April 2000 - Zope - Zope lists

ZSQL Security Restrictions in 2.1.6
by Andrew Kenneth Milton 27 Apr '00

27 Apr '00

Ok I've got a python product that uses 'embedded' SQL Methods, and I have them inside a Portal (although I don't think it has anything to do with PTK per se). Under 2.1.4 it all works flawlessly. Under 2.1.6 the SQL doesn't seem to be called at all. I have explicitly added the sql methods into __ac_permissions__ , however, that doesn't seem to have done the trick either. The strange thing is that SQL with simple SELECTS work fine. It's UPDATE that doesn't work. This is using the MySQL DA. I assume this has something to do with the tightening of ZSQL methods under 2.1.6. The question is, what am I required to do under 2.1.6 to get this to work? -- Totally Holistic Enterprises Internet| P:+61 7 3870 0066 | Andrew Milton The Internet (Aust) Pty Ltd | F:+61 7 3870 4477 | ACN: 082 081 472 | M:+61 416 022 411 | Carpe Daemon PO Box 837 Indooroopilly QLD 4068 |akm(a)theinternet.com.au|

1 0

Re: [Zope] Unanswered questions...
by Chris McDonough 27 Apr '00

27 Apr '00

Andrew Williams wrote: > Thanks for letting me know that; Is this reply any better? > I have adjusted some settings in Visto. > > Andrew Yes... -- Chris McDonough Digital Creations Publishers of Zope - http://www.zope.org

1 0

Re: [Zope] Simple form problem (again)
by Andrew Williams 27 Apr '00

27 Apr '00

I am doing something similar with the site I am working on. This is more of an HTML thing more than a Zope thing. Here is what I would do (untested): <input type="button" value="Edit" name="edit" onclick="javascript:location.url='/your/url/here/index_html? <dtml-var id>'&editrec=1"> <input type="button" value="Copy" name="copy" onclick="javascript:location.url='/your/url/here/index_html? <dtml-var id>'&copyrec=1"> <input type="button" value="Delete" name="delete" onclick="javascript:location.url='/your/url/here/index_html? <dtml-var id>'&deleterec=1"> Then in your method/document which handles the form, put: <dtml-if editrec> ...stuff... <dtml-elif deleterec> ...stuff... <dtml-elif copyrec> ...stuff... </dtml-if> The only warning I have is that I'm not sure on the "javascript:location.url" part. I'm at home today and haven't copied my stuff from zip disk to the home pc. Andrew -----Original Message----- From: Geoff Gardiner ggardiner(a)synomics.com Sent: Thu, 27 Apr 2000 13:45:00 +0100 To: zope(a)zope.org Subject: [Zope] Simple form problem (again) Sorry to return to the simple multi-button problem, sorry, sorry; but I just can't get it to work in Zope. I have a table whose rows I want to copy or edit or delete, so I put 3 buttons on each row. The buttons are all of type 'submit', the 3 have names 'copy', 'edit' and 'del', and all the buttons on a row have a unique value that references the row. However, when any button is pressed, ALL the buttons are valid according to the REQUEST, in three dictionaries 'copy', 'edit' and 'del' (and there's no 'submit' entry). And I can't get hold of the unique value of any of them - I just get the text I'm displaying on the button, which is non-unique. All details below. This seems to contravene the HTML4 spec, and what's been discussed here recently, since I would expect a single valid name / value pair. So I suppose I'm doing something wrong again, but I would very much like somebody to point me in the right direction. Thank you in advance, Geoff Gardiner Platform -------- Win NT4 SP5 IE5 Zope 2.1.6 DTML source ----------- <form action="testform" method="POST"> ... <dtml-with "Data"> <dtml-in "objectValues()" sort=item_lc> <dtml-if "item<>''"> <tr> <td><dtml-var "item"></td> <td><dtml-var "definition"></td> <td><dtml-var "notes"></td> <td align="center"><BUTTON name="copy" value="<dtml- var id>" type="submit">Copy</BUTTON></td> <td align="center"><BUTTON name="edit" value="<dtml- var id>" type="submit">Edit</BUTTON></td> <td align="center"><BUTTON name="del" value="<dtml- var id>" type="submit">Del</BUTTON></td> </tr> </dtml-if> </dtml-in> </dtml-with> ... </form> Renders as ---------- Item Definition Notes Copy Edit Del A1 A defintion2 Notes2 of it <Copy> <Edit> <Del> B2 A defi1ntion Notes o1f it <Copy> <Edit> <Del> C3 Another def Notes of it <Copy> <Edit> <Del> Source viewed as ---------------- ... <tr> <td>B2</td> <td>A defi1ntion</td> <td>Notes o1f it</td> <td align="center"><BUTTON name="copy" value="abcdef1" type="submit">Copy</BUTTON></td> <td align="center"><BUTTON name="edit" value="abcdef1" type="submit">Edit</BUTTON></td> <td align="center"><BUTTON name="del" value="abcdef1" type="submit">Del</BUTTON></td> </tr> ... Posted on testform, using <dtml-var REQUEST> shows REQUEST.form as ------------------------------------------------------------ ------ form del ['Del', 'Del', 'Del'] copy ['Copy', 'Copy', 'Copy'] edit ['Edit', 'Edit', 'Edit'] _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) __________________________________________________________________________ Visit http://www.visto.com/info, your free web-based communications center. Visto.com. Life on the Dot.

1 0

Re: [Zope] Simple form problem (again)
by Andrew Williams 27 Apr '00

27 Apr '00

oops... hit that stupid send button to quick. If you use the <input type=button...> and javascript to send your info, you won't need the <form></form> Andrew -----Original Message----- From: Geoff Gardiner ggardiner(a)synomics.com Sent: Thu, 27 Apr 2000 13:45:00 +0100 To: zope(a)zope.org Subject: [Zope] Simple form problem (again) Sorry to return to the simple multi-button problem, sorry, sorry; but I just can't get it to work in Zope. __________________________________________________________________________ Visit http://www.visto.com/info, your free web-based communications center. Visto.com. Life on the Dot.

1 0

Simple form problem (again)
by Geoff Gardiner 27 Apr '00

27 Apr '00

Sorry to return to the simple multi-button problem, sorry, sorry; but I just can't get it to work in Zope. I have a table whose rows I want to copy or edit or delete, so I put 3 buttons on each row. The buttons are all of type 'submit', the 3 have names 'copy', 'edit' and 'del', and all the buttons on a row have a unique value that references the row. However, when any button is pressed, ALL the buttons are valid according to the REQUEST, in three dictionaries 'copy', 'edit' and 'del' (and there's no 'submit' entry). And I can't get hold of the unique value of any of them - I just get the text I'm displaying on the button, which is non-unique. All details below. This seems to contravene the HTML4 spec, and what's been discussed here recently, since I would expect a single valid name / value pair. So I suppose I'm doing something wrong again, but I would very much like somebody to point me in the right direction. Thank you in advance, Geoff Gardiner Platform -------- Win NT4 SP5 IE5 Zope 2.1.6 DTML source ----------- <form action="testform" method="POST"> ... <dtml-with "Data"> <dtml-in "objectValues()" sort=item_lc> <dtml-if "item<>''"> <tr> <td><dtml-var "item"></td> <td><dtml-var "definition"></td> <td><dtml-var "notes"></td> <td align="center"><BUTTON name="copy" value="<dtml-var id>" type="submit">Copy</BUTTON></td> <td align="center"><BUTTON name="edit" value="<dtml-var id>" type="submit">Edit</BUTTON></td> <td align="center"><BUTTON name="del" value="<dtml-var id>" type="submit">Del</BUTTON></td> </tr> </dtml-if> </dtml-in> </dtml-with> ... </form> Renders as ---------- Item Definition Notes Copy Edit Del A1 A defintion2 Notes2 of it <Copy> <Edit> <Del> B2 A defi1ntion Notes o1f it <Copy> <Edit> <Del> C3 Another def Notes of it <Copy> <Edit> <Del> Source viewed as ---------------- ... <tr> <td>B2</td> <td>A defi1ntion</td> <td>Notes o1f it</td> <td align="center"><BUTTON name="copy" value="abcdef1" type="submit">Copy</BUTTON></td> <td align="center"><BUTTON name="edit" value="abcdef1" type="submit">Edit</BUTTON></td> <td align="center"><BUTTON name="del" value="abcdef1" type="submit">Del</BUTTON></td> </tr> ... Posted on testform, using <dtml-var REQUEST> shows REQUEST.form as ------------------------------------------------------------------ form del ['Del', 'Del', 'Del'] copy ['Copy', 'Copy', 'Copy'] edit ['Edit', 'Edit', 'Edit']

2 2

Re: [Zope] Unanswered questions...
by Andrew Williams 27 Apr '00

27 Apr '00

I've got the site bookmarked, and use it all the time. :) Andrew -----Original Message----- From: Chris Withers chrisw(a)nipltd.com Sent: Thu, 27 Apr 2000 10:05:57 +0100 To: ajwms(a)visto.com CC: zope(a)zope.org Subject: Re: [Zope] Unanswered questions... > 1. You named it: It was answered a thousand times. Please search the > mailing archives, before posting a message. <plug ;-)> There are some really good archives at: http://zope.nipltd.com/public/lists.html </plug> Chris _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) __________________________________________________________________________ Visit http://www.visto.com/info, your free web-based communications center. Visto.com. Life on the Dot.

1 0

Re: [Zope] Unanswered questions...
by Andrew Williams 27 Apr '00

27 Apr '00

Well... remember I work for a corporation. Linux hasn't been officially "sanctioned" for pc use, and I am not willing (yet) to fight the battle to get zope running on our unix boxes. Also, a lot of what I'm doing currently is rewriting a site I did in cgi scripts with IIS serving up the pages. I am hoping to transisition the old site to zope with a minimal amount of pain to the users. I agree with you (and everyone else) that Apache is a much better solution. I figure on fighting one battle at a time! :) Thanks, Andrew -----Original Message----- From: Stephan Richter srichter(a)cbu.edu Sent: Thu, 27 Apr 2000 03:13:56 -0500 To: ajwms(a)visto.com Subject: Re: [Zope] Unanswered questions... I checked your questions as well, but do not have the answers. The tree tag issue, I have no clue about. You may want to put that issue in the bug collector. Provide sample code and exact steps, how you generated the error. I agree with Chris, that you should use Linux or another UNIX flavor, since most people here have experience with it. IIS costs money, so all the non-professional people don't get it. The rest is smart enough to know that Apache is so much better and more reliable. Why dod you need to run Zope with IIS? Most of the advanced features start to be supported by ZServer (aka Medusa). Regards, Stephan -- Stephan Richter - (901) 573-3308 - srichter(a)cbu.edu CBU - Physics & Chemistry; Framework Web - Web Design & Development PGP Key: 735E C61E 5C64 F430 4F9C 798E DCA2 07E3 E42B 5391 __________________________________________________________________________ Visit http://www.visto.com/info, your free web-based communications center. Visto.com. Life on the Dot.

1 0

Re: [Zope] Unanswered questions...
by Andrew Williams 27 Apr '00

27 Apr '00

>Zope may not be for you if you're relying solely on the >mail list to get >questions answered and you need gunaranteed turnaround >time on issues. >There is paid support available. Believe me, I'm not relying solely on the mailing list; as a matter of fact, the mailing list is my "last resort" for questions. I always check the how-to, FAQ's, archives, docs, etc. before posting questions here. >For better or worse, your >mailer doesn't insert newlines at a sane column in the >messages you're >sending to the list so everybody using communicator needs >to scroll >horizontally for each of your paragraphs. Believe it or >not, that can >make a difference. It's a pain and most folks here are >pretty pressed >for time. Thanks for letting me know that; Is this reply any better? I have adjusted some settings in Visto. Andrew __________________________________________________________________________ Visit http://www.visto.com/info, your free web-based communications center. Visto.com. Life on the Dot.

1 0

Authenticated Username in manage_tabs
by Tony McDonald 27 Apr '00

27 Apr '00

Hi all, I manage a lot of sites with various usernames, and I forget who I am sometimes ;) I thought that this might help. Edit lib/python/App/manage_tabs.dtml and change this (it's near the top of the file...) <tr> <td bgcolor="#003366" rowspan="5" width="10%" valign="bottom" align="left"><font face="Verdana, Arial, Helvetica" color="#ffffff" size="1">  <strong>Zope </strong></font><img src="<dtml-var SCRIPT_NAME>/p_/sp" width="2" height="1"> </td> <td bgcolor="#003366" colspan="<dtml-var "4 * (n_ + 1)">"><img src="<dtml-var SCRIPT_NAME>/p_/sp" width="1" height="5"></td> </tr> to this; <tr> <td bgcolor="#003366" rowspan="5" width="10%" valign="bottom" align="left"><font face="Verdana, Arial, Helvetica" color="#ffffff" size="1">  <strong><dtml-var "_.str(REQUEST['AUTHENTICATED_USER'])"> </strong></font><img src="<dtml-var SCRIPT_NAME>/p_/sp" width="2" height="1"> </td> <td bgcolor="#003366" colspan="<dtml-var "4 * (n_ + 1)">"><img src="<dtml-var SCRIPT_NAME>/p_/sp" width="1" height="5"></td> </tr> restart your server and there you go... I doubt it's got any hairiness in it.... hth tone. ------ Dr Tony McDonald, FMCC, Networked Learning Environments Project http://nle.ncl.ac.uk/ The Medical School, Newcastle University Tel: +44 191 222 5888 Fingerprint: 3450 876D FA41 B926 D3DD F8C3 F2D0 C3B9 8B38 18A2

1 0

Re: [Zope] Unanswered questions...
by Chris McDonough 27 Apr '00

27 Apr '00

Andrew, Sorry you've not got answers... I've went back and looked at your q's. The two that weren't replied to (AFAICT) I don't know the answers to (one about IIS and one about the tree tag). Personally, I know nothing about Zope/IIS interaction, and little about the tree tag beyond what's in the docs. Zope may not be for you if you're relying solely on the mail list to get questions answered and you need gunaranteed turnaround time on issues. There is paid support available. One tip to get better response on this list though - there are a lot of Linux/UNIX users here, and for the most part a lot of them use Netscape Communicator to receive and send email. For better or worse, your mailer doesn't insert newlines at a sane column in the messages you're sending to the list so everybody using communicator needs to scroll horizontally for each of your paragraphs. Believe it or not, that can make a difference. It's a pain and most folks here are pretty pressed for time. Maybe try to set your mailer to insert newlines or use a different mailer. I know it sounds stupid, but I bet some people didn't read your messages because it's sort of painful. Andrew Williams wrote: > > I have been working with Zope for the past month, and have developed a love/hate relationship with it. I definitely think there is a _lot_ of potential with this application; I am even trying to "sneak" it in the back door of the company I work for. > > warning... rant beginning > > Unfortunately, I have posted some questions to this mailing list, and have not received an answer; not even a "read the manual" (as if there is a good one... :]). Now, I can understand not getting a question answered if it has been covered many other times before; however, I would think such a question would warrant a response similar to "check the mail archives". I find it hard to sanction Zope to my management when I can't get any responses to questions I ask here! > > rant ending... > > Andrew > > __________________________________________________________________________ > Visit http://www.visto.com/info, your free web-based communications center. > Visto.com. Life on the Dot. > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) -- Chris McDonough Digital Creations Publishers of Zope - http://www.zope.org

2 1