[Zope] Re: External Methods, Proxy Roles, and Executable Security

2005-11-18 Thread George Lee
p.s. This is in the context of a external method in a workflow scripts folder, if that helps. Peace, George On 11/19/05, George Lee <[EMAIL PROTECTED]> wrote: > In CMFCore 1.5.4: > > If a low-security-clearance user calls an external method that pastes > an object from a PortalFolder, he gets

[Zope] External Methods, Proxy Roles, and Executable Security

2005-11-18 Thread George Lee
In CMFCore 1.5.4: If a low-security-clearance user calls an external method that pastes an object from a PortalFolder, he gets an error because the following line in CMFCore.PortalFolder fails: if not sm.checkPermission(DeleteObjects, parent): raise AccessControl_Unauthorized This is even the

[Zope] Reprise -- Manager Proxy Role ineffective for deleting/moving objects

2005-11-18 Thread George Lee
I forget if I submitted a collector issue about this before, but I didn't see it. I just posted one at : Title: PortalFolder.py _verifyObjectPaste ignores executable security Version info: CMF 1.5.4 but also in trunk _verifyObjectPaste calls "sm.checkPermi

Re: [Zope] Problem with multiple Browser Id Managers

2005-11-18 Thread Pablo Ziliani
Thanks Chris and Dieter for your feedback, please see my notes below. Chris McDonough wrote: On Thu, 2005-11-17 at 22:47 -0300, Pablo Ziliani wrote: since first (as I said) I had no trouble in adding another deeper BMI; and second, because any attempt to delete root's BMI ends in a "/brows

Re: [Zope] convert DTML Document to a folder.

2005-11-18 Thread Jonathan Cyr
So, you'd like to turn an independent entry into a container to hold more info? -Jon Martin Koekenberg wrote: The DTML Documents are userinfo documents. I want to create a photoorder form and generate a dtml document with that users orders. I want to place that in his user folder. Marti

[Zope] FYI: Zope 3 Book on Safari

2005-11-18 Thread Jonathan Cyr
FYI, I noticed that O'Reilly just added Steven Richter's Zope 3 book to their Safari service. I now read all my Safari-based manuals on a Tablet PC, rather than stocking my bookshelves with the appropriate resources at $30-50 bucks a pop. Even though I'd already bought the Zope 3 book, I t

Re: [Zope] conflicts, sessions, and programming best practices guidelines

2005-11-18 Thread Dennis Allison
Thanks Dieter. On Fri, 18 Nov 2005, Dieter Maurer wrote: > Dennis Allison wrote at 2005-11-15 14:54 -0800: > >Has anyone prepared a set of best practice guidelines on the techniques to > >use to minimize conflicts? > > * Localize out into separate persistent objects attributes > with

Re: [Zope] filename splitter

2005-11-18 Thread Dieter Maurer
Tino Wildenhain wrote at 2005-11-15 21:07 +0100: >Am Dienstag, den 15.11.2005, 19:26 +0100 schrieb Dieter Maurer: >> Peter Bengtsson wrote at 2005-11-15 11:47 +: >> >Hi, I don't usually do this but I need your advise on something. >> >It's a filename splitter for a KeywordIndex of File objects.

Re: [Zope] cookie crumbler and error messages

2005-11-18 Thread Dieter Maurer
Paul Hendrick wrote at 2005-11-16 17:28 +: >I'm using CookieCrumbler on a project which sits in / on one server, >and /project in another. >I'd like to secure a part of the site through *.metadata files so that >users of a certain role can't access it. this is done and works well. >however, whe

Re: [Zope] convert DTML Document to a folder.

2005-11-18 Thread Dieter Maurer
Martin Koekenberg wrote at 2005-11-16 15:35 +0100: >Is it possible to convert a DTML Document to a folder, Both with properties >? >I use Zope 2.8.4. As you explained in a later message, you seem only be interested in the document's properties. This is possible (but requires a bit of work from y

Re: [Zope] conflicts, sessions, and programming best practices guidelines

2005-11-18 Thread Dieter Maurer
Dennis Allison wrote at 2005-11-15 14:54 -0800: >Has anyone prepared a set of best practice guidelines on the techniques to >use to minimize conflicts? * Localize out into separate persistent objects attributes with high write frequency. E.g. when you have a counter, put into its own

Re: [Zope] Problem with multiple Browser Id Managers

2005-11-18 Thread Dieter Maurer
Pablo Ziliani wrote at 2005-11-17 22:47 -0300: > ... BrowserIdManager ... >Unfortunately, my Zope instance holds multiples virtual sites, so I >can't simply change the root BMI that comes with Zope's installation; >instead I need to create inner BMI instances. So I did, giving the new >instance

Re: [Zope] Zope 2.8.4 compilation error

2005-11-18 Thread Dieter Maurer
Gusti Gonzalez wrote at 2005-11-15 17:11 -0400: > ... >/usr/include/python2.3/Python.h:33:20: string.h: No existe el fichero o el >directorio This indicates that your "gcc" is not correctly set up: It does not find the header files of the standard C runtime library. -- Dieter

Re: [Zope] session variables in the presence of conflicts

2005-11-18 Thread Dennis Allison
We are using MySQL but are fully transactional using innodb. The sort of problems we are seeing are (cruft removed) are things like: 2005-11-18T12:50:16 ERROR txn.3075 Error in tpc_abort() on manager at 1190763820> 2005-11-18T12:50:16 ERROR txn.3075 Error in tpc_abort() on manager at 11907742

Re: [Zope] Problem with multiple Browser Id Managers

2005-11-18 Thread Chris McDonough
Hi Pablo, On Thu, 2005-11-17 at 22:47 -0300, Pablo Ziliani wrote: > Unfortunately, my Zope instance holds multiples virtual sites, so I > can't simply change the root BMI that comes with Zope's installation; > instead I need to create inner BMI instances. So I did, giving the new > instance a d

Re: [Zope] Zope 2.8.4 external methods do not autorefresh

2005-11-18 Thread Dennis Allison
Yup. or so it seems. Thanks. Stupid errors confume the day... On Fri, 18 Nov 2005, Paul Winkler wrote: > On Fri, Nov 18, 2005 at 11:25:06AM -0800, Dennis Allison wrote: > > To adopt the code for the modified method the external method needs > > to be resaved. > > *Or* you need to have >

Re: [Zope] HTML to PDF.

2005-11-18 Thread Fernando Lujan
Chris Withers wrote: Fernando Lujan wrote: It's easy to configure and stuff? We currently are working with the reportlab, but it's painful to change the document... :( I need a product which generates a PDF file on the fly. I'm guessing you're using the open source reportlan library? May

Re: [Zope] Zope 2.8.4 external methods do not autorefresh

2005-11-18 Thread Paul Winkler
On Fri, Nov 18, 2005 at 11:25:06AM -0800, Dennis Allison wrote: > To adopt the code for the modified method the external method needs > to be resaved. *Or* you need to have debug-mode on ... in your zope.conf. It's always been that way. I'm guessing you didn't turn on debug-mode for your

Re: [Zope] Zope 2.8.4 external methods do not autorefresh

2005-11-18 Thread Jonathan
- Original Message - From: "Dennis Allison" <[EMAIL PROTECTED]> To: Sent: Friday, November 18, 2005 2:25 PM Subject: [Zope] Zope 2.8.4 external methods do not autorefresh test framework: Setup an external method def eproc( self ): return 'hello world' and run the test

[Zope] Zope 2.8.4 external methods do not autorefresh

2005-11-18 Thread Dennis Allison
test framework: Setup an external method def eproc( self ): return 'hello world' and run the test method. It prints hello world Now, change the test method def eproc( self ): return 'hello world too' and run the test method. It prints hello world which is a deviati

Re: [Zope] Check Interval

2005-11-18 Thread Andreas Jung
--On 18. November 2005 12:35:09 -0500 "Kozloski, Matthew E" <[EMAIL PROTECTED]> wrote: Its not a problem - I'm just curious as to why this is/may be. From reading docs/postings online, it seems to me that the higher the check interval is, the faster the site should be (up to a point -- law

[Zope] Check Interval

2005-11-18 Thread Kozloski, Matthew E
I have a fairly large zope installation (thousands of users, ~130G combined zeo storages) and have been playing with the check interval. I have a single Xeon 3.2 that runs the show (both ZEO and Zope). I notice that when I set the check-interval at 826 (pystone / 50) the performance is horrible.

[Zope] does anyone know of something like this

2005-11-18 Thread Kate Legere
I develop for a library and wanted to know if there was a zope product that might accomplish what we're looking for before we build it ourselves. We have a number of book club sets that are loaned out to patrons for a 6 week period. The way in which this differs from our regular collection is that

Re: [Zope] Render a string as tal

2005-11-18 Thread Alan Warren
On 11/18/05, Chris Withers <[EMAIL PROTECTED]> wrote: > Alan Warren wrote: > > single image into a folder. So, I have a folder called view. When an > > image is viewed the URL looks like > > /some_album/some_pic.jpg/view/?display=large > > > > The code looks like this: > > > > > > > > ouch

[Zope] Re: Zope 2.8.4 compilation error

2005-11-18 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gusti Gonzalez wrote: > Does anybody know what Debian (3.1) packages are required in order to compile > zope 2.8.4? > > Or, my only option is to download python from source and compile it as well? I *think* that you need the following (I don't run 3

[Zope] Re: Zope 2.8.4 compilation error

2005-11-18 Thread Gusti Gonzalez
Does anybody know what Debian (3.1) packages are required in order to compile zope 2.8.4? Or, my only option is to download python from source and compile it as well? Thanks for any help. Regards, Gusti. David H escribió: > Gusti Gonzalez wrote: > >> Hi, >> >> I am having the following error

Re: [Zope] conflicts, sessions, and programming best practices guidelines

2005-11-18 Thread Michael Dunstan
On 11/18/05, Chris McDonough <[EMAIL PROTECTED]> wrote: > > On Nov 17, 2005, at 4:46 AM, Dennis Allison wrote: > > > > > Thank Chris, good pointsB. > > > > The session variable timeout is currently several hours as requird > > by our > > application. The timeout resolution remains at its default va

Re: [Zope] Render a string as tal

2005-11-18 Thread Chris Withers
Alan Warren wrote: single image into a folder. So, I have a folder called view. When an image is viewed the URL looks like /some_album/some_pic.jpg/view/?display=large The code looks like this: ouch. This is really contorted. Why do you use URL2 and URL3? Is imgObj not just 'here' a

Re: [Zope] HTML to PDF.

2005-11-18 Thread Chris Withers
Fernando Lujan wrote: It's easy to configure and stuff? We currently are working with the reportlab, but it's painful to change the document... :( I need a product which generates a PDF file on the fly. I'm guessing you're using the open source reportlan library? Maybe you should think about

Re: [Zope] probably a simple answer..

2005-11-18 Thread Chris Withers
Kate Legere wrote: Well, we're working on porting it over from linux but at the moment that's my only option... I just had this impression that I'd seen something whereby I could write to the filesystem using an external method. Categorically, no web server can write to the file system on a cli

Re: [Zope] cookie crumbler and error messages

2005-11-18 Thread Chris Withers
Paul Hendrick wrote: Hi all, I'm using CookieCrumbler on a project which sits in / on one server, and /project in another. ...that could do with more explanation :-S I'd like to secure a part of the site through *.metadata files so that users of a certain role can't access it. This is _not_

Re: [Zope] (no subject)

2005-11-18 Thread Chris Withers
AZAIS Bruce wrote: Hi, excuse-me for my English but i'm french ;-) This is a Plone problem, you're likely to get more help on a Plone list. * "Le contenu de ce courriel et ses eventuelles pièces jointes sont confidentiels. Ils s'adressent e