January 2001 - Zope - Zope lists

Re: Zope Inheritance with ZClasse
by Martijn Pieters 29 Jan '01

29 Jan '01

Hi Ernesto, The best place to ask these questsions is on the zope(a)zope.org mailinglist. More information about the mailinglists can be found at: http://www.zope.org/Resources/MailingLists/ I forwarded your mail to the list. Hope this helps! On Sun, Jan 28, 2001 at 08:14:18AM -0500, Ernesto Revilla wrote: > Dear Developers of Zope, > > I'm trying to model an ERP system using ZClasses. As I have the model > running under MS-Access, I know exactly how the model has to be. It's > natural form is very, very object-oriented and requires inheritance. > > I made a simple example model using ZClasses, but the environment does > not work how I did expect. Example: > > I have orders, delivery notes and invoices. Meanwhile the three are > based on the same base ZClass (say OrdDelInv), orders and delivery notes > are based also on a common ZClass (say OrdDel) based on OrdDelInv. > Defining a General Property Sheet for each class, and designing the > properties needed for each class, and defining a General view for the > General Property Sheel in the base classes (OrdDel and OrdDelInv), not > the bottom-level (Orders and Delivery Notes), the environment should me > offer a 'General' View for each Order or Delivery Note I create. > > So, > > 1. views are not inherited, from one base class to a sub class? > > 2. Property Sheets do not mix up the properties defined in each class of > the class hierarchy, making able to edit them all in the same view? > > Best regards, Erny > > -- Martijn Pieters | Software Engineer mailto:mj@digicool.com | Digital Creations http://www.digicool.com/ | Creators of Zope http://www.zope.org/ ---------------------------------------------

2 1

Python Methods can't "construct literal dictionaries"?
by Fred Yankowski 29 Jan '01

29 Jan '01

I'm trying to create a Python Method, using PythonMethod 0-1-7, that validates a set of form values before updating a database. I planned to return any/all errors as a dictionary keyed by the errant field name. But statements like this in my Python Method input_errors = {} input_errors['password'] = "password must not be empty" ... return input_errors result in the following error when I try to save the change to the code: Error Type: Python Method Error Error Value: Forbidden operation STORE_SUBSCR at line 3 What's up with that? I can't create dictionaries in Python Methods? I must be missing something. Is there some way around this? -- Fred Yankowski fred(a)OntoSys.com tel: +1.630.879.1312 Principal Consultant www.OntoSys.com fax: +1.630.879.1370 OntoSys, Inc 38W242 Deerpath Rd, Batavia, IL 60510, USA

2 1

How do I get a uniqueValuesFor() a subset of the catalog?
by Philip Aylesworth 28 Jan '01

28 Jan '01

I am trying to get a list of unique values for one particular meta_type. The uniqueValuesFor() works great but is there a way to get unique values for a subset of data such as meta_type='car' then uniqueValuesFor('make') would list the makes of cars but not of toasters? I was thinking that I could use multiple cataloges but that seems like a real pain. Phil. -- Philip Aylesworth paylesworth(a)stclaircollege.ca

1 0

Re: [Zope] basic authorization triggered inside LoginManager context
by Tres Seaver 28 Jan '01

28 Jan '01

Fred Yankowski <fred(a)ontosys.com> wrote: > I've set up LoginManager with SQL and it's working OK, but I've run > into a case where the browser pops up a basic/HTTP authentication > request when I try to access a particular object inside the > LoginManager-protected area. > > I particular, I added the following line to the index_html DTML > Document (at the same level as the LoginManager acl_users folder): > > <dtml-var "_.getattr('AUTHENTICATED_USER', '__class__')"> No can do, no how, no way: attribute names beginning with "_" are absolutely verbotten in through-the-web DTML. > Without this line I can access the index_html file after logging in > via the LoginManager scheme as a user with the 'Members' role. But > with this line I get the basic authorization popup and if I cancel > that I can see the following exception in the "Zope Error" page: > > ================ > Traceback (innermost last): > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 222, > in publish_module > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 187, > in publish > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 171, > in publish > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\mapply.py, line 160, > in mapply > (Object: index_html) > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 112, > in call_object > (Object: index_html) > File D:\PROGRA~1\Zope225\lib\python\OFS\DTMLDocument.py, line 177, > in __call__ > (Object: index_html) > File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_String.py, > line 528, in __call__ > (Object: index_html) > File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_Util.py, > line 337, in eval > (Object: _.getattr('AUTHENTICATED_USER', '__class__')) > (Info: _) > File <string>, line 0, in ? > File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_Util.py, > line 144, in careful_getattr > Unauthorized: __class__ > ================ > > So it looks like attempting to access the '__class__' attribute > triggered this, but I don't understand why it lead to basic > authentication. If this required 'Manager' permissions, why didn't I > just get some kind of "forbidden" response? You are already authenticated in LM, but don't (can't, acutally) have the role to do this operation (grep the Zope source for '_what_not_even_god_should_do'). The LM can't authenticate you for what you asked, so you bang out to Zope's default, which is to try basic auth. In this case, it is particularly pointless, as there does not exist *any* user who can execute your method. > It looks like the careful_getattr() function will raise a > ValidationError on any attempt to access a variable whose name starts > with '_'. Fine, maybe I was being naughty. But I still don't > understand why this wasn't handled using LoginManager. How can I keep > Basic/HTTP authentication from running when I've got LoginManager in > place? Or is there reason to want both at once? The real problem is that, at the end of the day, Zope is returning an HTTP 401 for this request, which is the only possible result (it is your browser who converts that into a dialog box) Tres. -- =============================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

Re: [Zope] separate zope from site products
by Tres Seaver 28 Jan '01

28 Jan '01

corey(a)axcelerant.com asked: > Ok, I saw it by accident while searching for something else > the other day, and now can't find the HOWTO on getting > your Zope install separate from your local products, so that > future Zope upgrades don't require re-installation of all > your already existing products. > > So where can I find this document I'm looking for? Evan Simpson's excellent INSTANCE_HOME writeup: http://www.zope.org/Members/4am/instancehome -- =============================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

Re: [Zope] Can't reproduce :-(
by Dieter Maurer 28 Jan '01

28 Jan '01

Ian Sealy writes: > I've finally managed to replicate the bug consistently, so I've just > submitted it to the Collector: > > http://classic.zope.org:8080/Collector/1895/view Very good! In fact, this problem was known but not recognized in the new context! The incompatibility between "subtransaction" and "Z SQL methods" is a well known problem documented with ZCatalog. Apparently, someone at DC decided that subtransaction are good, too, to upload images. Maybe, this was not so good an idea. While for ZCatalog, subtransactions can be disabled, this apparently is not the case for image uploads. Dieter

2 3

Re: [Zope] Creating a namespace
by Dieter Maurer 28 Jan '01

28 Jan '01

Stephan Richter writes: > I want to make my own name space with the following situation: > > class X: > > attributes = {'foo': 'bar'} > > x = X() > > > Then I want to use it like that: > > <dtml-with x> > <dtml-var foo> > </dtml-with> > > The result should be : bar > > I found out that I have to somehow use TemplateDict and InstanceDict, but I > have no clue how to use it....Of course there is no documentation on any > web site or in the Zope code itself.... It is not you that use TemplateDict or InstanceDict, it is "dtml-with" that does this (for you). However, you need to look at permissions. Read Brian's "Upgrade to Zope 2.2" or the reference Zope security paper. Dieter

1 0

Re: [Zope] sending variables/parameters via hyperlink
by Dieter Maurer 28 Jan '01

28 Jan '01

Horatio B. Bogbindero writes: > ... > <a href="newpage.htm?variablename=value">Sent value to newpage.htm</a> > > i get this error: > > --------error start---------o > Error response > > Error code 400. > > Message: Bad Request. This should work *IF* the URL does not contain funny characters. Note that many characters are not allowed in URL's and especially "value" above must not contain blanks (as per HTML 4.x and CGI). Such values must be quoted with "url_quote_plus". Dieter

2 2

how do I get properties from a calling document?
by Gary Lowder 28 Jan '01

28 Jan '01

I have series of DTML Documents, at the same level in various folders. The DTML Document (we'll call it 'lot_num') calls another DTML Document (addForm), that sits at the project's root level, which is a form for data input. >From the DTML Document 'lot_num', I can access it's properties with <dtml-var number> and <dtml-var exp_date>. When I call the form, I need access to those variables. I'll additionally need access to them, when the form calls a method to store the data collected into a database (the variables I already know from 'lot_num' will also go into that database record, so need to be accessible as well). Hrm, I tried to describe it simply, but it still looks confusing to me. Document => 'Form' => SQL Insert Method properties I need to be able to access the original document's properties from 'Form', and, pass those along with the user's inputed form data, to an SQL Insert method, as the only variables "sent" on the POST to the SQL Insert method are what were entered by the user. (Maybe that sounded better <grin>). Thanks for your time and effort. Gary.

1 1

basic authorization triggered inside LoginManager context
by Fred Yankowski 28 Jan '01

28 Jan '01

I've set up LoginManager with SQL and it's working OK, but I've run into a case where the browser pops up a basic/HTTP authentication request when I try to access a particular object inside the LoginManager-protected area. I particular, I added the following line to the index_html DTML Document (at the same level as the LoginManager acl_users folder): <dtml-var "_.getattr('AUTHENTICATED_USER', '__class__')"> Without this line I can access the index_html file after logging in via the LoginManager scheme as a user with the 'Members' role. But with this line I get the basic authorization popup and if I cancel that I can see the following exception in the "Zope Error" page: ================ Traceback (innermost last): File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 222, in publish_module File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 187, in publish File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 171, in publish File D:\PROGRA~1\Zope225\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: index_html) File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 112, in call_object (Object: index_html) File D:\PROGRA~1\Zope225\lib\python\OFS\DTMLDocument.py, line 177, in __call__ (Object: index_html) File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_String.py, line 528, in __call__ (Object: index_html) File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_Util.py, line 337, in eval (Object: _.getattr('AUTHENTICATED_USER', '__class__')) (Info: _) File <string>, line 0, in ? File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_Util.py, line 144, in careful_getattr Unauthorized: __class__ ================ So it looks like attempting to access the '__class__' attribute triggered this, but I don't understand why it lead to basic authentication. If this required 'Manager' permissions, why didn't I just get some kind of "forbidden" response? It looks like the careful_getattr() function will raise a ValidationError on any attempt to access a variable whose name starts with '_'. Fine, maybe I was being naughty. But I still don't understand why this wasn't handled using LoginManager. How can I keep Basic/HTTP authentication from running when I've got LoginManager in place? Or is there reason to want both at once? -- Fred Yankowski fred(a)OntoSys.com tel: +1.630.879.1312 Principal Consultant www.OntoSys.com fax: +1.630.879.1370 OntoSys, Inc 38W242 Deerpath Rd, Batavia, IL 60510, USA

1 0