- Zope-Dev - Zope lists

Security tab in home grown Product
by James A. Hillyerd 19 Mar '99

19 Mar '99

I have made my first Product (a little message wall that people can post colored messages to), but I am having some trouble with the Security tab. When I press the tab, I get a Permissions screen that looks as it should, but when I click the change button (no matter what permissions I change, if any), I get the following error: Sorry, an error occurred. Traceback (innermost last): File /usr/local/zope/lib/python/ZPublisher/Publish.py, line 877, in publish_module File /usr/local/zope/lib/python/ZPublisher/Publish.py, line 590, in publish (Info: /wall/manage_changePermissions) File /usr/local/zope/lib/python/AccessControl/Role.py, line 194, in manage_changePermissions (Object: RoleManager) File /usr/local/zope/lib/python/AccessControl/Permission.py, line 166, in setRoles AttributeError: manage_main I don't doubt that I am causing this, but since it isn't occuring in my code, I don't know how to go about finding the source of the problem. Thanks for any help you can give. -james [] James A. Hillyerd <jamesh(a)altavista.net> Java Developer [] HyperGlyphics: http://www.hyperglyphics.com/ [] GPG Public Key Fingerprint for 1024D/9F956CDE (Expires 2000-02-01): [] C86F B073 92DF 1E24 EF0B 0118 6061 0FEC 9F95 6CDE

1 0

Uploading products through Zope
by Scott Robertson 18 Mar '99

18 Mar '99

Any body have a clue as to what kind of security problems might be encountered if we were to give users the ability to upload/install Products through Zope? We were thinking about writing an External Method that would take a tgz file and uncompress it under /Products/. Curently we let users install their own products through ftp but it would be one less service we would have to configure and run if we gave them that abillity. The only issue I can think of is that only certain accounts should be allowed to upload or replace products. --------------------------------------------------- - Scott Robertson Phone: 714.972.2299 - - CodeIt Computing Fax: 714.972.2399 - - http://codeit.com - ---------------------------------------------------

1 0

RE: [Zope-dev] Want to test if User Equal to a Property
by Shaw, Howard 18 Mar '99

18 Mar '99

I would expect that you need the single quotes. When you say _[object] you are looking up the result of object. That is, if object is a property containing the string 'test' then _[object] is identical to _['test']. If you have a property "object" containing the string 'owner' then you need to use _['object'] to evaluate to 'owner'. That is, _['object']=='owner', while _[object]==_['owner']. Good luck. ---------- From: Jason Spisak [SMTP:webmaster@mtear.com] Sent: Friday, March 12, 1999 7:21 AM To: zope-dev(a)zope.org Subject: [Zope-dev] Want to test if User Equal to a Property Zopsters, I am attempting to tailor the way information gets viewed based on a person's login. When the user get's to the page described by the following code, I would like the page to look one way if the 'owner' property in the parent folder is equal to the user, and look the other way if they are not equal. The following code makes sense, but does not work.        The _[owner] property is stored as a string. And AUTHERNTICAED_USER.getUserName() returns a string if I'm not mistaken. The look-up for _[owner] without single quotes is because I'm not looking up an object, but a property, right? The document is a DTML Method. Do I have to reference the Parent in the lookup? All the best, Jason Spisak webmaster(a)mtear.com _______________________________________________ Zope-Dev maillist - Zope-Dev(a)zope.org http://www.zope.org/mailman/listinfo/zope-dev (For non-developer, user-level issues, use the companion list, zope(a)zope.org, http://www.zope.org/mailman/listinfo/zope )

3 3

New version of the MailHost Product
by Martijn Pieters 18 Mar '99

18 Mar '99

As promised, I made a new patch for the MailHost product. After previous suggestions made by me, DC updated the MailHost object to, among others encode the body of ALL messages to Quoted-Printable. This however breaks those messages that take care of their own encoding, or use multipart tricks. Confera reply notification were broken because of this, for example. My patch updates the MailHost Product to version 1.1.0. Encoding is now optional, set with the 'encode' attribute to the  tag. You can now choose from base64, uuencode and quoted-printable encoding. I also made sure MailHost permissions show up in the Folder security screens, so MailHost objects can acquire them from a Folder. Oh, and I also added a version.txt file, so the Products screen shows the MailHost version. You can download the patch from: http://www.xs4all.nl/~zmj/Zope/ MailHost.txt reads: This patch updates the MailHost Product that comes with Zope version 1.10.2 to version 1.1.0. Features Added - Sendmail tag now has optional encode attribute, which results in the body of the email message being encoded using the designated encoding, and the proper headers being added. Choices are: base64, quoted-printable and uuencode. - The version number is now visible in the Product screen Bugs Fixed - MailHost object permissions now show op in the security list of Folder objects. Applying The Patch Execute the command 'patch -E < path/to/MailHost.diff' in the lib/python/Products/MailHost directory. The -E switch will remove empty files (there will be one). If all goes according to plan, you can then remove all .orig files. Don't forget to restart Zope. -- Martijn Pieters, Web Developer | Antraciet http://www.antraciet.nl | Tel: +31-35-6254545 Fax: +31-35-6254555 | mailto:mj@antraciet.nl http://www.antraciet.nl/~mj | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 ------------------------------------------

1 0

BoboPOS component
by Jeff Bauer 18 Mar '99

18 Mar '99

Hi all. I'm about to begin an application migration from Bobo to Zope, using the Zope components. For do-it-yourselfers like me, there's no way I'm gonna download Zope and have a content manager running in 15 minutes ;-) More relevant, actually, is that production apps tend to migrate at glacial speeds. I've noticed on the components page that ZPublisher and ZTemplates are available, but no BoboPOS. I can slice BoboPOS out of the normal Zope source distribution, but was curious if there was a reason not to release it as a component. Even more trivially: What is the new 'Z' nomenclature for the persistent store? ZPOS? ZBase? ZPersist? Best regards, Jeff Bauer Rubicon, Inc.

1 0

Bug in FindSupport.py?
by Stefan Franke 18 Mar '99

18 Mar '99

In OFS.Findsupport, line 159, I found if hasattr(ob, 'aq_base'): bs=ob.aq_base if ( (not obj_ids or absattr(bs.id) in obj_ids) [...] That is a conditional assignment to bs, an bs is used later on in any case. Shouldn't there be an else-fork, like if hasattr(ob, 'aq_base'): bs=ob.aq_base else: bs=ob if the object is accessed without an aquisition wrapper? This lead to an error with one of my products, but propably my product is still faulty, and this only reveals the above problems. Stefan

2 1

Python 1.5.2b2 and Zope ODBC problems
by Brad Clements 17 Mar '99

17 Mar '99

I'm trying to run Zope on WIN32 with python15.dll from 1.5.2beta2 (but I did re-add PySequence_In). As I recall from previous messages, the python15.dll shipped with Zope is "special", and has some modules compiled with it that aren't normally in python15.dll Is this true? Can someone clarify this? Anyway, I can get it to mostly work, but my ODBC DA isn't working. I'm not sure if this is an incompatibility with sql.pyd, or a missing function in python15.dll. I get an exception as follows: Sorry, an error occurred.<p> <!-- Traceback (innermost last): File E:/Program Files/ZopeOne/lib/python\ZPublisher\Publish.py, line 878, in publish_module File E:/Program Files/ZopeOne/lib/python\ZPublisher\Publish.py, line 590, in publish (Info: ) File E:/Program Files/ZopeOne/lib/python\OFS\DTMLMethod.py, line 157, in __call__ (Object: index_html) File E:/Program Files/ZopeOne/lib/python\OFS\DTMLMethod.py, line 153, in __call__ (Object: index_html) File E:/Program Files/ZopeOne/lib/python\DocumentTemplate\DT_String.py, line 513, in __call__ (Object: index_html) File E:/Program Files/ZopeOne/lib/python\OFS\DTMLMethod.py, line 149, in __call__ (Object: standard_html_header) File E:/Program Files/ZopeOne/lib/python\DocumentTemplate\DT_String.py, line 513, in __call__ (Object: standard_html_header) File E:/Program Files/ZopeOne/lib/python\OFS\DTMLMethod.py, line 149, in __call__ (Object: NewsSidebar) File E:/Program Files/ZopeOne/lib/python\DocumentTemplate\DT_String.py, line 513, in __call__ (Object: NewsSidebar) File E:/Program Files/ZopeOne/lib/python\Shared\DC\ZRDB\DA.py, line 374, in __call__ (Object: CopySource) Database Error: Sorry, an error occured Brad Clements, bkc(a)murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax netmeeting: ils://ils.murkworks.com ICQ: 14856937

1 0

Python 1.5.2b2 missing PySequence_In
by Brad Clements 17 Mar '99

17 Mar '99

Hi folks, I'm working on embedding zope in a custom win32 app, based on the latest python DLL. Looks like beta 2 is missing PySequence_In and PyEval_CallObject (deprecated), but this is causing problems with some existing .pyd Unfortunately I don't know which .pyd is the problem. Any suggestions on how to find it and correct it? Not sure if Guido is going to put those functions back.. Brad Clements, bkc(a)murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax netmeeting: ils://ils.murkworks.com ICQ: 14856937

2 1

exam.py uncompressing
by Tim Fraser 17 Mar '99

17 Mar '99

Could someone please email an uncompressed version of exam.py in the contrib area, I can't uncompress it on Win95 using Winzip 6.3

2 1

ZDP's FAQs version 0.2.2
by Martijn Faassen 16 Mar '99

16 Mar '99

Hi there, Sorry for the cross posting, but the ZDP's Zope FAQs are online with a new version at zdp.zope.org. I hope they are useful. Please continue to contribute! Regards, Martijn (one of the two :), of the Zope Documentation Project

1 0