October 2002 - Zope - Zope lists

Re: [Zope] Calling script from script inside protected folder
by Jaroslav Lukesh 16 Oct '02

16 Oct '02

| Odesílatel: Dylan Reinhardt <Dylan(a)DylanReinhardt.com> | The theory I'd try first is that the called script may be attempting to do | something that Player permissions are not approved for. | | Oddly enough, it's possible to grant permissions to Anonymous but still | withhold them from groups that require authentication. I'd double-check | the permissions for any objects called by the second script to see if | you've granted Anonymous permission without granting Player permission. use proxy tab for taht script, see management tabs. | It's also possible that the called script may not have its permissions set | to acquire settings from the parent folder. Sounds like you would have | noticed, though. | | If time is short, an easy way to fix the problem is to grant the calling | script the Manager proxy role. But you only want to do that if you're | certain that it's safe for all things done by the scripts to be done in | that context. Proxy is by me safest methot to grant privileges for "this and only this" that you need for non-privileged user. If you are concerned, you should check (from script) place from where are script calling. Regards JL.

1 0

searching
by michael.ta�ag 16 Oct '02

16 Oct '02

hi! Is there a way in which I could serach for files inside zope using a keyword. For example I type in "cow" and it will search filenames with the word cow in it, like "cowhead.doc" and "da cow boy.pdf". Can Z Catalog do this? TIA! --------------------------------- Do you Yahoo!? Faith Hill - Exclusive Performances, Videos, & more faith.yahoo.com

3 2

Re: [Zope] Javascript onclick event and DTML
by Jaroslav Lukesh 16 Oct '02

16 Oct '02

| Odesílatel: Chris McDonough <chrism(a)zope.com> | You would cause the onclick event to call a JavaScript function that | itself calls back in to Zope via HTTP to a method that sets the session | vars. | | On Tue, 2002-10-15 at 12:32, AM wrote: | > Hi, | > If I had a link in which if the onclick event happened I wanted to set a | > couple of session vars how would I go about doing it?? Why not add cookies from javascript? And then read that in another page request, like that: www.domain.com/folder/?another_page Note that you need make some changes in your index_html rendering (or kind of redirecting). Regards JL.

1 0

Calling script from script inside protected folder
by Dmitry Litovchenko 16 Oct '02

16 Oct '02

I have Player role in my site, and Member folder, protected by the following permissions: View [ ]Acquire [ ]Anonymous [x]Authenticated [x]Manager [x]Owner [x]Player Everything behaves like expected but if being Player (having roles "Authenticated" and "Player" only) I am call Python Script from another Python Script (both are located inside this protected folder), my browser pops up Login Dialog and everything works only if I authenticate myself as Manager or if I allow Anonymous to "View" this Python Script. Call looks like: user = context.Member.get_userdata() First thoughts were that I am not passing REQUEST or another security related token to second script (get_userdata in this case). If I get inside there (allowing Anonymous to View it), I am still having "Player" role and none of security tokens lost, but I can't even access this second script if it hasn't "Anonymous" View permission. Please tell me where I am wrong. This is black voodoo compared in complexity with manual sendmail setup. URLs on Zope Security model overview may also help. -- Dmitry

2 1

Re: [Zope] A tip about 2GB Data.fs issues
by Johan Carlsson [EasyPublisher] 16 Oct '02

16 Oct '02

At 22:16 2002-10-15 +0100, Phil Harris said: >On Tue, 15 Oct 2002 14:54:41 -0400 >"Matthew T. Kromer" <matt(a)zope.com> wrote: > > > Just FYI, the Binary Zope 2.6 betas include a Python 2.1.3 with LFS > > built in, > >Does the large file support extend to Win32 systems? > >yours hoping-rather-than-expecting-ly Not until Python 2.2 :-( But with Python 2.2 it works fine. The downside is that Zope doesn't support Python 2.2 officially. Regards, Johan Carlsson -- Torped Strategi och Kommunikation AB Johan Carlsson johanc(a)easypublisher.com Mail: Birkagatan 9 SE-113 36 Stockholm Sweden Visit: Västmannagatan 67, Stockholm, Sweden Phone +46-(0)8-32 31 23 Fax +46-(0)8-32 31 83 Mobil +46-(0)70-558 25 24 http://www.easypublisher.com http://www.torped.se

1 0

Generating lists of dicionaries from properties
by Andreas Brinner 15 Oct '02

15 Oct '02

Hello, I'm looking for a way to generate lists of dicionaries from string properties. As this is for a public website eval doesn't seem to be the best choice. For an example, I want to get this list of dictionaries: prop = ( { "id":"first_entry", "title":"first_title" }, { "id":"second_entry", "title":"second_title" }, ) It should be possible, that this information is entered in a human readable way as a string property. Any suggestions? Thanks Andreas

1 0

Mailboxer vs. Mailman?
by Philip Glaser 15 Oct '02

15 Oct '02

Hi, I need to integrate listserv functionality into a Zope site I am developing. I am considering using either mailman (http://www.gnu.org/software/mailman/mailman.html) or mailboxer (http://www.zope.org/Members/mjablonski/MailBoxer) It seems to me that mailboxer has the obvious advantage of directly integrating with Zope for the purpose of customization, and it appears to be at a mature and stable release level. Have folks had good experiences with mailboxer? On the other hand, what is it like integrating mailman into a Zope site? Many thanks! Philip Glaser Principal and Software Architect Sustainable Software Solutions, LLC glaserp(a)sustainsoft.com www.sustainsoft.com 973-951-9522

3 2

RE: [Zope] Passing vars in a REDIRECT
by Michael Guerrero 15 Oct '02

15 Oct '02

This worked. Thanks a lot. Mike -----Original Message----- From: Chris McDonough [mailto:chrism@zope.com] Sent: Tuesday, October 15, 2002 12:29 PM To: Michael Guerrero Cc: zope(a)zope.org Subject: Re: [Zope] Passing vars in a REDIRECT This should work: <dtml-let emp_id="1741"> <dtml-call "RESPONSE.redirect('view_by_id?emp_id=%s' % emp_id)"> </dtml-let> You cannot embed a <dtml-xxx> inside another <dtml-xxx>. HTH, - C On Tue, 2002-10-15 at 15:19, Michael Guerrero wrote: > All, > > At the end of some processing I want to redirect the user to another page using the value of an id field: > > If I hard code the emp_id in it works. > > <dtml-call "RESPONSE.redirect('view_by_id?emp_id=1741')"> > > > However if I try to replace the hardcoded value with a dtml-var > > <dtml-call "REQUEST.set('emp_id',1741)"> > <dtml-call "RESPONSE.redirect('view_by_id?emp_id=<dtml var emp_id>')"> > > I get ththe following error: Invalid integer value for emp_id. > > I've tried various combinations of quotes and double-quotes with no luck. > > Is ther another way to do this? > > Thanks. > > Mike > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Passing vars in a REDIRECT
by Michael Guerrero 15 Oct '02

15 Oct '02

All, At the end of some processing I want to redirect the user to another page using the value of an id field: If I hard code the emp_id in it works. <dtml-call "RESPONSE.redirect('view_by_id?emp_id=1741')"> However if I try to replace the hardcoded value with a dtml-var <dtml-call "REQUEST.set('emp_id',1741)"> <dtml-call "RESPONSE.redirect('view_by_id?emp_id=<dtml var emp_id>')"> I get ththe following error: Invalid integer value for emp_id. I've tried various combinations of quotes and double-quotes with no luck. Is ther another way to do this? Thanks. Mike

2 1

Re: How to use methods from OFS?
by Josef Meile 15 Oct '02

15 Oct '02

> please read: > > Zope/lib/python/Products/PythonScripts/README.txt Nice, but I think allowing modules isn't the solution. When I was a newie, I had the same question about the "eval" function, then somebody answers me that if you allowed that function, a skill user could make a malicious script which erases information of your zope server, or even he could call the function itself through the web. So, I guess that if the Zope developers didn't include a module / function is because it has some security isues. Perhaps the solution would be creating an external method that calls the routine you need. Regards, Josef.

2 1