April 1999 - Zope - Zope lists

security
by Tom Deprez 30 Apr '99

30 Apr '99

Hi all, What would I do without you guys? Thanks again. Great, this is really easy to accomplish! Brian, where can I find more info of has_role? If I use this I get that my site is down... so I guess that I need to give other parameters. Which ones? How does authentication works? Are there some pitfalls? Regards, Tom.

1 0

Authentication
by Tom Deprez 30 Apr '99

30 Apr '99

Hi all, Martijn or somebody else, Can you please explain me the code below. I don't understand it and it doesn't work the way I want. <h2></h2>  <p>  This should be a picture :-)  Security violation, cryptic messages!  </p>  If I browse to this page I get the message : this should be a picture. Where can I set that a user can only enter the page after he's given a password? Or where can I set these user roles? I don't get it. At the moment I haven't set anything and it still allows me to enter the data. Tia, Tom

3 2

netscape/tree problems
by Sebastian Luehnsdorf 30 Apr '99

30 Apr '99

hi! i've got a problem with netscape (linux & windows) and the tree tag. if i open a node of a tree and receive a long list, that wont fit on the screen, the browser is supposed to jump to the position of the node just opened up. this only seems to work with MS IE and not with Netscape, which jumps to the bottom of the screen. i suppose this is netscape's fault but does anybody know a work-around? ciao, basti --------------------------------------------------------------------- sebastian f. luehnsdorf beehive elektronische medien gmbh --------------------------------------------------------------------- http://basti.beehive.de http://www.beehive.de mailto:basti@beehive.de mailto:service@beehive.de fon: (+49 30) 84 78 20 fax: (+49 30) 84 78 22 99

1 0

mysql backend for BoboPOS
by Andrey V Khavryutchenko 30 Apr '99

30 Apr '99

Hi! In my last project I've had to use regular mysql database as persistence backend for python program. BoboPOS (ZODB now) is the nice module, but it uses plain file as storage. So, I've modified it to use mysql database. Two options are available: a) mysql usage as the pickle storage b) interfacing to regular (legacy) mysql database The second one, obviously, requires a little bit more effort from developer: (s)he has to define reader/writer functions. The module is available at my site http://www.kbi.kiev.ua/~akhavr / Projects/ Python SQL persistence Some documentation is available also. -- SY, Andrey V Khavryutchenko http://www.kbi.kiev.ua/~akhavr Freelance Software Engineer Visit my site Shick's Law: There is no problem a good miracle can't solve.

1 0

javascript from Andrew Snare
by François-Régis CHALAOUX 30 Apr '99

30 Apr '99

About javascript client-side checks. FR <<<<<<<<<<<<< Date: 19 Jan 1999 17:20:50 +1100 From: Andrew Snare ajs(a)pigpond.com Last time I posted this (on the Bobo list) there wasn't much of a reaction, but maybe there will be this time. If anyone decides to use it, please note that the module doesn't know how to validate some :tags since I only implemented the easy ones and those which I needed myself. // This is a set of generic JavaScript routines designed to validate form // input. Validation is performed for each text field based on the name // of the field including a "tag". Inspired by the automatic type-conversion // done by Bobo (http://www.digicool.com/releases/bobo) // // Author: Andrew Snare (ajs(a)pigpond.com) // Date: 5th September, 1998 // Each function in this group is called as required to verify fields of // a specific type. function text2float(element) { // Test for anything unparsable as a number. if (isNaN(parseFloat(element.value))) { alert("You have not entered a required number."); element.focus(); return false; } return true; } function text2int(element) { // Test for anything unparsable as a number, or that has decimal places. if (isNaN(parseInt(element.value)) || (parseInt(element.value) != parseFloat(element.value))) { alert("You have not entered a required whole number (without fractions or decimals)."); element.focus(); return false; } return true; } text2long = text2int; function text2string(element) { // Anything can be represented as a string. return true; } function text2required(element) { // Just test for non-empty string. if (element.value + "" == "") { alert("You have not specified some required information."); element.focus(); return false; } return true; } // This is a list of all the types we know how to verify. These correspond // to the functions above. conversionList = new Array(); conversionList[0] = "float"; conversionList[1] = "int"; conversionList[2] = "long"; conversionList[3] = "string"; conversionList[4] = "required"; // Call this function to validate as many of the text fields in the given // form as possible. Suitable for use as: // // <FORM .... onSubmit="return Validate(this);"> function Validate(form) { for (var i=0; i<form.elements.length; i++) { with (form.elements[i]) { if (type == "text") { var lio = name.lastIndexOf(":"); if (lio != -1 && lio < (name.length-1)) { var conversion = name.substring(lio+1,name.length); var canconvert = false; var j = 0; while (!canconvert && j<conversionList.length) { if (conversionList[j] == conversion) { canconvert = true; break; } j++; } if (!canconvert) { break; } if (!eval("text2"+conversion+"(form.elements[i])")) return false; } } } } return true; }

1 0

Zope Manage screen
by Tom Deprez 30 Apr '99

30 Apr '99

Suggestion : Instead of only using Taller, Shorter, Wider, Narrower. Isn't it possible to put an editbox there, in which you can enter a number?. By pushing on one of the buttons it will get eg. 5 times 'taller'... that way you don't have to push 5 times on the 'taller' button. Regards, Tom.

2 1

Welcome Aboard!!
by Rob Page 30 Apr '99

30 Apr '99

Hello everyone! Please join me in welcoming Chris Petrilli to the Digital Creations team!! Many of you already know Chris from his posts to the Zope list. Chris comes to us from XCert (a leading vendor or PKI solutions) and is going continue to round out our team as a product/project manager. Together, Brian Lloyd and Chris will work toward codifying some product management practices. Chris will also be involved in many of our consulting engagements. Chris will be joining us next week. His email address is: petrilli(a)digicool.com Regards, --Rob -- Rob Page Phone: +1 540 371 6909 Digital Creations Fax: +1 540 371 1201

1 0

RE: [Zope] security model with regards to aquisition
by Jay, Dylan 29 Apr '99

29 Apr '99

> -----Original Message----- > From: Jim Fulton [mailto:jim@digicool.com] > Sent: Thursday, April 29, 1999 10:23 PM > To: Jay, Dylan > Cc: 'zope(a)zope.org' > Subject: Re: [Zope] security model with regards to aquisition > > > Jay, Dylan wrote: > > (snip) > > > I wrote: > > > A possible work around is to use an expression and name the folder > > > when you access properties to force access to the folder to > > > be checked: > > > > > >  > > > > This work around doesn't seem to work in my case. I want to actually > > redirect to another address which seems to always work no > matter whether the > > the folder is allowed to be accessed or not. Here is the > method I'm using > > > >  > >  > >  > >  > >  > >  > >  > >  > >  > > Are you saying that this code should work differently? > Or that the file you redirect to should fail? If the former, The above should call the 404 responce (or ask for authorization) if the method is being run from a directory that is restricted. > please help me out and point me to the specific test that you want to > work differently. If the latter, then you need to change the property > references in the file you redirected too. Alternatively, you can The whole idea is the file I redirect too is on a completly different website. I want to use the security model in zope to determine who I generate a url to direct to another site (with a one time key so the file can't be downloaded again) > apply the change (to lib/python/DocumentTemplate/cDocumentTemplate) > that I checked in yesterday. :) I think I will have to do that.

1 0

Re: [Zope-dev] Stumped about handling this particularexception... particularexception...
by François-Régis CHALAOUX 29 Apr '99

29 Apr '99

Is there more details about this problem? - aren't good even for marshaling ... - ugly error screen ... FR >>> Paulo Eduardo Neves <neves(a)inf.puc-rio.br> 29/04/99 00:55:25 >>> Amos Latteier wrote: > I've also already used :lines. The problem of these converters is that they aren't good even for marshaling. If you use :int or :float in a text input form you have the chance to get the ugly error screen. Since you don't have any way to control the output screen, it can crash the usability of your site. It's better to use them in very specific situations or in prototypes. regards, -- Paulo Eduardo Neves mailto:neves@inf.puc-rio.br PUC-Rio de Janeiro _______________________________________________ Zope-Dev maillist - Zope-Dev(a)zope.org http://www.zope.org/mailman/listinfo/zope-dev (For non-developer, user-level issues, use the companion list, zope(a)zope.org, http://www.zope.org/mailman/listinfo/zope )

2 1

RE: [Zope] What am I doing wrong?
by Paul Everitt 29 Apr '99

29 Apr '99

Note: Zope 1.11 revamps the error messages, even including tips for well-known problems! In this case, the error message would have said the error and indicated that the HTML source contained more info. Everybody, when you start looking at 1.11, _please_ give us feedback on how to improve this. Usability is becoming more important for us. --Paul > -----Original Message----- > From: Jim Washington [mailto:jwashin@vt.edu] > Sent: Thursday, April 29, 1999 9:02 AM > To: Tom Deprez; zope(a)zope.org > Subject: Re: [Zope] What am I doing wrong? > > > Tom Deprez wrote: > > If you view the source of the page with the error, you will see > something like > > name error: age > > This means that there is no variable being passed to the > CheckInput page > called age. > > In the input page, there is a simple HTML error that can be fixed. > > <input age="age:int" type="text"> > > should be <input name="age:int" type="text"> > > The same problem exists with the input for humor. > > With these fixes, it works like a charm. > > -- Jim Washington > > > > > Help! > > > > If I press submit, I always get an error. I tried several things for > > checking the age... but none works! I guess it's again a > silly problem. But > > I can't find it. Help! Thanks. > > > >  > > <h2></h2> > > <p> > > > > <form action="Examp2_CheckInput" method="get"> > > > > <table> > > <tr> > > <td> > > Name > > </td> > > <td> > > <input name="name:string" type="text"> > > </td> > > </tr> > > > > <tr> > > <td> > > Age > > </td> > > <td> > > <input age="age:int" type="text"> > > </td> > > </tr> > > > > <tr> > > <td> > > Humour > > </td> > > <td> > > <input humour="humour:boolean" type="checkbox"> > > </td> > > </tr> > > </table> > > > > <input type="submit" value=" Submit "> > > > > </form> > > > > </p> > >  > > > > Examp2_CheckInput > > ------------------ > > > >  > > <h2></h2> > > <p> > > > >  > > <hr> > > <p> > >  > > Hi ! <br> > > you are  years old <br> > >  > > Great day isn't it? > >  > > Did you had a bad day? > >  > >  > > your age () is ridiculous, it should be > between 0 and 120!<hr> > > <a href="Examp2_form" Please fill in the form correctly> > >  > > </p> > > <hr> > > <p> > > > > </p> > >  > > > > Tom. > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://www.zope.org/mailman/listinfo/zope > > > > (For developer-specific issues, use the companion list, > > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

3 2