May 2001 - Zope - Zope lists

Re: [Zope-CMF] [ANN] German CMF skin available
by 320011178755-0001＠t-online.de 06 May '01

06 May '01

robert at rocad wrote: > > ... > It is not necessary to alter any CMF core files to have the actionbox > translated. > This can easily be done in a skin. Just translate the words the action box > is throwing at you > > To do this I created a tiny python script called > ... Hi Robert, thanks for your suggestion. I did not spend much time in that part of the translation because there is a comment on the listActions method saying that it will be configurable through the portal_actions UI. BTW: Erich Seifert has found some typo and made some other suggestions. A new version of the translation and a small how-to will be available soon. Andreas -- _______________________________________________________________________ Andreas Heckel andreas(a)easyleading.org LINUX is like a wigwam...no gates...no windows and an apache inside ;-)

1 0

Re: [Zope] security risk in "many authors" situation
by Kyler B. Laird 06 May '01

06 May '01

On Sun, 6 May 2001 10:44:24 -0400 (EDT) you wrote: >IIRC, this is *not* the case at all -- Ah! I love being wrong about such things. >you 'run' a script w/the >intersection of your privileges and those of the creator. I did something earlier that lead me to assume that this was not the case, but I went back to verify it and I see that what you say is correct. My day is really looking up. If I had been right about that, I would have been in a world of hurt. >(Hence, why the >superuser can't own objects.) Of course. That makes perfect sense. Thank you for the correction! I'm sorry that I didn't check more today. I'll try to investigate my sleep-time conclusions a bit before I panic next time. --kyler

2 1

xmlrpc and ZSQL Method
by Olaf Zanger 06 May '01

06 May '01

hi there, after searching for 2 hours i try the community know-how. i want to access a ZSQL Method "prd_sql_method" with parameters: "fac_id_only:int" and "date:string" by xmlrpc. right now i do: s=xmlrpclib.Server('http://sino/ip') dict={} dict['fac_id_only']=1 dict['date']='1996-01-02' s.Zope.operate.xmlrpc.prd_sql_method() y[] for x in s: y.append(x) return str(y) ----------------------------------------------- how do i get parameters in? --------------------------------------------------------- i get an error message: "Unexpected Zope error value: ['fac_id_only', 'date']" -------------------------------------------------- how do i get results out? --------------------------------------------- got nothing yet :-) thanks for help olaf -- soli-con Engineering Zanger Dipl.-Ing. (FH) Olaf Marc Zanger Lorrainestrasse 23 3013 Bern / Switzerland Fon: +41-31-332 9782 Mob: +41-76-572 9782 mailto:info@soli-con.com mailto:olaf.zanger@soli-con.com http://www.soli-con.com

2 1

RE: [Psycopg] \'s in ZSQL methods with Postgresql
by Mayers, Philip J 06 May '01

06 May '01

Ok, thanks. Regards, Phil +----------------------------------+ | Phil Mayers, Network Support | | Centre for Computing Services | | Imperial College | +----------------------------------+ -----Original Message----- From: Federico Di Gregorio [mailto:fog@mixadlive.com] Sent: 04 May 2001 16:05 To: Mayers, Philip J Cc: 'psycopg(a)lists.initd.org'; 'zope(a)zope.org' Subject: Re: [Psycopg] \'s in ZSQL methods with Postgresql Scavenging the mail folder uncovered Mayers, Philip J's letter: > This: > > update tb1 set cl1=<dtml-sqlvar val1 type=nb>,who=<dtml-sqlvar > "REQUEST.AUTHENTICATED_USER">,time=now() > > Called with: > > sqlmethod(val1='\') > > Fails with: > > Error Type: ProgrammingError > Error Value: ERROR: parser: parse error at or near "loginname" update tb1 > set cl1='\',who='loginname',time=now() > > Clearly the \ needs to be escaped. Is this Postgres specific? If so, why > isn't the DA (ZPsycopg) quoting it? Running Zope 2.3.2 you are right, quoting will be fixed in the next release (we use psycopg much more than ZPsycopgDA, so this one still has some rought edges...) btw, what does 'type=nb' means? (i only know of string and int...) ciao, federico -- Federico Di Gregorio MIXAD LIVE Chief of Research & Technology fog(a)mixadlive.com Debian GNU/Linux Developer & Italian Press Contact fog(a)debian.org Try the Joy of TeX [http://www.tug.org] -- brought to you by One Line Spam

2 1

security risk in "many authors" situation
by Kyler B. Laird 06 May '01

06 May '01

I've been working on "security" from a perspective of users/authors not being able to do more than what they're granted permission to do. I finally realized that there's a huge risk in a system like ours with many untrusted authors creating contnet to be viewed by trusted users. If, for example, a student makes a page as part of his homework, any commands he puts in it will be executed with the privileges of his professor when it is checked. This is a bit like getting someone to run your own script in UNIX, but vastly more likely. Any ideas for getting around this? I'm stumped. I want to be able to do this in many situations, but certainly it can be devastating in some. Thank you. --kyler

1 0

Zope runs very slowly
by Roch'e Compaan 06 May '01

06 May '01

I compiled Zope 2-3-0 from source on a Pentium II 266 MHz with 128 MB RAM on Redhat 6.2 and it runs very slowly. When I say slow I mean it takes approximately 3 minutes to start up and 5 seconds per request. I'll give a bit more background since I don't think this is a Zope problem per se. This is not a first Zope install - on our public server I frequently compile Zope from source and it flies. On this particular server almost everything was compiled from scratch (kernel, apache, python, etc) with aggresive optimization turned on. All the software installed is really running smoothly except for Zope. I then recompiled python with no optimization but still Zope was crawling. It took me quite a while to build the server thus far and it took a lot of effort securing and optimizing it but at the moment I really don't have a clue where to start looking for the problem. What is funny is that other python-built software like mailman is running up to speed but mailman is not multi-threaded or nearly as complex as Zope. It seems to me that accessing the Data.fs file is problematic, because the harddrive just seems too busy compared to other Zope installations we've made. The load on the CPU seems normal. Any pointers would really be appreciated. Roché

1 0

create ZClass instances in Python scripts
by Arkaitz Bitorika 06 May '01

06 May '01

Hi, Is it possible to create programmatically ZClass instances from Python scripts? I haven't been able to do it. I have the next thing in my Python script: folder.manage_addProduct['MyProduct'].manage_addMyZClass_py(myId) And then I have a Python Script called "manage_addMyZClass_py" in "MyProduct" that does simply this: container.MyZClass.createInObjectManager(id) All this gives me the next message: Error Type: TypeError Error Value: not enough arguments; expected 3,got 2 This happens when calling createInObjectManager(), because it expects a REQUEST object, but I don't have one! It won't accept a None REQUEST object either. Any hint? Cheers, Arkaitz.

2 2

Announce - Audio Product
by marc lindahl 06 May '01

06 May '01

Odd that noone has made a product for audio storage, analogous to Image, so I took a crack at it. So far it parses MP3 tag data. Anyone have info on RealAudio tag data? Since it's based on File, it'll actually store anything. But the cool thing is, it sucks the ID3 tag data out of the file (if there is any) and puts it into properties, so it can be indexed. You can also edit the data in the properties page, and whenever the audio is rendered, the new tag data is inserted. It should be easy to add stuff to look for WAV and AIFF header info and suck that out, since python comes with libraries to do that, but those aren't popular web formats so I haven't done it yet. It's not CatalogAware, just as Image.... I figured you'd wrap it or whatever to do that, but I'm open to suggestions. It's the first release, so obviously don't depend on it to launch rockets :) Get it here: http://www.zope.org/Members/bowerymarc/Audio

7 22

RE: [Zope] Proper Case function
by Randall F. Kern 06 May '01

06 May '01

>From DTML: <dtml-var foo capitalize> >From Python: import string string.capitalize('category') -Randy > -----Original Message----- > From: Tommy Johnson [mailto:astlj@hotmail.com] > Sent: Saturday, May 05, 2001 8:10 PM > To: zope(a)zope.org > Subject: [Zope] Proper Case function > > > Hello all, > > I'm looking for a proper case function --> something that > will return the > string "Category" from the string "category". It doesn't have > to worry about > if the string is a proper name, but that would be nice. I'm > just trying to > figure out if a function exists that will capitalize the > first letter of a > string (or if I have to script something). > > Thanks in advance, > Tommy > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

Re: Xron question
by Loren Stafford 06 May '01

06 May '01

A Xron Method can be anywhere. That's why Schedule is in root -- so it is aquired by any Xron Method anywhere. -- Loren ----- Original Message ----- From: "tom smith" <tom(a)othermedia.com> To: <lstaffor(a)dynalogic.com> Sent: Thursday, May 03, 2001 3:01 AM Subject: Xron question > Hi > > Quick Question. > > Can I create an Xron Method anywhere and have it fire off? Or does it have > to be inside the Schedule object that seems to get created in the root zope > folder. > > Thanks > > tom > > > > > -- > tom smith | tom(a)othermedia.com > http://www.othermedia.com/blog > tel 020 8541 5355 | fax 020 8541 5507 > 11 penrhyn road, kingston-upon-thames, london KT1 2BZ > >

1 0