- Zope-Dev - Zope lists

strange permission errors again
by Robin Becker 19 Jun '00

19 Jun '00

After the latest round of CVS updates I am again getting strange requests for authorisation in unusual places. No matter that I use my admin to try and validate they still occur. Typical piece of code is <dtml-with "_.namespace(SUB=include.ZGA_Eval(sub))"> <dtml-if "_.len(SUB)>0"> NAVDATA[<dtml-var sequence-index>].flag=<dtml-var sequence-index>; NAVSTATE=new Array(); <dtml-in SUB> NAVSTATE[<dtml-var sequence-index>]=new Object(); NAVSTATE[<dtml-var sequence-index>].ref = '<dtml-var "_['sequence-item'][0]">'; NAVSTATE[<dtml-var sequence-index>].label = '<dtml-var "_['sequence-item'][1]">'; </dtml-in> NAVDATA[<dtml-var sequence-index>].sub=NAVSTATE; <dtml-else> NAVDATA[<dtml-var sequence-index>].flag=-1; </dtml-if> </dtml-with> Brian fixed this up before and it has crept back in somehow. Zope Error Zope has encountered an error while publishing this resource. Unauthorized Sorry, a Zope error occurred. Traceback (innermost last): File C:\Python\devel\Zope\lib\python\ZPublisher\Publish.py, line 222, in publish_module File C:\Python\devel\Zope\lib\python\ZPublisher\Publish.py, line 187, in publish File C:\Python\devel\Zope\lib\python\ZPublisher\Publish.py, line 171, in publish File C:\Python\devel\Zope\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: index_html) File C:\Python\devel\Zope\lib\python\ZPublisher\Publish.py, line 112, in call_object (Object: index_html) File C:\Python\devel\Zope\lib\python\OFS\DTMLMethod.py, line 167, in __call__ (Object: index_html) File C:\Python\devel\Zope\lib\python\DocumentTemplate\DT_String.py, line 502, in __call__ (Object: index_html) File C:\Python\devel\Zope\lib\python\DocumentTemplate\DT_In.py, line 691, in renderwob (Object: NavData) File C:\Python\devel\Zope\lib\python\DocumentTemplate\DT_With.py, line 146, in render (Object: _.namespace(SUB=include.ZGA_Eval(sub))) File C:\Python\devel\Zope\lib\python\DocumentTemplate\DT_Util.py, line 327, in eval (Object: _.len(SUB)>0) (Info: SUB) File C:\Python\devel\Zope\lib\python\OFS\DTMLMethod.py, line 189, in validate (Object: index_html) File C:\Python\devel\Zope\lib\python\AccessControl\SecurityManager.py, line 139, in validate File C:\Python\devel\Zope\lib\python\AccessControl\ZopeSecurityPolicy.py, line 158, in validate Unauthorized: SUB -- Robin Becker

3 5

RE: [Zope-dev] strange permission errors again
by Brian Lloyd 19 Jun '00

19 Jun '00

> After the latest round of CVS updates I am again getting > strange requests for authorisation in > unusual places. No matter that I use my admin to try and > validate they still occur. > > Typical piece of code is > > <dtml-with "_.namespace(SUB=include.ZGA_Eval(sub))"> Robin - The problem was with "_.namespace". If you update cDocumentTemplate to the latest CVS and recompile it, this should go away... Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

2 1

Re: [Zope-dev] Bug? + another bug (ZPatterns 0.0.4a)
by mike 19 Jun '00

19 Jun '00

Itamar Shtull-Trauring wrote: > > mike wrote: > > > > 1. Create Specialist > > 2. Manage it > > 3. See Zope output. > > I'm not having any problems - maybe post your Zope version to the mailing 2.2.6 > list, and explain what exactly you did in step 2. Just clicked on newly created Specialist instance (with mouse, to be exact :-) Another bug I found (file Rack.py): def createItem(self,key): # Create a new object, identified by key item = self.getItem(key) # XXX What if all items potentially exist? if item is not None: raise KeyError,("'%s' already exists" % key) item = self._RawItem(key) a = self.loadAttrib if not a: slot = self._writeableSlot(key) slot[SelfKey] = item item._setSlot(slot) # Not needed for non-ZODB storage item._objectAdding() self._registerCanonical(k,item) # XXX Should we cache non-creation? ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - k was not defined (=key?) return item

2 1

Attribute error - commit_sub
by Gabor Melis 19 Jun '00

19 Jun '00

Hi guys There was a short thread about $SUBJECT (sorry for being perlish) a few months ago, but it was hard/impossible to reproduce. My situation is similar: I try to upload a file (>128K) from the Zope management interface. Zope cannot commit the subtransaction if I'm not the superuser. Do I need more priviledges, not just 'Add files'? I run Zope 2.1.6 on RedHat 6.2. Gabor

1 0

2.2 or Membership Component alpha problem, and suggestions for the latter latter
by Bill Anderson 19 Jun '00

19 Jun '00

OK, first, a tip I learned earlier today (and couldn't find the answer for): Problem: If you try to add a membership system to your root folder, and it has an acl_users folder, you will not succeed in adding it, ecause it will complain about mismatched passwords (or at least it did for me). Solution: Delete the acl_users fodler first. Now, onto the current issue. I have some DTML that adds ZClass instances. The Member user has the appropriate roles, yet is refused. The forbidden page tells me I need Manager role. Now, why is this? In particular, I am using the MeetingManagement product. It works fine in 2.1.6. I think it is related to the security changes in 2.2. Problem is, even adding proxy roles for the methods in the chain changes nothing. Here is the big kicker. If I sign up as an anonymous(!) user, it works as it is supposed to. It only barfs when I am logged in as a 'Member'...Help? Now, a suggestion for Kevin: It would be nice if there was user management for the Membership component's default setup. I am sure you're thinking about it, but thought I'd let you know it is needed :) Specifically, there should be some way that the site manager can modify theroles of the users, reset passwords, and DELETE them as needed. Any ideas/work being done for this? Otherwise, the MembershipZ component is working flawlessly!

2 1

sql-statements in DTML-Methods....
by Marc LUDWIG 19 Jun '00

19 Jun '00

Hi. This is one of the first times I'm working with Zope and databases. Until now - if I wanted to work with a databse, i always created a Z SQL method that I called from my DTML-method via <dtml-call "add_item(param1 = ..., param2 = ..., param3 = ..., ..."> (for example) or <dtml-in get_items> ... </dtml-in> (for example) In the Z SQL method 'add_item' or 'get_items', my SQL statement are defined. My question is now: Do I have to define one Z SQL Method for every SQL statement I want to perform on my database or is it possible to define SQL-statements and database requests in my DTML-method? Am I missing something? Any idea? Thanks a lot. Regards, Marc mailto:lutschi72@gmx.net

3 2

Bug? (ZPatterns 0.0.4a)
by mike 19 Jun '00

19 Jun '00

1. Create Specialist 2. Manage it 3. See Zope output. I see: Exception exceptions.KeyError: <exceptions.KeyError instance at 866f318> in <method Transaction.__del__ of Transaction instance at 8626930> ignored Mike

1 0

zope photo product 0-4-3 bug and fix.
by Dr. Ross Lazarus 19 Jun '00

19 Jun '00

I think I just squished a subtle and extremely annoying bug in 0.4.3 of the photo product at http://yyy.zope.org/Members/Drew/Photo Making a copy of display_defaults by a dictionary copy in the __init__ method is a Bad Thing because (shallow) copy doesn't copy substructures - it makes them all point to the same place. Fix = import the copy module and use copy.deepcopy(display_defaults) at initialisation: ie replace self.displays=display_defaults.copy() with self.displays=copy.deepcopy(display_defaults) # was display_defaults.copy()

1 0

Re: [Zope-dev] Logging for ZScheduler?
by Tres Seaver 18 Jun '00

18 Jun '00

"Phillip J. Eby" <pje(a)telecommunity.com> > > At 01:58 PM 6/15/00 +1000, Stuart 'Zen' Bishop wrote: > > > > Its not a problem with ZScheduler, it a problem that no one has > > written a plug-in logging system that is good enough for what > > you are trying to do. The existing zLOG API is fine (well - it > > could be better), but just needs someone to write the relevant > > modules. Hmm... I think I'll > > add a section to the Interfaces Wiki... > > Hm... this could work well with Observer->Observable, too. > Imagine firing ObservableEvents, and subscribing a "Log" object > to them... Ayup, logging is one of the classic instances of that pattern. The problem with using Observer for logging, especially in a fine-grained way, is that the dependency arrows point the "wrong way" -- the logger object needs to register as an Observer of many Subjects, but has no good way to find them all. The typical solution is to add an intermediate observer to all the containers, who watches the add and remove operations, and then either notifies the logger of new subscriptions it should perform, or performs them on behalf of the logger. Tres. -- =========================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

(ZPatterns 0.4.0a1) Getting Customizers to recognize DataSkin descendants descendants
by Itamar Shtull-Trauring 18 Jun '00

18 Jun '00

I want to customize (with a Customizer) a class I made. It inherits from DataSkin. However, it's meta_type doesn't show in the Customizer's manage_typesForm page, so I can't tell the Customizer to use this class unless I call manage_setTypes manually (which works.) So how come my class won't show up - DataSkin and RackMountable both show up, and my Product isn't broken - I can add instances of my DataSkin descendant. -- Itamar S.T. itamar(a)maxnm.com Fingerprint = D365 7BE8 B81E 2B18 6534 025E D0E7 92DB E441 411C

2 1