August 1999 - Zope - Zope lists

Zope authentication wrt DTML calling DTML in expr ?
by Boris Borcic 30 Aug '99

30 Aug '99

What's the story on passing authentication to DTML methods called from other DTML methods with an expr tag attribute ? I am trying to write a utility DTML method, that will fill a SELECT control, with OPTIONS derived from the ids of a list of objects obtained from "objectValues" over a folder, (in the caller DTML) and passed to the called DTML with a keyword argument. But in the called DTML method, it appears that those objects are unauthorized... and Zope asks the user to reauthenticate for each object in the list, and finally delivers "unauthorized", even though the very same objects are available directly, with the same authentication. Why is this and what should I (not) do ? I would like to be able to modularize my DTML code, but I need a correct understanding of what can or can't easily be delegated to other methods. This should be simple to do, and I am horrified to recognize the type of frustration I had with the primitive BASICs of 20 years ago. BB

2 1

RE: [Zope] KM net news
by Michel Pelletier 30 Aug '99

30 Aug '99

KM is a Zope 2.0 only product. You are using 1.10.3. -Michel > -----Original Message----- > From: Grant Street [mailto:gstreet@sanderson.net.au] > Sent: Sunday, August 29, 1999 11:54 PM > To: 'zope(a)zope.org' > Subject: [Zope] KM net news > > > Has any one come accross this error when tring to import a zexp file? > > I got when trying to install KM net news. >

1 0

Installation on FreeBSD
by Paul Dlug 30 Aug '99

30 Aug '99

I am a newcomer to Zope and am attempting to install it on FreeBSD...as I understand it the installation procedure (desiring to use ZopeHTTP) is to just do a python wo_pgcgi.py ./start The server starts and I am able to access it using the default port, however when I try to access the Quickstart I get a System Unavailable and errors as well attempting to access the administrative interface. It tells me to view the html source for the page for further error tracking..these are the errors for the QuickStart page: Traceback (innermost last): File /usr/local/www/data/Zope/lib/python/ZPublisher/Publish.py, line 878, in publish_module File /usr/local/www/data/Zope/lib/python/ZPublisher/Publish.py, line 590, in publish (Info: /QuickStart/) File /usr/local/www/data/Zope/lib/python/OFS/DTMLMethod.py, line 155, in __call__ (Object: index_html) File /usr/local/www/data/Zope/lib/python/OFS/DTMLMethod.py, line 151, in __call__ (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_String.py, line 454, in __call__ (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_String.py, line 376, in cook (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_String.py, line 223, in parse (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_String.py, line 271, in parse_block (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_String.py, line 223, in parse (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_String.py, line 271, in parse_block (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_String.py, line 223, in parse (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_String.py, line 284, in parse_block (Object: index_html) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_If.py, line 165, in __init__ File /usr/local/www/data/Zope/lib/python/DocumentTemplate/DT_Util.py, line 319, in name_param (Info: ({'expr': "objectValues(['Folder'])"}, 'if', 1, 'name')) File /usr/local/www/data/Zope/lib/python/DocumentTemplate/VSEval.py, line 186, in __init__ (Object: objectValues(['Folder'])) AttributeError: (see above) If anyone could assist me I would greatly appreciate it. --Paul Dlug

1 0

navigation product
by kedai 30 Aug '99

30 Aug '99

pardon my ignorance, but where is the navigation product? searched for it at the beta site, nada. looked for it at the original site, zilch. help point me to the right direction please. thanks

2 1

Why is the space character allowed in object IDs?
by Brian Hooper 30 Aug '99

30 Aug '99

Hi - Can anyone tell me why spaces are permitted in Zope object IDs? Since they aren't allowed as is in URLs, isn't this kind of an unnecessary flexibility? --Brian

4 3

Re: [Zope] Zope Security Problem
by Kevin Dangoor 30 Aug '99

30 Aug '99

-----Original Message----- From: Martijn Pieters <mj(a)antraciet.nl> To: Andreas Kostyrka <andreas(a)mtg.co.at>; Alexander Staubo <alex(a)mop.no> Cc: Zope Mailing List (E-mail) <zope(a)zope.org> Date: Sunday, August 29, 1999 4:15 PM Subject: RE: [Zope] <code> tag? >At 18:58 29-8-99 , Andreas Kostyrka wrote: >>On Sun, 29 Aug 1999, Alexander Staubo wrote: >> >> > It only works when explicitly requesting a document by its name. So: >> > >> > http://www.mtg.co.at/PrincipiaSearchSource >> > >> > won't work, whereas: >> > >> > http://www.mtg.co.at/index_html/PrincipiaSearchSource >> > >> > will get you the DTML source. >>Confirmed. That's what one calls a security misfeature? > >Being able to view a sites source code might reveal shortcomings in it that >can be used to gain further access to your site. It might be that Zope has >vulnerabilities as yet undiscovered. When thinking in terms of security, >expect the worst. I agree that there may be further security implications. Plus, not *everything* in the world is open source. I'm of the opinion that people should choose what is open and what is not... > >Okay, how about the source of your Z SQL Methods: Add getFindContent to the >URL of a ZSQL Method, and you get the source, and this cannot be restrictable. > >If Zope wants to claim that it is secure, you should be able to protect >your site's source code. So, anyone can look at the content of a Z SQL Method or a DTML Method (and maybe document). Is it possible to look at any arbitrary property? I've been working under the assumption that there was no way for someone to view a property unless you give them access via a method or the management screens... Kevin

3 2

Dictionary properties within Zope.
by happyrhino＠usa.net 30 Aug '99

30 Aug '99

I'm embarassed to be asking yet another silly question but after 40 minutes searching the archives and the documentation, can't find it. Hopefully it'll be short and sweet = I can add properties which can be lines, strings, numbers. But hasn't anyone found the need to add dictionaries ? In almost every website I've created, the global configuration files are full of dictionary variables. For example, for navigation menus we might have navigation = {"Title 1" : URL1, "Title2" : URL2, etc} from which it's then simple to generate the HTML for the navigation. And there are many other instances where dictionaries save the day. This would have been something very useful to put in the root folder properties as a form of "site configuration". The only references to dictionaries seem to be with respect to the REQUEST.cookies and REQUEST.form and DTML doesn't seem to have the mechanisms for dealing with dictionary properties on folders. I'm getting around this right now with external methods but I'm also hoping to move all of my code into the Zope environment. Again, sorry for yet another question. Believe me, I searched. Henry ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

3 2

Re: [Zope] ODBC and SQL INSERT
by Martijn Pieters 30 Aug '99

30 Aug '99

At 21:41 29/08/99 , Klement J. Fellner wrote: >hello zopisti, > >one major problem: >everything functions with delight... only the insert >statement does not work. it looks like it did work >in the zope environment, but if I look directly at the >database, no rows are inserted. >oh... what we use: Zope 2.0b5 with Oracle ODBC >on windows NT. The ODBC driver is functioning. > >are there any known issues when using ODBC?? Yes, the ODBC DA has not yet been updated to Zope 2.0, and no transactions are committed yet. You won't notice this with SELECT, but you sure will with INSERT, UPDATE, DELETE and other state altering statements. -- Martijn Pieters, Web Developer | Antraciet http://www.antraciet.nl | Tel: +31-35-7502100 Fax: +31-35-7502111 | mailto:mj@antraciet.nl http://www.antraciet.nl/~mj | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 ------------------------------------------

1 0

ODBC and SQL INSERT
by Klement J. Fellner 30 Aug '99

30 Aug '99

hello zopisti, one major problem: everything functions with delight... only the insert statement does not work. it looks like it did work in the zope environment, but if I look directly at the database, no rows are inserted. oh... what we use: Zope 2.0b5 with Oracle ODBC on windows NT. The ODBC driver is functioning. are there any known issues when using ODBC?? klement j. fellner university of magdeburg

2 1

KM net news
by Grant Street 30 Aug '99

30 Aug '99

Has any one come accross this error when tring to import a zexp file? I got when trying to install KM net news. > I tried to install it on my 98 machine and it gave me the > following HTML page > Have I forgotton something ? > > I installed the two files in the extensions and import directory. > > Is there allot of memory to be used by the import ? > > I'm using the inbuilt web server. > > Grant Street > <html> > <head> > <title>exceptions.MemoryError</title> > </head> > <body> > Sorry, an error occurred.<p> >  > </body> > </html> >

1 0