[Zope-dev] Zope FTP Server.

2002-04-12 Thread Yuan-Chen Cheng
Hi, I use Dreamweaver to let user upload files in zope. I create a folder and add an account for an user and give him role Manager so that he can do everything in that folder. The he login with Dreamweaver, try to delete file, then he got a 530 Unauthorized. I try to read the Z2.log,

Re: [Zope-dev] [RFClet]: What about the request method and the client side trojan?

2002-04-12 Thread Toby Dickenson
On Thursday 11 April 2002 6:37 pm, Jeffrey P Shell wrote: On 4/11/02 7:55 AM, Toby Dickenson [EMAIL PROTECTED] Then you're lucky. Usually, any time I see dtml-var someNonIdempotentMethod(), I immediately change it to the name lookup call. Don't blame me, I've been following this paradigm for

Re: [Zope-dev] [RFClet]: What about the request method and the client side trojan?

2002-04-12 Thread Florent Guillaume
Oliver Bleutgen [EMAIL PROTECTED] wrote: The issue of client side trojan recently came to my mind again. [..] I think zope's management methods (the potentially destructive ones) should not accept REQUESTs with REQUEST_METHOD GET. I like the idea of trying to secure that kind of things a

[Zope-dev] random

2002-04-12 Thread Mario Carina
hello to everyone. I'm new in this mailing list and also with Zope. This is my question: I need to extract, form my metapublisher object, one of my entrys randomly. i have found this command but it's good for some static pages. !--#var expr=_.whrandom.choice(glossario.objectValues())-- hope you

Re: [Zope-dev] [RFClet]: What about the request method and the client side trojan?

2002-04-12 Thread Oliver Bleutgen
Florent Guillaume wrote: Oliver Bleutgen [EMAIL PROTECTED] wrote: The issue of client side trojan recently came to my mind again. [..] I think zope's management methods (the potentially destructive ones) should not accept REQUESTs with REQUEST_METHOD GET. I like the idea of trying to

[Zope-dev] Re: [Zope] setting default security permissions

2002-04-12 Thread Sidnei da Silva
Anyway, seems that there was a bug on the permission machinery, that was solved today with the people at ZC, during the Bug Day. The fixes are on CVS. []'s On Qui 11 Abr 2002 18:23, Tom Cameron wrote: | After more experimenting, I discovered that a restart of the zope server | solved the

[Zope-dev] === Appel au peuple francais ===

2002-04-12 Thread resistance
Appel au peuple francais OUVREZ LES YEUX ! Il ne s'ecoule plus un jour en France sans que les media ne relatent des evenements qui auraient ete inimaginables il y a seulement vingt ans dans notre pays : emeutes et insurrection dans les cites, incendies volontaires de voitures, caillassages

Re: [Zope-dev] [RFClet]: What about the request method and theclient side trojan?

2002-04-12 Thread Jeffrey P Shell
On 4/12/02 2:49 AM, Toby Dickenson [EMAIL PROTECTED] wrote: On Thursday 11 April 2002 6:37 pm, Jeffrey P Shell wrote: On 4/11/02 7:55 AM, Toby Dickenson [EMAIL PROTECTED] Then you're lucky. Usually, any time I see dtml-var someNonIdempotentMethod(), I immediately change it to the name

Re: [Zope-dev] [RFClet]: What about the request method and the client side trojan?

2002-04-12 Thread Oliver Bleutgen
Jeffrey P Shell wrote: I have to now admit to not having seen the proposal, I've just been following along here and struggling to capture the meaning of idempotent as it applies to Zope security, but I *think* I'm starting to grok it. Since a search for idempotent on zope.org yields no

Re: [Zope-dev] problems downloading CVS tarballs

2002-04-12 Thread Dieter Maurer
Andrew Sydelko writes: When I try to download a CVS tarball of the Zope_2_5-branch branch, I get a corrupt tar archive. The .../ISO_8859_1_Splitter/src directory contains one c file whose name gets truncated. I'm using gnutar so I'm pretty sure it's not a problem on my end.

Re: [Zope-dev] random

2002-04-12 Thread Dieter Maurer
Mario Carina writes: I need to extract, form my metapublisher object, one of my entrys randomly. i have found this command but it's good for some static pages. !--#var expr=_.whrandom.choice(glossario.objectValues())-- It is good for any sequence. Learn how to get a sequence from

Re: [Zope-dev] Zope FTP Server.

2002-04-12 Thread Dieter Maurer
Yuan-Chen Cheng writes: I use Dreamweaver to let user upload files in zope. I create a folder and add an account for an user and give him role Manager so that he can do everything in that folder. The he login with Dreamweaver, try to delete file, then he got a 530 Unauthorized.

Re: [Zope-dev] problems downloading CVS tarballs

2002-04-12 Thread Andrew Sydelko
On Fri, Apr 12, 2002 at 09:57:13PM +0200, Dieter Maurer wrote: Envelope-to: [EMAIL PROTECTED] From: Dieter Maurer [EMAIL PROTECTED] To: Andrew Sydelko [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Zope-dev] problems downloading CVS tarballs X-Spam-Status: No, hits=-13.5 required=5.0