October 2000 - Zope - Zope lists

O'Reilly Book Tecnical Reviewers
by Michel Pelletier 20 Oct '00

20 Oct '00

Greetings, O'Reilly is looking for 4 or 5 technical reviewers for the book. http://www.zope.org/Members/michel/ZB/ Technical reviewers get paid either a small honorarium or get free copies of the book (I am unaware of the exact details). I'm sure this message will elicit a *flood* of candidates, and I'm afraid we can't accept them all (of course, that doesn't mean you can't do it for free ;). Further, this will be a time consuming task, requiring you to scrutinize all details, try examples, etc. You will probably give more effort than you are monitarily compensated with, but you will also get unending glory and mucho zen master points from your zopista peers. So please consider this opertunity to work directly with us to make a great book. If you are interested in the sweat and the glory, please send an email to docs(a)digicool.com with the subject "I Wanna Be A Technical Reviewer", and maybe a brief bio about you, your Zope experience and (bonus points) if you've every technically reviewed a book before. Thanks! -Michel

1 0

How to type check OR better list selector ways
by Robert Joseph Roos 20 Oct '00

20 Oct '00

<dtml-expr="_.type(some_variable_of_unknown_type)"> causes a name error, while other python builtins like _.string(some_int) work fine. What gives? Is there some other "zopist" way to type-check? More generally, is there a better way to deal with the annoying fact that multiple selectors return a list UNLESS there are <=1 items selected, in which case they return a single item or None? (rather than a list with only one member, in the case of 1 object selected, or an empty list, in the case of none, which would SEEM to be the consistant way to do things, since <dtml-in> wouldn't choke.) =Rob====== ====J===== =====Roos= And more and more, as I see all these prisons going up, and everybody being sent off to prison, with three strikes and so on, they are preparing, really, for a showdown with the American people. They're already talking about using for minor drug offenders the old Army camps that are being shut down. To pen them in. More animal farming. The animals are going to turn one day and bite. And even now, perhaps, as we are chatting, there is some young boy or girl who will grow up and overthrow this government. Because it has overthrown our old republic; it seems to be doing its best to overthrow our Bill of Rights and the Constitution ... -Gore Vidal, novelist, essayist, and cousin of Al Gore 1996 interview on "We the People" with Jerry Brown <www.wtp.org/radio/transcripts/tr960708.html>

2 1

dtml-in loop to capture records
by Paul Zwarts 20 Oct '00

20 Oct '00

Hi all, I have a number of simple forms that retrieve all occurences of a table into editable fields in a page. Each input tag is named: <table stuff> <dtml-in getList> ... <input type="hidden" name="item.fieldname:records:required" value="&dtml-fieldname;"> ... </dtml-in> </table> Note, only the primary key field is actually a hidden type input and the rest are text and so on. In test of the submit button, the dtml-sql method called is structured: <dtml-in item> update table set field2=<dtml-sqlvar field2 type=nb> where field1=<dtml-sqlvar field1 type=nb> &dtml-sql_delimiter; </dtml-in> and the conditions of the method are item:records. The intention is to submit in one go the entire list of occurences and update anything that has changed. You can do this with checkboxes valued on the primary key and other ways. The important thing is to leave something that you use as the key in the WHERE statement. Okay, this works fine, in MOST of my forms, but I have other forms where this doesnt work at all and I get errors saying that the ITEM is a bad request. I dont get it, what am I missing here that this works some places and in other places with almost identical syntax, it falls over. The form is correctly tagged, does the name attrib of the form tag have to do with the <dtml-in item>... doesnt seem to be but tried it. Im wondering if because the dtml-document is quite large with seperate subloops and forms that publish in a sequence of events that this doesnt work. Hopefully someone has insight I'm missing here? Cheers and thanks again, -- Paz Oratrix Development BV http://www.oratrix.com GRiNS SMIL Editor -

2 1

dtml document bug
by Dmitry Slusarchuk 20 Oct '00

20 Oct '00

I'm new to Zope development but I have already encountered such a problem: <dtml-var myimage> from dtml document generates the following: Zope Error Zope has encountered an error while publishing this resource. Error Type: AttributeError Error Value: __call__ this problem disappears when I do smth like <dtml-var myimage> from dtml method. what should I do? In addition I run Zope ver. 2.2.2 and Python 1.5.2 under Win98. Thanks to ev'body for a HELP!

1 0

Server Access Control
by Haonan Tan 20 Oct '00

20 Oct '00

How to enforce access control on client IP or host name in the same way that Apache .htaccess does it. Or are there better ways doing it in Zope? Many thanx. Haonan Tan

1 0

unauthorized error
by Kevin Worth 20 Oct '00

20 Oct '00

Upon upgrading from 2.1.3 to 2.2.2, I have run into a strange problem. I have a couple of custom products (developed here, but not by me, so I'm not sure of the specifics, but i can find them out. I can edit current instances of the product, but I cannot add new ones because give me an unauthorized error. No matter what username/password I provide, it fails. I import these from my previous installation (the 2.1.3 version) I assume this has to do with the change in the way security is handled in zope 2.2.x, but I haven't figured out how to fix it. A traceback looks like this: Traceback (innermost last): File H:\MSEWEB~1\lib\python\ZPublisher\Publish.py, line 222, in publish_module File H:\MSEWEB~1\lib\python\ZPublisher\Publish.py, line 187, in publish File H:\MSEWEB~1\lib\python\ZPublisher\Publish.py, line 171, in publish File H:\MSEWEB~1\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: index_html) File H:\MSEWEB~1\lib\python\ZPublisher\Publish.py, line 112, in call_object (Object: index_html) File H:\MSEWEB~1\lib\python\App\Factory.py, line 178, in index_html (Object: RoleManager) File H:\MSEWEB~1\lib\python\OFS\DTMLMethod.py, line 172, in __call__ (Object: Procedure_addForm) File H:\MSEWEB~1\lib\python\DocumentTemplate\DT_String.py, line 528, in __call__ (Object: Procedure_addForm) File H:\MSEWEB~1\lib\python\OFS\DTMLMethod.py, line 168, in __call__ (Object: standard_html_header) File H:\MSEWEB~1\lib\python\DocumentTemplate\DT_String.py, line 528, in __call__ (Object: standard_html_header) File H:\MSEWEB~1\lib\python\OFS\DTMLMethod.py, line 168, in __call__ (Object: breadcrumbs) File H:\MSEWEB~1\lib\python\DocumentTemplate\DT_String.py, line 528, in __call__ (Object: breadcrumbs) File H:\MSEWEB~1\lib\python\DocumentTemplate\DT_In.py, line 691, in renderwob (Object: rev) File H:\MSEWEB~1\lib\python\DocumentTemplate\DT_With.py, line 146, in render (Object: sequence-item) File H:\MSEWEB~1\lib\python\OFS\DTMLMethod.py, line 194, in validate (Object: Procedure_addForm) File H:\MSEWEB~1\lib\python\AccessControl\SecurityManager.py, line 139, in validate File H:\MSEWEB~1\lib\python\AccessControl\ZopeSecurityPolicy.py, line 159, in validate Unauthorized: id Any help would be appreciated. -- ----------------------------------------------- Kevin Worth <kworth(a)engin.umich.edu> Computer Systems Specialist II and Adjunct Lecturer Department of Materials Science and Engineering University of Michigan

1 0

IIS and PCGI
by Andy McKay 20 Oct '00

20 Oct '00

Im fiddling with IIS and PCGI, I've looked at (http://www.zope.org/Members/brianh/iis_howto) the docs and got the server to work correctly in that http://127.0.0.1/zope.pcgi is the same as http://127.0.0.1:8080/ However it doesnt seem to be carrying through the trailing path info (or / 's) for example http://127.0.0.1/zope.pcgi/manage brings up 404. Using IIS 5.0, Win2k, Zope 2.2.1. Anyone encountered this and know the solution? Thanks. -- Andy McKay, Developer. ActiveState.

1 1

Recursively creating folders in python
by Robert Joseph Roos 20 Oct '00

20 Oct '00

This is something I need to have done yesterday... <dtml-in> iterates over a list, and <dtml-with> adds namespaces, but how do I recursively enter INTO a folder, creating objects within that folder from *it's* point of view? Is this even possible in dtml, or do i need to use raw python? If so, do you have any hints about doing it in python? =Rob====== ====J===== =====Roos= And more and more, as I see all these prisons going up, and everybody being sent off to prison, with three strikes and so on, they are preparing, really, for a showdown with the American people. They're already talking about using for minor drug offenders the old Army camps that are being shut down. To pen them in. More animal farming. The animals are going to turn one day and bite. And even now, perhaps, as we are chatting, there is some young boy or girl who will grow up and overthrow this government. Because it has overthrown our old republic; it seems to be doing its best to overthrow our Bill of Rights and the Constitution ... -Gore Vidal, novelist, essayist, and cousin of Al Gore 1996 interview on "We the People" with Jerry Brown <www.wtp.org/radio/transcripts/tr960708.html>

1 0

RE: [Zope] dtml-sqlvar quote
by Farrell, Troy 20 Oct '00

20 Oct '00

It is not safe if you have malicious users. You will need to pass your <dtml-var name="search_field"> through a filter. This will help. A better example is a user taking advantage of an insert method: insert into data values (<dtml-var name="value_1">, <dtml-var name="value_2">, <dtml-var name="value_3">) where the user has found the Zsqlmethod by looking at http://yourzopehost/objectIds and calls it like this: http://yourzopehost/sqlADDUSER?value_3=randomvalue);SELECT%20*%20FROM%20secr etpasswordtable/ Fortunately, Zope responds with a "testing the sql method" form if you are authorized. Troy -----Original Message----- From: Mark Twiddy [mailto:vtwiddy@senet.com.au] Sent: Friday, October 20, 2000 3:22 AM To: zope(a)zope.org Subject: Re: [Zope] dtml-sqlvar quote Hi all thanks for the help. Just on that. Is it safe to do select * from data where <dtml-var search_field> like '%<dtml-var search_term> as search_term could contain '; drop table blah; ' or what ever. I thought by using <dtml-sqlvar > you could use untrusted values. Thanks again Mark On Fri, 20 Oct 2000, Tony McDonald wrote: > > > >Hi all > > > >How can i pass a string to a sql method that won't be quoted. > > > >i.e so i can do somthing like this > > > >..... > >group by foo,blah > >order by <dtml-sqlvar spam> > > > > > >thanks mark > > > > don't quote it? > > ... > order by <dtml-var spam> > > > I use this all the time for things like > > select * from data where <dtml-var search_field> like '%<dtml-var search_term>%' > > tone > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) > _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Problems with mysql and sql methode
by Jens Grewen 20 Oct '00

20 Oct '00

Hi, I have a problem with an SQL Methode with the this sql statement select PAYMENT.PYNAME, PAYMENT.PYPRICE from MERCHANTPAYMENT, PAYMENT where MERCHANTPAYMENT.MEID = 418 and MERCHANTPAYMENT.PYID = PAYMENT.PYID on the following tables: MERCHANTPAYMENT --------------------------------- MPID int(30) MEID int(30) PYID int(30) --------------------------------- PAYMENT --------------------------------- PYID int(30) PYNAME varchar(50) PYPRICE varchar(50) --------------------------------- the statement runs under MS ACCESS (link over myODBC) and I get the correct resut but under zope sql methode I get no result. (There was no data matching) Any ideas Jens Grewen

1 0