March 2001 - Zope - Zope lists

Re: [Zope] container has no security assertions ?!?!
by Dieter Maurer 09 Mar '01

09 Mar '01

Loren Stafford writes: > > When I try to access the mime type of an uploaded file .... > > > <dtml-boundary type_expr="CVfile.headers.headers[1]" > name_expr="CVfile.filename()" > disposition=attachment encode=base64> > > I get this exception... > > An exception occurred in a DTML method or document. > > Error type: Unauthorized > Error value: Access denied for ['Content-Disposition: form-data; > name="CVfile:file"; filename="D:\\Arrivals\\Glossary.doc"\015\012', > 'Content-Type: application/msword\015\012'] because its container, > <rfc822.Message instance at 20112e0>, has no security assertions. > > > What does this mean? What am I doing wrong? It means that you hit a place where the security restrictions introduced in Zope 2.2 have not yet been taken care of. You will find information on how to fix this problem in Brian's Zope security paper (-> zope.org) Put the problem in the Collector. Dieter

1 0

Acquisition Problem ?
by Richard Moon 09 Mar '01

09 Mar '01

Can anyone explain what's going on here - please ? I've got a dtml method 'mydtml_1' which processes a file uploaded via a form - like this <dtml-in "abcfile_read(REQUEST)"> <dtml-let abc_text=sequence-item> <dtml-unless "_.len(abc_text)==0"> <dtml-var mydtml_2> </dtml-unless> </dtml-let> </dtml-in> In the dtml method mydtml_2 I have some code like this <dtml-var expr="REQUEST.set('abc_text',external_method_that_returns_hello_world(abc_text))> <dtml-var REQUEST> <dtml-var abc_text> What happens is that the <dtml-var REQUEST> shows abc_text having the new value of "Hello World" but the <dtml-var abc_text> shows the value as it was in mydtml_1 Presumably <dtml-var abc_text> is acquiring the value from mydtml_1. Can anyone tell me why ? And how to get <dtml-var abc_text> to return the value I want i.e. "Hello World" ? This is Zope 2.2.1 (Note - if I do not put <dtml-var mydtml_2> inside the <dtml-in> and <dtml-let> constructs then it works as expected, e.g. <dtml-call "REQUEST.set('abc_text','Goodbye Forever')"> <dtml-var mydtml_2> will render "Hello World" ) Many thanks Richard Moon richard(a)dcs.co.uk

2 1

the big news?
by Bak ＠ kedai 09 Mar '01

09 Mar '01

guys earlier this week(or was it last week), michel said something about announcing something at ipc9. has anything been announced yet?

3 3

RE: [Zope] Acquisition Problem ?
by Farrell, Troy 09 Mar '01

09 Mar '01

You have an instance of variable-clobbering. abc_text is acquired from the dtml-let inside mydtml_1. You have set the value in REQUEST, but REQUEST is at the bottom of the list when variable names are looked up. This is explained on page 15 of the Document Template Markup Language Reference. Unfortunately, I can't find a link for it. Ok, I found it in the Zope Book http://www.zope.org/Members/michel/ZB/AdvDTML.dtml First section. Troy -----Original Message----- From: Richard Moon [mailto:richard@dcs.co.uk] Sent: Friday, March 09, 2001 12:56 PM To: zope(a)zope.org Subject: [Zope] Acquisition Problem ? Can anyone explain what's going on here - please ? I've got a dtml method 'mydtml_1' which processes a file uploaded via a form - like this <dtml-in "abcfile_read(REQUEST)"> <dtml-let abc_text=sequence-item> <dtml-unless "_.len(abc_text)==0"> <dtml-var mydtml_2> </dtml-unless> </dtml-let> </dtml-in> In the dtml method mydtml_2 I have some code like this <dtml-var expr="REQUEST.set('abc_text',external_method_that_returns_hello_world(abc_te xt))> <dtml-var REQUEST> <dtml-var abc_text> What happens is that the <dtml-var REQUEST> shows abc_text having the new value of "Hello World" but the <dtml-var abc_text> shows the value as it was in mydtml_1 Presumably <dtml-var abc_text> is acquiring the value from mydtml_1. Can anyone tell me why ? And how to get <dtml-var abc_text> to return the value I want i.e. "Hello World" ? This is Zope 2.2.1 (Note - if I do not put <dtml-var mydtml_2> inside the <dtml-in> and <dtml-let> constructs then it works as expected, e.g. <dtml-call "REQUEST.set('abc_text','Goodbye Forever')"> <dtml-var mydtml_2> will render "Hello World" ) Many thanks Richard Moon richard(a)dcs.co.uk _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Re: [Zope] Add python class to Zope.
by Dieter Maurer 09 Mar '01

09 Mar '01

Pattreeya Tanisaro writes: > I found some python sources which declared "class" inside. > I tried to call the function inside this class with external method and > python script but it didn't work out. > > class Guestbook: > def __init__ > .... > def signGuestBook > .... > def feedBack. > .. > How can I call the function "feedBack" to Zope? Read the paper on Zope Security. Otherwise, you will not be lucky. You would not call the function directly from Zope, but as a method of an instance "gb" of "Guestbook". Once you have such an instance, you would use <dtml-with gb> <dtml-var feedback> </dtml-with> Note that function definitions in Python have parameter declaration. It's probably advicable to look into a Python book or its online documentation, too. ... before you start your project. Probably, you should also read the Zope book... Dieter

3 3

RE: [Zope] Telnet to Port 8080
by Farrell, Troy 09 Mar '01

09 Mar '01

CURL (http://curl.haxx.se/) is helpful if you need to upload files through a form. I use bash scripts with curl to import files. Troy -----Original Message----- From: Joel Burton [mailto:jburton@scw.org] Sent: Friday, March 09, 2001 8:16 AM To: Tino Wildenhain Cc: zope(a)zope.org Subject: Re: [Zope] Telnet to Port 8080 On Fri, 9 Mar 2001, Tino Wildenhain wrote: > Hi Karthick, > > you will the specification how to encode authentication information > in rfc2616 (www.faqs.org) > Basically is a base64 encoded string consisting of username:password For simplicity's sake, you might want to consider using a tool like wget, which will let you pass the auth info as a command line switch... it's less tedious than doing the telnetting yourself. _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

2 1

[BUG] funny Zope conflict resolution -- avoid using "URL" as name!
by Dieter Maurer 09 Mar '01

09 Mar '01

Assume, you have a form control with name 'URL'. What value for the variable 'URL' would you expect in the form action? The request URL or the value of the form value for 'URL'. You will be surprised how Zope resolves this confict: it appends the path component of the request URL onto the form control value! This is for the current ZopeCVS. In Zope 2.1.6, not only URL, but all URLi and BASEi are wrong. The problem description is on its way to the Collector. Apparently, it is a very good advice to avoid 'URL' as a name in any Zope context. Dieter

1 0

Creating static pages with Zope
by Jan Huss 09 Mar '01

09 Mar '01

Hello, I read throw the documantation of Zope for some hours and I am very interested in using it but therefore I want to now if there is a chance to create static html-pages out of Zope and save them in a directory. Can anybody tell me if this is possible. Thanks for your trouble. Greetings Jan

6 5

Re: [Zope] Running up and down the hierarchy
by Dieter Maurer 09 Mar '01

09 Mar '01

Danny William Adair writes: > .... "restrictedTraverse" is for running up and down in the hierarchy.... Look in the embedded Zope Online Help -> API Reference -> ObjectManagerItem Dieter

1 0

Re: [Zope] copying a file from folder to folder
by Dieter Maurer 09 Mar '01

09 Mar '01

Ian Campbell writes: > want to transfer it, i`ve been experimenting with manage_cutObjects and > manage_pasteObjects, but have had no success so i`m sure i`m making a stupid > mistake somewhere. could anyone give me some pointers? The implementation (!) of "manage_pasteObjects" or "export/import" should show you how to proceed (I suppose you want do it programmatically). Dieter

1 0