January 2000 - Zope - Zope lists

SiteAccess comments, anyone?
by Hung Jung Lu 10 Jan '00

10 Jan '00

Hi, One of the most trivial requests that every newbie asks is how to publish their html files stored on their local file system. Right now Zope simply CANNOT do that! (You can upload things via FTP, but then it's a pain to synchronize changes. I know, you can write a python method to do that, you can even use cron to automatically update things, add/delete objects inside your ZODB, etc. etc. But then, I would be a newbie-no-more.) :) Another thing is: one mights to upload files for people to download (things like .exe, .tgz, .tar.gz, .zip, etc.), but right now you have to upload them all into ZODB and make your data.fs file so so big. It would also be ideal if these files could be stored in the file system yet accessible through Zope and HTTP protocol. (Not FTP protocol.) I was looking into SiteAcess, and I think it is a VERY important component of Zope and that it should become part of Zope. In fact, virtual hosting a.k.a. RewriteRule is so important, that I don't understand why Zope still doesn't have it and how people can survive without it. Virtual hosting opens a door of endless possibilities. Here is the URL: http://www.zope.org/Members/4am/SiteAccess/info But the version number now is barely 0.2.0 and I feel uncomfortable to be a guinea pig. :) Is there a time estimate for the release of version 1.0.0? There is a comment from Michel Pelletier that in Zope 2.2 there will be virtual hosting. Is there any time estimate for the release of Zope 2.2.0? regards, Hung Jung ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Zope capabilities
by bbarnes＠operamail.com 10 Jan '00

10 Jan '00

Hello anyone: My plan for my manufacturing client of 10-20 nodes was to use Linux as a server to Applixware clients coupled to Sybase. Am I to understand that I can use Zope to put an extensive library of applications (accounting, order entry, inventory, etc) on my website that will be available to my client's enterprise, and, better yet, available to other clients, as well. What about performance? Will the database be on my client's hardware or on my website? Reviewing the installations list, I didn't see anything that approached enterprise class operations. Is the system that robust? Thanks for your comments. I will continue exploring the site with a high sense of excitement. Bill Barnes

1 0

Namespace problems.
by Brenton Bills 10 Jan '00

10 Jan '00

Hi people, I am having a few problems with namespaces again. I have some DTML where I do the following, <dtml-var "ShowDetails(item=item,qty=qty)> ShowDetails contains, <dtml-in "sqltofind(item)"> Display the item details </dtml-in> Is it wrong to call sql from a method or is this a name space problem? The error : Traceback (innermost last): File /home/zope/Zope/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /home/zope/Zope/lib/python/ZPublisher/Publish.py, line 179, in publish File /home/zope/Zope/lib/python/Zope/__init__.py, line 202, in zpublisher_exception_hook (Object: ElementWithAttributes) File /home/zope/Zope/lib/python/ZPublisher/Publish.py, line 165, in publish File /home/zope/Zope/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: index_html) File /home/zope/Zope/lib/python/ZPublisher/Publish.py, line 102, in call_object (Object: index_html) File /home/zope/Zope/lib/python/OFS/DTMLDocument.py, line 166, in __call__ (Object: index_html) File /home/zope/Zope/lib/python/DocumentTemplate/DT_String.py, line 502, in __call__ (Object: index_html) File /home/zope/Zope/lib/python/DocumentTemplate/DT_In.py, line 691, in renderwob (Object: GetUsersItems) File /home/zope/Zope/lib/python/DocumentTemplate/DT_With.py, line 133, in render (Object: ShowDetailsOfRoomRC(model=model,qty=qty)) File /home/zope/Zope/lib/python/DocumentTemplate/DT_Util.py, line 335, in eval (Object: ShowDetailsOfRoomRC(model=model,qty=qty)) (Info: qty) File <string>, line 0, in ? File /home/zope/Zope/lib/python/OFS/DTMLMethod.py, line 141, in __call__ (Object: ShowDetailsOfRoomRC) File /home/zope/Zope/lib/python/DocumentTemplate/DT_String.py, line 502, in __call__ (Object: ShowDetailsOfRoomRC) File /home/zope/Zope/lib/python/DocumentTemplate/DT_In.py, line 633, in renderwob (Object: FindDetailsOfRoomRC(_)) File /home/zope/Zope/lib/python/DocumentTemplate/DT_Util.py, line 335, in eval (Object: FindDetailsOfRoomRC(_)) (Info: FindDetailsOfRoomRC) File <string>, line 0, in ? NameError: (see above)

1 0

Re: User Authentication
by Andrey V Khavryutchenko 10 Jan '00

10 Jan '00

Hi, Borno! >>>>> "BJ" == Borno Janekovic writes: BJ> My Problem: I want to do an UserAuthentication against a Database. I BJ> want the Users to set up their own accounts with parameters. 1. Should BJ> I do it with the Zope User Mechanism? And if I choose this how can I BJ> implement that. BJ> 2. Or should I do it with my own User Database authentisation. And how BJ> can I do it that way? BJ> I tyed 2.) You'd better use some of availabe User Folder products, like mysqlUserFolder or GenericUserFolder. The later is great (and is what I'm using now), but ought to have better debugging facilities (hey, zen! ;) -- SY, Andrey V Khavryutchenko http://www.kbi.kiev.ua/~akhavr Software & SPI Engineer Visit my site Shick's Law: There is no problem a good miracle can't solve.

2 1

Getting parent of a method
by Chris Goldie 10 Jan '00

10 Jan '00

OK, my method needs to know the folder ( PARENT[0]) it resides in. My method creates navigation links, I could be using a document instead, but a method is nicer for users to implement. <dtml-var "PARENTS[0].id"> returns the id of the calling objects folder not the methods folder. What is the correct way of finding the folder a method resides in? Thasnks dudez

1 0

Re: [Zope] new howto: choosing sql vs ZODB.
by Tres Seaver 10 Jan '00

10 Jan '00

Anthony Baxter <anthony(a)interlink.com.au> wrote: > At http://www.zope.org/Members/anthony/sql_vs_ZODB/ I've started to > put together a howto listing some of the things to think about when > you're deciding whether to put data into the ZODB or an SQL database. > > > feedback, additional data points welcome... I like it! Another point to consider is how well the data "fits" the storage model. As an example, in a former life I built a system storing "standard operating procedures" into an RDBMS. Each procedure had one or more steps, each of which might be recursively decomposed into substeps -- they also might reference diagrams, illustrations, and multimedia content. Although I managed to make this work in SQL, the impedance mismatch was very high, compared with doing it in a hierarchical database like ZODB. RDBMS's excel at allowing "slice and dice" queries, at the expense of requiring expensive joins to implement parent-child links; hierarchical DB's optimize the parent-child relationships, making "cross-family" queries difficult or even infeasible. Best, Tres. -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

1 0

Force reload from dtml method
by Andrey V Khavryutchenko 10 Jan '00

10 Jan '00

Hi! I'm using GenericUserFolder and at acl_users/docLoginSuccess I redirect to the desired page. How I can forcibly refresh this page? Now, the browser is correctly redirected, but the cached page (login form) is loaded. Browser (NN 4.5, Linux) is set to check the modification date at every access. Thanks in advance! -- SY, Andrey V Khavryutchenko http://www.kbi.kiev.ua/~akhavr Software & SPI Engineer Visit my site Shick's Law: There is no problem a good miracle can't solve.

3 2

RE: [Zope] browser security
by Brian Lloyd 10 Jan '00

10 Jan '00

> Hi everyone, > > Here's a quick security question. I'm using ZServer w/ Apache. > > Someone pointed out to me today that it's possible to access > a site like > this: > > http://username:password@mysite.com/ > > and the user is logged in automatically. Apparently there are cracking > tools available that will attempt to guess passwords using this method > thereby gaining access to the system. > > Is there any easy fix for this? I don't believe that the username:password part of the url ever actually go out on the wire - my understanding of this is that IE (or other browsers that support this construct) just accept this as a convenient shorthand and that they remove the username/pw and send it in a header as usual... As far as cracking tools, I can't imagine how this would have any impact one way or the other - it's really just a client convenience. Hope this helps! Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

3 2

ummmm ... no password option for new user?
by Bill Anderson 10 Jan '00

10 Jan '00

OK, clean install of 2.1.2. There is _no_ password option for new user, nor is there an option to change the old password (or set one) for current users. I read the docs, but they only say: - SECURITY: Viewing existing user no long displays current password, only space for putting in the new password. This will be more critical as we move toward fully encrypted passwords. When I look at the source of the page, the input types are hidden. Am I missing something? how do I set a password for a new user? Or change an existing one? -- In flying I have learned that carelessness and overconfidence are usually far more dangerous than deliberately accepted risks. -- Wilbur Wright in a letter to his father, September 1900

1 0

Installation suggestion.
by Bill Anderson 10 Jan '00

10 Jan '00

Given the number of times permission on the var directory comes up, why not just have the w_pgci.py and wo_pcgi.py process set the permissions to nobody.nobody ? Perhaps an option to pass to it to indicate the user and group? Seems fairly simple to me ... but I may be missing something as I have not delved in to these files. Bill Anderson -- In flying I have learned that carelessness and overconfidence are usually far more dangerous than deliberately accepted risks. -- Wilbur Wright in a letter to his father, September 1900

1 0