[Zope-dev] merge zope-dev and zope3-dev?

2006-02-16 Thread Chris Withers
Philipp von Weitershausen wrote: Chris Withers wrote: [aside... hmmm, crossposting, maybe time to merge zope-dev and zope3-dev? most stuff seems to be relevent to both nowadays] +10 You know, I once had a proposal. Uh, never mind :) Well, what needs to happen for it to be done? To be

Re: [Zope3-dev] Re: [Zope-dev] Pluggins vs Application Definition

2006-02-16 Thread Chris Withers
Benji York wrote: Chris Withers wrote: maybe time to merge zope-dev and zope3-dev? -1 They're still different enough that most traffic on one is not interesting to the majority of subscribers to the other. Can you explain what lead you to this conclusion? It seems to be the complete

[Zope-dev] Re: merge zope-dev and zope3-dev?

2006-02-16 Thread Philipp von Weitershausen
Chris Withers wrote: Philipp von Weitershausen wrote: Chris Withers wrote: [aside... hmmm, crossposting, maybe time to merge zope-dev and zope3-dev? most stuff seems to be relevent to both nowadays] +10 You know, I once had a proposal. Uh, never mind :) Well, what needs to happen

[Zope-dev] Re: Python warnings behavior and stacklevel=2

2006-02-16 Thread Stefan H. Holek
This turned out to be a bug in FSPythonScripts (no __file__ in script globals). Fixed on all branches of CMF = 1.5. Cheers, Stefan On 13. Feb 2006, at 16:48, Julien Anguenot wrote: Florent Guillaume wrote: Julien Anguenot wrote: Tim Peters wrote: [Julien Anguenot] I'm having some

[ZWeb] Zope 3 Website

2006-02-16 Thread Peter Simmons
Hi All, I just subscribed to both these lists (forgive the cross post) so you may have gotten further down the road on this one than I have seen. I have been following a conversation on Zope3-users list about setting up a website and doing a little marketing push for Zope 3. I really liked

Re: [ZWeb] Zope 3 Website

2006-02-16 Thread Andrew Sawyers
That's excellent Peter! I don't want any money, but would be cool to find the best use for it Talking to Christian T from the German Zope Users Group the other day, he pointed out something interesting they were doing with available funds: hiring 2 'writers' who would watch the Zope and

Re: [ZWeb] Zope 3 Website

2006-02-16 Thread Peter Simmons
Hi Andrew, Cheers. That does sound like a good idea I have been wondering about creating more content for our site and might do that also :-) Thanks to Christian T also for the idea in the first place. Do you help keep zope.org up to date? (forgive my ignorance in this area) I am really

Re: [ZF] Re: [ZWeb] Zope 3 Website

2006-02-16 Thread Peter Simmons
Re-reading my email I kinda put the emphasis in the wrong area. If we need more design then I would like to get it right of couse the existing isn't too bad so maybe we don't need it so much just a little bit for differiantion purposes. The main thing is the content. I would be keen to do

[Zope] installing PIL on Window Zope

2006-02-16 Thread Allen Huang
I want to install PIL into zope but I couldn't use the installation package since python that came with zope isn't register on windows. so I installed python 2.3 seperately andI found some artical on the zope website and it said to - decompress and PIL package and move - Copy the PIL folder

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread bruno desthuilliers
Roman Klesel wrote: Hello, Roman Klesel schrieb: Hello, in a product I try to make a file object persistent with the _setObject() method. What's wrong with: container.manage_addProduct['OFSP'].manage_addFile(id, file='', title='', precondition='', content_type='', REQUEST=None) --

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Jens Vagelpohl
On 16 Feb 2006, at 09:33, Roman Klesel wrote: Hello Bruno, bruno desthuilliers schrieb: What's wrong with: container.manage_addProduct['OFSP'].manage_addFile(id, file='', title='', precondition='', content_type='', REQUEST=None) Well, in a fs product I don't have container nor

Re: [Zope] Re: restricting permissions for direct access only

2006-02-16 Thread Chris Withers
Tres Seaver wrote: The prior behavior (allowing users to access protected resources above the domain of their user folders) was a security hole caused by a bug, and was never documented as allowable: correcting it was a matter for a rather urgent fix, as it broke the explicitly-documented

Re: [Zope] Zope 2.9 and SSL

2006-02-16 Thread Chris Withers
Ron Bickers wrote: On Wed February 15 2006 02:42, Janusz Zamecki wrote: The easiest way is to use Apache, but I have reasons to not go that way. If you don't want big Apache, lighttpd is small and has made a good SSL front-end proxy to Zope for me. http://www.lighttpd.net/ How many

Re: [Zope] Granting access by reading http headers

2006-02-16 Thread Chris Withers
Marc Schnapp wrote: We're running Plone for internal departmental use. I'm going to lock down most of the content, requiring a login to view sensitive documents. But I also want our Google Mini appliance to crawl all content. Google Mini can do http basic auth, right? If so, you're fine,

Re: [Zope] Re: restricting permissions for direct access only

2006-02-16 Thread Chris Withers
David wrote: I just disagree. If theres a paranoia with the standard set of roles then prevent *those* from upward acquisition. But if I add a role *specifically* so it can access a common code pool, Security is hard enough as it is, special cases like this are something that Zoep 2 has

Re: [Zope] Zope 2.9 and SSL

2006-02-16 Thread Janusz Zamecki
zope napisa?(a): Hi, zhttps provides an HTTPS Zserver to Zope-2.9.0. This zope product uses M2Crypto. I think this may give you a hint towards SSL and Zope-2.9.0 http://www.zope.org/Members/lerouxa/zopehttps Try it first with test certificates provided with

[Zope] Re: Zope 2.9 and SSL

2006-02-16 Thread Michael Haubenwallner
Janusz Zamecki wrote: zope napisa?(a): Hi, zhttps provides an HTTPS Zserver to Zope-2.9.0. This zope product uses M2Crypto. I think this may give you a hint towards SSL and Zope-2.9.0 http://www.zope.org/Members/lerouxa/zopehttps Try it first with test certificates provided with

Re: [Zope] installing PIL on Window Zope

2006-02-16 Thread Allen Huang
Hi... I assume that you mean tomake modification to the path to the python interpreter in Zope at the \etc\zope.conf right?what lines should I add or modify? Tino Wildenhain [EMAIL PROTECTED] wrote: Allen Huang schrieb: I want to install PIL into zope but I couldn't use the installation

Re: [Zope] SSL Digest Auth

2006-02-16 Thread michael nt milne
No, I read that for digest authentication to work the authentication data can't be encrypted. Therefore it seems perfect for implementing more security on non-SSL sites or sites that don't need SSL but need more security on logon. On 2/16/06, Chris Withers [EMAIL PROTECTED] wrote: Hi

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Hello, Jens Vagelpohl schrieb: If that object subclasses from the normal Zope Folder class (or is a Zope Folder) you *will* have manage_addProduct. Yes, actually you guys a right! self.manage_addProduct is available... Hmmm ... wonder what made me think it's not ... Still I can't get what

Re: [Zope] Re: Re: major problems placing authentication on an extranet site-security flaw?

2006-02-16 Thread michael nt milne
sorry Chris but ifI was 'retarded' as you indeed claim I wouldn't have been able to achieve so much with Plone and Zope over the last 6 months. I've gone from zero knowledge of the plaftorms to installing Zope, and Plone on a Unix box from source (not easy and required a alot of perseverance),

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Stefan H. Holek
Please learn to read and to provide the *complete* traceback. The error text alone is not enough most of the time. Your error *may* mean that 'system' is not yet wrapped. Are your positive that 'system' is a folder that already exists in the ZODB, i.e. has already been _setObject'ed?

[Zope] Re: installing PIL on Window Zope

2006-02-16 Thread Josef Meile
Yes, I got that too long time ago when working with Zope 2.7.2 and python 2.3.3. At that time I did the following in the python shell: import PIL PIL.Image But I got as well: AttributeError: 'module' object has no attribute 'Image' Then I tried this: from PIL import Image as PilImage and it

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Hello, one more thing ... Roman Klesel schrieb: Your error *may* mean that 'system' is not yet wrapped. Are your positive that 'system' is a folder that already exists in the ZODB, i.e. has already been _setObject'ed? As far as I can tell: Yes! Actually I'm pretty shure, because as I

[Zope] Re: restricting permissions for direct access only

2006-02-16 Thread Michael Shulman
I don't understand what inheriting proxy roles from callers has to do with allowing users to access protected resources above their user folders. They seem like totally different questions to me. Could you please explain? On 2/16/06, Tres Seaver [EMAIL PROTECTED] wrote: But... it's still not

[Zope] Re: restricting permissions for direct access only

2006-02-16 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Withers wrote: Tres Seaver wrote: The prior behavior (allowing users to access protected resources above the domain of their user folders) was a security hole caused by a bug, and was never documented as allowable: correcting it was a

Re: [Zope] Re: Re: major problems placing authentication on an extranet site-security flaw?

2006-02-16 Thread Floyd May
It's been said a million times in a million different ways, so let's tick that counter one more time and make it a million and one: DON'T FEED THE TROLLS. http://img18.photobucket.com/albums/v55/krazykit/2004-03-22_104550_troll.gif -- Floyd May Senior Systems Analyst CTLN - CareerTech Learning

Re: [Zope] Error Value: 'File' object has no attribute 'manage_fixupOwnershipAfterAdd'

2006-02-16 Thread Roman Klesel
Hello again, I works! I just managed to get everything as I expected it to be. How I did it: form OFS.Image import File - I build a class _File(File): - pimped it up a little bit. - instatiated it - _setObject'ed it ... et voila I have nice File-objects with nice CMI interface... Thanks for

[Zope] Re: Zope Digest, Vol 21, Issue 24

2006-02-16 Thread Michael Shulman
On 2/16/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: The only change I recall to how proxy roles work is that proxy roles used to *augment* a users' roles; now they *replace* them. I don't know that the case you are talking about (S1 has proxy roles, calls protected S2 fine, but fails when

Re: [Zope] Re: Re: major problems placing authentication on an extranet site-security flaw?

2006-02-16 Thread michael nt milne
yeah, take his advice Chris :-) On 2/16/06, Floyd May [EMAIL PROTECTED] wrote: It's been said a million times in a million different ways, so let'stick that counter one more time and make it a million and one: DON'T FEED THE

[Zope] Does Zope 3.2 need to use a separate instance of twisted?

2006-02-16 Thread Mark, Jonathan (Integic)
Title: Does Zope 3.2 need to use a separate instance of twisted? My website already had an existing install of twisted. I then installed Zope 3.2, and it looks to me as if Zope 3.2 installed a second version of twisted. Does Zope 3.2 install a modified or hacked version of twisted? If

[Zope] [Getting OT] major problems placing authentication on an extranet site-security flaw?

2006-02-16 Thread Floyd May
On 2/16/06, michael nt milne [EMAIL PROTECTED] wrote: yeah, take his advice Chris :-) On 2/16/06, Floyd May [EMAIL PROTECTED] wrote: It's been said a million times in a million different ways, so let's tick that counter one more time and make it a million and one: DON'T FEED THE

Re: [Zope] restricting permissions for direct access only

2006-02-16 Thread Stefan H. Holek
There is no way, proxy roles are not passed-on to callees. Stefan On 14. Feb 2006, at 17:04, Michael Shulman wrote: But... it's still not working for my real site. I think the issue is this. If script1 has proxy role Manager, and script2 has view permissions set only for Manager, then

[Zope] where to install rtf2xml script to work with Zope and TextIndexNG?

2006-02-16 Thread Owen K
Hi all, Where should I install rtf2xml script, or will python setup.py install take care of that? My setup: zope 2.8.5 windows XP Pro Should I install it under Zope Products or under Zope Extensions ? Ultimately this script is for use with TextIndexNG(3, I hope) which I have not installed

[Zope] Re: installing PIL on Window Zope

2006-02-16 Thread Owen K
If you want to register your python in the Windows registry, try this URL http://effbot.org/zone/python-register.htm I just installed PIL this afternoon using the script above, then using the PIL installer. No complaints/errors. But I have not verified PIL function. Regards, Owen "Allen

Re: [Zope] where to install rtf2xml script to work with Zope and TextIndexNG?

2006-02-16 Thread Andreas Jung
Please RTFM. The documentation tells you cleary that every external converter must be available through $PATH. This means it has to be installed in some directory that is part of your $PATH. And there is no documentation telling you anything about 'Extensions' or 'Products'. Thanks for reading,

[Zope] subscribe

2006-02-16 Thread Khachatur Yengibaryan
[EMAIL PROTECTED] wrote: Send Zope mailing list submissions to zope@zope.org To subscribe or unsubscribe via the World Wide Web, visit http://mail.zope.org/mailman/listinfo/zope or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can