September 2004 - Zope-Dev

[Zope] WebDAV/Excel readonly problem
by Dirksen 17 Sep '04

17 Sep '04

Hi, I want to open and edit a file (living on Zope) in Excel through WedDAV. But the problem is whenever I open the file, it's always marked as read-only, even though I'm logging in as the manager role (I use http://username:password@hostname/file as the open link). I test this in the OpenOffice Spreadsheet as well, and the result is the same: it opens it as read-only through WebDAV. My zope is Zope 2.6.4. Anyone has an idea how to solve this problem? Thanks Dirksen __________________________________ Do you Yahoo!? Yahoo! Mail Address AutoComplete - You start. We finish. http://promotions.yahoo.com/new_mail

2 1

AW: [Zope-dev] [Zope] WebDAV/Excel readonly problem
by Kai Hoppert 17 Sep '04

17 Sep '04

Hi This may be a problem with your outlook version we had the same problem also in newer zope versions. The problem is that outlook marked the first time you want to edit it as locked and don't close the flag. Try to use the newwest version of Office. With it the problem should no longer be there. Greetings Kai -----Ursprüngliche Nachricht----- Von: zope-dev-bounces+kai.hoppert=tomcom.de(a)zope.org [mailto:zope-dev-bounces+kai.hoppert=tomcom.de@zope.org]Im Auftrag von Dirksen Gesendet: Freitag, 17. September 2004 00:50 An: zope-dev(a)zope.org Betreff: [Zope-dev] [Zope] WebDAV/Excel readonly problem Hi, I want to open and edit a file (living on Zope) in Excel through WedDAV. But the problem is whenever I open the file, it's always marked as read-only, even though I'm logging in as the manager role (I use http://username:password@hostname/file as the open link). I test this in the OpenOffice Spreadsheet as well, and the result is the same: it opens it as read-only through WebDAV. My zope is Zope 2.6.4. Anyone has an idea how to solve this problem? Thanks Dirksen __________________________________ Do you Yahoo!? Yahoo! Mail Address AutoComplete - You start. We finish. http://promotions.yahoo.com/new_mail _______________________________________________ Zope-Dev maillist - Zope-Dev(a)zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )

1 0

Renabled ViewCVS at svn.zope.org
by Jim Fulton 10 Sep '04

10 Sep '04

After updating all of the relevent libraries, I decided to try reenabling ViewCVS for a while to see if the behavior is any more stable. Jim -- Jim Fulton mailto:jim@zope.com Python Powered! CTO (540) 361-1714 http://www.python.org Zope Corporation http://www.zope.com http://www.zope.org

2 1

Re: [ZODB-Dev] Re: [Zope-Annce] ZODB 3.2.4 release candidate 1 released
by Florent Guillaume 08 Sep '04

08 Sep '04

[to zope-dev] On 8 Sep 2004, at 21:02, Dieter Maurer wrote in zodb-dev: > Michael Dunstan wrote at 2004-9-8 11:03 +1200: >> ... >> Also worth noting that Zope3 development is (or was?) considering >> using >> something like RuntimeError as the base for POSError(?) and using the >> pattern: >> >> try: >> ... >> except RuntimeError: >> raise >> except ...: > > Hopefully, someone fixed "PageTemplates" then. > They treat "RuntimeError" in a horrible way (they catch them > and translate them in a completely unhelpful message). Yeah I had plans to fix that (at least for CMF's FSPageTemplates where it mostly bites me) at the last bugday but didn't got around to it. It's still on my list. Florent -- Florent Guillaume, Nuxeo (Paris, France) +33 1 40 33 79 87 http://nuxeo.com mailto:fg@nuxeo.com

1 0

Re: SVN: Zope/trunk/lib/python/Testing/ZopeTestCase/ added ZopeTestCase 0.9
by yuppie 08 Sep '04

08 Sep '04

Hi! Andreas Jung wrote: > Log message for revision 27453: > added ZopeTestCase 0.9 I didn't see any comments from the project owner. What are the plans for ZopeTestCase? Will it just be "shipped with" Zope or are there any plans to integrate it further with Zope? Will there be any development in the Zope repository or is the SourceForge repository still the primary location? BTW: Seems the files don't have the right mode. My Windows checkout has Unix newlines. Cheers, Yuppie

1 0

Re: Zope X3 3.0 Beta 4 is available
by Jim Fulton 03 Sep '04

03 Sep '04

Jim Fulton wrote: > Zope X3 3.0 Beta 4 is available at: > > http://zope.org/Products/ZopeX3/3.0.0b4 Here's a reported problem and a work around (for now). This doesn't apply to Windows. The configure script only works with bash. :( We are working on a fix, but in the mean time, if you are running on a system on which sh != bash, then you will need to run bash explicitly, that is, run the configure script with: bash configure Jim -- Jim Fulton mailto:jim@zope.com Python Powered! CTO (540) 361-1714 http://www.python.org Zope Corporation http://www.zope.com http://www.zope.org

1 0

Zope X3 3.0 Beta 4 is available
by Jim Fulton 03 Sep '04

03 Sep '04

Zope X3 3.0 Beta 4 is available at: http://zope.org/Products/ZopeX3/3.0.0b4 Both a source release and a windows binary release are available. Zope X3 is the next generation of Zope. The "X" in Zope X3 means that it *currently* makes so special provisions for being backward compatible with or providing a transition from Zope 2. It will in the future, at which time, the X will be dropped from the name. The 3.0 release is the first production-quality release of Zope X3. The focus of this release is on Python developers. While basic through-the-web content and templating facilities are provided, the main emphasis is on supporting applications in Python. Of course, possible applications to be developed include through-the-web content management, and development environments. We expect this to be the final beta for X3.0. We hope to make the first, and hopefully last, candidate release next week or early the following week. We'd really appreciate it if people would try this release out and post any issues found in the Zope 3 Issue Collector at: http://collector.zope.org/Zope3-dev Jim -- Jim Fulton mailto:jim@zope.com Python Powered! CTO (540) 361-1714 http://www.python.org Zope Corporation http://www.zope.com http://www.zope.org

1 0

Suggestion for small(?) change in BaseRequest.py. Security effects?
by Lennart Regebro 03 Sep '04

03 Sep '04

First Explanation: ================== We have been discussing how to implement the challenge support in PluggableAuthService, and I have been trying a couple of different ways. (Note: challenge-support in this context means, how to ask the client for authenticifcation credentials, that is username and password, or tickets, or certificates, or something.) The preferred solution has been narrowed down to using a way similar to CookieCrumbler, that is, replacing the current response-objects unauthorized() method with a method that does the challenge, like so: if not req.get('disable_cookie_login__', 0): if attempt == ATTEMPT_LOGIN or attempt == ATTEMPT_NONE \ or attempt == ATTEMPT_RESUME: # Modify the "unauthorized" response. req._hold(ResponseCleanup(resp)) resp.unauthorized = self.unauthorized resp._unauthorized = self._unauthorized Now, there is one tiny problem with that, and that problem is in BaseRequest.Traverse(). (BaseRequest.py, line 438): if user is None and roles != UNSPECIFIED_ROLES: response.unauthorized() if user is not None: ... As you see, this code assumes that response.unauthorized will raise an error. If it does not, the code will continue *as if the user is validated*. An error will occur later, since the user isn't validated, so it's nota security hole (is think), but it causes a problem: The only acceptable end of an unauthortized() is to raise an exception. This means in practice, either the Unauthorized exception that prpvoces the standasd 401 login box challenge, or a Redirect to a login page. This seems a bit limiting, and there has been requests for doing other things, such as returning an HTML form directly, and whatnot. Then, suggestion: ================= My tests seems to show that inserting a return after the unauthorized call above: if user is None and roles != UNSPECIFIED_ROLES: response.unauthorized() return will solve this issue. It is now possible to NOT raise an exception in unauthorized and still not get problems. Instead, you can now to a RESPONSE.redirect(), or you can replace the body with setBody for a login form, or something like that. I haven't been able to find any other code that continues after an unathorized call, so this should be the only place. Also, during normal operation, it is obvuiosly a safe bet. The change in itself has no nasty side effects. Last, questions: ================ Are there any other problems with NOT raising an exception in unathorized(). Becuase if there is, we probably limit the possible challenge responses to a redirect, and then this change makes no difference. I would suggest that the change goes in ANYWAY, to stop people almost accessing stuff by fiddling with response.unauthorized (although I admit I don't know how to do that). Lennart Regebro

4 6

Re: [Zope-dev] Re: Developing plugins for PluggableAuthService
by Lennart Regebro 03 Sep '04

03 Sep '04

Chris Withers wrote: > Lennart Regebro wrote: > >> Chris Withers wrote: >> >>> Is there any chance I could tempt you to change these to be Python >>> 2.3 style logging calls? >> >> >> >> Sure. remind me of the syntax. :) > > > import logging > > logger = logging.getLogger('event.whatever') > > logger.error('whatever',exc_info=1) > > You could also read: > > http://docs.python.org/lib/module-logging.html > > ...for a more complete description :-) > > cheers, > > Chris OK, Thanks. I'm noticing that (with Zope 2.7.2) when I do this, I do not get the modulname (whatever) nor the exception level WARNING printed to the log. Is this a config error, or am I doing something wrong? Because quite obviously, it should be there, right?

2 3

Zope MemoryError after installing Plone
by Matt Shaw 02 Sep '04

02 Sep '04

Hi all, I just compiled a fresh copy of zope 2.7 - it started up just fine. So then I grabbed Plone 2.0.4. After copying Plone to my Products directly, I cannot startup Zope and I get a MemoryError. Here is the tb: http://paste.plone.org/1317 I'm using python 2.3.3 on freebsd4 - Do I need recompile python with some special flag? Thanks, Matt ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Plone-users mailing list Plone-users(a)lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/plone-users

2 1