July 2002 - Zope-Dev

Re: [Zope-CMF] CMF Usabiltiy
by Tim Hoffman 16 Jul '02

16 Jul '02

Hi For what it is worth here are some code snippets from the monkeypatch that adds the basics to show what I have been doing. It is a bit messy and probably not the best way to do it, but this gives you the gist of what is going on. First off I have been monkeypatching the DefaultDublinCoreImpl and adding the following field and method. I also override the behaviour of manageAfterClone # UniqueId ----------------------------------------------------- security.declarePublic( 'UniqueId' ) def UniqueID( self ): '''Designing Futures element - UniqueID''' try: return self.unique_id except: return "" #------------------------------------------------------------------ import md5, base64, time, string def ETIMakeUniqueID(id): ''' Generate a unique id ''' oid=md5.new() oid.update(id) oid.update(str(time.time())) oid=oid.digest() oid=string.strip(base64.encodestring(oid)) return 'DF_OID_'+oid.replace('/','$') I need to extend the functionality of manage_afterClone so that if an object is cloned/copied it needs to have the UniqueID regenerated, otherwise we will end up with duplicate ID's (not a good thing) def manage_afterClone(self,obj): obj.unique_id = ETIMakeUniqueID(obj.title_or_id()) Overide the __init__ method in DefaultDublinCoreImpl to include self.unique_id = ETIMakeUniqueID(title) So that the unique id is initialised on object creation. The bind/rebind these methods to the base classes, so that all content types will exhibit this behaviour. DefaultDublinCoreImpl.UniqueID = UniqueID DefaultDublinCoreImpl.__init__ = __init__ Item.manage_afterClone = manage_afterClone Then I set up an Index and Metadata for UniqeID in the portal_catalog. Now any object can be found by UniquID. Irrespective of whats it's path is, by using the catalog. I find also that an awfull lot of the time the metadata is often sufficient without having to retrieve the object. Regards Tim On Fri, 2002-07-12 at 23:44, J C Lawrence wrote: > On 12 Jul 2002 14:43:23 +0800 > Tim Hoffman <timhoffman(a)cams.wa.gov.au> wrote: > > > This is a feature I too wanted, and my solution was to to give every > > object a unique object ID (new metadata field) which get's updated if > > the object is cloned. This Object ID is then catalogued, and then > > content which needs links uses the object Id plus a retrieval > > method. This way doc's can move anywhere and no broken links. > > Neat. Smart. Might be a good idea to throw the details and a sample > code blob up on the Collector for others to follow. > > -- > J C Lawrence > ---------(*) Satan, oscillate my metallic sonatas. > claw(a)kanga.nu He lived as a devil, eh? > http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

1 0

rfc1123_date
by Magnus Heino 15 Jul '02

15 Jul '02

Why is rfc1123_date a method in App.Common, and not a method on DateTime.DateTime? How am I supposed to use it from dtml/zpt? /Magnus

3 4

creating products
by Dirk Datzert 14 Jul '02

14 Jul '02

Hi, I want to write a simple product which saves some data. Which base python-zope class is necessary to store user-structured data in the following format: zope-container non-zope structure object 1 non-zope object-container non-zope structure object 2 ... Which base class must be the zope-container ? SimpleItem, PropertyManager, ObjectManager, or what. Which base class must the non-zope structured data ? Persistent, PropertyManager, SimpleItem Regards, Dirk

3 2

Tracker-Catalog
by Sebastian Sippl 12 Jul '02

12 Jul '02

Hi, Is there a way to access the Trackers(TrackerBase-Product) Catalog(and its contents) via DTML-var or Python script? Sebastian

2 1

?determine if x is a string or array in PythonScript
by Tim Hoffman 12 Jul '02

12 Jul '02

Hi I must be stupid or something, but I can't for the life of me work out a simple way of determining if a variable contains a string or array, in a PythonScript in Zope. I can't import type and or use type() function. isinstance doesn't work because I can't give a type as the second arg. I obviously just can't see the wood for the trees, can anyone help out this silly individual ? Rgds Tim

3 4

vulnerability in stock Zope
by seb bacon 11 Jul '02

11 Jul '02

Production sites running a stock Zope are vulnerable to abuse of their server if they have not removed the 'Examples' folder. For example, anyone could use http://notcarefulenough.com/Examples/FileLibrary as a warez repository. I propose changing the 'View' permission on the entire folder to 'Manager'-only to protect some of us from ourselves ;-) Any objections? seb

2 5

IIS / login bug
by seb bacon 11 Jul '02

11 Jul '02

There is a bug in IIS[1] which causes cookies to be dropped during a redirect. The result in the CMF is that a login fails when it is combined with a redirect, as happens following an attempted access of a forbidden resource when using the CookieCrumbler. Now, I'm not too familiar with the pcgi mechanism, or IIS, and not having my own Windows development machine makes debugging a bit problematic. So I'd appreciate advice from IIS / pcgi savants (there must be some, somewhere ;-) M$ says the workaround is to rename the zope.pcgi script to nhp-zope.pcgi, which indicates to IIS that it should pass on all HTTP headers untouched. The problem here is that the ZPublisher defers to the server to produce some of the relevant HTTP headers, namely the protocol version / status header ('HTTP/1.1 200 OK'). Without this header, browsers display all the headers as if they are part of the body. My solution is to alter the pcgi_publisher.py script so that it passes the publish_module a ZServerHTTPResponse object - which *will* add all the relevant server headers [2]. However, altering the pcgi_publisher script seems to have no effect, whatsoever, on anything. Should my approach work? Are there better workarounds? Thanks, seb -- References [1] http://support.microsoft.com/default.aspx?scid=kb;EN-US;q176113 [2] pcgi_publisher.py patch (watch for line wraps) *** pcgi_publisher.py Thu Sep 7 17:40:07 2000 --- nhp-pcgi_publisher.py Thu Jul 11 09:56:42 2002 *************** *** 294,306 **** ### IIS hack to fix broken PATH_INFO ### taken from Mike Fletcher's win_cgi_module_publisher import string if env.has_key('SERVER_SOFTWARE') and string.find(env['SERVER_SOFTWARE'],'Microsoft-IIS') != -1: script = filter(None,string.split(string.strip(env['SCRIPT_NAME']),'/')) path = filter(None,string.split(string.strip(env['PATH_INFO']),'/')) env['PATH_INFO'] = string.join(path[len(script):],'/') ! try: ! self.publish_module(self.moduleName,stdin=stdin,stdout=stdout,stderr=stderr,environ=env) except: self.fatalError("unable to publish module") --- 294,308 ---- ### IIS hack to fix broken PATH_INFO ### taken from Mike Fletcher's win_cgi_module_publisher import string + from ZServer.HTTPResponse import ZServerHTTPResponse + iis-nhp-response = None if env.has_key('SERVER_SOFTWARE') and string.find(env['SERVER_SOFTWARE'],'Microsoft-IIS') != -1: script = filter(None,string.split(string.strip(env['SCRIPT_NAME']),'/')) path = filter(None,string.split(string.strip(env['PATH_INFO']),'/')) env['PATH_INFO'] = string.join(path[len(script):],'/') ! iis-nhp-response = ZServerHTTPResponse(stdout=stdout, stderr=stderr) try: ! self.publish_module(self.moduleName,stdin=stdin,stdout=stdout,stderr=stderr,environ=env,response=iis-nhp-response) except: self.fatalError("unable to publish module")

2 2

roles, permissions problem
by Dirk Datzert 10 Jul '02

10 Jul '02

Hi, have a problem with Zope 2.3.3 and roles defined by a product X and the role 'Authenticated' which I added to be Zope 2.4.4 compatible. A product defines a roles 'Author' and the permissions are set as neccessary for this product. I also have LDAPUserFolder installed. The logged on user has the role 'Author' and 'Authenticated'. I detected now that I have to duplicate all permissions for role 'Author' over to role 'Authenticated' to make the product X working right. Has anybody detected a similar behavior of Zope 2.3.3 ??? It is totally unbelievable, but the only thing I can guess is 'Auth' enticated or 'Auth'or ? Is there probably a ZODB basic problame with similar role names. tapping in the dark. Regards, Dirk

2 3

roles & permissions
by Dirk Datzert 10 Jul '02

10 Jul '02

Hi, I added a role 'Authenticated' to a Zope 2.3.3 and defined permissions for that role. After that I delete the role 'Authenticated', but the permission settings are still alive ? I would expect that role defined permissions has gone away if I delete the role ? Am I wrong ? Regards, Dirk

1 0

Very old version of xmlrpclib.py in Zope has incorrect behaviour
by Tim Hoffman 10 Jul '02

10 Jul '02

Hi I am trying to use Zope with XWT (www.xwt.org) but the behaviour of xmlrpclib.py in the distribution of Zope (2.5.1) is incorrect. XML payloads which don't have a <param/> tag if no parameters are supplied breaks (which is not correct) I have lodged a collector on this http://collector.zope.org/Zope/465 It appears that the more recent versions of xmlrpclib.py have resolved this problem, so could we maybe look at getting the current stable release of xmlrpclib.py in to Zope 2.6 ? Regards Tim Hoffman

1 0