November 1999 - Zope

How to insert data into a TinyTable
by Arjan Scherpenisse 17 Nov '99

17 Nov '99

Hi Is there some method other than directly in the manage screen to insert some data into a TinyTable? I want that my customers can fill out a form, and that the data entered inthat form gets inserted in the table. I've looked through the docs but didn't find anything of use... TIA, -- Arjan Scherpenisse, A.Scherpenisse(a)zap.a2000.nl ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Hi, MS Outlook just gave me a signature virus"

3 2

What to buy for cheap Zope host?
by tommy_b＠my-deja.com 17 Nov '99

17 Nov '99

Hello everyone! I'm building a computer to train & test Zope. I hope to use PostgreSQL or MySQL for storing a good-sized database. Zope would be used for allowing users to enter data & for output of formated querries. I wish to spend no more than $700 on this new computer I'm building (not including sound & video card + monitor). What should I spend the most money on, CPU, memory, HD, or a balance? I'm leaning towards a PPGA Celeron 366 (possibly overclocked), buying a 128MB stick of P100 RAM, and the fastest ATA drive $120 can buy. Is this the right direction? Ram's rather expencive now, or else I'd get 256MB right away. thanks for your time. --== Sent via Deja.com http://www.deja.com/ ==-- Share what you know. Learn what you don't.

3 2

Zope should be in SourceForge
by Alexander Staubo 17 Nov '99

17 Nov '99

Zope should definitely have an entry on the new (public beta) SourceForge site, a hosting provider/directory for Open Source projects. SourceForge (maintained by VA Linux Systems) hosts Open Source projects for free, including CVS, FTP, www etc. Pretty cool, I thought. External projects such as Zope and Linux can easily be incorporated into their project directory. They also maintain public forums and download pointers for such externally hosted projects. http://www.sourceforge.net/ -- Alexander Staubo http://www.mop.no/~alex/ "Only two things are infinite, the universe and human stupidity, and I'm not sure about the former." --Albert Einstein

1 0

Re: [Zope] Incrementing an Integer
by Anthony Baxter 17 Nov '99

17 Nov '99

>>> James Punteney wrote > I have a SQL Query that returns a column called "CTN" in the database > (MySQL) this is defined as an integer, and currently has the value of > "20000" (the table only contains one entry right now). I want to set the > variable "ctn" to the CTN returned from the query plus 1. > > This is the error I get: > Error Type: TypeError > Error Value: illegal argument type for built-in operation There was some discussion recently that at least one of the MySQL DAs would return everything (including numbers) as strings. In python, attempting to add a string to a number is not valid - convert it to an int, first. Anthony > When I view the source of the page I just see CTN: 20000, which I had > printing out at one point but have since removed, but no error information > or anything. > > Any thoughts would be appreciated. > > Thanks, > --James > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > No cross posts or HTML encoding! > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) -- Anthony Baxter <anthony(a)interlink.com.au> It's never too late to have a happy childhood.

1 0

user db cookie auth question
by Sam Gendler 17 Nov '99

17 Nov '99

I have a modified userDb handling authentication on a site. When I create an object that requires authentication, and then attempt to access it, I get the docLogin page, as expected, although it always has an exception traceback at the bottom, which is vern annoying and I can't figure out how to get rid of it. However, that isn't my question. If I attempt to access an object that includes the authenticated object, a standard 'forbidden' exception gets raised, resulting in an authentication dialog, which fails to work, since the user db isn't looking for that. How can I get zope to raise the correct error, depending upon how the object is supposed to be authenticated (normal folder vs cookie auth user db). Please cc 805-689-1191(a)mobile.att.net with your response, so I will know to check my email. Thanks. --sam

1 0

RE: [Zope] Mailing list to web archive?
by Jay, Dylan 17 Nov '99

17 Nov '99

> -----Original Message----- > From: Nitin Borwankar [mailto:nitin@borwankar.com] > Sent: Tuesday, November 16, 1999 18:41 > To: Ray Thompson > Cc: zope(a)zope.org > Subject: Re: [Zope] Mailing list to web archive? > > > > > Ray Thompson wrote: > > > > I'm trying to find a means for creating a web-based archive > from a mailing > > list. I'm using Confera and am wondering if there's > anything out there > > that's akin to something like Hypermail. > > I am assuming you have taken a look at Mailman at www.list.org and the > pipermail > package therein, which is a (simplified?) Python implementation of > Hypermail, I believe. > Mailman is extremely simple to setup and to administer over the web. But it doesn't intergrate well with Zope and its about time it did. Ontop of this the html based storage of achives is very inflexible, un searchable and ugly.

5 4

RE: [Zope] A Couple of Suggestions...
by Michel Pelletier 17 Nov '99

17 Nov '99

> -----Original Message----- > From: Harry [mailto:mail-zope@fizbin.com] > Sent: Tuesday, November 16, 1999 6:23 PM > To: zope(a)zope.org > Subject: [Zope] A Couple of Suggestions... > > NotMail: No instructions on the Zope products page, no > instructions on how > to use once installed. No instructions on how to access > and/or customize. > It's installed, sure, but that's about it. Any additional > information I had > to literally hunt down, finding outdated links, and not a > single reference > to a working, installed product. Wrote to the author, and > have recived no > response. I've pretty much given up on this one NotMail is no longer being developed and hasn't been for a while. I have no time whatsoever to work on it. I have no idea why it is under the supported product area of the zope site, I asked several months ago that it be removed. I'm going to remove it right now. A handful of people have expressed interest in taking NotMail up. I made some promises that I broke about tweaking the code for 2.0 and giving it up, unfortunatly with the book and the PTK I am not able to do that. What you see on the site is what there is. Sorry folks. I hope someone brings it up to working order, it was a really cool product. -Michel

2 1

ZOracleDA - python - dumps core [Q]
by Bruno Mattarollo 17 Nov '99

17 Nov '99

Hello... Yes, I know, too many posts by me made in so little time ... :-) I compiled DCOracle that came in the ZOracleDA 2.1.0 to use it in our dev workstation (UltraSparc running Solaris 7, zope 2.0.1 and Oracle8i). I needed to do some tweaking into the Setup file to get it to work. But finally it compiled and worked nicely... I am using Apache 1.3.9 and PCGI <---> Zope 2.0.1 ... But I am noticing a strange behavior. From time to time (several times a day -aprox 10 to 15), randomly -or at least I couldn't see a pattern- I get a "Resource Unavailable" and clicking anywhere else works. And I get a core file in the Zope root directory. Doing a file core I get the following. core: ELF 32-bit MSB core file SPARC Version 1, from 'python' I don't know how to check what happened, but it happens anywhere in the site. Sometimes just browsing it, sometimes saving a method, sometimes when saving a ZSQL method, well, no pattern at all. Does anyone is using Zope on a similar environment? Noticied something similar? BTW I sended to Christopher Petrilli (of Digicool) a copy of the Setup file I used to compile the DCOracle. Thanks in advance. /B -- Bruno Mattarollo bruno(a)GaiaSur.com.ar Proud to be a PSA member! http://starship.python.net/crew/bmatt/ Check out http://www.python.org/psa/ Powered by Python "Football is the working class ballet." - Alf Garnett

1 0

RE: [Zope] Zope and security.
by Brian Lloyd 17 Nov '99

17 Nov '99

> > Now the caveat: when you give someone the "Change permissions" > > permission, you are effectively trusting him as a Manager in > > his own area. Though he can't affect things outside his area, > > it is not really possible to actually restrict what he can do > > in his own area once you've given "Change permissions". This > > is because he is now free to give himself any permission he > > wants (in his own folder) if he doesn't already have it. > > And that's exactly the problem I see. > > If I take away "Create ZSQL Methods" from his home folder but > don't take > away the security tab, he can put it right back. If I'm > using UserDB to > authenticate he can just create a Z SQL Method that queries the db for > userid's and passwords. > > It seems the only way to securely handle all this is to roll your own > folder that can't hold Z SQL Methods, or anything else that > users don't > really need. (Incidentally, if I did this with Z Classes, would there > be any performance implications?) I don't think there would be any real performance hit - but I suspect that it would be painful enough that _I_ wouldn't want to write it... > > It is possible that this behavior could be modified in the > > future (by enforcing some rules whereby a user can only > > modify roles or permissions that he already has), but some > > thought would need to go into this to be sure that there is > > a real need for it and that the behavior is well understood. > > That would probably wouldn't solve the problem, unless you acquisition > were involved. Otherwise you could easily circumvent it by creating a > new folder and doing whatever you please there. It _would_ use acquisition (it would have to - the security model is predicated on it). It would basically be a refinement of the current general design, where access control is tightened via a cumulative effect as you go down the hierarchy. The essence of the refinement would be that you can never give out what you don't already have through that cumulative process. Creating a new folder wouldn't get around this, because you still can't delegate (or give to yourself) what you don't already have. For example, I could give Fred the "Owner" local role in his Folder, and at the top of the site (above his area and inaccessible to him) I could give "Owner" all permissions _except_ "Create ZSQL Methods". When Fred went to the Security tab of his Folder (or any sub object), he *wouldn't even see that permission listed*, because since he doesn't have it, he can't give it. The same would apply to local roles - he could only give people those local roles that he already has in his area. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

2 1

RE: [Zope] Zope and security.
by Brian Lloyd 17 Nov '99

17 Nov '99

> It seems to me you cannot securely allow users access to the > "Security" > tab in the management interface. It's easy enough to shut > this off, but > that does take away an awful lot of functionality. Is this > an intended > design, or is it a flaw in the Zope security model? It is possible to do what you are asking (with a few caveats). Local roles let you give a user roles *only in the context of a particular object* rather than associating the roles directly with the user. The easiest way to accomplish what you are asking: There is a predefined "Owner" role in Zope. When a user creates an object, he/she is automatically given the local role "Owner" on that object. Lets say you want to totally delegate control of the "Reports" area of your site to Fred. First, create a "Reports" folder somewhere on your site. Now go to the "Security" tab of the Folder and click on "local roles" and give Fred the "Owner" local role. Now, go up at least one folder (or even all the way to the top of the site) and on the "Security" screen give the "Owner" role all of the permissions you want Folder owners to have on their area (this can include the "Change Permissions" permission too). Now, Fred will have all of the permissions associated with the "Owner" role - but only in _his_ Folder, where he has the local role "Owner". In other words, he could see and use the "Security" tab in _his_ Folder, but if he went higher up in the site he couldn't (because he doesn't have the local role "Owner" there). Now the caveat: when you give someone the "Change permissions" permission, you are effectively trusting him as a Manager in his own area. Though he can't affect things outside his area, it is not really possible to actually restrict what he can do in his own area once you've given "Change permissions". This is because he is now free to give himself any permission he wants (in his own folder) if he doesn't already have it. It is possible that this behavior could be modified in the future (by enforcing some rules whereby a user can only modify roles or permissions that he already has), but some thought would need to go into this to be sure that there is a real need for it and that the behavior is well understood. Hope this helps! Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

5 4