March 2000 - Zope - Zope lists

Version bug?
by Christopher J. Kucera 19 Mar '00

19 Mar '00

Greetings! I think I may have found a bug in the way Zope handles versions. To recreate: 1) Set up a version, say, "TestVersion." 2) Rename the version to something else, say, "NewTestVersion." 3) This breaks the following: * When you enter the version, the "you are working in" line displays "TestVersion" * The "Version Management" Control Panel link shows TestVersion as well (this breaks the link, too) * Any file modified by the version shows up as TestVersion, too. This happens on: Zope version: Zope 2.1.4 (binary release, python 1.5.2, linux2-x86) Is this a bug? -CJ

2 1

Zope 2.1.5 release and *security update*
by Brian Lloyd 19 Mar '00

19 Mar '00

Hi all, Zope 2.1.5 has been released - you can download it from the usual place on Zope.org: http://www.zope.org/Products/Zope/2.1.5/ This release fixes two fairly important security issues that have recently come to our attention: o It was possible for a Zope user with a fair amount of Zope zen and permission to create DTML documents and Folders to circumvent the security machinery within DTML in certain situations, possibly giving the user the ability to use resources that he wouldn't otherwise be able to access via DTML. o It also came to our attention that the DTML code in ZSQLMethod objects was not subject to the same security constraints as the DTML code in DTMLMethods and DTML Documents. The 2.1.5 release fixes both of these issues and we highly recommend that you upgrade, especially if you use Zope for sites that allow untrusted users to create Folders and DTML Documents or DTML Methods. The release also includes a number of recent bug fixes, including the problem in TimeStamp objects that caused the bobobase_modification_time() of Zope objects to appear to be a day behind. Note that this release contains two binary changes, so those running Zope from the source release will need to rebuild the Zope extensions after applying the update. The fixes are also available in CVS and binaries will need to be rebuilt after the update for those of you using CVS. Note that with the 2.1.5 release we will also be releasing "diff" updates as .tgz files that will let you easily upgrade an existing 2.1.x site. These updates are available for those currently using the 2.1.x source release or the 2.1.x binary releases for either solaris or linux (diff releases are not available for win32 for now). To apply a differential update to your site: o download the appropriate .tgz file from zope.org o shutdown your Zope process o copy the .tgz to your Zope directory and extract it o run w_pcgi or wo_pcgi *if you are not using a binary release* o restart your process Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

5 5

TinyTable, Squishdot install?
by Ignacio Valdes 19 Mar '00

19 Mar '00

Hello all, I think I have Zope running. I can get to the localhost:8080/manage page and go into the Control Panel and External Methods. I've tried to install TinyTable and Squishdot by untarring them in /var/zope with subdirectories preserved. No go -- they don't seem to show up in External Methods as they say they should by the Squishdot Install guide. Can anyone help? -- IV

2 3

Re: Looking up object instances..
by Marius Kjeldahl 19 Mar '00

19 Mar '00

I found a soluton that worked: <dtml-let mytest="REQUEST.id"> <dtml-with "_.getattr(PARENTS[0].products.productdb, mytest)"> Marius Kjeldahl

1 0

Re: [Zope] What if you can use Zope on development server only?
by Anthony Thompson 19 Mar '00

19 Mar '00

>I originally tried running Zope at pair.com, where I didn't have root >access >to the box. I *did* have the ability to run CGIs and telnet in, however. >You >can get Zope running in such a scenario. And, if they're running Apache >with >mod_rewrite, you can even make Zope serve up your site's root. Kevin, thanks for the information! I do have CGI and telnet ability with this host, but I'm surprised that's sufficient to run Zope with. I thought Zope would require a tighter integration with the web server (e.g., a mod_zope or something that needs to be compiled in so that Zope can catch special Zope-intended requests), and that I'd need root to install it. Do I have a misunderstanding of how Zope relates to the web server? Is simple CGI access really enough to install and run Zope? I was basing my understanding on the architecture documentation at http://www.zope.org/ZopeArchitecture and http://classic.zope.org:8080/Information/Components. > One note though: many ISPs don't want you to run a long-lived process. >If that's their policy, then you'll run into trouble that way. Hmm... interesting. I'll have to look into that; thanks for the heads up. > As far as running separate development and production servers, I >believe >you can get something going. I think someone made a Product that will >mirror >your Zope database in separate files. You'll lose all of Zope's cool >dynamic >ability, but you'll at least be able to take advantage of the content >management. Yep... that's the tradeoff I figured I would have to accept. I was even thinking I'd have to possibly write my own mirroring script, but wanted to see if there was a better way first. Do you remember anything else about that product which might help me do a web search for it better (e.g., it definitely used the word "mirror", used the word synchronize a lot, etc.). thanks, Anthony ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

3 2

Property Sheet access from Python Products
by Robert Roy 19 Mar '00

19 Mar '00

I am creating a product in Python and I want to use property sheets. I am able to add sheets and add properties to those sheets. However how I have to access the property sheets differently than if I was accessing property sheets on a ZClass programmatically. I suspect that I am perhaps not using the right mixin classes. For instance, I have a property sheet 'Private' with an attribute 'prop1' If I create this in a ZClass, I can use <dtml-var prop1> to access my attribute. in my class I have to do the following <dtml-var "propertysheets.get('Private').getProperty('prop1')"><p> likewise in Python code I must access the attribute using self.propertysheets.get('Private').getProperty('prop1') where in a ZClass I could do propertysheets.Private.prop1 My class declaration is as follows mixins: class base(ObjectManager,PropertyManager, Acquisition.Implicit, Persistence.Persistent, RoleManager): Am I missing a mixin somewhere? Or do I have to access the attributes differently from a Python Class? Thanks Bob

1 0

Public available DTML Source of zope.org?????
by Oliver Andrich 19 Mar '00

19 Mar '00

Hi, may be some people might remeber my question concerning the user folder question. Well, I haven't got any answer yet. But I found a source a knowledge that would give me all the information. Basically I don't need much more then the register DTML method of zope.org. Is the DTML source for the user registration and user updates available for download somewhere? When I hit the view "DTML Source" link I get a "Not Found" error. Everything else on Zope.org can be inspected this way, but why not these pages? This can't be such a security problem at all. Or am I just to dumb to discover the trick. Thanks for any hint. Best regards, Oliver Andrich

2 1

Find object in a directory question
by Chris Niekel 19 Mar '00

19 Mar '00

Hi, I've created a ZClass 'CLink', which contains a URL, title and such things. In my dtml-pages, I can do <dtml-var slashdot>, and the slashdot-clink object will insert the <a href=...></a> stuff for me. I've got this working using the Renderable class. I've planned to put all CLink objects in the /links folder so I can automatically create 'bookmarks' out of the links I reference to. I also want to be able to categorize the links into subfolders, so I want to have a links.sports.ski.resorts directory with ski resorts, and a links.news.nerdish folder for nerd-related news. I can use <dtml-var links.news.nerdish.slashdot> to refer to the slashdot object that way. However, I want to easily change my categories, without changing all <dtml-var ...> that reference object in the categories. So I figured, I'd make it <dtml-var links.find('slashdot')>. This should one day be the same as <dtml-var links.news.slashdot> and the next day the same as <dtml-var links.news.nerdish.slashdot>. With my external method (which only looks in the current folder so far), I can't get this to work. Any ideas? Would the same be easier or simpler using a ZCatalog? Refering to a link should not be too much typing. As an extra question: is it possible to refer to an object in multiple places, like softlinks (or hardlinks) in unix? Suppose I have a folder with 'My Frequent internet-visits', and 'News', they could both contain the same CLink. Is that possible in zope? Well, hope I made anysense.. Thanks, Chris Niekel

1 0

problems compiling ZMySQLDA
by Daniel Weber 19 Mar '00

19 Mar '00

This is product downloaded form zope.org. Details: Python 1.5.2 MySQL 3.22.32.1 Redhat 6.1 system. All development libraries/includes installed (I think). I run the make -f Makefile.pre.in boot, then make and get the following errors: gcc -fPIC -I/usr/include/mysql -g -O2 -I/usr/include/python1.5 -I/usr/include/python1.5 -DHAVE_CONFIG_H -c ./MySQLmodule.c ./MySQLmodule.c: In function `pythonify_row': ./MySQLmodule.c:238: warning: assignment from incompatible pointer type ./MySQLmodule.c: In function `pythonify_res_fields': ./MySQLmodule.c:384: invalid lvalue in unary `&' ./MySQLmodule.c: In function `STH_fetchdict': ./MySQLmodule.c:1125: invalid lvalue in unary `&' ./MySQLmodule.c:1147: invalid lvalue in unary `&' make: *** [MySQLmodule.o] Error 1 As far as I can see, I'm not getting any errors about missing includes and it's not getting to the link step, so I don't know if I'm missing any libraries. mysql was installed via rpm. Any pointers or help appreciated....

3 2

Looking up object instances in a folder
by Marius Kjeldahl 19 Mar '00

19 Mar '00

I have some instances of my own ZClass in a folder, and I can iterate over them using: <dtml-in "somefolder.subfolder.objectValues()"> <dtml-var title> </dtml> The instances are stored using auto generated ids (simple numbers). In addition to being able to iterate over the instances in the folder, I also need to access an instance directly by using its id which is passed in the REQUEST object, but so far I have been unsuccessful. What I am trying to do is something like: <dtml-in "somefolder.subfolder.getInstance(REQUEST.id)"> <dtml-var title> </dtml-in> but I have not been able to get access to just the one instance (but iterating works fine as mentioned before). Could somebody with a clue give me a hint? Thanks in advance, Marius Kjeldahl

1 0