May 1999 - Zope - Zope lists

RE: [Zope] IE5 form entry horror.
by Wolf Logan 17 May '99

17 May '99

i think i have to agree...this is a client security problem, and not one that can be easily "fixed" from the server side. there are a million (approximately!) security holes in most web browsers...and most of them aren't as obvious to the user as this one. if you try to solve client-side security issues from the server side, you're setting yourself up for a *huge* chunk of work, most of which will be thankless (and unprofitable). on the other hand, the autocomplete function only works on fields that are "visible" to the user...it doesn't work on "password" style fields. that might be of some help. -----Original Message----- From: Alexander Staubo [mailto:alex@mop.no] Sent: Wednesday, May 12, 1999 8:45 AM It's a client security problem, not something that hits the server in any particular way. If the desktop user configured his computer so that anyone can reclaim his password from the autocomplete list, that's his problem. You could "fix" Zope, but it wouldn't fix the thousands of other web sites which also do credit card. >-----Original Message----- >From: anthony(a)nextTelecom.com [mailto:anthony@nextTelecom.com]On Behalf >Of Anthony Baxter >Sent: 12. mai 1999 16:38 > >IE5 appears to have a client-side cache of form entry values - so if >someone returns to a page, they get a drop-box of previously entered >values for this form field - this occurs even on a form >accessed by https.

3 2

RE: [Zope] trouble with #with and DTML documents
by Wolf Logan 17 May '99

17 May '99

sorry, did it again...forgot to give my version info. i'm using ZOPE 1.10.2 on win32. -----Original Message----- From: Wolf Logan [mailto:wolf@searchbutton.com] Sent: Monday, May 17, 1999 12:17 AM i'm having a strange problem (well, it's strange to me). i have a folder called "newFolder". it contains a folder called "subFolder". "subFolder" contains a DTML document called "DTMLDoc". "DTMLDoc" has a string property "foo" that reads "this is the message". the "index_html" of "newFolder" looks something like this: -----      ----- but this doesn't work -- it raises a key error. if the  line is replaced with , it returns "subFolder". apparently, the second "with" (#with DTMLDoc) isn't working properly. now, when the key error is raised, it's raised from within DT_With.py, so i know the right code is being called. i just don't understand why i don't have access to the DTMLDoc's namespace from there. any pointers? _______________________________________________ Zope maillist - Zope(a)zope.org http://www.zope.org/mailman/listinfo/zope (For developer-specific issues, use the companion list, zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev )

1 0

trouble with #with and DTML documents
by Wolf Logan 17 May '99

17 May '99

i'm having a strange problem (well, it's strange to me). i have a folder called "newFolder". it contains a folder called "subFolder". "subFolder" contains a DTML document called "DTMLDoc". "DTMLDoc" has a string property "foo" that reads "this is the message". the "index_html" of "newFolder" looks something like this: -----      ----- but this doesn't work -- it raises a key error. if the  line is replaced with , it returns "subFolder". apparently, the second "with" (#with DTMLDoc) isn't working properly. now, when the key error is raised, it's raised from within DT_With.py, so i know the right code is being called. i just don't understand why i don't have access to the DTMLDoc's namespace from there. any pointers?

1 0

AUTHENTICATED_USER problem
by reedstrm＠wallace.ece.rice.edu 17 May '99

17 May '99

Well folks - I still don't know why the previous code didn't work, but I found a work around: I changed this:  into this:  And everybody's happy now. Later, Ross -- Ross J. Reedstrom, Ph.D., <reedstrm(a)rice.edu> NSBRI Research Scientist/Programmer Computer and Information Technology Institute Rice University, 6100 S. Main St., Houston, TX 77005

1 0

UserDb and AUTHENTICATED_USER
by reedstrm＠wallace.ece.rice.edu 17 May '99

17 May '99

Hey Zopers- I just tripped over an interesting problem. I'm trying to use the UserDb product with Zope 1.11.0.pr1. Everything's been going swimmingly, (once I patched it) until I hit this little snag. I'm just trying to add a File object, and set a property on it 'addedby' equal to the current value of 'AUTHENTICATED_USER'. I have a normal User Folder in the root of the Zope site, and a UserDb in a Folder. If I'm connected as a user defined in the main User Folder, everything works fine. If I'm connected as a UserDb defined person, however, I get the error below. This all happens in the folder that has the UserDB folder in it. Anybody see why this isn't working? Ross Traceback below: You are not authorized to access <em>AUTHENTICATED_USER</em>. <p><a href="http://www.zope.org/Credits"><img src="http://localhost:9673/p_/ZopeButton" width="115" height="50" border="0" alt="Powered by Zope"></a></p> </BODY></HTML> <!-- Traceback (innermost last): File lib/python/ZPublisher/Publish.py, line 255, in publish_module File lib/python/ZPublisher/Publish.py, line 157, in publish File lib/python/ZPublisher/mapply.py, line 154, in mapply (Object: addFileAction) File lib/python/ZPublisher/Publish.py, line 98, in call_object (Object: addFileAction) File lib/python/OFS/DTMLMethod.py, line 158, in __call__ (Object: addFileAction) File lib/python/OFS/DTMLMethod.py, line 154, in __call__ (Object: addFileAction) File lib/python/DocumentTemplate/DT_String.py, line 514, in __call__ (Object: addFileAction) File lib/python/DocumentTemplate/DT_Util.py, line 315, in eval (Object: _.getitem(REQUEST['id']).manage_addProperty( 'addedby',REQUEST['AUTHENTICATED_USER'], 'string')) File <string>, line 0, in ? File lib/python/DocumentTemplate/DT_Util.py, line 155, in careful_getitem Unauthorized: (see above) -- Ross J. Reedstrom, Ph.D., <reedstrm(a)rice.edu> NSBRI Research Scientist/Programmer Computer and Information Technology Institute Rice University, 6100 S. Main St., Houston, TX 77005

1 0

RE: [Zope] I want to access AUTHENTICATED_USER on all pages.
by Jay, Dylan 16 May '99

16 May '99

> -----Original Message----- > From: Philip Aylesworth [mailto:zopelist@regalint.com] > Sent: Friday, May 14, 1999 23:35 > To: Jay, Dylan > Cc: 'zope(a)zope.org' > Subject: Re: [Zope] I want to access AUTHENTICATED_USER on all pages. > > > I am using UserDB with cookies and AUTHENTICATED_USER is defined on > public pages. I have a page that displays differently depending on the > users Role. Works great! > > Phil A Thats a solution I have tried however I can't seem to get cookie authentication to work. It always brings up a basic authentication dialog instead. I'm using NT server with iis4.0. Is there something I'm missing? > Jay, Dylan wrote: > > > > Once a user has logged in with basic authentication I would > like the var > > AUTHENTICATED_USER to be not Anonymous on all subsequent > pages, even ones > > that are publicly viewable. Is this possible? or it a > browser thing? Would > > this work if I was using cookie authentication? > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://www.zope.org/mailman/listinfo/zope > > > > (For developer-specific issues, use the companion list, > > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0

RE: [Zope] UserDb
by Michel Pelletier 16 May '99

16 May '99

(Ack! If you got duplicate quoted messages from me, it's because Outlooks is just *the* coolest mail user agent since they stopped using horses) > -----Original Message----- > From: Ross J. Reedstrom [mailto:reedstrm@rice.edu] > Sent: Friday, May 14, 1999 6:56 PM > To: Zope Mailing list > Subject: [Zope] UserDb > > > Hey all - > Anybody use UserDb under Zope 1.11.0pr1? I'm getting an error about an > undefined > Key PARENT_URL. A quick grep through Zope sources for 1.10.2 and > 1.11.0pr1 > indicates that it went away. Anybody patched it up? Are there other > problems lurking? Ugh. Yes PARENT_URL is obsolete. Someone should fix this. Volunteers? -Michel > > Ross > > P.S. Yes, the implication that I got access to my PostgreSQL database > working from the Zope/Win32 install is accurate: I had forgotten about > the ZODBCDA! So, a quick install of postODBC and ZODBCA on the NT web > server, and voila! data comes pouring out. Aren't all these OpenSource > pieces wonderful? > > -- > Ross J. Reedstrom, Ph.D., <reedstrm(a)rice.edu> > NSBRI Research Scientist/Programmer > Computer and Information Technology Institute > Rice University, 6100 S. Main St., Houston, TX 77005 > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

2 1

RE: [Zope] zope development projects
by Michel Pelletier 16 May '99

16 May '99

> -----Original Message----- > From: Scott Lewis [mailto:csl@balticave.com] > Sent: Friday, May 14, 1999 6:46 PM > To: zope(a)zope.org > Subject: [Zope] zope development projects > > > hi folks, > > i started using zope about a month ago and now i'm hooked. i'm > looking for a way to get involved in the zope community. i have > several ideas for zope products and wondered if anyone else is > working on something similar. Zope is like any drug, but cheaper. ;) > > this led me to take a step back and wish for a central location that > would provide information about open zope development projects- > open in the sense of projects coordinating the work of > geographically disperse people and open to participation of others. > > is there already such a beast? if not, i'll start working on one. i > envision a site that would have contact info, relatively > recent status > info, links to project websites, and perhaps > discussion/recruiting for > proposed projects. Real Soon Now (TM) we will be releasing the second generation of our home page. This will include many cool colaborative goodies, including membership and home pages for community projects (and much, much more). If you still want to go-crazy-with-the-cheeze-whiz and write your own, we will be happy to integrate your work into the community site. One particualr area where we are lacking at the moment is a "Trove" like packaging system to manage multiple versions of varous packages and the meta-data associated with them. For a glimpse at the trove spec (written by Eric Raymond et al.) see: http://www.tuxedo.org/~esr/trove -Michel > > i welcome any input, > > -scott > > ----- > Scott Lewis > Baltic Avenue Productions > csl(a)balticave.com > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0

RE: [Zope] ZClass
by Michel Pelletier 16 May '99

16 May '99

> -----Original Message----- > From: Tom Deprez [mailto:tom.deprez@village.uunet.be] > Sent: Saturday, May 15, 1999 3:30 PM > To: zope(a)zope.org > Subject: [Zope] ZClass > > > Hi, > > Is it possible to hide a property of a parent in a child > ZClass? (or give it > a fixed value, meaning that this child can't change this property) > > Tom. > By parent-child, do you mean a Superclass-Subclass relationship, or a Class-Instance relationship? I do beleive there are some protection mechanisms in the low level implimentation of property sheets, but i'm not sure if they are exposed by the management interface. What are your needs? -Michel > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0

RE: [Zope] Edit ZClass methods with FTP?
by Michel Pelletier 16 May '99

16 May '99

> -----Original Message----- > From: jhauser(a)ifm.uni-kiel.de [mailto:jhauser@ifm.uni-kiel.de] > Sent: Saturday, May 15, 1999 4:58 PM > To: zope(a)zope.org > Subject: [Zope] Edit ZClass methods with FTP? > > > OK I have come along with the example and build now my own classes. I > have uploaded a DTML-method into the ClassFolder in the Product > area. I can't see this method if I log in with FTP. I also don't see > propertysheets/ and propertysheets/methods/ , these are methods, > right? > > Is it possible to go to the DTML in the ZClass with FTP at all? > Nope. This is planned, however, when ZClasses are cooked a little more. -Michel PS: This was one of the first things I pointed out about ZClasses too! I thought I was out of the cut-and-paste woods. > With regards, > > __Janko > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0