March 2000 - Zope - Zope lists

Re: [Zope] Zope 2.1.5 release and *security update*
by Chris Allen 20 Mar '00

20 Mar '00

Yeh, and now that ZSQLMethods don't work neither does GUF with MySQL - e.g., the following code fails: <dtml-in "sqlGetUserRoles(username=username)"> <dtml-call "REQUEST.set('ret', ret + ' ' + _['sequence-item'].rolename)"> </dtml-in> <dtml-return ret> With the error message: "You are not authorised to access 'rolename'" The method has a Proxy role with appropriate access to the MySQL method. It just doesn't seem able to access the results variable!? Regards, Chris "Graham Chiu" <anon_emouse(a)hotmail.com> wrote in message news:<Gl2o8NAvI$04EwL1(a)compkarori.com>... > In article <613145F79272D211914B0020AFF6401914DE7D(a)gandalf.digicool.com> > , Brian Lloyd <Brian(a)digicool.com> writes > > o It also came to our attention that the DTML code in > > ZSQLMethod objects was not subject to the same security > > constraints as the DTML code in DTMLMethods and DTML > > Documents. > > Hmm. This update has broken all my zsqlmethods I've tested so far. I've > reverting to 2.1.4. > > Eg when testing from the management interface: > > File D:\zope2\lib\python\Shared\DC\ZRDB\DA.py, line 459, in __call__ > (Object: sqlShowComment) > TypeError: too many arguments; expected 4, got 5 > > SQLSESSION has also died with this version release. > > > ------- > Regards, Graham Chiu > gchiu<at>compkarori.co.nz > http://www.compkarori.com/dynamo - The Homebuilt Dynamo > http://www.compkarori.com/dbase - The dBase bulletin >

2 1

restrict method to IPs
by Dyon Balding 20 Mar '00

20 Mar '00

i want to restrict a particular method of my product to a set of IPs. i was thinking of creating a user limited to those IPs, and assigning it a local role which corresponds to the particular method. is there a better way? thanks -d -- Adroit | Dyon Balding dyon(a)adroitnet.com.au Internet | http://www.adroitnet.com.au/ Solutions | work: +613 98888522, mobile: +61 0414992604

2 1

w3m and the management interface
by R. David Murray 20 Mar '00

20 Mar '00

There was a recent mention of using Lynx to access the management interface of Zope. I'd like to use w3m. It produces a more pleasing page given all those little spacer images Zope uses. Also, it automatically launches vi for me when I hit return on the edit screen's text input area, which is *way* cool <grin>. However, it doesn't seem to be handling the management interface correctly. If I descend into a management link, I get the 'view' panel for the link instead of the manage_main screen. Worse, I tried to 'rename' an index_html method, and it renamed the index_html in the *parent* folder! This is most weird. Anyone know what Zope could be emitting that w3m is not handling correctly? I'd guess redirects, but I'm surprised I end up in the view screen in that case... I'm currently running w3m beta-991203. Anyone know if whatever-it-is is fixed in a later version, assuming there is one? --RDM

2 2

zope-2.1.5 and zclass
by - 20 Mar '00

20 Mar '00

hi all, i d/l the 2.1.5 zope src, compiled, and got it running. however, on one machine, i got unauthorize error when i tried adding a zclass. the same error when i tried it with site summary,zphoto, and some other zclass based product. on another machine, i can add some zclass based object, but got a trace back on others. platform 1 and 2 rh6.1, zope-2.1.5 the first tarceback Traceback (innermost last): File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 179, in publish File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 165, in publish File /usr/local/Zope/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: index_html) File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 102, in call_object (Object: index_html) File /usr/local/Zope/lib/python/App/Factory.py, line 170, in index_html (Object: RoleManager) File /usr/local/Zope/lib/python/OFS/DTMLMethod.py, line 142, in __call__ (Object: Artikel_addForm) File /usr/local/Zope/lib/python/AccessControl/User.py, line 711, in verify_watermark Unauthorized: You are not authorized to access this resource. the second traceback AttributeError Sorry, a Zope error occurred. <!-- Traceback (innermost last): File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 179, in publish File /usr/local/Zope/lib/python/Zope/__init__.py, line 202, in zpublisher_exception_hook (Object: RoleManager) File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 165, in publish File /usr/local/Zope/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: Artikel_add) File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 102, in call_object (Object: Artikel_add) File /usr/local/Zope/lib/python/OFS/DTMLMethod.py, line 150, in __call__ (Object: Artikel_add) File /usr/local/Zope/lib/python/DocumentTemplate/DT_String.py, line 502, in __call__ (Object: Artikel_add) File /usr/local/Zope/lib/python/DocumentTemplate/DT_With.py, line 133, in render (Object: Artikel.createInObjectManager(REQUEST['id'], REQUEST)) File /usr/local/Zope/lib/python/DocumentTemplate/DT_Util.py, line 335, in eval (Object: Artikel.createInObjectManager(REQUEST['id'], REQUEST)) (Info: REQUEST) File <string>, line 0, in ? File /usr/local/Zope/lib/python/ZClasses/ZClass.py, line 461, in createInObjectManager (Object: Artikel) AttributeError: _getOb -- ------------------------------------------------------ http://www.kedai.com.my/kk Am I Evil?

2 2

zpasswd.py
by matt burleigh 20 Mar '00

20 Mar '00

I am trying to change the superuser password but I am getting this error. #python zpasswd.py Traceback (innermost last): File "zpasswd.py", line 90, in ? import sys, string, sha, binascii, whrandom, getopt, getpass, os ImportError: No module named sha Matt

3 3

could not access //localhost:8080/manage
by David Little 20 Mar '00

20 Mar '00

could not read //localhost:8080/manage (David Little, Sun Mar 19 11:55:55 2000) I have installed Zope 2.1.4 binary on SuSE linux & followed the instructions in the ZOPE-INSTALL-HOWTO. running ./start as root produces the expected output in KFM with http://localhost:8080 give the Welcome to Xope page click on quick start give the appropriate page click on management screen give an error message "Could not read localhost:8080/manage File dose not exist or access denied" same result logged in as user = me I have also installed as user = me and root with the same result. David Little Birmingham UK

3 2

Fwd: could not access //localhost:8080/manage
by David Little 20 Mar '00

20 Mar '00

---------- Forwarded Message ---------- Subject: Fwd: could not access //localhost:8080/manage Date: Sun, 19 Mar 2000 23:40:36 +0000 From: David Little <david(a)djlittle.free-online.co.uk> ---------- Forwarded Message ---------- Subject: could not access //localhost:8080/manage Date: Sun, 19 Mar 2000 23:37:37 +0000 From: David Little <david(a)djlittle.free-online.co.uk> could not read //localhost:8080/manage (David Little, Sun Mar 19 11:55:55 2000) I have installed Zope 2.1.4 binary on SuSE linux & followed the instructions in the ZOPE-INSTALL-HOWTO. running ./start as root produces the expected output in KFM with http://localhost:8080 give the Welcome to Xope page click on quick start give the appropriate page click on management screen give an error message "Could not read localhost:8080/manage File dose not exist or access denied" same result logged in as user = me I have also installed as user = me and root with the same result. David Little Birmingham UK ------------------------------------------------------- -------------------------------------------------------

2 1

Fwd: could not access //localhost:8080/manage
by David Little 19 Mar '00

19 Mar '00

---------- Forwarded Message ---------- Subject: could not access //localhost:8080/manage Date: Sun, 19 Mar 2000 23:37:37 +0000 From: David Little <david(a)djlittle.free-online.co.uk> could not read //localhost:8080/manage (David Little, Sun Mar 19 11:55:55 2000) I have installed Zope 2.1.4 binary on SuSE linux & followed the instructions in the ZOPE-INSTALL-HOWTO. running ./start as root produces the expected output in KFM with http://localhost:8080 give the Welcome to Xope page click on quick start give the appropriate page click on management screen give an error message "Could not read localhost:8080/manage File dose not exist or access denied" same result logged in as user = me I have also installed as user = me and root with the same result. David Little Birmingham UK -------------------------------------------------------

1 0

Can I send SESSION variables to SQL Method ?
by Richard Moon 19 Mar '00

19 Mar '00

I'm trying to build up some variables from more than one form which are to be inserted into an SQL table. THe problem is that as soon as I call the second form the existing FORM variables in the REQUEST are lost. I've tried saving them in a SESSION variable using SQL Session (I can save them OK) but then of course I have to get them back into something which an SQL Method can understand. I'm stuck at this point. Is there any way to pass the SESSION variable into an SQL Method ?? Or, if not, How do I get the values back from SESSION so that I can call an SQL Method ? Many thanks in advance Richard Richard Moon richard(a)dcs.co.uk

2 1

reall-time data to a Java client interface from ZOPE
by Kevin Howe 19 Mar '00

19 Mar '00

I've built an application with ZOPE and would like to create a Java interface to it (probably using jpython/wxWindows) Here's how it should work: When changes are made on the ZOPE site by a client, a notification is sent from ZOPE to the Java interface and displayed in real-time. The idea here is not to have a continually refreshing Java window, but a window which updates only when it receives a message from the site to do so. What I don't know is how to send the data from ZOPE to the Java client. Can anyone point me to any existing ZOPE Products/Projects/How-To's which are similar to what I've described, or perhaps point me in the right direction? Kevin Howe Performance.net Strategic Internet Solutions http://www.performance-net.com

1 0