October 2002 - Zope-Dev

How to create instance of a Zclass w/ python script ??
by Nicolas LAURANCE 24 Oct '02

24 Oct '02

Hello Zopers ! Here's my situation I created a very basic products wich holds a Zclass. (Contact) I want to create many instances in one shot, so I wrote a small python script (no external method) to set the properties. The thing is I don't seem able to trigger the creation of the object Tried: Contact.CreateinObjectManager(id,REQUEST) => no Products.Contact.CreateinObjectManager(id, REQUEST) => no Any help appreciated

2 1

Re: [Zope-Checkins] efge-death-to-dtml-var-branch
by Toby Dickenson 24 Oct '02

24 Oct '02

(resend - sorry if you see a duplicate) On Thursday 24 October 2002 12:06 am, Florent Guillaume wrote: > Removed most <dtml-var> to replace them with &dtml-foo;. > This corrects a number of potential XSS holes I assume that the XSS holes are the old dtml-var tags which didnt have html_quote? Or am I missing something?

2 1

regression testing python install
by Adam Manock 23 Oct '02

23 Oct '02

Slightly of topic I know, but I thought someone here might know... I'm tweaking the python2.1 SRPM from python.org to get it to play nice with RedHat 8.0. Now that I have it compiling nicely, I thought it would be a good idea to fully regression test the resulting python install, especially as we now build with gcc 3.2 on 8.0 :-) Is there a "simple" way to thoroughly regression test a python install? Adam

2 1

Strange "Bug" in Scripts (Python) and Python code ...
by Joachim Werner 22 Oct '02

22 Oct '02

Hi! I just had a very strange problem. I tried some code like this in a Script (Python). The (obvious) error in the code is the html += instead of just html =. These few lines brought the Zope server (and the Browser I used for testing) to a halt: html = '' for letter in 'ABCDEFGHIJKLMNOPQRSTUVWXYZ': html += '|'.join([html, letter]) return html After a very long time I got a Memory Error. I am not really sure whether this qualifies as a bug, and whether it is a Zope bug or a Python bug (the same happens when using the same code from filesystem-based Python). But I'd guess that code fragments in Scripts (Python) should be save enough to not blow the server. Other memory-intensive potentially malicious code like infinite recursions are handled well after all. Any comments? _______________________________ Joachim Werner iuveno AG Wittelsbacherstraße 23b 90475 Nürnberg Tel. +49 (0) 911 / 988398-4 Fax +49 (0) 911 / 988398-5 Mail: joachim.werner(a)iuveno.de WWW: http://www.iuveno.de

2 1

Proposal: Improving ZSQL Methods
by Andy McKay 21 Oct '02

21 Oct '02

I've put up a proposal I'd like to put into 2.6.1 or 2.7, whichever is next. Summary: "Change ZSQLMethods to allow a user to a) change the database connection without changing the object and b) use standard cache managers." http://dev.zope.org/Wikis/DevSite/Proposals/ZsqlMethodImprovements Any comments or ideas welcome. Cheers. -- Andy McKay www.agmweb.ca

4 5

CallProfiler?
by Leonardo Rochael Almeida 17 Oct '02

17 Oct '02

I was looking for a recent version of CallProfiler. It's cannonical page on: http://www.zope.org/Members/richard/CallProfiler/ mentions that it's reported not to work in 2.5.x and that it'd be integrated into Zope 2.6, which makes me believe that the version available for download won't work with 2.6 either. What is the status of this wonderful product wrt Zope 2.6? -- Ideas don't stay in some minds very long because they don't like solitary confinement.

3 4

LDAPRoleTwiddler / BasicUserFolder
by Dirk Datzert 17 Oct '02

17 Oct '02

Hi all, I try to solve some problems with LDAPRoleTwiddler an inherited version from BasicUserFolder I currently use a validate()-function which I saw similar in BasicUserFolder and in LDAPRoleExtender (modifications from Shane) My problem is that if self.authorize(user, a, c, n, v, roles): return user.__of__(self) in validate() does not work, but return user.__of__(self) work better, but does not the same as the API (which I don't know) expect. Can anybody give a hint ? Regards, Dirk used python code: # This must stay accessible to everyone def validate( self, request, auth='', roles=_noroles ): """ The main engine """ v = request['PUBLISHED'] # the published object a, c, n, v = self._getobcontext(v, request) name, password = self.identify(auth) user = self.authenticate(name, password, request) if user is not None: if user is not None: # On my Test-System it works with authorize() # On my Integration-System it works only without authorize() #if self.authorize(user, a, c, n, v, roles): return user.__of__(self) # Could not twiddle a user. Defer to other user folders. return None def authenticate(self, name, password, request): super = self._emergency_user if name is None: return None if super and name == super.getUserName(): user = super else: user = self.getUser(name, password) if user is not None and user.authenticate(password, request): return user else: return None

3 18

How to override __getattr__ and not break acquisition
by Erik A. Dahl 17 Oct '02

17 Oct '02

Ok I need to override __getattr__ in one of my product classes. I'm sure this is killing acquisition but not sure about the persistence stuff (I think this is working). Is there a way to make this work? Here is what I'm doing: def __getattr__(self, name): if name == 'myattr': return self.myattr() I assume that somewhere in the Acquisition code there is a __getattr__ but I can't find it. I tried calling Implicit.__getattr__ but its not there. If some one has an example that would be great. -EAD

7 14

getSecurityManager force auth in __bobo_traverse__
by kosh＠aesaeion.com 16 Oct '02

16 Oct '02

I need to check if a user has a certain permission to decide to call a function during traversal however even though the browser is sending auth (I checked with ethereal) it seems that zope is not figuring out its security stuff until later. How can I force the security manager to do its auth processing? Once it does its auth stuff the rest is easy to do. However after crawling through the code for a while I don't see any clear path on where to go with this. Thanks Designing and building web applications http://webme-eng.com

4 4

[Zope-2.6.0b1] Property Problem
by Yusei Tahara 16 Oct '02

16 Oct '02

Hello. I have a problem with property tab on zope 2.6 branch, I can't add/edit properties in japanese. Because, fixing "latin-1" for unicode decoding in some place. japanese or other asian language are not latin-1 encoding, so management_page_charset won't help me. and Folder title attribute is "string" not "ustring". if nothing is done, I should make a monkey patch for every zope update, this is very bad.... Yusei ---------------------------------------------------------------- #ZPublisher/ZConverters.py line:19 def field2string(v): if hasattr(v,'read'): return v.read() elif isinstance(v,UnicodeType) : return v.encode('latin1') #it cause this problem... else: return str(v) #ZPublisher/HTTPRequest.py line:501 if character_encoding: # We have a string with a specified character encoding. # This gets passed to the converter either as unicode, if it can # handle it, or crunched back down to latin-1 if it can not. item = unicode(item,character_encoding) if hasattr(converter,'convert_unicode'): item = converter.convert_unicode(item) else: item = converter(item.encode('latin1')) else: item=converter(item) #OFS/dtml/properties.dtml line:250 <input type="text" name="value:utf8:ustring" size="30" /> ---------------------------------------------------------------- -- Yusei Tahara "So it goes" yusei(a)domen.cx

3 3