May 1999 - Zope - Zope lists

RE: [Zope] Midgard
by Michel Pelletier 11 May '99

11 May '99

> -----Original Message----- > From: Martijn Pieters [mailto:mj@antraciet.nl] > Sent: Tuesday, May 11, 1999 10:26 AM > To: phd(a)sun.med.ru; Zope Mailing List > Subject: Re: [Zope] Midgard > > > You cannot extend Midgard as easily as you can Zope. Take a > look at the > latest CVS of ZClasses, it now supports sub-classing of > UserFolder, User, > FOlder, Image, File, DTML Method and DTML Document objects. > Think User > objects are too limited? Extend them! > Careful with that Axe, Martijn! ;) Chris Petrelli brought up the point just the other day that the ability to quicky and easily add objects to the 'Add' menu can mean trouble. It is the opinion of some the add menu is too big as it is. I'm sure many of you have sat down at a Windows machine whose user didnt' organize their start menu very deep, and the 'Programs' menu was pages upon pages of menu options all at the same depth. In that particular case, we are talking about user error, but in this case, it is a limitation of the web pulldown box widget (not really a limitation of the existing widget, but the lack of a more complex structured one). So this will require some thought. It is all good and cool that we can create our own objects very quickly now, but it can get out of hand (you should see my sandbox!) > Midgard's authentication system is fairly limited. I'd miss > acquisition! Wouldn't we all. -Michel > > -- > Martijn Pieters, Web Developer > | Antraciet http://www.antraciet.nl > | Tel: +31-35-6254545 Fax: +31-35-6254555 > | mailto:mj@antraciet.nl http://www.antraciet.nl/~mj > | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 ------------------------------------------ _______________________________________________ Zope maillist - Zope(a)zope.org http://www.zope.org/mailman/listinfo/zope (For developer-specific issues, use the companion list, zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev )

1 0

ZClasses
by Tom Deprez 11 May '99

11 May '99

Hi, I find it very great that now I can make my own Z Objects very easely. I'm only not so sure when to use ZClasses. Pardon me, for questioning this, but it seems that I still don't have the right view for working with Zope and it's Classes. I can imaging that using ZClasses is great for people working on the Zope web application. Correct? But, I don't see any possibilities to let end users, use ZClasses. But, I guess, I'm again wrong on that point. Can somebody clearefy my mind about this with an example : I take the example Amos gave : i.e. The CDProduct ZClass. We've created it, so now it's pretty easy to create a Z CDProduct all over the Zope web application. But how can you use this for the end-users. Let's say, I want to be able to let people enter CD's into a database. Then Z Classes aren't usable? Do you then have to create forms like we do now? Isn't it possible to let the user browse to a ZClass, the ZClass automatically creates a form which the user then can fill in. The data is sended back and a database is updated. I've read the Trinkets tutorial, but I don't understand it quiet well... Can you store ZClasses with a container? Tom.

2 1

Midgard
by Oleg Broytmann 11 May '99

11 May '99

Hello! Anyone saw the announcement of Midgard free Web Applications platform? URL is http://midgard.greywolves.org/ They mention DTML as a method to extend their Syle system. Oleg. ---- Oleg Broytmann National Research Surgery Centre http://sun.med.ru/~phd/ Programmers don't die, they just GOSUB without RETURN.

4 3

Security glitch on user-editing form
by Alexander Staubo 11 May '99

11 May '99

I just found that Zope presents the user-editing form (manage_users) with the password in plaintext. That's a bit crude. The HTML code that Zope produces is like this: ... <TR> <TD VALIGN="TOP"> <STRONG>Password</STRONG> </TD> <TD VALIGN="TOP"> <INPUT TYPE="PASSWORD" NAME="password" VALUE="cucumber" SIZE="40"> </TD> </TR> ... This is a security problem -- in two ways: Firstly, the password is in the HTML, and secondly, the number of characters in the password can be interpreted by the user. Also it's quite redundant. There's no reason for Zope to pass the actual password. Zope should give the HTML thus: <INPUT TYPE="PASSWORD" NAME="password" VALUE="123456789" SIZE="40"> If the user posts changes without changing the password, Zope can detect if the password is receives is "123456789" and ignore it. A better dummy password should perhaps be chosen to avoid clashing with potential real-world passwords. Alternatively, a check box could be provided requiring the user to check the box in order to change password. Just my 2 cents' worth. The future obviously is in public-key encryption, but until Zope gets it, plaintext passwords ought to be secured as tightly as possible. Alexander Staubo http://www.mop.no/~alex/ mailto:redhand@mop.no

1 0

RE: [Zope] External methods and images
by Wolf Logan 11 May '99

11 May '99

i think what you're seeing is the by-now-infamous ExternalMethod exception-handling bug (tm). ExternalMethod is seeing an exception in some part of the external method. in processing that exception, it assumes the exception type is a string, which it almost never is. this usually causes a second exception in the exception-handling code, which kills the function (and produces the traceback you see). i was able to patch it by replacing line 255 in ExternalMethod.py with: ----- if (type(error_type) is type('')) and (lower(error_type) in ('redirect',)): ----- i know less than nothing about the version control system, or even the bug reporting system (please forgive me, i'm only marginally competent with the systems we use here in-house) so i haven't made the change above "official" in any way. if someone could take care of that, i'd appreciate it. -----Original Message----- From: Tony McDonald [mailto:tony.mcdonald@ncl.ac.uk] Sent: Friday, May 07, 1999 8:50 AM Hi, I have an external method that gets an image from a directory (ie the image is *not* in the ZODB) and then adds the correct headers to display it to the browser. Trouble is, it don't work. anyone got any ideas? This is driving me batty.

5 6

RE: [Zope] Zope with MSSQL under Linux?
by Alexander Staubo 11 May '99

11 May '99

Anthony Baxter wrote: >>>> Rob Page wrote >> > Has anybody used Zope with MS SQL Server under Linux? >> >> Rumor has it that the Sybase 11.x client for Linux >successfully connect >> to the SQL Server 6.5. I'm not sure about SQL Server 7 (and as I >> recall, neither was the original poster). Check out the >list archives >> to double check. > >Rumor - ha! More than just "rumor". Yeah, it works fine >against MSSQL 6.5, >it's in regular use by us right now (and will shortly be going >into _heavy_ >use - ohmiiigawd). I hope you're referring to the ZSybaseDA adapter here; if so, I'll definitely give it a shot. For me, lack of availability of a database driver for MSSQL has long been what's keeping me from going Linux with web development. >MS changed the wire protocol some between 6.5 and 7.0, so some >stuff won't >work. I don't know exactly what. Apparently vanilla queries still work; I'm going to verify this when we get 7.0 here. >You might also want to check out http://metalab.unc.edu/freetds/ - a free >reimplementation of the client protocol used by Sybase/MSSQL. Unfortunately, this project is barely underway; the ODBC driver isn't usable, for example. More interesting is the unixODBC project, unfortunately it didn't not have an MSSQL driver when I last checked. Alexander Staubo http://www.mop.no/~alex/ mailto:redhand@mop.no

2 1

RE: [Zope] Midgard
by Alexander Staubo 11 May '99

11 May '99

Sure you don't mean DHTML (Dynamic HTML)? That's something else. I see they mention using DHTML on their pages. Alexander Staubo http://www.mop.no/~alex/ mailto:redhand@mop.no >-----Original Message----- >From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of Oleg >Broytmann >Sent: 11. mai 1999 14:32 >To: Zope Mailing List >Subject: [Zope] Midgard > > >Hello! > > Anyone saw the announcement of Midgard free Web >Applications platform? >URL is http://midgard.greywolves.org/ > They mention DTML as a method to extend their Syle system. > >Oleg. >---- > Oleg Broytmann National Research Surgery Centre >http://sun.med.ru/~phd/ > Programmers don't die, they just GOSUB without RETURN. > > >_______________________________________________ >Zope maillist - Zope(a)zope.org >http://www.zope.org/mailman/listinfo/zope > >(For developer-specific issues, use the companion list, >zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0

Re: [Zope] RE: What method do I use to check access?
by Martijn Pieters 11 May '99

11 May '99

At 01:28 11/05/99 , Jay, Dylan wrote: > > Jay, > > > > Try . There was an > > excellent posting in the archives about all the possibilities with the > > user object. Also read the files in the AccessControl folder inside > > Zope/lib/python. > >the has_role method I already use and is not convienient as it means I have >to hard code the roles. >I've looked in AccessControl and only come across >def allowed(self,parent,roles=None): >but was unsuccessful in getting it to do what I want. > >I will look for that email in the archives. AUTHENTICATED_USER.allowed won't do what you want, I think. A now deprecated method that is now replaced by has_role was nothing more than an alias to the allowed() method, so you cannot get any (or much) more information from allowed() than you can get from has_role(). Explain to us what you want to do. -- Martijn Pieters, Web Developer | Antraciet http://www.antraciet.nl | Tel: +31-35-6254545 Fax: +31-35-6254555 | mailto:mj@antraciet.nl http://www.antraciet.nl/~mj | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 ------------------------------------------

1 0

Adding Products through Products
by Sebastian Luehnsdorf 11 May '99

11 May '99

hi! i'm developing a product, which is supposed to create instances of another product in it's directory. how do i import the files / call the appropriate methods. ciao, basti --------------------------------------------------------------------- sebastian f. luehnsdorf beehive elektronische medien gmbh --------------------------------------------------------------------- http://basti.beehive.de http://www.beehive.de mailto:basti@beehive.de mailto:service@beehive.de fon: (+49 30) 84 78 20 fax: (+49 30) 84 78 22 99

4 3

Re: [Zope] Adding Products through Products
by Martijn Pieters 11 May '99

11 May '99

At 17:58 10/05/99 , Sebastian Luehnsdorf wrote: >hi! > >i'm developing a product, which is supposed to create instances of another >product in it's directory. how do i import the files / call the >appropriate methods. Maybe you should look at ZClasses (by getting the latest CVS version of Zope). They make it very easy to define Container objects that can contain other products, as well as any additional ZClasses you define. -- Martijn Pieters, Web Developer | Antraciet http://www.antraciet.nl | Tel: +31-35-6254545 Fax: +31-35-6254555 | mailto:mj@antraciet.nl http://www.antraciet.nl/~mj | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 ------------------------------------------

1 0