September 2001 - Zope-Dev

Password encryption--calling on the community
by Shane Hathaway 10 Sep '01

10 Sep '01

Following the Zope 2.5 plan, I have just added to CVS the capability for user passwords to be encrypted in the standard user folder. Please try it out. If it works correctly there should be no outwardly visible differences. I'm also soliciting the assistance of developers and users of custom user folders (like LDAPUserFolder, LoginManager, GUF, etcUserFolder, NTUserFolder, etc.) We need you to test whether the added feature has any bad effects on your user folder. It's much easier to apply a fix now than it will be after a release. Shane P.S. I may have inadvertently sent this twice, please excuse. :-)

1 0

Password encryption--calling on the community
by Shane Hathaway 10 Sep '01

10 Sep '01

Following the Zope 2.5 plan, I have just added to CVS the capability for user passwords to be encrypted in the standard user folder. Please try it out. If it works correctly there should be no outwardly visible differences. I'm also soliciting the assistance of developers and users of custom user folders (like LDAPUserFolder, LoginManager, GUF, etcUserFolder, NTUserFolder, etc.) We need you to test whether the added feature has any bad effects on your user folder. It's much easier to apply a fix now than it will be after a release. Shane

1 0

Alternative acquisition workarounds
by Sidnei da Silva 10 Sep '01

10 Sep '01

Hello everyone! This is my first posting to this list, so, excuse me if im asking a question that has already been asked by someone. Ok, lets go to the point: I have the following structure at my site: /-- | --/Template1 | --/header --/footer --/images | --/image1.jpg --/image2.jpg --/image3.jpg | --/Section | --/Template 2 | --/images | --/image1.jpg And I tried using Transparent folders to make documents using the Template2 acquire Images and Methods from the Template1, but when i use a DTML document that references "images/something", my document uses the images dir from the Templates2 and ignores that from Templates1. Ive seen an example like this in some acquisition tutorial out there, but it just said that this was hard to implement and shows some example in DTML. I was hoping someone implemented anything like this in a Python product, or if someone has an idea of how this could be implemented in Python. Thanx for your patience. -- Sidnei da Silva X3ng Consultoria e Desenvolvimento Ltda. sidnei(a)x3ng.com.br

1 1

Where to send patches?
by Jim Washington 10 Sep '01

10 Sep '01

Hi, All Since the Collector is down, where do we send patches if we are not cvs-authorized? I just discovered a not-too-clever hack to make the Find tab recurse through methods of Z Classes, which the margin of this e-mail is too small to contain. -- Jim Washington

3 3

Problems with CatalogAware?
by sean.upton＠uniontrib.com 10 Sep '01

10 Sep '01

I have a python product that has a class derived from CatalogAware and Folder. I programmatically add instances of these (1000s of them) on an automated basis every day in the early morning. My problem is that whenever I do this, the Catalog is updated with some problems: 1 - Metadata is skewed: DateTime objects are cataloged, and they end up with the wrong date ('2001/01/01') instead of today's date, even though the actual property contains today's date. The index in question is built from a property. 2 - Text indexes only get a portion of their text stored in the metadata, not all of it. The index in question is built from a class method in the product code. Using a bulk reindex solves this problem (subtransaction off, haven't tried it any other way). I'm using Zope 2.3.2 with ZEO 1.0b3 using a VHM. The automated process queries SQL for data, and uses those queries to create object instances of the previously mentioned catalog-aware class, and I create anywhere from 2000-7000 objects at a time. I'm not sure if this is due to the size of the transaction I am running. I haven't tried this in a smaller transaction yet; I was wondering if anyone else has seen this. Any thoughts? Sean ========================= Sean Upton Senior Programmer/Analyst SignOnSanDiego.com The San Diego Union-Tribune 619.718.5241 sean.upton(a)uniontrib.com =========================

2 1

Bug in 2.4.1 final
by Joachim Schmitz 10 Sep '01

10 Sep '01

Hi, I run into a problem with ZPatterns, and XML-rpc. Steve Alexander discovered, that it was caused by a bug in Zope-2.4.1 final (see below). The bug was NOT in 2.4.1b1. So there must have been a code change between the beta and the final. I thought, that there are no codechanges between the last beta and the final version ? Mit freundlichen Grüßen Joachim Schmitz AixtraWare, Ing. Büro für Internetanwendungen Hüsgenstr. 33a, D-52457 Aldenhoven Telefon: +49-2464-8851, FAX: +49-2464-905163 ---------- Forwarded message ---------- Date: Sat, 08 Sep 2001 12:46:53 +0100 From: Steve Alexander <steve(a)cat-box.net> To: Joachim Schmitz <js(a)aixtraware.de> Cc: zpatterns <zpatterns(a)eby-sarna.com> Subject: Re: [ZPatterns] mystery with restrictedTraverse Joachim Schmitz wrote: > > > > Error Type: NameError > Error Value: global name \'has\' is not defined > > > The most strange thing is that worked with 2.4.1b1, after installing 2.4.1 > final it failed. > > I just tested it with 2.3.3 there it works too. > With a normal folder in a subfolder it works too. > > Any hint is apreacheated. It is a bug in 2.4.1 final. You need to alter lib/OFS/Traversable.py, line 144, and insert the line has=hasattr after the existing get=getattr -- Steve Alexander Software Engineer Cat-Box limited

1 0

zope variables!
by Stian Jenssen 10 Sep '01

10 Sep '01

Hi! Want to read the variable i pass from the url. eg: http://wap.test.com/test/test?id=287518 Works well with php.

2 1

Role Manager and permissions
by Petr Knapek 10 Sep '01

10 Sep '01

Hi Zopists, please can anybody explain (point to any documentation) why there is change in default permission setting for role 'Manager' when a new object is created? In older versions of Zope (2.2.x) when a new instance of any object was created (added) into ZODB role Manager had automatically set all permissions explicitly in addition of acquisition. Now (Zope 2.4.0 beta 3, Zope 2.4.1 - both from sources at FreeBSD) there is no explicit permission setting for role Manager when a new object instance is added into ZODB. I have also read very carefully Developer's guide and there is something what as I think is not working properly with setPermissionDefault method of SecurityInfo() object. I cite from from Capter 6: Security, subchapter Setting Default Roles For Permissions ---- As we saw earlier, the SecurityInfo interface provided a way to associate methods with permissions. It also provides a way to associate a permission with a set of default roles that should have that permission on instances of your object. To associate a permission with one or more roles, use the following: security.setPermissionDefault(permissionName, rolesList) The permissionName argument should be the name of a permission that you have used in your object and rolesList should be a sequence (tuple or list) of role names that should be associated with permissionName by default on instances of your object. Note that it is not always necessary to use this method. All permissions for which you did not set defaults using setPermissionDefault are assumed to have a single default role of Manager. Notable exceptions to this rule include View and Access contents information, which always have the default roles Manager and Anonymous. --- End of citation. Is it bug or feature? Thanks, Petr -- Petr Knápek Network Development NEXTRA Czech Republic s.r.o. http://www.nextra.cz/ V Celnici 10 / CZ - 117 21 Praha 1 / Czech Republic Tel: +420/2/96 355 111 / Mobile: +420/604-202 611 E-Mail: petr.knapek(a)nextra.com Contact address: Hlinky 114 / CZ - 603 00 Brno / Czech Republic Tel: +420/5/43 554 150 / FAX: +420/5/43 554 214 see Disclaimer http://www.nextra.cz/disclaimer/

1 0

argh - CoreSessionTracking
by Harry Wilkinson 10 Sep '01

10 Sep '01

Hi all :) I'm having some problems with CoreSessionTracking. The errors are occurring on some pretty simple DTML code and they seem to be caused by a failure to find the getSessionData() method :S Here's the code that's getting an error: <dtml-call "session.getSessionData().set('Type','Professional')"> I've tried splitting this up into three seperate calls like so: <dtml-let ses="session"> <dtml-let sesdata="ses.getSessionData()"> <dtml-call "sesdata.set('Type', 'Professional')"> </dtml-let> </dtml-let> The error occurs on the call to getSessionData() and I can't work out why. The same code works in a seperate area of my site, using a different session data manager (with a different name) and a different session ID manager. Is this likely to be an acquisition problem? The object 'session' is in the folder directly above this folder. I have checked and double checked the security settings of various objects but I'm not totally certain they're correct. I get an error when I try to change the security settings of the 'access session data' permission in the session data manager. Is that normal? I hope somebody can shed some light on this; thanks for your time! :) Oh yes, and here's the traceback:  Harry

1 1

UserFolder and xmlrpc
by Richard Jones 10 Sep '01

10 Sep '01

Are there any plans to "update" UserFolder to allow xmlrpc calls into it? The addition of manage_addUser/manage_editUser/etc that wrap _doAddUser/_doChangeUser/etc would probably suffice. The current manage_users interface is not xml-rpc friendly, unfortunately :) The point of this, BTW, is to allow a user-friendly "control panel" on the mac and windows to add (and possibly later edit) manager users. We find that the process of [remembering|setting] the admin password and then logging in, finding acl_users, adding a user, logging out (usually quitting the browser), logging back in is quite a problem for our users. Hence the control panel being able to add a manager user in one step. Richard ps. http://www.bizarsoftware.com.au/resource_centre/articles/open_source.html

4 11