[Zope] Re: External Methods, Proxy Roles, and Executable Security

2005-11-22 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jens Vagelpohl wrote: > > On 22 Nov 2005, at 20:08, Dieter Maurer wrote: > >> You have lost the thread's start: >> >> George's problem has been that he could not move an object >> in an *EXTERNAL METHOD*, i.e. in trusted filesystem code. >> >>

Re: [Zope3-dev] "zope.app.application.HTTPPublicationRequestFactory" interprets "text/xml" requests as XML-RPC (was: [Zope] Hard-coded "Content-type:text/xml" as xmlrpc in Zope (2.8.1))

2005-11-22 Thread Andreas Jung
--On 22. November 2005 20:37:16 +0100 Dieter Maurer <[EMAIL PROTECTED]> wrote: You should complain about this misfeature on "zope3-dev@zope.org". Definitely, there should not be a fixed (not configurable) association between "text/xml" requests and "XML-RPC" as "text/xml" can be interesting f

Re: [Zope] External Methods, Proxy Roles, and Executable Security

2005-11-22 Thread Jens Vagelpohl
On 22 Nov 2005, at 20:08, Dieter Maurer wrote: You have lost the thread's start: George's problem has been that he could not move an object in an *EXTERNAL METHOD*, i.e. in trusted filesystem code. He would have the same problem in a filesystem product. The problem is that "CopySuppor

"zope.app.application.HTTPPublicationRequestFactory" interprets "text/xml" requests as XML-RPC (was: [Zope] Hard-coded "Content-type:text/xml" as xmlrpc in Zope (2.8.1))

2005-11-22 Thread Dieter Maurer
John Ziniti wrote at 2005-11-21 15:04 -0500: > ... >Zope-2.8.1 now additionally has the zope.app.publication. >HTTPPublicationRequestFactory class, which also assumes >that "text/xml" means xmlrpc (in fact, it assumes that >anything that startswith('text/xml') is an xmlrpc call). "zope.app" is par

Re: [Zope] External Methods, Proxy Roles, and Executable Security

2005-11-22 Thread Dieter Maurer
Jens Vagelpohl wrote at 2005-11-20 19:01 +0100: > ... >IMHO proxy roles should be used extremely sparingly, if at all. They >are a last resort and I personally never use them. Matter of fact I >believe having to use them means the application design could use >some improvement... > >If someth

Re: [Zope] cookie crumbler and error messages

2005-11-22 Thread Dieter Maurer
paul hendrick wrote at 2005-11-21 14:44 +: >Hi, thanks for the reply. >I did what you asked and the error log produced these messages: > >Unauthorized: You are not authorized to access this >resource. Username and password are not correct. >Unauthorized: You are not allowed to access 'sql_selec

Re: [Zope] External Methods, Proxy Roles, and Executable Security

2005-11-22 Thread Dieter Maurer
George Lee wrote at 2005-11-20 12:47 -0500: >Is there much buzz about this in CMF developer land? Apart from regular problem reports (usually in the Plone mailing list), there are few talks about proxy roles. -- Dieter ___ Zope maillist - Zope@zope.o

Re: [Zope] DateTime mess

2005-11-22 Thread Dieter Maurer
Jürgen Herrmann wrote at 2005-11-21 10:33 +0100: > ... difficult to understand timezone handling ... >once again sry, if i raised expectations on the fix of strftime. I am a bit astonished that you need to understand timezone handling in order to implement an improved "DateTime.strftime". The o

[Zope] Zope-2.8.1, LocalFS, and the importance of _p_jar

2005-11-22 Thread John Ziniti
I've encountered the issue described here: http://mail.zope.org/pipermail/zope/2005-August/161120.html on a recently upgraded Zope using LocalFS. I have tracked down the issue to the fact that the object that LocalFS "hands" to ZODB is a WrapperObject, and this object does not have an oid. This

Re: [Zope] Re: DateTime mess

2005-11-22 Thread Chris McDonough
On Nov 22, 2005, at 11:27 AM, Gabriel Genellina wrote: At Tuesday 22/11/2005 05:50, Jürgen Herrmann wrote: one more question (to the public!): do we REALLY need dates <1900 / >2036 ? using unix timestamps for storage and as the base for all conversions would make things a lot easier! Sure.

Re: [Zope] unlinking stale socket?

2005-11-22 Thread michael nt milne
Yes, so something must have killed the server and shut it down leading to the stale socket message. However I guess without further checking through the server logs I won't find out exactly why etc.On 11/22/05, J Cameron Cooper <[EMAIL PROTECTED] > wrote:michael nt milne wrote:> Ok, but Zope and Ap

Re: [Zope] Proxy setting for Zope and Products

2005-11-22 Thread Jens Vagelpohl
On 22 Nov 2005, at 15:38, Renfer Serge (EDU) wrote: Hello all, I'm responsible of a server (Debian Sarge) which has been put behind a firewall! I am strugling with proxy problems. For instance, CMFSin doesn't seem to work (for syndication slots in Plone), and LDAPUserFolder cannot rea

Re: [Zope] Re: DateTime mess

2005-11-22 Thread Gabriel Genellina
At Tuesday 22/11/2005 05:50, Jürgen Herrmann wrote: one more question (to the public!): do we REALLY need dates <1900 / >2036 ? using unix timestamps for storage and as the base for all conversions would make things a lot easier! Sure. What about birthdays of aged people? Long running forecast

Re: [Zope] unlinking stale socket?

2005-11-22 Thread michael nt milne
Ok, but Zope and Apache were serving nothing until I re-started Zope. The server had died for some reason On 11/22/05, Chris McDonough <[EMAIL PROTECTED]> wrote: I think it probably was running after the first time you invoked it.The message is only informative, meaning that zopectl died unexpectly

Re: [Zope] unlinking stale socket?

2005-11-22 Thread Chris McDonough
I think it probably was running after the first time you invoked it. The message is only informative, meaning that zopectl died unexpectly the last time it was run (without cleaning up after itself). It's not a fatal error or at least hasn't been whenever I've seen it. On Nov 22, 2005, at

Re: [Zope] unlinking stale socket?

2005-11-22 Thread michael nt milne
Yes, I noticed that the deamon wasn't running and so re-started it. It started up fine but that was the message I received. Just wondered what happened etc.. On 11/22/05, Chris McDonough <[EMAIL PROTECTED]> wrote: Note that Zope likely started.  Did it?  Did you try zopectl stop andzopectl start ag

Re: [Zope] unlinking stale socket?

2005-11-22 Thread Chris McDonough
Note that Zope likely started. Did it? Did you try zopectl stop and zopectl start again? If so, did it work? - C On Nov 22, 2005, at 9:52 AM, michael nt milne wrote: Hi My zopeinstance went down and I was getting an 'upstream server' unknown message from apache. On restarting zope from

[Zope] unlinking stale socket?

2005-11-22 Thread michael nt milne
Hi   My zopeinstance went down and I was getting an 'upstream server' unknown message from apache. On restarting zope from ./zopectl this was the message I got.   unlinking stale socket /home/zopeinstance/var/zopectl/sock,sleep/ No handlers could be found for logger 'root'   Does anyone have an

[Zope] Proxy setting for Zope and Products

2005-11-22 Thread Renfer Serge (EDU)
Hello all, I'm responsible of a server (Debian Sarge) which has been put behind a firewall! I am strugling with proxy problems. For instance, CMFSin doesn't seem to work (for syndication slots in Plone), and LDAPUserFolder cannot reach an external ldap server. On the system itself, I have set

Re: [Zope] Re: DateTime mess

2005-11-22 Thread Jürgen Herrmann
[ Lennart Regebro wrote:] > On 11/22/05, Jürgen Herrmann <[EMAIL PROTECTED]> wrote: >> i'll surely change the storage format, when rewriting it! > > So you plan on having some version marker, or so, which > tells which storage format is used? > > //Curious. basicall i thought about having a datei

Re: [Zope] Re: DateTime mess

2005-11-22 Thread Lennart Regebro
On 11/22/05, Jürgen Herrmann <[EMAIL PROTECTED]> wrote: > i'll surely change the storage format, when rewriting it! So you plan on having some version marker, or so, which tells which storage format is used? //Curious. -- Lennart Regebro, Nuxeo http://www.nuxeo.com/ CPS Content Management

[Zope] Re: DateTime mess

2005-11-22 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jürgen Herrmann wrote: > [ Florent Guillaume wrote:] > >> >>Jürgen Herrmann wrote: >> >>>recently i came up here with the intention to fix DateTime#strftime(). >>>while trying this, i had to dig deeper and deeper into the >>>implementation >>>of DateT

Re: [Zope] Re: DateTime mess

2005-11-22 Thread Jürgen Herrmann
[ Lennart Regebro wrote:] > On 11/22/05, Jürgen Herrmann <[EMAIL PROTECTED]> wrote: >> do we REALLY need dates <1900 / >2036 ? > > Yes. > >> using unix timestamps for >> storage and as the base for all conversions would make things a lot >> easier! > > datetimes are picklable, so if you are going

Re: [Zope] Re: DateTime mess

2005-11-22 Thread Lennart Regebro
On 11/22/05, Jürgen Herrmann <[EMAIL PROTECTED]> wrote: > do we REALLY need dates <1900 / >2036 ? Yes. > using unix timestamps for > storage and as the base for all conversions would make things a lot > easier! datetimes are picklable, so if you are going to change how they are stored (which may

[Zope] Re: DateTime mess

2005-11-22 Thread Jürgen Herrmann
[ Florent Guillaume wrote:] > > > Jürgen Herrmann wrote: >> recently i came up here with the intention to fix DateTime#strftime(). >> while trying this, i had to dig deeper and deeper into the >> implementation >> of DateTime and especially the timezone and daylight saving stuff. >> to be honest,