October 2001 - Zope - Zope lists

Q: about the system
by Adrian Mugnolo 16 Oct '01

16 Oct '01

Hi, I'm considering Zope for some upcoming projects and I have two architecture questions about the system: 1) Is there a way to code output filters in the Zope model? If yes, do they fit in the product model? Are they limited to Python code? Where can I get a running example? By "output filters" I mean a very last stage code processor. Let's say I need to run HTML validation, compression, macro expansion, etc., after all DTML processing and inheritance has happened. 2) Is Zope limited to dynamic page generation/caching/serving? What about having static pregenerated pages instead? If positive, where can I find an example? By "pregenerated" pages I mean "cook once, serve many times" static pages pushed to a standard httpd. Thanks *so* much in advance. Regards

3 2

User-defined properties in a ZClass?
by Lars Heber 16 Oct '01

16 Oct '01

>The easiest way to do it, is without any propertysheets (or actually the >default) >and do it exactly the same way as you would do with any zope object. So how do I actually do it? I have no idea! The users don't have an Add button when they change to one of the property sheets. Do I have to set special permissions for that? >> How do I enable users to define own properties in a property sheet of a >> ZClass? -- Lars Heber, mailto:Lars.Heber@t-systems.de T-Systems, debis Systemhaus GEI GmbH, Geschaeftsstelle Sachsen

1 0

Access Rule Caller
by Sidnei da Silva 16 Oct '01

16 Oct '01

Hello, I have an Access Rule at the root of my site, and want to access a property of the calling object: / /access_rule /folder/otherfolder/document the document has a property, lets say modification time, and when the access_rule is applied, i would like to access this property from inside the access_rule. Hope you can help me. -- Sidnei da Silva X3ng Consultoria e Desenvolvimento Ltda. sidnei(a)x3ng.com.br

1 0

how to refer to superclass?
by Lars Heber 16 Oct '01

16 Oct '01

How do I refer to a method of the superclass of a ZClass? I. e. I have a ZClass NewsArchive which inherits from ZClass News. In News I have a method proofIfNeedToArchive. In this method I do some cut/paste things. But of course this has to happen in the right folders (cut in News, paste in NewsArchive). So, how can I do something like news.cut... and news.paste...? The code for the cut / paste thing still works, that's not then problem. The problem is the reference to the right folders! BTW: Does a subclass also inherit all properties of the superclass? I have defined a prop archivordner in the superclass, but not in its subclass. But when I tested for the value within the subclass, I got NULL instead of the value of the superclass. Again, how do I refer to the value superclass.archivordner? Thank you for all your patience... -- Lars Heber, mailto:Lars.Heber@t-systems.de T-Systems, debis Systemhaus GEI GmbH, Geschaeftsstelle Sachsen

1 0

Zope WebRing and Software Component MarketPlace
by lozinski＠jobmart.com 16 Oct '01

16 Oct '01

First let me report that there are now 10 members on the Python and Zope WebRing. www.ringsurf.com/netring?ring=PythonAndZope;action=list I am amazed at how fast this ring is growing. The energy in the python and zope community is just wonderful. Compared to my Mac OS X webring, there is real fire in this community. What is missing? Well I would love to see a market for software components. Open Source is great, but I love to get supported software products with a person I can call who is motivated to fix the problem as part of the purchase price I paid. Is anyone selling software components in Zope or Python? Would anyone like to buy such components? Let me put this topic in perspective. I see huge amounts of software work being shipped off to massive companies in India. The way for the US to compete is to create a vibrant market in software components, each owned by its developer, so that large projects can be delivered by assembling existing components, thus outperforming the offshore development companies. Let me know what you think. I hope to start a discussion thread on this topic. Regards Chris 1-510-795-6086 lozinski(a)openstepnews.com lozinski(a)jobmart.com

2 1

Which Object
by Scott Kuei 16 Oct '01

16 Oct '01

Hi there, Does anyone know of which or what kind of object that can use addImage function of the CMFDefault Image.py? Thanks. Scott,

1 0

ZPatterns
by Antonio Beamud Montero 16 Oct '01

16 Oct '01

Hello all: Where I can find the PlugIns package with all files... The web package isn't complete... Anybody has used it? Thanks

1 0

User-defined properties in a ZClass?
by Lars Heber 16 Oct '01

16 Oct '01

How do I enable users to define own properties in a property sheet of a ZClass? Do I have to set some permissions or what? Who can give me a hint? Thanks. -- Lars Heber, mailto:Lars.Heber@t-systems.de T-Systems, debis Systemhaus GEI GmbH, Geschaeftsstelle Sachsen

2 1

e-Commerce - anyone using 3 Delta Systems for charge cards?
by Brad Clements 16 Oct '01

16 Oct '01

I've setup a site with Cybercash and the Wampum adapter over a year ago. Now Cybercash is bankrupt and verisign is supporting them, but dunno for how long. Personally we've been using ICVerify on an NT box with IIS (gack). Now, moving to Zope 2.4 on RH Linux, I also want to change how we process credit cards so have been in the market for a new merchant account provider and new software/APIs. One place suggested was http://www.3dsi.com/ which supports level-3 purchase card data. Their website sucks, frankly, but if you ask them about their EC-Linx service, you'll find it's an HTTPS based method of submitting charge requests. Is anyone using 3dsi service and care to comment? Anyone written a Wampum-like adapter for their EC-Linx service? Brad Clements, bkc(a)murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax netmeeting: ils://ils.murkworks.com AOL-IM: BKClements

2 2

RE: [Zope] a notable objection
by sean.upton＠uniontrib.com 16 Oct '01

16 Oct '01

If you don't want to set up proxy servers with HTTPS support and restrictive ACLs, do VLAN segmentation to decrease the likelyhood of sniffing, and set up secure tunneled clients (in the extreme case) to your Zope server, your security is as bad as YOU make it, not Zope. This is simply an issue of good integration; I've never heard of turnkey application security, except from sales people. You can: - Bind Zope to a particular interface or interfaces, and only the ones you need - Place Zope on both public and private networks behind HTTPS/SSL enabled proxy server gateways with restricitve ACLs - Keep the proxy server in a fasion that it bridges your network to a private, segmented VLAN that your Zope server runs on - Set up SSH or other types of tunnels between hosts that must have FTP access and your server; this is only in the situation where you are paranoid about security. - Keep an audit trail of access via proxy logs - Bind users to particular domains in Zope and also in proxy ACLs - Set up proxy auth using http basic auth that uses the password same verification source as Zope, this, over https is secure and allows you to bind ACLs to user categories, IP addresses, etc in combination (especially if your roles closely match ACL user categories). In other words, there is lots you can do. Sean -----Original Message----- From: Mark James Adams [mailto:mark@raysend.com] Sent: Monday, October 15, 2001 9:56 PM To: zope(a)zope.org Subject: [Zope] a notable objection The biggest security problem of Zope is unsecured access. What, you're still using telnet and ftp? What's the use of all the users, roles, and permissions if someone can sniff my Manager password?f -- Mark James Adams mja27(a)cornell.edu | mark(a)raysend.com | http://www.raysend.com "Who knows which moments make us who we are? Some of them? All of them?" - Lynda Barry _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0