August 2001 - Zope - Zope lists

request for security advice
by seb bacon 16 Aug '01

16 Aug '01

I've been trying to log a user in programmatically for a while, and I think I've finally got it cracked. All you have to do is create a new SecurityManager with a user object: from AccessControl.SecurityManagement import newSecurityManager ... newSecurityManager(None, user) My question is this: is there any reason why this would be a Bad Thing, security-wise? seb

1 0

RE: [Zope] Adding many images at once...
by Farrell, Troy 16 Aug '01

16 Aug '01

Use the FTP server or the loadsite.py script in the Zope/utilities directory. Troy > -----Original Message----- > From: Rustad, Aaron [mailto:ARustad@Online-can.com] > Sent: Thursday, August 16, 2001 12:54 PM > To: 'zope(a)zope.org' > Subject: [Zope] Adding many images at once... > > > I am a newbie in need of help. > > Can anyone tell me if there is a way to transfer many images > at once to > zope? I have an existing web site with about 60 images that make up my > template, but I don't want to enter each on by selecting the > "image" drop > down option. > > Thanks for your help. > Aaron.

1 0

Adding many images at once...
by Rustad, Aaron 16 Aug '01

16 Aug '01

I am a newbie in need of help. Can anyone tell me if there is a way to transfer many images at once to zope? I have an existing web site with about 60 images that make up my template, but I don't want to enter each on by selecting the "image" drop down option. Thanks for your help. Aaron.

1 0

get object's objectManager from python script
by Lee Harr 16 Aug '01

16 Aug '01

How can I get the folder that an object is in from a python script? Lee Harr missive(a)hotmail.com _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

2 1

asynchat usage in Zope & terminators? (not short!)
by Nigel Head 16 Aug '01

16 Aug '01

[If this is a known topic please point me to the right thing to search for in the archives]. I've been having some strange intermittent problems with Netscape and the POST method -- never really reproducible and most annoying. The other day I was trying to chase them with Shanes tcpwatch (as a change from ethereal) and I noticed tcpwatch suffering from the same problems. Aha!! To be specific: on occasion the data for a POST transaction was not showing on the display. This matches the problem I've been having with N'scape & Zope: sometimes a POST transaction would just kind of hang. I'm beginning to think that I've traced this down to N'scape not putting any form of terminator after the POST data string -- this appears to mean that the data gets caught in the input collection scheme of asynchat and doesn't get passed up to the next layer for processing until later (if any further traffic occurs on that connection) or never (if the client starts a new connection for the next request). I'm no guru on the http protocol specs. -- can anyone tell whether terminators are required (counted in the content-size header of course) or not. I couldn't find a statement to this effect. If they aren't required (and stherefore ome clients may not send them) how is Zope supposed to deal with this? Is the length from the content-size header somehow fed forward -- once the header has been received of course -- into the asynchat buffering logic so that it can know when to pass the current 'bag of bytes' up to the application layer? Or does the mechanism quietly assume a sufficient density of terminators (which seem to trigger an end of the buffering). Is there a timeout somewhere in there? I'm planning a session of looking through the code to check this out but it's sort of a complex area and I'm looking for a head start to save time, if anyone has already traveled this route. Alos, as it doesn't seem to be reproducible, does anyone know of documented behaviours of browers in this area? To be absolutely fair, this particular (bad) occurence involves the Flash plugin too (which probably means it's M'medias fault); but I have seen it in the past without Flash involvement, and there seems to be a constant level of moaning about Netscape oddities here too. Thanks in advance, Nigel.

2 4

Re: [Zope-dev] Question
by Dieter Maurer 16 Aug '01

16 Aug '01

Moved to "zope(a)zope.org".... Andre Schubert writes: > this works very well, it's so easy to use that i have not seen it. > But how can i access AUTHENTICATED_USER in the method called by > AccessRule. Sorry! Did not think enough.... You cannot because authentication is only performed at the end of traversal (see URL:http://www.dieter.handshake.de/pyprojects/zope/book/chap3.html for details). Depending what authentication scheme you use, you may be able to decode the elementary authentication information in the request object and determine the username from that. When you use Basic Authentication, you would e.g. base64-decode the Authentication header to get the username. With cookie authentication, you would ask your UserFolder to decode it and give you the user name. Your AccessRule must probably be an External Method for this to work, as there is not yet a security context to do anything protected in Python Script. Dieter

1 0

MIT CURL -- again
by Albert Boulanger 16 Aug '01

16 Aug '01

The MIT CURL page (with the non commercial curl) is at http://curl.lcs.mit.edu/curl/ Curl is intended to be a gentle slope system, accessible to content creators at all skill levels ranging from authors new to the web to experienced programmers. By using a simple, uniform language syntax and semantics, Curl avoids the discontinuities experienced by current web users who have to juggle HTML, JavaScript, Java, Perl, etc. to create today's exciting sites. Our hope is that the single environment provided by Curl will be an attractive alternative for web developers; we've certainly enjoyed using Curl to create this web site and others. A brief overview of Curl and its underlying philosophy can be found in an accompanying white paper. http://curl.lcs.mit.edu/curl/wwwpaper.html

4 8

RE: [Zope] data.fs and zeo
by sean.upton＠uniontrib.com 16 Aug '01

16 Aug '01

This is not quite true; there is a bug in FileStorage in Zope 2.3.x that is fixed in CVS and Zope 2.4 regarding this that hangs the ZSS... Also, FYI, anyone using ZEO 1.0b3 should really pull down zrpc.py from CVS as well to make ZEO Clients reconnect; a bug was introduced in 1.0b3 that prevented reconnects by the client; it was promptly fixed in CVS on May 29... After these two changes are made, ZEO seems to work nicely without incident in a production setting, at least for me... Sean -----Original Message----- From: Jens Vagelpohl [mailto:jens@zope.com] Sent: Thursday, August 16, 2001 5:12 AM To: fritz.mesedilla(a)summitmedia.com.ph Cc: Zope Subject: Re: [Zope] data.fs and zeo fritz, packing works very well from any of the connected ZEO clients. what probably throws you off is that when you hit "pack" the page comes back immediately and there is no visible change. packing is being initiated and you will see results after a while (the while being longer the larger your Data.fs is) by looking at the contents of the directory where your Data.fs is. you'll see a new file, Data.fs.pack, that is being built and when it is finished the old Data.fs gets renamed to Data.fs.old while Data.fs.pack becomes Data.fs. this process can take quite some time and the management interface in your ZEO client will only show the new database size after Data.fs.pack has been put in place of Data.fs. if you have problems with the 2GB file size limit i suggest (if you're on linux) that you go with a kernel that can handle large files (i have a test rig that uses a 2.2.17 kernel) and hand-compile python to enable large file support. jens On Thursday, August 16, 2001, at 05:42 , Fritz Mesedilla wrote: > I'm sorry but I am really getting irritated with the 2GB limit! > > Data.fs packing also doesn't work while zeo is running. > > How can I pack Data.fs without turning zeo off? It doesn't work in the > Management Screen. > > The management screen for the zeo server is also connecting to it like it > is > a remote server. Is this the problem? But when I try to start zope without > activating the custom_zodb.py, it won't start. I have to make zope think > it > is trying to connect to a different server. > > Please help me! > > > > Fritz Mesedilla _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

RE: [Zope] Using the replace function in a Zope Python Script
by Gitte Wange 16 Aug '01

16 Aug '01

At 17:21 16-08-2001 +0100, you wrote: > >> Have you tried: >> import string >> >> return string.replace("flubbery", "flub", "shrub") > >Alternatively you can use the under namespace: > >return _.string.replace("flubbery", "flub", "shrub") > >although you'll first need to go to the python script object's >"Bindings" tab and bind _ as the namespace (which is the >recommended value anyway). > >I'm not sure if/why this is better than the way mentioned above, >mind. :-) > >-Andy > Well the reason why I need this function is that I just discovered today that a username in Zope can contain spaces - and that's not a good idea when we create file names (in FS) from users login name ... Is spaces really allowed in usernames ? Regards, Gitte Wange

1 0

PROBLEM(100) Init Ambiguous .. "manage_main" != "manage_editTabsForm
by hans 16 Aug '01

16 Aug '01

i've sent mlm my private Tabs product (read digest 95) ##### File Tabs.py default_title='AdvanTabs' # also used as meta_type from ImageFile import ImageFile # button images from Globals import DTMLFile # from OFS import SimpleItem # import string # atoi from StringIO import StringIO # save/save, [un]pickle into string import pickle # load/save, from/into client file, class Tabs(SimpleItem.SimpleItem): """keeps a treelike tabs-structure""" # Tabs: [ ...{'num':string, 'lbl':string, 'url':string, 'sub':Tabs},...] SEP = '.' # separator meta_type=default_title manage_options = ( { 'label': 'Edit', 'action':'manage_editTabsForm' }, { 'label': 'Tabs', 'action':'manage_adminTabsForm' }, { 'label': 'View', 'action':'manage_viewTabsForm' }, ) + SimpleItem.SimpleItem.manage_options def __init__(self, id, title=default_title): """init new instance of Tabs""" ... manage_main = \ manage_editTabsForm = DTMLFile('manage_editTabsForm', globals() ) # """edit Tabs, a) set title, load tabstree from client, c) save tabstree to client""" def manage_editTabs(self, title='', REQUEST=None): """edit Tabs, set Title""" --------------------------------------------------------------------------- and mlm mails me: >Problem? I stopped Zope, expanded the .zip file in the Products >directory, restarted Zope, and got: >2001-08-16T15:16:59 PROBLEM(100) Init Ambiguous name for method of >Products.AdvanTabs.Tabs.Tabs: "manage_main" != "manage_editTabsForm >Suggestions? i never had that one. sorry, i dont have any idea. whats going on? (basti tells me, its a zope 2.4 error, maybe mlm uses 2.4, i dont) but again sorry im just about to take my free time *very* soon.

2 1