Re: [Zope-dev] Cache-bug in handling of files

2000-08-14 Thread Peter Arvidsson
So there is nothing else I can do but to make my files open in a new window then... But what I dont understand is why IE doesnt send any If-Modified-Since header? Shouldnt it always do that if the settings are not set to never update cached files? Peter Jim Sanford skrev: since all the

Re: [Zope-dev] Cache-bug in handling of files

2000-08-14 Thread Toby Dickenson
On Mon, 14 Aug 2000 10:01:03 +0200, Peter Arvidsson [EMAIL PROTECTED] wrote: So there is nothing else I can do but to make my files open in a new window then... But what I dont understand is why IE doesnt send any If-Modified-Since header? Shouldnt it always do that if the settings are not set

[Zope-dev] ZPatterns, Transactions, _register/_unregister

2000-08-14 Thread Bob Pepin
Hi, I've encountered some weird behaviour in the ZPatterns Transactional class when I was trying to write a User Source for the Login Manager Product. I'm using Zope 2.2.0 with LoginManager 0.8.7a1 and ZPatterns 0.4.1snap1 The problem is that _unregister seems to be trying to delete the

Re: [Zope-dev] Acquisition Confusion :S

2000-08-14 Thread Chris Withers
Steve Alexander wrote: That makes for a lot of security checks. There are possible optimisations, though. But this starts to get even more complicated. Does that mean it won't work, would be very slow, or both? ;-) cheers for looking though... Chris

Re: [Zope-dev] Acquisition Confusion :S

2000-08-14 Thread Chris Withers
Michel Pelletier wrote: A.B.C.D Look for D in C, if it's not there, look in B if it's not there, look in A Someone correct me if I'm wrong here, but... This is a linear search, which is the way acquisition *used* to work. Which Zope version? ;-) Consider: A / B/ C/

Re: [Zope-dev] Acquisition Confusion :S

2000-08-14 Thread Steve Alexander
Chris Withers wrote: Steve Alexander wrote: That makes for a lot of security checks. There are possible optimisations, though. But this starts to get even more complicated. Does that mean it won't work, would be very slow, or both? ;-) It will work. It will be slower. I think Evan

[Zope-dev] hmmm.. wierd permission issues with getPersistentItemIDs()...

2000-08-14 Thread Steve Spicklemire
Hi ZPatterns folks... ZPatterns-0.4.1snap1 Zope2.2.0-src I have a specialist with a defaultRack storing DataSkin subclassed ZClass instances with only persistent attribute providers. dtml-var "defaultRack.getPersistentItemIDs()" or dtml-in "defaultRack.getPersistentItemIDs()" ... /dtml-in

Re: [Zope-dev] Acquisition Confusion :S

2000-08-14 Thread Chris Withers
Evan Simpson wrote: I haven't got the whole reason, but here are some of the pieces: - never expose a "bare" object, or even one with an incomplete context Why? You can get at it through aq_base anyway, surely? Also, Jim Fulton wrote a while back: Sure. There is no guarentee that all

Re: [Zope-dev] ZCatalog brains

2000-08-14 Thread Chris Withers
Steve Alexander wrote: Although there are ways to do this now, I guess I was wondering about making it a standard part of catalogs. I'm sure code will be greatfully recieved ;-) Thinking further though, if it is as easy as adding "url" to the catalog's metadata, why bother? Hmm, how about

Re: [Zope-dev] hmmm.. wierd permission issues with getPersistentItemIDs()...

2000-08-14 Thread Steve Alexander
Steve Spicklemire wrote: Hi ZPatterns folks... ZPatterns-0.4.1snap1 Zope2.2.0-src I have a specialist with a defaultRack storing DataSkin subclassed ZClass instances with only persistent attribute providers. dtml-var "defaultRack.getPersistentItemIDs()" When I call that, I get

[Zope-dev] Re: Zope security alert and hotfix product...

2000-08-14 Thread Brian Lloyd
The issue involves the fact that the getRoles method of user objects contained in the default UserFolder implementation returns a mutable Python type. Because the mutable object is still associated with the persistent User object, users with the ability to edit DTML could

Re: [Zope-dev] Acquisition Confusion :S

2000-08-14 Thread Evan Simpson
From: Chris Withers [EMAIL PROTECTED] - never expose a "bare" object, or even one with an incomplete context Why? You can get at it through aq_base anyway, surely? Only from unrestricted code. DTML and (CVS) Python Methods only let you access aq_parent. This only applies to objects that

Re: [Zope-dev] Re: Zope security alert and hotfix product...

2000-08-14 Thread Andrew Wilcox
Now - should methods of mutable types be off-limits in the future? [...] I don't think it would be acceptable for 'append' to be off-limits in this case, so the alternative is that the security machinery would somehow have to be able to distinguish mutables created by the user from those

RE: [Zope-dev] zope221b1 - zclass zexp import into clean database error

2000-08-14 Thread Brian Lloyd
Shane has tracked this down to a mis-bugfix in the beta - the fix will be in the 2.2.1 final. Brian Lloyd[EMAIL PROTECTED] Software Engineer 540.371.6909 Digital Creations http://www.digicool.com -Original Message- From: Dr. Ross Lazarus [mailto:[EMAIL