July 2000 - Zope - Zope lists

What's wrong with this code?
by Luke Tymowski 05 Jul '00

05 Jul '00

Hello, When: <dtml-unless renderedheader> <dtml-call "REQUEST.set('renderedheader',1)"> blah blah </dtml-unless> Is put in the standard_html_header object it behaves correctly: I want my standard header and footer objects to render when pages containing them are published. I don't want my standard header and footer objects to render when When that same code is put in the standard_html_footer object it never is published. If I preview just the standard_html_header it works. If I preview just the standard_html_footer it works. If I create a simple page like: <dtml-var standard_html_header> <p>This is some text.</p> <dtml-var standard_html_footer> The footer doesn't get published. I'm sure it's something obvious, but I've spent a few hours going through everything I can find and haven't got anywhere. thanks, Luke

3 2

RE: [Zope] Authentication, Anonymous and Public
by Brian Lloyd 05 Jul '00

05 Jul '00

> > A user that does not log in, i.e. a user you know nothing of, > > gets the "Anonymous" role automatically (at least with "acl_users"). > > A logged in user may not get the "Anonymous" role. > > > > This does not provide additional security, because this > > user may simply shut down his browser and access the page again > > as anonymous user. > > On the other hand, it may result in surprises: suddenly (after > > a log on) I can no longer do things that I was able to do > > before the log on. > > > > I think, this should be changed. > > I agree, and I've said so, many times before ;-) > > Chris Guys - I'm looking at the security code, and the intent is that if 'Anonymous' is in the roles required to access an object, the user is allowed (even though he may not have been given the 'Anonymous' role explicitly). This appears to be the case both in 2.1.x and the new 2.2.x security policy - I've been trying to replicate the problem you are referring to but I must be missing something. My test case was: o create a user 'test', giving him only 'test_role' o create a dtml document object with default security (anonymous has 'View' permission) o give users with 'test_role' 'View mgmt screens' on the dtml document. o in a new browser, visit doc/manage to force login as 'test' with 'test_role' o try to view the doc normally ('View' is only given to anonymous), which works as expected Can you give me a scenario that shows the problem so that I can reproduce it? (walk me through what objects to create, what permissions to give, how to try to access them). This should be done with standard built-in User/UserFolders if possible. Thanks! Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

2 1

Database Adaptors and security and query()
by Cary O'Brien 05 Jul '00

05 Jul '00

Couple of things came up trying to use the current PostgreSQL da and zope 2.2b3. I am working on a ZClass that lets you define and create tables in a database, so I needed to execute some generated sql [1]. 1) I couldn't access the query() method of the connection unless I added our friend __allow_access_to_unprotected_subobjects__=1 to the DB class defined in ZPyGreSQLDA/db.py Is this ok? 2) Re calling query(). The query method only returns a tuple used to create a Results object (which dtml-in would like). So I added a method to return a real live Results object def query_result(self,query_string, max_rows=9999999): return Results(self.query(query_string, max_rows)) Which does what I want. Is this ok? Is this a good idea? 3) I went down several wrong paths until I realized that it seems as if dtml-methods can't return anything but strings. Is this right? 4) Grumble. I had a lot of trouble with the interaction between Results returning data as tuples, and dtml-in handling tuples of 2 differently than everything else. Create a table with 3 columns, everything works. Create a table with two columns, things dont work. Is there access to list() anywhere? -- cary [1] I know, I can hear you saying "Use ZSQLMethods" but 1) You can't subclass them, and b) You can't put one inside a ZClass without a dummy connection.

1 0

Customizing error template?????????????
by Vikas Mahajan 05 Jul '00

05 Jul '00

hello everbody I want to customize the error page in my application and almost succeeded in it by changing the standard_error_messages template. But the problem is that i am not able to get rid of the python errors which are generated by default in the error template. Does anybody know how to avoid them . with regards Vikas

1 0

oracle8 and cursors
by Andy Pahne 05 Jul '00

05 Jul '00

hi, there, i've been using oracle8 with zope succesfully for a while. now my database programmer came up with a solution for a certain problem, which "we cannot solve with an easy select statement". he told me, that we are gonna have to use db-cursors instead. i must admit that i have heard the therm cursor before, but i am not sure how to use them with zsql-methods. my question is fairly simple: is there any difference in handling cursors with zsql-methods in comparison to handling 'simple' select-statements? can i use <dtml-in "..."</dtml-in> to iterate over the result sets? I read DCOracle.txt which comes along with DCOracle-Product, but I do not understand it very well. Any recommended readings? Andy Pahne ap@net22 net22 GmbH Bad Meinberger Strasse 1 32760 Detmold Tel.: 05231 - 580 640

2 1

Comparing two dates WITH time?
by Nils Jeppe 05 Jul '00

05 Jul '00

Hello All, I need help again..... How do I compare two dates that include full timestamps? If I try date_updated <= ZopeTime() it works only for dates that do not include times... as soon as you have a time in the date_updated field, If the date_updated contains only a date (200/07/04 for example) it works flawlessly. What am I doing wrong? (Note that if I set the date_updated to yesterday with a time, it works also. is this a bug, or what? My logic would tell me that 2000/07/04 12:00:00 GMT+1 is smaller than 2000/07/04 11:59:00 GMT+1). Please someone tell me what's going on, I am beinning to feel that I am either asking too stupid questions, or I have problems no-one has any clue about. I am not sure what'd frighten me more... ;-) Best wishes, Nils

2 2

How to undo the last transaction from a DTML Method ?
by Frederic Quin 05 Jul '00

05 Jul '00

Hi all, I would like to know how to undo the last transaction from a DTML Method and I have no idea of how I can do that. Help ! Thanks Frederic

1 0

PTK returning th error Invalid date-time string
by Rajil Saraswat 05 Jul '00

05 Jul '00

finally i managed to run PTK. but when i try to add members. The error given is Error Type:Invalid Date-Time String Error value: 2000/07/05 15:57:44.3085 Please help :-(

1 0

unable to use Zope PTK
by Rajil Saraswat 05 Jul '00

05 Jul '00

hi, this is a newbie trying to get zope PTK to work. I installed PTK on a win2k system. The installation was fine, can see the portal in the available objects lists. but when i use the object ortal, the wizard start up but when i am completing it (after the login creation step)it gives the error Error Type: AttributeError Error Value: 'None' object has no attribute 'setMemberProperties' what does it mean. any solutions. and why are there two products listed at PTK page. thanx

1 0

Problems and ponderings
by Gerhard Hoogterp 05 Jul '00

05 Jul '00

Hi, In my site I have folder with subfolders and I would like to generate a menu to go to those subfolders. What I have now is: <dtml-in "objectValues()"> <dtml-var sequence-key> </dtml-in> which gives emptynes.. I've tried all kinds of combinations, tricks from the tips and howto's, but nothing. Actually I start thinking that zope is not for me. Yes, I'm a programmer, but here and now creating websites. I want to create a website, not publish objects. An abstactionlayer between zope and python would be a good thing. (and don't tell me DTML IS an abstractionlayer. It confuses the matter, it doesn't simplify. Including perl straight into the pages would be simpler. Not to mention that Python is actually decently documented..) Anyhow, I'm not giving up yet let's check my mental image: A zope site is an tree of objects, objects inherrit from parents. (how do I check if a parent exists?) so there should be a way to refere to the parent (PARENTS[]) to refer to the current object (?). I guess there should also be a way to refer to objects in an other branch of the tree (I would like to have a tools folder which is also searched when asking for a DTML-methode) Is my mental image to limited? Does it need adjusting? Gerhard

1 0