March 1999 - Zope - Zope lists

RE: [Zope-dev] De-Authentication / Logout
by Rob Page 13 Mar '99

13 Mar '99

> It's always been my impression that unless Zope can be fitted with a > cookie-based-authentication system (vs. the current > basic-auth), there's > *no* way to force a "logout" because of the way the *browsers* handle > basic-auth. Recent notes about Lynx notwithstanding, I agree. It's extremely frustrating when debugging the security of an app! Zope _CAN_ use a cookie-based authentication scheme with the UserDB product. UserDB uses Database Adapter (e.g., Oracle) to connect to a store of user info (e.g., userid and password). I can imagine some motivated community member taking a look at the current incarnation of UserFolder and UserDB and cookie-ifying the UserFolder. --Rob

1 0

Re: [Zope] - XML-style DTML code
by Jeffrey P Shell 13 Mar '99

13 Mar '99

>From: "Christopher G. Petrilli" <petrilli(a)amber.org> > My goal was to provide an obviously incomplete fix to the current > problem of editing in HTML editors, which is what sparked this. The fix > I proposed fixes that. Once I have a proper XML editor with full XSL > support, it'll be easier to hypothesise about solutions, but until then, > it's all hand waving. The editing-in-HTML-editors will always be a problem with the current syntax, in my opinion, because (real code here, and code i'm not at all ashamed to have written): <TD><SELECT NAME="category">  <OPTION VALUE="" SELECTED ></OPTION>  </SELECT></TD> will give just about any editor a headache. Cyberstudio, at a minimum, moves the comment tags outside of the <SELECT> statements. Dreamweaver might handle this a little better, but as you drag and drop the visual representation around it tends to get out of sync. This same problem hangs around ASP code with only one real visual editor existing (Drumbeat) - and most drumbeat generated sites I've been too have been as much fun as a root canal in slow motion. Since ColdFusion uses 'regular' tags, it's relatively easy to extend editors to handle them, albeit it usually in a limited fashion. And WebObjects, which introduces only one special tag into the HTML environment, requires another parser to handled the accompanying .wod file to be visual (.wod being full of statements similar to HTMLGen instances.) I don't even know what else is out there. I think Vignette's StoryServer can be used with DreamWeaver in the initial stages of design, but once StoryServers code starts getting into the HTML code they advise not going visual anymore (i think StoryServer uses *twitch* TCL in their pages). In any case, this is a very meaty problem - and not just for Zope. (or in other words "ohhhhh, it's so much worse than you think" :) stared-down-this-barrel-just-enough-times-to-even-copy-this-tired-sig'ly yrs, --jPS - - / jeffrey(a)Digicool.com - http://www.digicool.com/

3 2

the HTML UI - can I help?
by andreww＠netscape.com 13 Mar '99

13 Mar '99

I see a number of things that might help enhance the usability of the zope UI, how do I go about submitting those possible changes to the HTML code ? I could mock up a page with HTML and explain how it works...

1 0

extending dreamweaver into zope
by andreww＠netscape.com 13 Mar '99

13 Mar '99

I can see a number of things that DW will (I think) do to help out Zope - but there is one item in the way - FTP support There is no direct way for Dreamweaver to send pages back to Zope without either writing to a filesystem via a LAN or by using FTP (no webdav yet). So my question is this - when will we get ftp support in zope? (not just alpha). I am looking at the dtml spec right now and thinking about building drag-and-drop objects for DW that talk zope. One thing I need is for someone on the zope team or elsewhere to help me test these so that I get the syntax correct. Email me directly at andreww(a)netscape.com

1 0

RE: [Zope] Lots of questions:
by Paul Everitt 13 Mar '99

13 Mar '99

Andrew "Zopeweaver" Wooldridge wrote: > 1) How do I get Zope to run as a service on my NT box so I > dont have to > stay logged in for it to run? The installer for the Zope NT binary asks you if you want to run as a service -- in fact, that's the default. Take a look at the file "doc/INSTALL.txt", under Installation on Windows, for more information. > 2) When I upgrad Zope will I have to re-build all of my applications? Unless we do something wrong, nope. > 3) Is there an IRC channel for ZOPE? IF not I would like to offer the > idea of creating one on say the mozilla or slashdot servers I'm not sure if the Zope universe is big enough yet for that. I rememer Guido doing this for Python about a year ago and nobody showed up. :^) Perhaps if there were coordinated events? > 4) Is there anyone interested in working with me on a Zope/Dreamweaver > cross-communication project? I think the answer will certainly be yes. Go to: http://www.egroups.com/list/zope/ and do a search for Dreamweaver. There are about 18 hits. --Paul

3 3

Tree Tag & SQL
by ron＠rotflol.cx 12 Mar '99

12 Mar '99

I am trying to implemented a directory service using the tree tag where the info from several tables of a database. A simplified outline: +Locations +Offices +People +Phones Tel Fax +Addresses Problem: how to have the tree tag use a different SQL method for each level WITHOUT resorting to external methods, because the directory should be maintainable by mere mortals, not Python or SQL gods. -- <- Ronald Offerman | ron(a)offerman.cx <- Root Powered Carrot Munchers Ltd. Inc. SA AG BV "This is Linux Country. On a quiet night, you can hear Windows NT reboot!" "Daddy, why do those people have to use Microsoft Windows?" "Don't stare, son; it's not polite." "M$ Windows NT, an accident waiting to happen" "What goes up, must come down. Ask any system administrator." ".sig too big? Flame me, I'm cold!"

2 1

Converting Whitespaces
by Alexander Schad 12 Mar '99

12 Mar '99

Hi ! I know there is a way to convert underscores to spaces (spacify) but i need it the other way around is. There a function to convert spaces to underscores and if not how can i do it elseway? Any help would be appreciated! Ciao, Alex

3 2

Access Control Advice
by John Eikenberry 12 Mar '99

12 Mar '99

Hello all, I am working on a Zope app, and would like to see if anyone has any tips for how I should handle access control in this situation... The site is a corporate organization site. It has many corporate members, each has an admin which has control over a subset of information kept in a relational database. I want to have just one role (comp_admin) for this. But each company can only have access to their company info. Thus I need to check that the admin belongs to that company. (there are also regular users who also have to login. they can view, but not modify) The users, passwords and roles are kept in the database too (UserDB). Each company has a unique id, and this is the primary keys in the DB. Each user is associated to the company using this id (a field in their table). Make sense? My current idea is: 1. Have a general main page which both users and admins login to. If they use the admin login, get their company id (comp_id) and create a link to the admin section using the magic of direct traversal (this way they can bookmark the admin page). Eg. <a href="/comp/1/admin/">admin section</a> ('comp' is the zsql method, 1 is the comp_id, admin is the folder) Thus the comp_id of the company will be available, and I could: A. I could then (mabey?) use the comp_id in the UserDB query (in the admin folder) to only retrieve those people belonging to that company. OR (if I can't get to the comp_id from the UserDB query). B. I could then compare to the person's comp_id to the company's comp_id in each of the effect pages via a new standard_header. Thoughts? Better ways to do this? --- John Eikenberry [jae(a)kavi.com - http://taos.kavi.com/~jae/] ______________________________________________________________ "A society that will trade a little liberty for a little order will deserve neither and lose both." --B. Franklin

1 0

IRC channel
by Fredy Villa 12 Mar '99

12 Mar '99

Gentlemen, I am very pleased with Zope and in an effort to support it, I will create a channel called #zope under the EFnet. I am still learning about ZOpe, but I will try to help all I can. Also, I will be placing an infobot to provide lots of information on Zope. Drop by and pay a visit to #zope if you have some time... Cheers, Fredy Villa Gestalt Technology, LLC Fvilla(a)GestaltTechnology.com

1 0

Re: [Zope] please interpret
by Jeffrey P Shell 12 Mar '99

12 Mar '99

>From: julian(a)zereau.net > > "TypeError: read-only buffer, class" > > I keep getting this error, please can someone explain what typically causes > it? This is a buglet in ExternalMethod where an exception has been raised and caught by ExternalMethod, and EM is looking at the values of the traceback for some special conditions. It's trying to do a string.lower() call on one of the values that in Python1.4 was always a string, but in Python1.5.x is an instance (in Python 1.5, standard exceptions became classes). This has been fixed and will be in the next release. .jPS | jeffrey(a)digicool.com zope, through the web. www.zope.org

1 0