Dieter says that it is not yet possible to 
query for more than one keyword at once.  It seems to me that these two 
sentiments are mutually exclusive.  Am I mistaken here?

-josh


Josh Zeidner writes:
 OK.  Is it possible to query keyword indexes for several keywords at 
once?
Not that I know of.

You either have to extend ZCatalog or wait some time.
There are different people working on ZCatalog enhancements.

  Again, I am reporting a bug 
You already know the Collector?
It is Zope's bug tracking system.

You find it via zope.org.
Its old URL has been

 URL:http://classic.zope.org:8080/Collector

but this might have changed after the recent changes on zope.org.


I have had very good response to Collector bug reports for Zope itself.
At least in the past, bug reports and even patches for ZCatalog
probably have been ignored, however. I hope, this has changed
meanwhile.

By the way:

   *  What does "unpredictable results" mean?


Dieter

PS: I have just blocked mail from "hotmail.com" (and "excite.com")
 because I got an increasing number of bulk email ad's
 with a faked "from: [EMAIL PROTECTED]" header.

 This means: I will no longer see direct messages from
 you, only your Zope mailing list messages which reach me
 with a delay of up to one day.

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope )


_
Get your FREE download of MSN Explorer at http://explorer.msn.com


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] RE: objectIds accessiblilty and a proposal

2000-12-18 Thread Brian Lloyd

  If you type in http://www.zope.org/Members/objectIds you get a list of
  all Members.  Although it is a useful feature.. ;) .. I can't really
  see why objectIds should be available for everyone, at any given time.
  
  Is this a bug or a feature?

 I was able to do this as anonymous on another Zope site as well. It
 basically lets you do a directory listing of any folderish object. Using
 objectValues, you can learn the type of objects that live there too.
 
 This lets you learn about all objects, even if you do not have view
 rights to the object listed. However, you do need view rights to the
 folder you are calling objectIds for.
 
 This does seem to me like a way for clandestine users to learn more
 information about your site than they need to know. Perhaps this
 "feature" needs to be locked down.

This is something that has come up before. I propose 
that the real problem here is that 'objectIds' should 
not be web-traversable. 

I have, in fact, proposed this before. It caused a bit 
of grumbling among people using xml-rpc, who were using
objectIds remotely, so we never came to closure on it.

This comes up often enough that I'm inclined to do 
something about it for 2.3. I propose that objectIds
(and objectValues) will not be directly accessible 
via the Web in 2.3. For xml-rpc applications, it should
be a simple enough task to create a Python Script (or 
even a DTML Method) that *is* Web accessible to relay 
that information if it is needed.

Thoughts?

Brian Lloyd[EMAIL PROTECTED]
Software Engineer  540.371.6909  
Digital Creations  http://www.digicool.com 




___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] RE: objectIds accessiblilty and a proposal

2000-12-18 Thread Steve Alexander

Brian Lloyd wrote:

 
 This comes up often enough that I'm inclined to do 
 something about it for 2.3. I propose that objectIds
 (and objectValues) will not be directly accessible 
 via the Web in 2.3. For xml-rpc applications, it should
 be a simple enough task to create a Python Script (or 
 even a DTML Method) that *is* Web accessible to relay 
 that information if it is needed.
 
 Thoughts?

I have no objections to that.

On a related issue, what about other dtml snippets that people generally 
don't want as web accessible, such as standard_html_header ?

On my pie-in-the-sky zope wishlist:

What I'd like is a new tab for zope objects that allows me to say which 
protocols the object is accessible from, and what to do if not.

For example:

   access route accessible?action

   called from template yes
   http on port 8080no return 404
   ftp  yes


Another example:

   access route accessible?action

   called from template yes
   http on port 8080no redirect to URL1


If medusa is ever extended to have http and https on different ports, 
then you could declare different accessible states and actions for the 
different http ports.

--
Steve Alexander
Software Engineer
Cat-Box limited
http://www.cat-box.net


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] RE: objectIds accessiblilty and a proposal

2000-12-18 Thread Paul Erickson

If it is an issue for XML-RPC users, maybe there should be a
"Traversable" permission on Folder objects that could default to not
allowing web-traversal, but allowing it to be enabled if desired.

Would this affect FTP access to folders?

-Paul


Brian Lloyd wrote:

 
 This is something that has come up before. I propose
 that the real problem here is that 'objectIds' should
 not be web-traversable.
 
 I have, in fact, proposed this before. It caused a bit
 of grumbling among people using xml-rpc, who were using
 objectIds remotely, so we never came to closure on it.
 
 This comes up often enough that I'm inclined to do
 something about it for 2.3. I propose that objectIds
 (and objectValues) will not be directly accessible
 via the Web in 2.3. For xml-rpc applications, it should
 be a simple enough task to create a Python Script (or
 even a DTML Method) that *is* Web accessible to relay
 that information if it is needed.
 
 Thoughts?
 
 Brian Lloyd[EMAIL PROTECTED]
 Software Engineer  540.371.6909
 Digital Creations  http://www.digicool.com
 

-- 
Paul Erickson   | [EMAIL PROTECTED]
Kaivo, Inc. | www.kaivo.com

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] RE: objectIds accessiblilty and a proposal

2000-12-18 Thread Casey Duncan

Paul Erickson wrote:
 
 If it is an issue for XML-RPC users, maybe there should be a
 "Traversable" permission on Folder objects that could default to not
 allowing web-traversal, but allowing it to be enabled if desired.
 
 Would this affect FTP access to folders?
 
 -Paul
 
I agree. That would temper any grumbling and solve the problem (although
not the problem of the ever growing security list).
-- 
| Casey Duncan
| Kaivo, Inc.
| [EMAIL PROTECTED]
`--

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] more on keyword indexes

2000-12-18 Thread Christopher Petrilli

On 12/17/00 3:48 AM, "Dieter Maurer" [EMAIL PROTECTED] wrote:

 You either have to extend ZCatalog or wait some time.
 There are different people working on ZCatalog enhancements.

At DC, I'm the one working on almost all of it right now, so if people else
where are working on Zcatalog enhancements, they may want to talk to me as I
believe Zope3 will be *substantially* different.

 I have had very good response to Collector bug reports for Zope itself.
 At least in the past, bug reports and even patches for ZCatalog
 probably have been ignored, however. I hope, this has changed
 meanwhile.

Until recently, the person who best knew the Catalog was no longer working
on it actively.  I've now taken this over, and while I don't have the
bandwidth to track zope-dev constantly, I do try to find things.  I've also
fixed untold numbers of bugs that were easy to do (there are some that are
structural and will have to wait), and 2.3 will have a *substantially*
better Catalog.  

Chris

-- 
| Christopher Petrilli Digital Creations
| [EMAIL PROTECTED]Where Zope comes from


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Changing hostname and port without SiteAccess

2000-12-18 Thread Dieter Maurer

Martin Winkler writes:
  
  I cannot use SiteAccess (because I need multiple ZCatalogs), and my Zope 
  server (port 8080) is behind squid (in http-accelerated mode - port 80).
  
  What I would need is changing the hostname and port in the html-responses 
  like this: http://localname.com:8080/blah  to 
  http://officialserver.com/blah , so the client reconnects to squid, not 
  zope itself.
We have the same situation.

   We use SiteAccess *AND* ZCatalog.
   Please, see my message from a few days ago (to [EMAIL PROTECTED]).



Dieter

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Changing hostname and port without SiteAccess

2000-12-18 Thread Christopher Petrilli

On 12/18/00 2:24 PM, "Dieter Maurer" [EMAIL PROTECTED] wrote:

 Martin Winkler writes:
 
 I cannot use SiteAccess (because I need multiple ZCatalogs), and my Zope
 server (port 8080) is behind squid (in http-accelerated mode - port 80).
 
 What I would need is changing the hostname and port in the html-responses
 like this: http://localname.com:8080/blah  to
 http://officialserver.com/blah , so the client reconnects to squid, not
 zope itself.
 We have the same situation.
 
  We use SiteAccess *AND* ZCatalog.
  Please, see my message from a few days ago (to [EMAIL PROTECTED]).

Please read the message I sent out an hour ago about Path updates to the
Catalog... This is designed specifically to fix this problem.

Chris
-- 
| Christopher Petrilli Digital Creations
| [EMAIL PROTECTED]Where Zope comes from


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Re: objectIds accessiblilty and a proposal

2000-12-18 Thread Morten W. Petersen

[Brian Lloyd]

| This comes up often enough that I'm inclined to do 
| something about it for 2.3. I propose that objectIds
| (and objectValues) will not be directly accessible 
| via the Web in 2.3. For xml-rpc applications, it should
| be a simple enough task to create a Python Script (or 
| even a DTML Method) that *is* Web accessible to relay 
| that information if it is needed.
| 
| Thoughts?

This sounds like a good idea.

-Morten

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] IMPORTANT! Zcatalog path handling changes in 2.3

2000-12-18 Thread Christopher Petrilli

On 12/18/00 4:08 PM, "The Doctor What" [EMAIL PROTECTED] wrote:

 * Christopher Petrilli ([EMAIL PROTECTED]) [001218 14:13]:
 PLEASE take a look at this, and provide feedback ASAP.
 
 I would happy to, it looks like it does what I need (having
 siteaccess).  However, I don't see a clear cut description what's
 changing and how.  What needs to be done (in easy to understand
 language) to make sure it all goes smooth, etc.

It's actually not as big an update as it looks... I simply grabbed the
packages, there's much less changed than it looks like :-)

The big differences are all explained in the link above the file.

 It's a big update, with lots of files.  Will this work with 2.2.4?
 Is it dangerous?  If you're asking for guinea pigs (bweep!) then I'm
 not sure I should be it, as I'm still trying to figure out what's
 going on in many ways.

It should work fine with 2.2.4.

Chris
-- 
| Christopher Petrilli Digital Creations
| [EMAIL PROTECTED]Where Zope comes from


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] RE: objectIds accessiblilty and a proposal

2000-12-18 Thread Steve Alexander

Dieter Maurer wrote:

 Steve Alexander writes:
   On my pie-in-the-sky zope wishlist:
   
   What I'd like is a new tab for zope objects that allows me to say which 
   protocols the object is accessible from, and what to do if not.
   
   For example:
   
  access route accessible?action
   
  called from template yes
  http on port 8080no return 404
  ftp  yes
   
   
   Another example:
   
  access route accessible?action
   
  called from template yes
  http on port 8080no redirect to URL

 Sounds good to me.
 

 With the exception that I do not like the explicit port references.
 I would like to see there an indirection (e.g. use a name
 which can be mapped to a port at a central place).

I agree, that's a good idea.

The accessible state, and the action for a particular access-route could 
be acquired, like the current security settings. So, I'd have to say in 
only a single folder's accessing tab that all objects below that folder 
that are invisible to web traversal should return a 404.

Isn't there already a fishbowl proposal for this kind of thing? Did it 
get anywhere?

--
Steve Alexander
Software Engineer
Cat-Box limited
http://www.cat-box.net



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] IMPORTANT! Zcatalog path handling changes in 2.3

2000-12-18 Thread Steve Alexander

Christopher Petrilli wrote:

 On 12/18/00 4:24 PM, "Steve Alexander" [EMAIL PROTECTED] wrote:
 
 
 Doesn't work with 2.3 from CVS, 2000-12-18 21:21 UTC
 
 
 ACK, I forgot that I also revealed afew bugs in other systems :/  I thought
 that I could just package up Zcatalog, but apparantly not Let me work on
 coming up with something new.

I can get your new ZCatalog to install and run with Zope 2.3 from CVS by 
commenting out the last two lines of 
lib/python/Products/ZCatalog/__init__.py:

   #context.registerHelp()
   #context.registerHelpTitle('Zope Help')

Of course, I miss out on getting help with the new API if I do this :-)


--
Steve Alexander
Software Engineer
Cat-Box limited
http://www.cat-box.net


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Product Authors: If you use ZCatalog, READ! (that means you, Chris W. :-)

2000-12-18 Thread Evan Simpson

From: The Doctor What [EMAIL PROTECTED]
 I would happy to, it looks like it does what I need (having
 siteaccess).  However, I don't see a clear cut description what's
 changing and how.  What needs to be done (in easy to understand
 language) to make sure it all goes smooth, etc.

It's one step off the link given before, and really the one page you need to
read:


http://dev.zope.org/Wikis/DevSite/Projects/ZCatalogVirtualHostFix/UpgradeFAQ

 It's a big update, with lots of files.  Will this work with 2.2.4?
 Is it dangerous?  If you're asking for guinea pigs (bweep!) then I'm
 not sure I should be it, as I'm still trying to figure out what's
 going on in many ways.

If you run a copy of your site on this code, it will be evident immediately
whether you have problems or not.  If that's hard to do, you may want to at
least set up a mini-site and export some test data to it.

Authors of Products that use ZCatalog: PLEASE give feedback and try to
document any problems or workarounds for your Product on the
AffectedProducts page (linked from UpgradeFAQ in several places).

Cheers,

Evan @ digicool  4-am


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Fault tolerance and thread-loss

2000-12-18 Thread Dennis Nichols

At 12/18/00 09:58 PM, Tres Seaver wrote:
I'm not really replying to either question, but guessing at the
underlying cause of the problem:  this smells *exactly* like the
behavior induced by the "multiple PUT/POST" race condition bug,
corrected by Evan Simpson's patched ZServer/HTTPServer.py:

   http://www.zope.org/Members/4am/postfixbug

Or, even more, http://www.zope.org/Members/4am/postbugfix


--
Dennis Nichols
[EMAIL PROTECTED]


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Preliminary test of Membership on CVS

2000-12-18 Thread Michael Bernstein

Bill Anderson wrote:
 
 On a related note, I am considering changing the python methods to
 Python Scripts, this way when 2.3 comes out, it drops the number of
 additional installs required by one, leaving Loginmanager and ZPatterns
 the only (current) requirements. Python Scripts eem much better to use
 than Python Methods anyway ;)
 
 Any thoughts on that from the community?

Bill,

The move to Python Scripts sounds like a good one.

BTW, Can you fold in my local roles changes, and create an
additional Type of User Source for use with SMB? I'll
contribute the code that I've got.

Michael Bernstein.

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope] Problems with LocalFS and Zope 2.2.x

2000-12-18 Thread Uwe_Kluge



Hi everyone,

recently I moved to Zope release 2.2.4 (under WinNT).
Everything works great, but there is a issue related to LocalFS.
If I try to create a new LocalFS object I get the error message:

Error Type: AttributeError
Error Value: objectValues

 Traceback (innermost last):
   File D:\Zope\Zope224\lib\python\ZPublisher\Publish.py, line 222, in
 publish_module
   File D:\Zope\Zope224\lib\python\ZPublisher\Publish.py, line 187, in publish
   File D:\Zope\Zope224\lib\python\Zope\__init__.py, line 221, in
 zpublisher_exception_hook
   File D:\Zope\Zope224\lib\python\ZPublisher\Publish.py, line 171, in publish
   File D:\Zope\Zope224\lib\python\ZPublisher\mapply.py, line 160, in mapply
 (Object: manage_addLocalFS)
   File D:\Zope\Zope224\lib\python\ZPublisher\Publish.py, line 112, in
 call_object
 (Object: manage_addLocalFS)
   File D:\Zope\Zope224\lib\python\Products\LocalFS\LocalFS.py, line 1248, in
 manage_addLocalFS
   File D:\Zope\Zope224\lib\python\OFS\ObjectManager.py, line 267, in _setObject
 (Object: Traversable)
   File D:\Zope\Zope224\lib\python\AccessControl\Owned.py, line 276, in
 manage_fixupOwnershipAfterAdd
 (Object: LWE)
   File D:\Zope\Zope224\lib\python\Products\LocalFS\LocalFS.py, line 869, in
 objectValues
 (Object: LWE)
 AttributeError: (see above)

Target is a local harddisk and I connected as "normally " manager.
Are there similar experiences or workarounds?

Best thanks in advance!

Uwe Kluge



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Re: [Zope-Annce] ANNOUNCE: Zope security alert and hotfix release

2000-12-18 Thread Gregor Hoffleit

On Fri, Dec 15, 2000 at 02:02:08PM -0500, Brian Lloyd wrote:
   A security issue has recently come to our attention (thanks to
   Erik Enge for identifying this) that affects Zope versions up to
   and including Zope 2.2.4.

...

   The hotfix will work for all versions of Zope 2.2.0 and higher. A
   future version of Zope will contain the fix for this
   issue, and you will be able to uninstall the hot fix after upgrading.

This seems to imply that 2.1.6 is vulnerable as well, but that this Hotfix
won't work, and that no fix exists. Is that correct, or is the fix simply
not tested with 2.1.6 ?

Gregor


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] PoPy1.4 Installed:

2000-12-18 Thread Paolo Quaglia

Hi
Here Is some tips to install PoPy DA on a RH6.2

First: You have to use Postgres7.0 with PoPy1.4
- download the Postgres7.0 with the development libraries (the development
RPM from the Postgres download)
- Download the Popy1.4.1 and the ZPopyDA0.7
- untar Popy1.4.1
- $./configure
- change the Makefile ... the include path isn't /usr/include/postgres but
it's /usr/include/pgsql
- the file /usr/include/pgsql/os.h is a broken link .. we have to solve this
prob
download the source distribution of Posrgress7.0 (not the RPM) and
substitute the broken link os.h with the file linux.h ... rename
linux.h-os.h and put it in the correct path (/usr/include/pgsql)
- make will now finish without errors!! and you get the Popymodule.so
- copy the popymodule.so in the [zopedir]/lib/python

- Untar the  ZPopyDA and go to the ZPoPyDa directory in the
lib/python/Products dir of Zope
- modify the PoPy_db.py file changing,

__compatibility__ = ('1.4','1.4.1')

- Launch Zope and All WORKS!!

Hope this Help

Paolo Quaglia
Information Technology Coordinator
Sitek S.p.A.
[EMAIL PROTECTED]



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Troubles importing module DemoPortal.zexp

2000-12-18 Thread Morten W. Petersen

[Francisco M. Marzoa Alonso]

| Error Type: ImportError
| Error Value: No module named PythonMethod.PythonMethod
| 
| Package files that I'm using are:
| 
| Zope-2.2.2-linux2-x86.tgz
| ZopePTK-0.9.2-src.tar.gz
| 
| Can someone help me with this?

I guess you need to install the PythonMethod product, downloadable
from http://www.zope.org/Members/4am/PythonMethod .

Cheers,

Morten

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Bizarre Netscape Problem

2000-12-18 Thread Robin Becker

On my Win98 SE Zope 2.2.2 I have some zope permissions which I can view
fine in IE 5 or from a networked box with Netscape 4.7. However, when I
attempt to view the permission with Netscape it seems as though Netscape
starts to use larger and larger amounts of memory. I have no explanation
and checking the xml dump of the permission it seems to have a similar
structure.

In desperation I changed the netscape to 4.76, but the problem persists.

I am stumped! Any one got any ideas?
-- 
Robin Becker

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] PoPy1.4 Installed:

2000-12-18 Thread Federico Di Gregorio

 Here Is some tips to install PoPy DA on a RH6.2
 
 First: You have to use Postgres7.0 with PoPy1.4
 - download the Postgres7.0 with the development libraries (the development
 RPM from the Postgres download)
 - Download the Popy1.4.1 and the ZPopyDA0.7
 - untar Popy1.4.1
 - $./configure

mmm... 

./configure --postgreql-includes=/usr/include/pgsql

is much better (do a ./configure --help to display all the configuration
options...)

 - change the Makefile ... the include path isn't /usr/include/postgres but
 it's /usr/include/pgsql

not required if you do as above.

 - the file /usr/include/pgsql/os.h is a broken link .. we have to solve this
 prob

yes, this is a problem.

 - copy the popymodule.so in the [zopedir]/lib/python

no. popy should live in the *python* hierarchy. just do a "make install"
and make will take care of installing it in the right directory
(usually /usr/lib/python1.5/site-packages or the local alternative.)

ciao,
federico

-- 
Federico Di Gregorio
MIXAD LIVE Chief of Research  Technology  [EMAIL PROTECTED]
Debian GNU/Linux Developer  Italian Press Contact[EMAIL PROTECTED]
  All programmers are optimists. -- Frederick P. Brooks, Jr.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] PopyDA and DBMS Transactions

2000-12-18 Thread Paolo Quaglia

Hi
I heve finally installed the PopyDA0.7 that is a Multithreaded DA (multiple
concurrent access on the DBMS)

Now I'm doing tests to verify the DBMS transactions (Postgress support DB
transations):
But something doesn't work as expected:

I summarize my tests:

I have two DTML Documents:

first DTML: now called D1
dtml-var header
...1st sql statement: select * from customers where name='white'
...time.sleep(10) #external function that invokea the sleep function (10
sec)
...2dn sql statement: update customer set descr='Updated 1' where
customer='white'
dtml-var footer

Second DTML: now called D2
dtml-var header
...sql statement: update customer set descr='Updated 2' where
customer='white'
dtml-var footer

with two browser I called:
D1 and then D2

My expected Behaviour was:
-With the first statement of D1, Postgres would locks the table
The update of D2 has to wait to write because the table is locked
only when D1 has finished, D2 commit
As result the updated field has to result "Update 2" and not 'Update 1"

With the option Auto-commit mode ON the Behaviour was:
-D2 autocommit without waiting the end of D1! (as espected with autocomm.
off)
As result the updated field has to result "Update 1" (because D1 ended after
D1)

With the option Auto-commit mode OFF the Behaviour was:
-D2 autocommit without waiting the end of D1!! Why??!?!??!?
-When D1 finished an error occurs:

Error Type: ProgrammingError
Error Value: ERROR: Can't serialize access due to concurrent update

As result the updated field has to result "Update 2" FAULT!!


HOW CAN I HAVE TO DO in order to build a concurrent transaction Application
with Popy and Postgress???

Thank you Very Much for your Help!


Paolo Quaglia
Information Technology Coordinator
Sitek S.p.A.
[EMAIL PROTECTED]



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] How to make two racks work under one specialist?

2000-12-18 Thread Steve Spicklemire


Hi Dirksen,

   Ok.. you need to set the 'load by accessing attribute' field
to 'original_object'. You may need to change your SkinScript to
something like:

WITH getMale(self.id) COMPUTE original_object=(RESULT is _.None) and NOT_FOUND or 
RESULT

So that when getMale returns _.None, the SkinScript returns NOT_FOUND

-steve

 "Dirksen" == Dirksen  [EMAIL PROTECTED] writes:

Dirksen Hi Steve,

Dirksen Both racks are set to be loaded by accessing 'id', which,
Dirksen as you guessed right, don't appear in handling attributes
Dirksen list!

Dirksen This is the simplified skinscript in maleMemberRack: WITH
Dirksen getMale(self.id) COMPUTE original_object=RESULT WITH
Dirksen self.original_object COMPUTE name=id, gender=gender,
Dirksen email=email

Dirksen getMale is a python method: member = getMember(id) if
Dirksen id.gender == 'male': return member

Dirksen Things just go opposite direction in femaleMemberRack.

Dirksen What do you think?

Dirksen Dirksen




Dirksen __ Do You
Dirksen Yahoo!?  Yahoo! Shopping - Thousands of Stores. Millions
Dirksen of Products.  http://shopping.yahoo.com/

Dirksen ___ Zope
Dirksen maillist - [EMAIL PROTECTED]
Dirksen http://lists.zope.org/mailman/listinfo/zope ** No cross
Dirksen posts or HTML encoding!  ** (Related lists -
Dirksen http://lists.zope.org/mailman/listinfo/zope-announce
Dirksen http://lists.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] new 2.2.4 security/role bug ?? (ZCatalog related ??)

2000-12-18 Thread Didier Georgieff

Hello,

I'm experimenting some really weird and annoying things since i upgraded 
to 2.2.4 with 12-08 and even with 12-15a hotfix (seems to be ok in 2.2.2) 

For all objects, I can access directly (URL) with no problem (according to 
the roles and the local roles. This is ok).

For some of those objects (seems to be all the one i've added in 2.2.4 in 
folders with local roles) I can't (exeption raise) access the objects while in 
the context of the catalog (those objects are Catalog Aware via Yihaw 
product).

I epurate the method until this minimal test method who still raise the 
exeption 

dtml-in Catalog
  dtml-with "Catalog.getobject(data_record_id_)"
a href="dtml-absolute_url;"dtml-var title_or_id/abr
  /dtml-with
/dtml-in

I have a workaround with a dtml-try but i miss all the objects, while they 
are fully reachable directly via their URL

The problems seems to be on objects with local roles (anonymous has no 
view, no access content and other roles have this autorisations via local 
roles).

The second weird thing (should help for a diagnostic) is :

While i have  "manager" role (i can do whatever i want on the manage 
interface), i tried to give a proxy role to my test method, to see if i could 
investigate further. 
And trying to change the proxy role raised an execption, despite the fact i 
have manager role with full autorisations.

This last thing makes me think is an acquisition/role/security bug.

Any idea/solution because we offcially open tomorrow morning, and i'm in 
a deep well embarassed ;-))

=== This is the FIRST traceback.
Zope Error

 Zope has encountered an error while publishing this resource. 

 Unauthorized

 You are not authorized to access title_or_id. 

 Traceback (innermost last):
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/Publish.py, line 222, in publish_module
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/Publish.py, line 187, in publish
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/Publish.py, line 171, in publish
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/mapply.py, line 160, in mapply
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/ZPublisher/Publish.py, line 112, in call_object
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/OFS/DTMLMethod.py, line 172, in __call__
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/DocumentTemplate/DT_String.py, line 528, in __call__
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/DocumentTemplate/DT_In.py, line 611, in renderwb
 (Object: Catalog(bobobase_modification_time=ZopeTime()-14,
   bobobase_modification_time_usage='range:min',
   sort_on='bobobase_modification_time',
   sort_order='reverse'))
   File /home/georgieff/Zope-2.2.2-
src/lib/python/DocumentTemplate/DT_With.py, line 146, in render
 (Object: Catalog.getobject(data_record_id_))
   File /home/georgieff/Zope-2.2.2-
src/lib/python/OFS/DTMLMethod.py, line 194, in validate
 (Object: test_latest)
   File /home/georgieff/Zope-2.2.2-
src/lib/python/AccessControl/SecurityManager.py, line 139, in validate
   File /home/georgieff/Zope-2.2.2-
src/lib/python/AccessControl/ZopeSecurityPolicy.py, line 209, in validate
 Unauthorized: (see above)


=== This is the SECOND traceback.

Zope Error

  Zope has encountered an error while publishing this resource. 

  Forbidden

  You are not authorized to change test_latest because you do not have 
proxy roles. 

  Traceback (innermost last):
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, 
line 222, in publish_module
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, 
line 187, in publish
File /home/georgieff/Zope-2.2.2-src/lib/python/Zope/__init__.py, line 
221, in zpublisher_exception_hook
  (Object: test_latest)
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, 
line 171, in publish
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/mapply.py, 
line 160, in mapply
  (Object: manage_proxy)
File /home/georgieff/Zope-2.2.2-src/lib/python/ZPublisher/Publish.py, 
line 112, in call_object
  (Object: manage_proxy)
File /home/georgieff/Zope-2.2.2-src/lib/python/OFS/DTMLMethod.py, 
line 278, in manage_proxy
  (Object: test_latest)
File /home/georgieff/Zope-2.2.2-src/lib/python/OFS/DTMLMethod.py, 
line 271, in _validateProxy
  (Object: test_latest)
  Forbidden: (see above)


--
Didier Georgieff
DDAF du Bas-Rhin - Cellule SIG 
2, rue des Mineurs 67070 Strasbourg Cedex
tél : 

Re: [Zope] PopyDA and DBMS Transactions

2000-12-18 Thread Ivan Cornell

Paolo Quaglia wrote:

 I have two DTML Documents:

 first DTML: now called D1
 dtml-var header
 ...1st sql statement: select * from customers where name='white'

As I understand it, to exclusively lock a table in postgresql, use SELECT
 FOR UPDATE, eg:

...1st sql statement: select * from customers where name='white' for update of
customers

Regards,
Ivan


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] LoginManager - logging out

2000-12-18 Thread Bill Welch

 authentication and that the browser caches the credential. This means
 unless you shut down your browser, whatever you do, you are back to
 square one.

Besides shutting down your browser, you trash its credential. Create a
simple DTML method that raises the 'Unauthorized' exception. Direct your
brower to that method. The browser will, in some form or manner, request
that you authenticate again. Now the important part, don't cancel the
reauthentication! Type in some garbage user name and password and send it.
Your brower will give you another chance to authenticate, but this one you
cancel and you're back to being anonymous as far as Zope is concerned.

Bill.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Stupid File Upload Question

2000-12-18 Thread jpenny

On Fri, Dec 15, 2000 at 04:59:07PM -0800, Jonothan Farr wrote:
 What sort of problems were you seeing with LocalFS? Maybe I can fix them.
 
 Thanks,
 --jfarr
 
 - Original Message - 
 From: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, December 15, 2000 4:22 PM
 Subject: [Zope] Stupid File Upload Question
 
 
  This is for Jos:
  
  I ran into the same problem today.  I had previously used this method,
  and it works better than LocalFS for my purposes.  Anyway, be absolutly
  sure that your form says:

Fiest, LocalFS turns out to have the same problem.  MSIE does not
interact well with method=get and file input methods.

  
  form method=post action=whatever method="multipart/form-data"
  ...
  /form
  
  Then you should be able to access REQUEST.form['attachment'].filename
  and REQUEST.form['attachment'].read()  (Well, I hope).
  
  If the method=post is omitted, Netscape (linux at least) will work.
  MSIE will not.
  
  Man I ain't got enough hair for these kinds of problems!
  
  Jim Penny

I want/need to collect some metadata along with the file.  Say I want
a file, a title, some keywords.  (And I have some idiots with 80MB files).

I would like to enforce the following:

No two files from a given user can have the same title.
A given file may not be uploaded twice by the same user with
different titles.

With LocalFS, as it stands, it is hard to determine the file that 
was uploaded.  (It is not returned by manage_upload, I could create
an id, but that has its own problems (downloading creates unexpected
files on the client PC's)).  This can be modified, but...

More importantly, it is really hard to see how to handle both of
the conditios above cleanly.  With LocalFS, I found no easy way
at all to combine the error checking implied by the metadata and
the error checking desired for the file name.

  
  ___
  Zope maillist  -  [EMAIL PROTECTED]
  http://lists.zope.org/mailman/listinfo/zope
  **   No cross posts or HTML encoding!  **
  (Related lists - 
   http://lists.zope.org/mailman/listinfo/zope-announce
   http://lists.zope.org/mailman/listinfo/zope-dev )
  
  
 

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Re: ANNOUNCE: Zope security alert and hotfix release

2000-12-18 Thread Brian Lloyd

The hotfix will work for all versions of Zope 2.2.0 and higher. A
future version of Zope will contain the fix for this
issue, and you will be able to uninstall the hot fix after upgrading.

 This seems to imply that 2.1.6 is vulnerable as well, but that this Hotfix
 won't work, and that no fix exists. Is that correct, or is the fix simply
 not tested with 2.1.6 ?

 Gregor

Sorry - 2.1.6 _is_ vulnerable, and the Hotfix will work for
2.1.6. I'll update that README.

Brian Lloyd[EMAIL PROTECTED]
Software Engineer  540.371.6909
Digital Creations  http://www.digicool.com


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Python Method and builtin-functions

2000-12-18 Thread Sven Hohage

Hello,
I'd like to use Python - Methods but I'm afraid
that some builtin-functions are not implemented like
type() or list().
Is this a problem of me or are my nightmares fulfilled.
Another question is if the Python-Method-product is 
the same thing as the one shipping with Zope 2.3?
Thanks.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] passwords TTW - security hole?

2000-12-18 Thread Bill Welch

AFAIK, inputs of type password are sent to the server as plain text. In
Login Manager, for example, that would mean that passwords are exposed
every time someone logs in. In User Folder, the passwords would be exposed
whenever they're changed.

If my interpretation is correct, then it seems to me to be a call for
out-of-the-box ssl support in zope.

Bill.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Re: ANNOUNCE: Zope security alert and hotfix release

2000-12-18 Thread Gregor Hoffleit

On Mon, Dec 18, 2000 at 10:30:56AM -0500, Brian Lloyd wrote:
 The hotfix will work for all versions of Zope 2.2.0 and higher. A
 future version of Zope will contain the fix for this
 issue, and you will be able to uninstall the hot fix after upgrading.
 
  This seems to imply that 2.1.6 is vulnerable as well, but that this Hotfix
  won't work, and that no fix exists. Is that correct, or is the fix simply
  not tested with 2.1.6 ?
 
  Gregor
 
 Sorry - 2.1.6 _is_ vulnerable, and the Hotfix will work for
 2.1.6. I'll update that README.

Thanks!

Gregor


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] LoginManager - logging out

2000-12-18 Thread Mohan Baro

Can you please give an example of this code or method?

Mohan.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bill
Welch
Sent: Monday, December 18, 2000 10:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [Zope] LoginManager - logging out


 authentication and that the browser caches the credential. This means
 unless you shut down your browser, whatever you do, you are back to
 square one.

Besides shutting down your browser, you trash its credential. Create a
simple DTML method that raises the 'Unauthorized' exception. Direct your
brower to that method. The browser will, in some form or manner, request
that you authenticate again. Now the important part, don't cancel the
reauthentication! Type in some garbage user name and password and send it.
Your brower will give you another chance to authenticate, but this one you
cancel and you're back to being anonymous as far as Zope is concerned.

Bill.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] AW: [Zope] error by adding Poll

2000-12-18 Thread Kaeidinejad, Shahram

Hi Bill,

i changed into itemAdd.dtml from
 form action="manage_addSamplePollItem" method="POST"
to
form action="manage_addItem" method="POST"

but i get the same error like this:
   Cannot locate object at:
http://192.168.190.238:23456/Test_Folder/manage_addProduct/Poll/manage_addIt
em 

how can i use Hotfix_2000-12-8?
i untared it into Products directory and restart zope. 
how can i have to do it correct?

bye

Shahram


-Ursprüngliche Nachricht-
Von: Bill Welch [mailto:[EMAIL PROTECTED]]
Gesendet: Freitag, 15. Dezember 2000 16:36
An: [EMAIL PROTECTED]
Betreff: Re: [Zope] error by adding Poll


Manage_addSamplePollItem is a 'legacy' mapped to addItem (see
Poll/__init__.py) and Hotfix_2000-12-8 shuts down the legacy mechanism. I
went into itemAdd.dtml changed it to use addItem directly.

Bill.

On Fri, 15 Dec 2000, Kaeidinejad, Shahram wrote:

 Hi 
 i install Poll-0.7.1 and try to add it.
 but i get an erro like this:
 
 Cannot locate object at:
  

http://192.168.190.238:23456/Test_Folder/manage_addProduct/Poll/manage_addSa
 mplePollItem
 
 
 Traceback (innermost last): File
 /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/Publish.py, line 222, in
 publish_module File
 /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/Publish.py, line 187, in
 publish File /dgn-devel01/opt/Zope-2.2.4/lib/python/Zope/__init__.py, line
 221, in zpublisher_exception_hook File
 /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/Publish.py, line 162, in
 publish File
 /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/BaseRequest.py, line
366,
 in traverse File
 /dgn-devel01/opt/Zope-2.2.4/lib/python/ZPublisher/HTTPResponse.py, line
539,
 in debugError NotFound: (see above) 
 
 what do i false?
 
 bye
 
 shahram
 
 
 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )
 


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] LoginManager - logging out

2000-12-18 Thread Mohan Baro

Where can I get more information on the following methods ( i.e which zope
documentation)

1) authenticate() as in dtml-call "AUTHENTICATED_USER.authenticate()"
2) logout()

Mohan


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] SiteAccess and Roles

2000-12-18 Thread The Doctor What

* Michael Bernstein ([EMAIL PROTECTED]) [001215 10:05]:
 The Doctor What wrote:
 Ok, then problem may be in your SiteRoot. What are the
 settings there?

Really?  I wouldnt't have suspected the SiteRoot. lesse

Interesting.  It now works, if I fill in the Base.  Before, I
had *nothing* in the SiteRoot access.  Simply putting a Base in
and bing-bang-boom, it works!

Thanks for the help.  Though the impression I got from the
documentation is that this should have worked with the defaults

Perhaps I don't understand exactly what Base and Path in a SiteRoot
actually do

Ciao!

-- 
A fail-safe circuit will destroy others.
  -- Klipstein

The Doctor What: Not that 'who' guy  http://docwhat.gerf.org/
[EMAIL PROTECTED]   KF6VNC

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] LoginManager - logging out

2000-12-18 Thread Bill Welch

this is my logout DTML method

dtml-raise type="Unauthorized"
Logout!!
/dtml-raise

On Mon, 18 Dec 2000, Mohan Baro wrote:

 Can you please give an example of this code or method?
 
 Mohan.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Python Method and builtin-functions

2000-12-18 Thread Evan Simpson

From: Sven Hohage [EMAIL PROTECTED]
 I'd like to use Python - Methods but I'm afraid
 that some builtin-functions are not implemented like
 type() or list().

This is true.  If it is really a problem for you, you may wish to wait for
Python Scripts.

 Another question is if the Python-Method-product is
 the same thing as the one shipping with Zope 2.3?

Zope 2.3 has Python Scripts, which are much more developed and capable than
Python Methods.

Cheers,

Evan @ digicool  4-am


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] passwords TTW - security hole?

2000-12-18 Thread Martijn Pieters

On Mon, Dec 18, 2000 at 04:02:45PM +, Bill Welch wrote:
 AFAIK, inputs of type password are sent to the server as plain text. In
 Login Manager, for example, that would mean that passwords are exposed
 every time someone logs in. In User Folder, the passwords would be exposed
 whenever they're changed.

You are right, of course. 

But also note that authentication will send the password in the
almost-clear. It is only Base64 encoded. Most Unixes come with a base64
decoder installed by default; Python has a handy base64 module too. Hell,
I can decipher base64 encoded text by hand if I have to.

This is a common problem with any website.

 If my interpretation is correct, then it seems to me to be a call for
 out-of-the-box ssl support in zope.

There is an SSL product available for Zope, search Zope.org. Adding SSL to
the standard Zope disto has been considered, but kept off for several
reasons, all of which I didn't personally partake in.

You could always start a Fishbowl proposal of course, and see if yo ucan
get it past Brian Lloyd, the Zope product manager. :)

-- 
Martijn Pieters
| Software Engineer  mailto:[EMAIL PROTECTED]
| Digital Creations  http://www.digicool.com/
| Creators of Zope   http://www.zope.org/
-

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] new 2.2.4 security/role bug ?? (ZCatalog related ??)

2000-12-18 Thread Didier Georgieff

Brian,

Le 18 Dec 2000, à 11:54, Brian Lloyd a écrit :

 Note that 'Manager' does not automatically give you "full 
 authorization". It is only a convention that Manager often 
 has all permissions. 
 This is important, because in Zope 2.2, you can't give a 
 proxy role unless you have *that role* yourself. 

OK. So if i understand well, i need to create a user with manager AND 
ALL the roles so i'll be able to set any proxy role with that user.
Thanks for the explanation.

So i guess my other weird problem with not accessing objects via the 
catalog and accessing them directly has something to do with some new 
security feature in 2.2 i didn't understood ?
But i can't figure wich one, even in re-reading carefully the zope book.

Anyway, thanks for your clear explanation.

Regards.
--
Didier Georgieff
DDAF du Bas-Rhin - Cellule SIG 
2, rue des Mineurs 67070 Strasbourg Cedex
tél : 03.88.25.20.33 - fax : 03.88.25.20.01
email : [EMAIL PROTECTED]
SIT du Bas-Rhin : http://www.bas-rhin.sit.gouv.fr
GéoWeb http://sertit10.u-strasbg.fr

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] new 2.2.4 security/role bug ?? (ZCatalog related ??)

2000-12-18 Thread Brian Lloyd

 The second weird thing (should help for a diagnostic) is :
 
 While i have  "manager" role (i can do whatever i want on the manage 
 interface), i tried to give a proxy role to my test method, to 
 see if i could 
 investigate further. 
 And trying to change the proxy role raised an execption, despite 
 the fact i 
 have manager role with full autorisations.

Didier - 

Note that 'Manager' does not automatically give you "full 
authorization". It is only a convention that Manager often 
has all permissions. 

This is important, because in Zope 2.2, you can't give a 
proxy role unless you have *that role* yourself. For example, 
you can't give the proxy role "Editor" to a DTMLMethod unless 
you have it yourself (this is true even if you have the "Manager"
role). The quick fix here is that you need to give yourself
the roles you want to set as proxy roles, and then you will be 
allowed to set them.

Brian Lloyd[EMAIL PROTECTED]
Software Engineer  540.371.6909  
Digital Creations  http://www.digicool.com 



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] AW: [Zope] error by adding Poll

2000-12-18 Thread Bill Welch

Please note that the method is addItem, not manage_addItem.

The current convention is to untar in the zope installation directory.
For example, /usr/bin/zope. The files in the tar have a relative path -
lib/python/Products. Other than that, yes - untar and restart.

Bill.

On Mon, 18 Dec 2000, Kaeidinejad, Shahram wrote:

 Hi Bill,
 
 i changed into itemAdd.dtml from
  form action="manage_addSamplePollItem" method="POST"
 to
 form action="manage_addItem" method="POST"
 
 but i get the same error like this:
Cannot locate object at:
 http://192.168.190.238:23456/Test_Folder/manage_addProduct/Poll/manage_addIt
 em 
 
 how can i use Hotfix_2000-12-8?
 i untared it into Products directory and restart zope. 
 how can i have to do it correct?






___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] AW: [Zope] error by adding Poll

2000-12-18 Thread Bill Welch

 For example, /usr/bin/zope.

/usr/lib/zope, that is.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] ANNOUNCE: Zope security alert and hotfix release

2000-12-18 Thread Brian Lloyd

Hi all -

  Tis the season for hot - fix - es, fa la la la la,
   waa waa waa waa...

  Peter Kelly has brought another potential security issue to
  our attention that is important enough to make a Hotfix
  available for those who allow untrusted users to edit DTML
  on their sites.

  The issue involves incorrect protection of a data updating method
  on Image and File objects. Because the method was not correctly
  protected, it was possible for users with DTML editing priveleges
  to update the raw data of a File or Image object via DTML though
  they did not have editing priveleges on the objects themselves.

  We recommend that any Zope site running versions of Zope up to and
  including 2.2.4 have this hotfix product installed to mitigate the
  issue if the site is accessible by untrusted users who have DTML
  editing privileges.

  http://www.zope.org/Products/Zope/Hotfix_2000-12-18/README.txt

  http://www.zope.org/Products/Zope/Hotfix_2000-12-18/Hotfix_2000-12-18.tgz

  The hotfix will work for all versions of Zope 2.1.x and higher. A
  Zope 2.2.5 release later this week will contain the fix for this
  issue (as well as all hot fixes to date) and you will be able to
  uninstall the hot fix after upgrading.


Brian Lloyd[EMAIL PROTECTED]
Software Engineer  540.371.6909
Digital Creations  http://www.digicool.com




___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] user property sheets

2000-12-18 Thread Timothy Wilson

Hey everyone,

I'd like to make a product so that Zope users' contact info would be
available on a "MemberBio" page whenever you click on a hyperlink of their
name. The MemberBio page would also contain a form that could be used to
send them email.

I know there's been some discussion of property sheets for Zope users, but I
don't know if this would be the correct approach. Should I create something
totally separate, use property sheets, or some combination. The advantage of
a separate product is that the person wouldn't have to exist as an official
Zope user to have a "MemberBio" page. Any advice?

-Tim

--
Tim Wilson  | Visit Sibley online: | Check out:
Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/
W. St. Paul, MN |  | http://slashdot.org/
[EMAIL PROTECTED] |   dtml-var pithy_quote | http://linux.com/


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Newbie question: adding a tinyTables object

2000-12-18 Thread Richard Blumberg

I'm running Zope on a Win98 machine; downloaded, unstuffed, and 
installed tinyTablesPlus folder in the lib\python\Products directory. 
TinyTablesPlus shows up in the product list of the 
Control_Panel/Products folder of my Zope installation. But it does 
not show up in the Available Objects pull-down menu in my Zope 
content folders. I can't figure out how to Add a TinyTables object.

Can anyone help?

Richard

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] user property sheets

2000-12-18 Thread Maik Röder

Hi Timothy !

Timothy Wilson wrote:
 
 Hey everyone,
 
 I'd like to make a product so that Zope users' contact info would be
 available on a "MemberBio" page whenever you click on a hyperlink of their
 name. The MemberBio page would also contain a form that could be used to
 send them email.

Look at the zdp.zope.org site. That's exactly what I did for 
the ZDP-Tools.
 
 I know there's been some discussion of property sheets for Zope users, but I
 don't know if this would be the correct approach. Should I create something
 totally separate, use property sheets, or some combination.

I am using a ZClass with property sheets.

 The advantage of
 a separate product is that the person wouldn't have to exist as an official
 Zope user to have a "MemberBio" page. Any advice?

Exactly.

Best regards,

Maik
 
 -Tim
 
 --
 Tim Wilson  | Visit Sibley online: | Check out:
 Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/
 W. St. Paul, MN |  | http://slashdot.org/
 [EMAIL PROTECTED] |   dtml-var pithy_quote | http://linux.com/
 
 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] sql query results - DTML method problem

2000-12-18 Thread Dieter Maurer

"Manuel Amador (Rudd-O) writes:
   #8 dtml-in expr=\"findClassTitle(code=52.139)\"
  
  RING: dont do that, dtml wont work in python namespace
  instead, remember that in python namespace all vars present in dtml namespace 
  are inherited.
I do not see a reason, why not to use this
(except, that " should not be escaped, of cause).

  do this:
   dtml-in expr=\"findClassTitle(code=_.(\'class_code\'))\"
  the __.() construct is required since underscore arent allowed in python 
  variable names. if the var was called classcode, you could do
"_" are allowed in Python names. They are treated in the same
way as a letter.

DTML restricts the use of "_":

  A name must not *START* with an "_" (unless it is the special
  name "_").
  Inside name, you can use "_" freely.

   dtml-in expr=\"findClassTitle(code=classcode)\"
  dats it.
That said, you can also use:
dtml-in expr="findClassTitle(code=class_code)"

   dtml-in expr=\"findClassTitle(code=dtml-var class_code)\" *** syntax
   error
I agree with Manuel:
  you cannot nest DTML.
And it is this nesting, that triggered his "RING: do not do that!"

Use:

 dtml-in expr="findClassTitle(code=class_code)"

I.e. you can simply use the name of the variable.

Manuel is right, too, that DTML allows much more characters
in names than Python does. If you have a name with a character
forbidden in Python names, such as e.g. a "-", then you
can use "_[name]" or "_.getitem(name)" (as Manuel said).
It is only, that "_" (unlike "-") is allowed in Python names.



Dieter

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] how can you tell who created an object in Zope?

2000-12-18 Thread Dieter Maurer

Chalu Kim writes:
  What I would like is to be able to tell who created an object? Is there
  an easy way to do this?
Have a look at "AccessControl.Owned.getOwner".

It will give you the object's owner.
For most objects, this is initally the creator of the object.
This can be changed later with a "takeOwnership".
But maybe, that is not a problem for you.

Dieter

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Re: [Zope-dev] IMPORTANT! Zcatalog path handling changes in 2.3

2000-12-18 Thread Christopher Petrilli

On 12/18/00 4:08 PM, "The Doctor What" [EMAIL PROTECTED] wrote:

 * Christopher Petrilli ([EMAIL PROTECTED]) [001218 14:13]:
 PLEASE take a look at this, and provide feedback ASAP.
 
 I would happy to, it looks like it does what I need (having
 siteaccess).  However, I don't see a clear cut description what's
 changing and how.  What needs to be done (in easy to understand
 language) to make sure it all goes smooth, etc.

It's actually not as big an update as it looks... I simply grabbed the
packages, there's much less changed than it looks like :-)

The big differences are all explained in the link above the file.

 It's a big update, with lots of files.  Will this work with 2.2.4?
 Is it dangerous?  If you're asking for guinea pigs (bweep!) then I'm
 not sure I should be it, as I'm still trying to figure out what's
 going on in many ways.

It should work fine with 2.2.4.

Chris
-- 
| Christopher Petrilli Digital Creations
| [EMAIL PROTECTED]Where Zope comes from


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Re: [Zope-dev] IMPORTANT! Zcatalog path handling changes in 2.3

2000-12-18 Thread The Doctor What

* Christopher Petrilli ([EMAIL PROTECTED]) [001218 14:13]:
 PLEASE take a look at this, and provide feedback ASAP.

I would happy to, it looks like it does what I need (having
siteaccess).  However, I don't see a clear cut description what's
changing and how.  What needs to be done (in easy to understand
language) to make sure it all goes smooth, etc.

It's a big update, with lots of files.  Will this work with 2.2.4?
Is it dangerous?  If you're asking for guinea pigs (bweep!) then I'm
not sure I should be it, as I'm still trying to figure out what's
going on in many ways.

Ciao!

-- 
There are no bad ideas, just bad jokes.

The Doctor What: Guru to the Godshttp://docwhat.gerf.org/
[EMAIL PROTECTED]   KF6VNC

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] IMPORTANT! Zcatalog path handling changes in 2.3

2000-12-18 Thread Christopher Petrilli

Gang,

In order to resolve untold number of situations where the Catalog does
"stupid" things and returns less than useful information, we have heavily
modified the information stored in the Catalog (and generated by
CatalogAware).  You can read about this here:

http://dev.zope.org/Wikis/DevSite/Projects/ZCatalogVirtualHostFix/

You can find a tarball that contains everything updated here:

http://www.zope.org/Members/petrilli/zcatalog-pathsupdate.tgz

If you untar this in the root of your Zope installation you should get a new
Zcatalog that has all the new code in it.  Please read and test... This is
especially important for people who are using Squishdot/etc.  We hope to
make a full code release with 2.3a2 sometime very soon.

PLEASE take a look at this, and provide feedback ASAP.

Chris
-- 
| Christopher Petrilli Digital Creations
| [EMAIL PROTECTED]Where Zope comes from


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] adding Mail Host also legacy, broken by Hotfix_2000-12-08

2000-12-18 Thread Aleksander Salwa

On Mon, 18 Dec 2000, Bill Welch wrote:

 Just for the record.

As I grepped through sources, I see that SiteAccess (2.0.0b4)
also uses 2-argument legacy mechanism :(

Anyway: why it still works ?
I have Hotfix_2000-12-08 installed and I still can add new SiteRoots.

[EMAIL PROTECTED]

/--\
| `long long long' is too long for GCC |
\--/


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Newbie question: adding a tinyTables object

2000-12-18 Thread Peter Bengtsson

Go to the Control Panel and click on Products. The TinyTable product is probably going 
to have a little "broken box"-icon. 
Click on it and wish that it will tell you the error so that you can fix it.

Good luck, Peter

 I'm running Zope on a Win98 machine; downloaded, unstuffed, and 
 installed tinyTablesPlus folder in the lib\python\Products directory. 
 TinyTablesPlus shows up in the product list of the 
 Control_Panel/Products folder of my Zope installation. But it does 
 not show up in the Available Objects pull-down menu in my Zope 
 content folders. I can't figure out how to Add a TinyTables object.
 
 Can anyone help?
 
 Richard
 
 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )
 


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] adding Mail Host also legacy, broken by Hotfix_2000-12-08

2000-12-18 Thread Bill Welch

In SiteAccess, the legacy name and the method name are the same, so
references to the legacy name still work.

Bill. 

On Mon, 18 Dec 2000, Aleksander Salwa wrote:

 On Mon, 18 Dec 2000, Bill Welch wrote:
 
  Just for the record.
 
 As I grepped through sources, I see that SiteAccess (2.0.0b4)
 also uses 2-argument legacy mechanism :(
 
 Anyway: why it still works ?
 I have Hotfix_2000-12-08 installed and I still can add new SiteRoots.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] passwords TTW - security hole?

2000-12-18 Thread Ron Bickers

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bill
 Welch
 Sent: Monday, December 18, 2000 11:03 AM
 To: [EMAIL PROTECTED]
 Subject: [Zope] passwords TTW - security hole?


 AFAIK, inputs of type password are sent to the server as plain text. In
 Login Manager, for example, that would mean that passwords are exposed
 every time someone logs in. In User Folder, the passwords would be exposed
 whenever they're changed.

It's even worse than every time someone logs in.  With HTTP Basic
Authentication, the username and password are sent with every Web request.
This means that after authentication, for each and every page you visit and
every image and file you request, you're username and password is sent.

 If my interpretation is correct, then it seems to me to be a call for
 out-of-the-box ssl support in zope.

That would be nice, or at least some authentication method that is more
secure.  However, I'm not sure what, if any, secure-ish authentication
method popular browsers support.  It's not hard to use Zope through Apache
with SSL support for those that are running Apache, but I know not everyone
is doing that.

___

Ron Bickers
Logic Etc, Inc.
[EMAIL PROTECTED]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] apache/mod_rewrite and user-logging (semi-OT) - workaround

2000-12-18 Thread Oliver Bleutgen

Whoa, 
seems like my problem was not very interesting...
Anyway, I found a solution and hereby make it public.
To get apache to log usernames, one has to invoke
the apache's authentification machinery. I found
out that one can plug perl-modules into apache for
doing auth and that there's even a module which
does exactly what one needs here, Apache::AuthAny,
which always succeeds.


 package Apache::AuthAny;
 # file: Apache/AuthAny.pm


 use strict;
 use Apache::Constants qw(:common);


 sub handler {
 my $r = shift;
 
 my($res, $sent_pw) = $r-get_basic_auth_pw;
 return $res if $res != OK; 


 my $user = $r-connection-user;
 unless($user and $sent_pw) {
 $r-note_basic_auth_failure;
 $r-log_reason("Both a username and password must be provided", $r-filename);
 return AUTH_REQUIRED;
 }


 return OK; 
 }


 1;
 __END__


The corresponding entry in http.conf is


 Directory Proxy:*
   PerlAuthenHandler Apache::AuthAny
   AuthType Basic
   AuthName "Auth_Realm"
   require valid-user
 /Directory

One just has to make sure that the realm is the same as
in zope and everything goes fine.

So on to the next, has anybody an idea what would be a good/easy way 
to link zope authentication to apache's? 
It might be interesting to use mod_python i.e. for extending 
zope's authentication to files/directories served by apache
(one could have done the same as above with mod_python, it's just
that I didn't want to install that for a five-liner).

cheers,
oliver




___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Product Authors: If you use ZCatalog, READ! (that means you, Chris W. :-)

2000-12-18 Thread Evan Simpson

From: The Doctor What [EMAIL PROTECTED]
 I would happy to, it looks like it does what I need (having
 siteaccess).  However, I don't see a clear cut description what's
 changing and how.  What needs to be done (in easy to understand
 language) to make sure it all goes smooth, etc.

It's one step off the link given before, and really the one page you need to
read:


http://dev.zope.org/Wikis/DevSite/Projects/ZCatalogVirtualHostFix/UpgradeFAQ

 It's a big update, with lots of files.  Will this work with 2.2.4?
 Is it dangerous?  If you're asking for guinea pigs (bweep!) then I'm
 not sure I should be it, as I'm still trying to figure out what's
 going on in many ways.

If you run a copy of your site on this code, it will be evident immediately
whether you have problems or not.  If that's hard to do, you may want to at
least set up a mini-site and export some test data to it.

Authors of Products that use ZCatalog: PLEASE give feedback and try to
document any problems or workarounds for your Product on the
AffectedProducts page (linked from UpgradeFAQ in several places).

Cheers,

Evan @ digicool  4-am


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] ZopeLDAP 1.1.0 release

2000-12-18 Thread Jeffrey P Shell

"ZopeLDAP 1.1.0", http://www.zope.org/Members/jshell/ZopeLDAP/ is released,
bringing in a bevy of changes, including:

 o New ability to run in a non-transactional mode (this is critical to avoid
   a known bug when updating more than one entry object per transaction)

 o Much improved Entry object API that is Python Scripting\DTML Scripting
   friendly

 o Some new documentation (not yet in help system format though) about
   programming Entry objects.

The *manage_* style of programming Entry objects has not changed, but the
core API has.  Anything using methods like '_set()', '_addSubentry()' will
be affected.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] To retrieve properties from a dtml document

2000-12-18 Thread Ausum

After some newbie researching I found that whenever I want to retrieve a
propertie from a dtml document I must use this:

dtml-var "thedocument.thepropertie"

If thedocument is index_html or whatever_html it works fine, but how
could I retrieve a propertie from a document named whatever.html?

We need to use the .html extension for every document because we want to
mirror the site using WGET, leaving the automation just on the
production stages, in order to upload static pages to our remote server.

Any comment?



Ausum

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Re: [Zope-dev] Fault tolerance and thread-loss

2000-12-18 Thread Chris McDonough

Start Zope with the z2.py command line option "-M var/detailed.log"

e.g. ./start -M var/detailed.log

Detailed.log will contain a transcript of all requests processed by the
server and their responses.  If you see a method call without "end of
request", that's probably the point that the thread is leaking.

- Original Message -
From: "Jay, Dylan" [EMAIL PROTECTED]
To: "'Chris McDonough'" [EMAIL PROTECTED]
Sent: Monday, December 18, 2000 7:26 PM
Subject: RE: [Zope-dev] Fault tolerance and thread-loss


 How can I do that when I can't get into the interface because there are no
 threads left? How do you suggest I debug it?

  -Original Message-
  From: Chris McDonough [mailto:[EMAIL PROTECTED]]
  Sent: Tuesday, 19 December 2000 11:45 AM
  To: Jay, Dylan; [EMAIL PROTECTED]
  Subject: Re: [Zope-dev] Fault tolerance and thread-loss
 
 
  No.  You shouldn't be leaking threads.  Can you trace the
  thread leakage
  down to a single Product?
 
  - Original Message -
  From: "Jay, Dylan" [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Monday, December 18, 2000 7:00 PM
  Subject: [Zope-dev] Fault tolerance and thread-loss
 
 
   I'm finding that my installation is blocking all requests
  after awhile. By
   best guess would be that threads are being used and somehow becoming
   permanently blocked. When all 4 are gone then the server is
  useless and
  has
   to be restarted.
  
   Seems to me this is a real problem for fault tolerance.
  Perhaps a monitor
   should be run on a separate thread that starts aborting
  transactions when
   they have been running too long and there are few remaining threads.
  
   Does this exist already?
  
   
   Dylan Jay   mailto:[EMAIL PROTECTED]
   Avaya Communication Tel:   +61 2 9886-8961
   Level 5, 15 Talavera Road   FAX:   +61 2 9352 9224
   Nth Ryde NSW 2113   Mobile:0409 606 171
   AUSTRALIA
  
   ___
   Zope-Dev maillist  -  [EMAIL PROTECTED]
   http://lists.zope.org/mailman/listinfo/zope-dev
   **  No cross posts or HTML encoding!  **
   (Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope )
  
  
 



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Problem on running the ZOPE with ZmySQLDA

2000-12-18 Thread Angietel



The following is the illegal operation msg 
details:-

PYTHON executed an invalid instruction 
in
module unknown at :01560f54.
Registers:
EAX=00b3ceb1 CS=016f EIP=01560f54 
EFLGS=00010286
EBX=0001 SS=0177 ESP=01dbf5dc EBP=01560f50
ECX=1e10f91f DS=0177 ESI= FS=57df
EDX= ES=0177 EDI=011c2a50 GS=
Bytes at CS:EIP:
f0 a2 1c 01 50 14 35 01 44 20 20 20 02 00 00 00 

Stack dump:
00763130 1e16f958 00763130  00763130 1e10f831 
01713570 00763130  01713570 00b4497c 1e10e74c 01713570 00763130  
00b0d970
and this is my ZSQL method:-
1.For search function:-
select *from customerwheredtml-sqltest custid 
type=stringORdtml-sqltest custname type=string
2.For create table customer:-
CREATE TABLE customer(custid VARCHAR(10)NOT 
NULL,custname VARCHAR(15),custregno VARCHAR(10),custactdate 
DATE,custadd1 VARCHAR(30),custadd2 VARCHAR(30),custcity 
VARCHAR(20),custstate VARCHAR(15),custcountry 
VARCHAR(30),custpostcode INTEGER,custtel INTEGER,custfax 
INTEGER,custemail VARCHAR(30),custurl VARCHAR(30),custremarks 
VARCHAR(30),shippingadd1 VARCHAR(30),shippingadd2 
VARCHAR(30),shippingcity VARCHAR(20),shippingstate 
VARCHAR(15),shippingcountry VARCHAR(30),shippingpostcode 
INTEGER,shippingtel INTEGER,shippingfax INTEGER,shippingemail 
VARCHAR(30),custstatus VARCHAR(10),custcontname 
VARCHAR(15),custcontdesg VARCHAR(20),custconttel INTEGER,custcontext 
INTEGER,custconteml VARCHAR(30),custcontmob INTEGER,custcontfax 
INTEGER,custcredlimit FLOAT,custcredterm INTEGER,custinterest 
FLOAT,custopbal FLOAT,custbaldue FLOAT,custsales 
VARCHAR(15),custpricelev INTEGER, PRIMARY KEY(custid))
3.For view all records:-
select *from customer order by custname
So far, i tried to install python1.6 and 1.5.2 but there no 
changes at all. and i also reinstall my ZOPE because you said my ZOPE is died. 
Please tell me what should i do?Because i have spend a long time in this 
problem.


Re: [Zope] To retrieve properties from a dtml document

2000-12-18 Thread Andy McKay

Try 

dtml-with thedocument.html
dtml-var theproperty
/dtml-with

--
  Andy McKay, Developer.
  ActiveState.

- Original Message - 
From: "Ausum" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 18, 2000 3:39 PM
Subject: [Zope] To retrieve properties from a dtml document


 After some newbie researching I found that whenever I want to retrieve a
 propertie from a dtml document I must use this:
 
 dtml-var "thedocument.thepropertie"
 
 If thedocument is index_html or whatever_html it works fine, but how
 could I retrieve a propertie from a document named whatever.html?
 
 We need to use the .html extension for every document because we want to
 mirror the site using WGET, leaving the automation just on the
 production stages, in order to upload static pages to our remote server.
 
 Any comment?
 
 
 
 Ausum
 
 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )
 


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] To retrieve properties from a dtml document

2000-12-18 Thread Ausum

Hello Andy, thanks for the advice.
It didn't work. Maybe I'm wrong at any point, so please tell me whether
it worked for you.

I'm aware that this problem has been discussed here before, that it
happens because of Python's object naming, and also that there's a
workaround at least (and just)for expressions, using _['whatever.html']

Due to the kind of workflow we have, we need all of the documents to be
editable with Dreamweaver at any moment, directly, after the daily WGET
process. Batch-replacing every "_html" with ".html" in file names and
content seems to be very complicated within this scenario.

Thanks again,

Ausum 

Andy McKay wrote:
 
 Try
 
 dtml-with thedocument.html
 dtml-var theproperty
 /dtml-with
 
 --
   Andy McKay, Developer.
   ActiveState.
 
 - Original Message -
 From: "Ausum" [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, December 18, 2000 3:39 PM
 Subject: [Zope] To retrieve properties from a dtml document
 
  After some newbie researching I found that whenever I want to retrieve a
  propertie from a dtml document I must use this:
 
  dtml-var "thedocument.thepropertie"
 
  If thedocument is index_html or whatever_html it works fine, but how
  could I retrieve a propertie from a document named whatever.html?
 
  We need to use the .html extension for every document because we want to
  mirror the site using WGET, leaving the automation just on the
  production stages, in order to upload static pages to our remote server.
 
  Any comment?
 
 
 
  Ausum
 
  ___
  Zope maillist  -  [EMAIL PROTECTED]
  http://lists.zope.org/mailman/listinfo/zope
  **   No cross posts or HTML encoding!  **
  (Related lists -
   http://lists.zope.org/mailman/listinfo/zope-announce
   http://lists.zope.org/mailman/listinfo/zope-dev )
 

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] I love you! (Re: [Zope] Troubles importing module DemoPortal.zexp)

2000-12-18 Thread Tres Seaver

"Francisco M. Marzoa Alonso" [EMAIL PROTECTED] wrote:

 You was on right, it has been imported succesfull now :D
 
 Thanks a lot, Morten :)
 
 El Lun 18 Dic 2000 12:58, escribiste:
  [Francisco M. Marzoa Alonso]
 
  | Error Type: ImportError
  | Error Value: No module named PythonMethod.PythonMethod
  |
  | Package files that I'm using are:
  |
  | Zope-2.2.2-linux2-x86.tgz
  | ZopePTK-0.9.2-src.tar.gz
  |
  | Can someone help me with this?
 
  I guess you need to install the PythonMethod product, downloadable
  from http://www.zope.org/Members/4am/PythonMethod .

I'm glad Morten was able to help you with this.  To raise the
likelihood of finding helpful, PTK-aware folks like Morten,
please ask PTK-specific questions on the ZopePTK mailing list:

  mailto:[EMAIL PROTECTED]

Or consult the archives, linked from the subscription page:

  http://lists.zope.org/mailman/listinfo/zope-ptk

(Note that your exact problem has come up several times in the
last few weeks, and been answered, on that list).

Tres.
-- 
===
Tres Seaver[EMAIL PROTECTED]
Digital Creations "Zope Dealers"   http://www.zope.org

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Newbie question: adding a tinyTables object

2000-12-18 Thread Richard Blumberg

No, that's the problem. The icon isn't a broken box, but a regular 
product icon. Clicking on the link shows that there's one item in 
TinyTablesPlus, a Help document; when I open that, it tells me that 
there are no items in TinyTablesPlus. So Zope seems to be seeing the 
product, but not adding a TinyTable to the list of Available Objects. 
Is there some setting that I need to change?

Sorry to be so dense. It's tantalizing to have all this power so 
close at hand, and not be able to access it.

Richard


At 10:25 PM + 12/18/00, Peter Bengtsson wrote:
Go to the Control Panel and click on Products. The TinyTable product 
is probably going to have a little "broken box"-icon.
Click on it and wish that it will tell you the error so that you can fix it.

Good luck, Peter

  I'm running Zope on a Win98 machine; downloaded, unstuffed, and
  installed tinyTablesPlus folder in the lib\python\Products directory.
  TinyTablesPlus shows up in the product list of the
  Control_Panel/Products folder of my Zope installation. But it does
  not show up in the Available Objects pull-down menu in my Zope
  content folders. I can't figure out how to Add a TinyTables object.

  Can anyone help?

  Richard

  ___
  Zope maillist  -  [EMAIL PROTECTED]
  http://lists.zope.org/mailman/listinfo/zope
  **   No cross posts or HTML encoding!  **
  (Related lists -
   http://lists.zope.org/mailman/listinfo/zope-announce
   http://lists.zope.org/mailman/listinfo/zope-dev )



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] SiteAccess and Roles

2000-12-18 Thread Michael Bernstein

The Doctor What wrote:
 
 * Michael Bernstein ([EMAIL PROTECTED]) [001215 10:05]:
  The Doctor What wrote:
  Ok, then problem may be in your SiteRoot. What are the
  settings there?
 
 Really?  I wouldnt't have suspected the SiteRoot. lesse
 
 Interesting.  It now works, if I fill in the Base.  Before, I
 had *nothing* in the SiteRoot access.  Simply putting a Base in
 and bing-bang-boom, it works!
 
 Thanks for the help.  Though the impression I got from the
 documentation is that this should have worked with the defaults
 
 Perhaps I don't understand exactly what Base and Path in a SiteRoot
 actually do

Base replaces the portion of your URL comprised of the
protocol and fully qualified domain name:
'http://www.servername.com' becomes
'http://www.yourhostedsite.com'.

Path replaces the rest of the URL up to and including the
folder containing the SiteRoot: '/hosted_sites/site1/'
typically becomes '/'

So the object that would have been published as
'http://www.servername.com/hosted_sites/site1/', now becomes
'http://www.yourhostedsite.com/'.

Both of these settings affect such environment variables as
BASEx and URLx which construct URL fragments for use in
DTML.

The Access Rule only redirects requests from one object to
another by manipulating the stack, it doesn't affect the
REQUEST namespace.

You would generally be better off leaving the SiteRoot out,
rather than putting one in and leaving it's properties
blank.

Does this help?

Michael Bernstein.

P.S. If you want to see exactly what the SiteRoot is doing,
add a DEBUG method to your folder. the DEBUG method should
contain dtml-var REQUEST. View the method both with and
without the SiteRoot.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Help save my sanity (DTML-in string comparison)

2000-12-18 Thread Michael Bernstein

Darin Lee wrote:
 
 Zopistas,
 
 I am trying to build a simple, 2 tier, tree-style navigation structure for my site. 
I have puzzled over the following code for hours, and it's just not working right. I 
have two loops, one that goes through the Parents, and when the parent matches the 
current folder, I go through the children (There are 2 scripts, one that resides one 
level up and presents a simple list of objects to click on) The following code lives 
in the child folders, and displays the parents and all of the HTML documents in the 
current folder.
 
 The output I am looking for resembles below.
 
 [snip]
 
 ¯--
 BTW, I have tried the NFGNav product, but It doesn't work in my application (I 
suspect) because I am using transparent folders to organize things. I also want my 
NAV to start farther down the heirarchy (level 2), not from the root.

Try ZNavigator, instead.

HTH,

Michael Berrnstein.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] PTK

2000-12-18 Thread Tres Seaver

Nuno Goncalves [EMAIL PROTECTED] wrote:

 Hi there !
 I'm trying to use ptk to build a portal in zope !
 Does anyone knows how to add a design scheme ?
 initialy it shows onle the generic Portal interface. I wonder
 if it is possible to build my own design scheme and how to add one!

First, the ZopePTK mailinglist ([EMAIL PROTECTED], see the list
info page at http://lists.zope.org/mailman/listinfo/zope-ptk) is
the best place for PTK-specific questions.

With regard to your question, you have several options:

 * Edit/replace the DTML which is copied into your portal instance
   at creation time.  This option is the simplest one, but makes
   accomodating changes to the underlying PTK software (i.e., when
   we release a new version) somewhat difficult.  It also does not
   allow you to replace DTML methods which are defined in the
   DemoPortal.Portal ZClass itself (rather than being copied in).

   If you follow this path, and end up replacing most or all of the
   DTML (and style sheets, Wizards, etc.), consider copying these
   files out to a separate folder, exporting it, and uploading it
   as a new, alternate "interface" (I'll gladly fold in new, complete
   interfaces).

 * Create a new ZClass in your own product, deriving from the
   DemoPortal.Product class.  Override only the methods you need
   to;  the others will be inherited.  Create any additional methods
   you need to give the portal your chosen look-and-feel.

 * Create a new Portal-derivative in your own filesystem product.
   This option requires a fair amount of tedious work (DTML on the
   filesystem requires somewhat more effort to create/tweak than
   DTML in the ZODB).

We understand the difficulties these options present, and are
actively working on a more satisfactory solution.

Tres.
-- 
===
Tres Seaver[EMAIL PROTECTED]
Digital Creations "Zope Dealers"   http://www.zope.org

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Network hangs

2000-12-18 Thread Rick Munday

Can anyone give me some clues as to where to look to diagnose network hangs?

Case: Installed Zope today (2.2.0 - sorry, I'm conservative on version revs
and typically hang back a couple) and ever since starting to move the site
to Zope networking seems to hang...

Apache sit's on port 80 w/all static pages

Zope is now on port 8080 until the move is completed (then it becomes
primary on 80).

It's seems to me, to be related to ie5x but I'm not sure... I'll connect
from a desktop machine to the zope.machine:8080 and then change to
zope.machine:8080/manage, login and almost everytime within a minute or two
it'll hang!

Just not sure where to start debugging...

Ideas?


Rick


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Cookie setting problem

2000-12-18 Thread Kit O'Connell

I'm trying to set up a system like example 9 in the tutorial (new elvis
sightings) where new news stories in a specific folder are flagged 'New!'
if they've been modified or added since the last visit. Early on in the
document, I do the following while going through the folder's stories one
at a time with a dtml-in:

dtml-if REQUEST.has_key('TXPNfront')
dtml-if "bobobase_modification_time()  ZopeTime(TXPNfront)"
- font color="red"New!/font
/dtml-if
/dtml-if

Unlike example 9, I want these tickets to be permanent, and have a Python
method someone on this list provided so that the expiration of each cookie
is set to 1 week from the date it is set. However, I need to reset the
cookie each visit, so it doesn't new-flag stories the user has already
seen, so I:

dtml-if REQUEST.has_key('TXPNfront')
dtml-call "RESPONSE.expireCookie('TXPNfront')"
/dtml-if

later in the document. Then:

dtml-call "RESPONSE.setCookie('TXPNfront', ZopeTime(),
expires=expireIn1Week())"

I seem to be going about this the wrong way, however, as neither adding
new stories now editting existing ones results in the display of the
'New!' tag.

Any ideas on what I'm doing wrong?

Thanks,
Kit


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] newbie permissions

2000-12-18 Thread Max M. Stalnaker

With some difficulty I got a web site up and it has a form that when
submitted writes an object out to a Zcatalog.  I am proud of myself.  Alas,
it asks me for a password when I stroke the submit button.  I think I need
to set some permissions on the Zcatalog.  I need to set them to anonymous.
But if so, which permissions?


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] SQL Interface Builder?

2000-12-18 Thread Olaf Zanger

hi there,

i'm working with zope now for a month. i found the znolk product that
generates
some nice forms and so on.

i'm in desperate need for some more functionality though and i'm
wondering if anything out there might suit my needs, that are:

* customizable with a template or so (without the need to work on the
python method as is right now)

* edit mode to rearrang things later (now everything has to be done by
new each time when the python script gets changed)

* report support for more than the standard "select * from xxx"

an other question:
is there a chance to use the ftp thing with a kio_slave programm from
kde?

so, has anybody a solution to offer.

olaf

p.s. i find zope great. 


-- 
soli-con Engineering Zanger
Dipl.-Ing. (FH) Olaf Zanger Nusch
Lorrainestrasse 23
3013 Bern / Switzerland
Fon: +41-31-332 9782
Mob: +41-76-572 9782
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
http://www.soli-con.com

begin:vcard 
n:Zanger;Olaf Marc
tel;cell:+41-76-572 9782
tel;work:+41-31-332 9782
x-mozilla-html:FALSE
url:www.soli-con.com
org:soli-con Engineering Zanger
adr:;;Lorrainestrasse 23;Bern;BE;3013;Switzerland
version:2.1
email;internet:[EMAIL PROTECTED]
title:Dipl.-Ing.
note;quoted-printable:IT-Consulting=0D=0AEmbedded Systems=0D=0AEnergy Systems=0D=0AOpen Source Solutions=0D=0A
x-mozilla-cpt:;-32176
fn:Olaf Zanger
end:vcard



[Zope] passing parameters in a call/in/with

2000-12-18 Thread Olaf Zanger

hi there,

with the znolk product i get data by "select * ..." out of my database.
some fields 
are id's and i would like to get data out of an other table basing on
this id.

how can i pass the id through a dtml-call/in/with method? 

olaf

-- 
soli-con Engineering Zanger
Dipl.-Ing. (FH) Olaf Zanger Nusch
Lorrainestrasse 23
3013 Bern / Switzerland
Fon: +41-31-332 9782
Mob: +41-76-572 9782
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
http://www.soli-con.com

begin:vcard 
n:Zanger;Olaf Marc
tel;cell:+41-76-572 9782
tel;work:+41-31-332 9782
x-mozilla-html:FALSE
url:www.soli-con.com
org:soli-con Engineering Zanger
adr:;;Lorrainestrasse 23;Bern;BE;3013;Switzerland
version:2.1
email;internet:[EMAIL PROTECTED]
title:Dipl.-Ing.
note;quoted-printable:IT-Consulting=0D=0AEmbedded Systems=0D=0AEnergy Systems=0D=0AOpen Source Solutions=0D=0A
x-mozilla-cpt:;-32176
fn:Olaf Zanger
end:vcard