[Zope-dev] Refernecing a zope page template's id ad title from a python script.

2004-04-20 Thread altkey
Hi, I have a breadcrumbs python filesystem script. It's a long script that constructs dictionaries and places them in a list for a master_template to display. The dictionaries look like this relative = context.portal_url.getRelativeContentPath(context) code for various things ...

[Zope-dev] Patch for CMFActionIcons: make edit work if icon expr is empty

2004-04-20 Thread Joachim Bauch
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, as it's possible to create an action icon with an empty icon expression, but this action icon can never be edited again (a KeyError is raised), I propose the attached patch against ActionIconsTool.py After applying this patch, you can edit the

Re: [Zope3-dev] Re: [Zope-dev] Re: More arguments for z (was Re: Zope and zope)

2004-04-20 Thread Stephan Richter
On Thursday 15 April 2004 17:11, Martijn Faassen wrote: Anyway, I guess the tokenizer is fine too, and might even be faster for all I know, just seems an unfortunate duplication of work, plus I checked in importchecker for little reason. :) No, Fred was just a bit faster than me with

[Zope-dev] Re: [ZODB-Dev] Re: [Zope3-dev] Proposal: Move to subversion for source code control of the Zope and ZODB projects

2004-04-20 Thread Chris Withers
Jim Fulton wrote: Lennart Regebro wrote: From: Jim Fulton [EMAIL PROTECTED] Initially, I propose to move just the repository heads. Maintenamce branches (e.g. Zope 2.6 and Zope 2.7) will remain in CVS. What is the rationale behind not moving it all? - Reduce risk - Provide a more gradual

[Zope-dev] Re: Patch for CMFActionIcons: make edit work if icon expr is empty

2004-04-20 Thread Casey Duncan
On Tue, 20 Apr 2004 13:03:32 +0200 Joachim Bauch [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, as it's possible to create an action icon with an empty icon expression, but this action icon can never be edited again (a KeyError is raised), I propose the

[Zope-dev] Re: [ZODB-Dev] Re: [Zope3-dev] Proposal: Move to subversion for source code control of the Zope and ZODB projects

2004-04-20 Thread Jim Fulton
Chris Withers wrote: Jim Fulton wrote: Lennart Regebro wrote: From: Jim Fulton [EMAIL PROTECTED] Initially, I propose to move just the repository heads. Maintenamce branches (e.g. Zope 2.6 and Zope 2.7) will remain in CVS. What is the rationale behind not moving it all? - Reduce risk -

Re: [Zope-dev] Re: [patch] More secure cookie crumbler?

2004-04-20 Thread Chris Withers
Shane Hathaway wrote: Making cookie authentication secure is surprisingly difficult, and you've barely taken one step. So how does PAS do cookie auth then? Chris -- Simplistix - Content Management, Zope Python Consulting - http://www.simplistix.co.uk

Re: [Zope-dev] Re: [patch] More secure cookie crumbler?

2004-04-20 Thread Chris Withers
Shane Hathaway wrote: Hmm. I really wasn't expecting any new code yet. Session cookies are a very significant maintenance burden in Zope, and it's not in my interest to support them. If you don't mind, I think I'll release a version of CC without any session support, then I'll give Chris

Re: [Zope-dev] Re: I want to fix App.Management.Tabs.manage_workspace

2004-04-20 Thread Chris Withers
Casey Duncan wrote: 1. manage_workspace is only protected by the Authenticated role, and that is done directly, not even through a permission. I think that is probably because this method is an abstraction for the default managment screen. It does not know what the correct permission is, but

[Zope-dev] Zope 2.X Session problems

2004-04-20 Thread alex
Hi Chris, On Wed, 3 Mar 2004, Chris McDonough wrote: Great, I'm going to consider that a resounding endorsement and check it in soon; please do let me know if you see anything odd come up. If anyone else has been having issues with the old Transience module, and would like to provide

Re: [Zope-dev] zLOG is dead

2004-04-20 Thread Lennart Regebro
From: Chris Withers [EMAIL PROTECTED] This discussion smells like that string should be computed from introspection. Why can't it be computed from introspecting whatever code called the log method? Well, first of all, how? __name__ should always be available, but that is the name of the file

Re: [Zope3-dev] Re: [Zope-dev] zLOG is dead

2004-04-20 Thread Barry Warsaw
On Tue, 2004-04-20 at 10:01, Chris Withers wrote: This discussion smells like that string should be computed from introspection. Why can't it be computed from introspecting whatever code called the log method? You probably could do it via sys._getframe(). I'm not sure you should though. ;)

Re: [Zope-dev] Re: [patch] More secure cookie crumbler?

2004-04-20 Thread Peter Sabaini
Shane Hathaway wrote: On Tue, 20 Apr 2004, Chris Withers wrote: I wonder how many Plone users are aware their passwords are stored unencrypted in client cookies which fly back and forth waiting to be snapped up by packet sniffers, XSS, and JS attacks ;-) Even with unbreakable encryption of

Re: [Zope-dev] Re: [patch] More secure cookie crumbler?

2004-04-20 Thread Shane Hathaway
On Tue, 20 Apr 2004, Peter Sabaini wrote: Shane Hathaway wrote: Even with unbreakable encryption of credentials after login, you still send the username and password in the clear at login time, and sniffers can reuse the session ID with ease. You really shouldn't tell the Plone users

Re: [Zope-dev] Re: [patch] More secure cookie crumbler?

2004-04-20 Thread Peter Sabaini
Chris Withers wrote: Shane Hathaway wrote: Hmm. I really wasn't expecting any new code yet. Session cookies are a very significant maintenance burden in Zope, and it's not in my interest to support them. If you don't mind, I think I'll release a version of CC without any session support, then

Re: [Zope-dev] Re: [patch] More secure cookie crumbler?

2004-04-20 Thread Peter Sabaini
Shane Hathaway wrote: On Tue, 20 Apr 2004, Peter Sabaini wrote: Shane Hathaway wrote: Even with unbreakable encryption of credentials after login, you still send the username and password in the clear at login time, and sniffers can reuse the session ID with ease. You really shouldn't tell the

[Zope-dev] order of transaction aborts

2004-04-20 Thread zope
Is there any way to influence the order of transaction aborts when you hijack the transaction mechanism in a similar way as Shared/DC/ZRDB/TM.py does? I have Folder and File like classes which make changes on the file system as a part of their operation. When within a transaction I make multiple

[Zope-dev] Re: Proposal: Rename zope package

2004-04-20 Thread Jim Fulton
Jim Fulton wrote: Based on recent discussions, I've created a proposal: http://dev.zope.org/Zope3/RenameTheZopePackage to rename the zope package to z. Unless there are strong objections, we'll do this after we move the Zope repository head to subversion at the end of the month. I've gotten

[Zope-dev] Re: [Zope3-dev] Re: Proposal: Rename zope package

2004-04-20 Thread Sidnei da Silva
On Tue, Apr 20, 2004 at 12:08:03PM -0400, Jim Fulton wrote: | What do people think about alternative 4? +1. -- Sidnei da Silva [EMAIL PROTECTED] http://awkly.org - dreamcatching :: making your dreams come true http://plone.org/about/team#dreamcatcher Debug is human, de-fix divine.

[Zope-dev] Re: [Zope3-dev] Re: Proposal: Rename zope package

2004-04-20 Thread Stephan Richter
On Tuesday 20 April 2004 12:08, Jim Fulton wrote: What do people think about alternative 4? +1 Regards, Stephan -- Stephan Richter CBU Physics Chemistry (B.S.) / Tufts Physics (Ph.D. student) Web2k - Web Software Design, Development and Training

[Zope-dev] Re: [Zope3-dev] Re: Proposal: Rename zope package

2004-04-20 Thread Gary Poster
+1 Jim Fulton wrote: What do people think about alternative 4? ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists -

[Zope-dev] Re: zLOG is dead

2004-04-20 Thread Christian Heimes
Fred Drake wrote: zLOG is dead The zLOG package used for logging throughout ZODB, ZEO, and Zope 2 has been declared obsolete. All logging for Zope products will use the logging package from Python's standard library. The zLOG package still exists in Zope 2 and the

[Zope-dev] zLOG changes

2004-04-20 Thread Andreas Jung
Hi Fred, there are currently two things confusing me: - the entries in the event.log are currently written without the log level. Is this dedicated behaviour? I think the log level should be part of the event.log - when adding LOG = getLogger(...) LOG.info(...) to some modules then

Re: [Zope-dev] Re: Proposal: Rename zope package

2004-04-20 Thread Leonardo Rochael Almeida
+1 I had thought about exactly this idea during the weekend but I thought the z alternative had such traction that it wasn't worth mentioning. The only difference is that I thought about renaming Zope to ZopeClassic or ZopeLegacy instead of Zope2 (keeping version numbers out of packages and all

[Zope-dev] Re: [Zope3-dev] Re: Proposal: Rename zope package

2004-04-20 Thread Marius Gedminas
On Tue, Apr 20, 2004 at 12:08:03PM -0400, Jim Fulton wrote: What do people think about alternative 4? +1 Marius Gedminas -- Q: How many IBM CPU's does it take to execute a job? A: Four; three to hold it down, and one to rip its head off. signature.asc Description: Digital signature

[Zope-dev] Re: [Zope3-dev] Re: Proposal: Rename zope package

2004-04-20 Thread Barry Warsaw
On Tue, 2004-04-20 at 15:46, Fred Drake wrote: On Tuesday 20 April 2004 12:08 pm, Jim Fulton wrote: What do people think about alternative 4? +1 Okay, add me to the chorus: +1 -Barry ___ Zope-Dev maillist - [EMAIL PROTECTED]

[Zope-dev] Zope2.7.0rc2 AttributeError: 'NoneType' object has no

2004-04-20 Thread Chris Bruce
Did this ever get resolved? I had similiar problem with a custom Product extending Folder. Noticed when I commented the following lines of code, the error went away: #security.setDefaultAccess("deny") #__roles__ = () -- Thanks for

[Zope-dev] Re: zLOG changes

2004-04-20 Thread Fred Drake
On Tuesday 20 April 2004 01:22 pm, Andreas Jung wrote: - the entries in the event.log are currently written without the log level. Is this dedicated behaviour? I think the log level should be part of the event.log It should. This was lost when I changed the zLOG -- logging mapping, and

Re: [Zope-dev] Re: zLOG is dead

2004-04-20 Thread Fred Drake
On Tuesday 20 April 2004 01:15 pm, Christian Heimes wrote: Fred Drake wrote: * Do I need to take care that the messages are logged into the event log and on the console or can I safly use the logging package like:: ... zLOG has logged the messages to the console when zope was started with

[Zope-dev] zope 2.7.0: no tracebacks produced

2004-04-20 Thread Mika, David P (Research)
I am making a big upgrade and moving my products from 2.3.1 on HP-UX to 2.7.0 on windows 2000 and can't get zope to produce any tracebacks when it encounters errors. I've checked all the log files and monitor stdout to no avail. All I get is a brief html message with error type and value and

Re: [Zope-dev] Re: Proposal: Rename zope package

2004-04-20 Thread Sidnei da Silva
| I had thought about exactly this idea during the weekend but I thought | the z alternative had such traction that it wasn't worth mentioning. | The only difference is that I thought about renaming Zope to ZopeClassic | or ZopeLegacy instead of Zope2 (keeping version numbers out of packages | and

Re: [Zope-dev] zope 2.7.0: no tracebacks produced

2004-04-20 Thread Willi Langenberger
According to Mika, David P (Research): I am making a big upgrade and moving my products from 2.3.1 on HP-UX to 2.7.0 on windows 2000 and can't get zope to produce any tracebacks when it encounters errors. I've checked all the log files and monitor stdout to no avail. All I get is a brief

Re: [Zope-dev] order of transaction aborts

2004-04-20 Thread Kapil Thangavelu
shared/dc/zrdb/tm does not hijack the transaction mechanism it integrates with it. you should coalesce txn integration for your objects into a single txn integrator so you needn't depend on transaction message/jar ordering. -kapil On Tue, 2004-04-20 at 11:35, [EMAIL PROTECTED] wrote: Is there