[Zope-dev] Python (File) Product Permission Handeling

2000-07-10 Thread Stephan Richter
Hello everyone, I am writing my own Python Product and it is going well so far, except that some of the default permissions will not transfer. I have an ObjectManager object that contains another ObjectManager-based object. The first inherits the permissions of Zope just fine, but in the

Re: [Zope-dev] Proposed interface: Restricted creation

2000-07-10 Thread Toby Dickenson
On Wed, 05 Jul 2000 19:42:38 +0300, Itamar Shtull-Trauring [EMAIL PROTECTED] wrote: Shane Hathaway wrote: The place where this is needed most (IMHO) is for ZClass factories. So there needs to be a way to create meta type filters through the Web. Yes, but in Python products too, where you

[Zope-dev] _delObject Method

2000-07-10 Thread Heine, Gregor
Hello! Can anybody tell me, what the 'dp=1' attribute in the _delObject methods of the ObjectManager (OFS/ObjectManager.py) and ZClassMethodsSheet (ZClasses/Method.py) Class are for? I haven't found any method call, where dp is set and the methods themselves don't use it aswell. I would like to

RE: [Zope-dev] _delObject Method

2000-07-10 Thread Brian Lloyd
Can anybody tell me, what the 'dp=1' attribute in the _delObject methods of the ObjectManager (OFS/ObjectManager.py) and ZClassMethodsSheet (ZClasses/Method.py) Class are for? I haven't found any method call, where dp is set and the methods themselves don't use it aswell. I would like

[Zope-dev] Overriding a method in an instance.

2000-07-10 Thread Chris Withers
Hi, I guess this should be a feature request for the collector but I thought I'd see what other people thought first... I'd really like to be able to override methods in an instance of an object. Examples I can think of are Squishdot and the Tracker. In Squishdot, or any ZCatalog for that

Re: [Zope-dev] Overriding a method in an instance.

2000-07-10 Thread Chris Withers
Monty Taylor wrote: Make a folder that contains the overridden methods and call things through the context of that folder. Neat trick :-) We love acquisiton, but it won't quite do it :( The default index_html will get called, unless you put /folder/ on the end of your URL. which is horrible :(

[Zope-dev] NASTY error. Why?

2000-07-10 Thread Chris Withers
Hi, I'm trying to do a tree walk and copy with: dtml-in objectValues dtml-call "REQUEST['where'][-1].manage_addFolder(id)" Created dtml-var id in dtml-var "REQUEST['where'][-1].id"BR dtml-if "meta_type=='Folder'" dtml-call "REQUEST['where'].append(this())" dtml-var iterate dtml-call

Re: [Zope-dev] Overriding a method in an instance.

2000-07-10 Thread Shane Hathaway
Chris Withers wrote: Monty Taylor wrote: Make a folder that contains the overridden methods and call things through the context of that folder. Neat trick :-) We love acquisiton, but it won't quite do it :( The default index_html will get called, unless you put /folder/ on the end of

Re: [Zope-dev] NASTY error. Why?

2000-07-10 Thread Evan Simpson
From: Chris Withers [EMAIL PROTECTED] dtml-call "REQUEST['where'][-1].manage_addFolder(id)" Error Type: TypeError Error Value: read-only character buffer, Python Method Looks like the 'id' of something along the line is a method rather than a string. Try "_.getitem('id', 1)". Cheers,

Re: [Zope-dev] NASTY error. Why?

2000-07-10 Thread Chris Withers
Evan, Thanks, that worked... Evan Simpson wrote: From: Chris Withers [EMAIL PROTECTED] dtml-call "REQUEST['where'][-1].manage_addFolder(id)" Error Type: TypeError Error Value: read-only character buffer, Python Method Looks like the 'id' of something along the line is a method

Re: [Zope-dev] NASTY error. Why?

2000-07-10 Thread Chris Withers
Chris Withers wrote: Can someone please tell me why folder.id is a method and everything-else.id is a string? Sorry, that should be folder.id is a string and everything-else.id is a method. cheers, Chris ___ Zope-Dev maillist - [EMAIL PROTECTED]

Re: [Zope-dev] More comments on ZPatterns

2000-07-10 Thread Phillip J. Eby
At 04:40 PM 7/9/00 -0500, Steve Spicklemire wrote: Wow.. alright. I think I need "ZPatterns for Dummies" or maybe there needs to be a disclaimer "ZPatterns are NOT for Dummies." ;-) I've pretty much given up on Sheets for now. Nothing I've tried has actually worked. I thought maybe I needed to

Re: [Zope-dev] More comments on ZPatterns

2000-07-10 Thread Phillip J. Eby
At 10:02 AM 7/10/00 -0400, Shane Hathaway wrote: Phillip, What if the management interface for specialists provided a way to manipulate, or at least view, the table of virtual objects (or, in ZPatterns-speak, DataSkins)? Wouldn't that make ZPatterns more accessible? Probably. The sticking

RE: [Zope-dev] Request for amplification on new Product permissions API.

2000-07-10 Thread R. David Murray
On Fri, 7 Jul 2000, Brian Lloyd wrote: Are you calling: Globals.default__class_init__(MyBasketClass) on your Basket class? This is (poorly documented but) necessary for permissions declared in __ac_permissions__ to be correctly initialized. Poorly? grin Only three classes seem to use

RE: [Zope-dev] NASTY error. Why?

2000-07-10 Thread Brian Lloyd
Interesting commentary from the Interfaces Wiki: http://www.zope.org/Members/michel/Projects/Interfaces/ObjectM anagerItem """Some old objects provide id methods that return ids. This practice should be avoided for new objects. We can't change the old objects for backward compatability

Re: [Zope-dev] LoginManager patch considered harmful

2000-07-10 Thread Shane Hathaway
"Phillip J. Eby" wrote: At 09:22 AM 7/10/00 -0400, Shane Hathaway wrote: The new security machinery actually provides a different way to solve this problem. Since we now have an execution stack, we can limit that stack, causing an exception to be thrown rather than letting it overflow

[Zope-dev] Expanded access file (was Re: LoginManager patch consideredharmful) harmful)

2000-07-10 Thread Phillip J. Eby
At 03:07 PM 7/10/00 -0400, Shane Hathaway wrote: "Phillip J. Eby" wrote: Understood. I'll try to keep that use case in mind. Keep in mind, however, that being able to create a LoginManager is a pretty risky business in a portalish environment - you could potentially get access to

Re: [Zope-dev] More comments on ZPatterns

2000-07-10 Thread Phillip J. Eby
At 02:29 PM 7/10/00 -0400, Shane Hathaway wrote: I decided to try out this idea. It turned out to be a cinch! It doesn't restrict the manage_* methods yet; I'll get to that after I get some feedback. Thoroughly untested except on my box; use at your own risk, etc. :-)

[Zope-dev] Re: Expanded access file (was Re: LoginManager patchconsideredharmful)consideredharmful)

2000-07-10 Thread Shane Hathaway
Jim, Phillip has an idea that could make life simpler for Zope newbies. This would be intended for the next major Zope release. "Phillip J. Eby" wrote: Well, I'm hoping you'll take a look at my Collector suggestion for a new Zope feature. :) Specifically, extending the "access" file to

[Zope-dev] Re: Expanded access file (was Re: LoginManager patchconsideredharmful) consideredharmful)

2000-07-10 Thread Phillip J. Eby
FYI, I entered a Collector feature request for this over the weekend; I classified it as "somewhat important/future", IIRC. It mentions the "set up two accounts" concept you describe below, and I think there might be some other notes as well. At 05:07 PM 7/10/00 -0400, Shane Hathaway wrote:

Re: [Zope-dev] NASTY error. Why?

2000-07-10 Thread Dieter Maurer
Chris Withers writes: I'm trying to do a tree walk and copy with: dtml-in objectValues dtml-call "REQUEST['where'][-1].manage_addFolder(id)" Created dtml-var id in dtml-var "REQUEST['where'][-1].id"BR dtml-if "meta_type=='Folder'" dtml-call "REQUEST['where'].append(this())"

[Zope-dev] zope and UNIX permissions

2000-07-10 Thread Leonardo Kenji Shikida
Wetried to install zope using its tar.gz file and it created a lot of files with non-default users and with very permissive permissions on a linux box (like 777 permissions for many files). This is a HUGE security hole. We couldn't install the RPMs files on our webserver. Is there any

RE: [Zope-dev] zope and UNIX permissions

2000-07-10 Thread Chris McDonough
Which files? Know that if you untar as root, the files will be 'owned' by whoever tarred it up on our side. Untar it as a normal user. Reset the permissions of the ones you find too permissive. Then let us know so we can change the distribution. -Original Message- From: Leonardo

RE: [Zope-dev] zope and UNIX permissions

2000-07-10 Thread R. David Murray
On Mon, 10 Jul 2000, Chris McDonough wrote: Which files? Know that if you untar as root, the files will be 'owned' by whoever tarred it up on our side. Untar it as a normal user. Reset the permissions of the ones you find too permissive. Then let us know so we can change the distribution.

RE: [Zope-dev] zope and UNIX permissions

2000-07-10 Thread Chris McDonough
Using gnutar, untarring as the root user preserves ownership on expansion by default. Not sure if FreeBSD uses gnutar (I imagine not), but this is the case with gnutar under Linux. I think this is what happened to him... he said he could not use the RPM release and was working with the source

[Zope-dev] Re: [Zope] Sorting a list

2000-07-10 Thread Dieter Maurer
RC Compaan writes: I have a list: mylist=[('R',31),('I',80),('A',80),('S',23),('E',35),('C',21)] I want to rebuild the list sorted from high to low on the sequence-item. When i call dtml-in mylist sort=sequence-item reverse the list gets sorted on the sequence-key not the