October 2002 - Zope - Zope lists

Disallowed subobject type
by Pascal Samuzeau 11 Oct '02

11 Oct '02

Hi, I have this error : Type de l'erreur : ValueError Valeur de l'erreur : Disallowed subobject type: Document I'm not sure to understand well what'happening. Anybody knows about it ? Cordialement PS -------------------------------------------------- Oreka ! Nous sommes l'internet moins cher ! Surfez 25% moins cher avec http://www.oreka.com

2 2

/ object ownership
by Jean Paul Ladage 11 Oct '02

11 Oct '02

I accidently took ownership of the root object, so now every visitor is required to give a user name and password to view any underlying objects. Is there a way to set back the ownership to unowned?

2 1

Re: unexplained shutdown
by Josef Meile 11 Oct '02

11 Oct '02

Why don't you set up the STUPID_LOG_FILE of zope? With the Z2.log you don't get the error messages and traces. Add this to your start script: STUPID_LOG_FILE=/usr/local/myZopeDir/var/zopeapp.log export STUPID_LOG_FILE With this approach, instead of lots of messages in your console, all of them will be stored in the zopeapp.log file, which you can look after your system crashes. Note that you have to replace "/usr/local/myZopeDir/" with the path where your Zope is. Hope it helps, regards, Josef.

1 0

ZOracleDA and Oracle sessions: bug?
by Bo M. Maryniuck 11 Oct '02

11 Oct '02

Hi. Well, I found one thing in ZOracleDA, which is built from the latest DCOracle2 1.2 release. The problem is that when ZOracleDA opens a Oracle session and then I would like _close_ it, Zope says that connection is closed. But Oracle monitor shows me that connection is still exist and inactive. The inactive sessions still exists per long time: few days or so. After Zope restart all the Oracle sessions are removed. Matt, have you ommitted some cleaning after connection is closed or this is some Zope cache/bug/feature/whatelse? Should I search how to close and remove the session manually or this is just not implemented yet? -- Regards, Bogdan System going down at 5 this afternoon to install scheduler bug.

1 0

Newbie
by Jean Paul Ladage 11 Oct '02

11 Oct '02

Hi there, I'm a newbie trying about every option in Zope.. Recently I accidently took ownership of the root (/) Object. So now every visitor has to provide a username and password to even view a page. Does anybody know how to set back the ownership on the root object to unowned. And please don't laugh... I feel stupid enough

2 1

Re: Quoting HTML
by Josef Meile 11 Oct '02

11 Oct '02

I do this trick and it works: <dtml-let htmlText="myMethod(param1,param2)"> <dtml-var htmlText> </dtml-let> Regards, Josef.

1 0

Re: [Zope] Java program within zope
by Chris Withers 11 Oct '02

11 Oct '02

Hi Mark, Try and keep your posts on the lists so others can help out ;-) Mark Poole wrote: > All I have is a jar file , which is made up of .class files. I am new to > zope and am very confused, however I did get zcgi to work.... Well, what are you looking to do with this .jar file? cheers, Chris

2 2

Fishing for ISP security tips
by Tim 11 Oct '02

11 Oct '02

I'm in the process of trying to offer Zope on a small ISP. I have it all set up and running and am working on configuring and securing it. I'm wondering if there's any resources out there that discuss this sort of multi-user setup (or just anyone here with more experience who feels in a sharing mood); especially ideas for making system secured from the clients, and the clients secure from each other. I've read the Zope Book. But many points regarding this sort of setup still seem vague to me. I'm using mod_proxy thorough apache, and have all the virtual domains (eg. zope.theirdomain.com) redirecting to folders in Zope under a "virtual" folder beneath the root folder. I use a SiteRoot object in each folder. This seems to be working well. I have adjusted the "security" settings on the "virtual" folder to hopefully prevent clients from adding/changing some objects. However, if possible I would like clients to be able to add acl_user folders of their own: yet if they can do this it seems that they can then set any roles they want on users created in those folders; and so add any objects they want beneath that folder. I can only see two options: don't let users manage/create acl_user folders. Or just not worry about what objects they may create in subfolders beneath their folder (this seems potentially dangerous, and underdesirable... large cache objects, etc). What (I think) I would like to do is allow users free access to create acl_user folders and manage themselves, with the exception of being able to assign Owner or certain other roles. Is this possible? Another issue is that while I see I can set permissions so they can't create more SiteRoot objects, there is no specific permission against modifiying (or deleting) specifically the SiteRoot object. Also if anyone has an actual list somewhere of what objects are not safe/wise in this environment and should be restricted, it would be quite helpful. I've just gone through the object list somewhat haphazardly, and the decisions seem fairly obvious: but there may be things I haven't thought of. Any ideas or thoughts or experiences regarding the best ways to approach this would be most welcome. I'm anxious to get Zope moving on this ISP and promote its goodness! -- Tim Middleton | Cain Gang Ltd | But the trouble was that my hysterical fit x(a)veX.net | www.Vex.Net | could not go on for ever. --Dost (NFTU)

1 0

HTMLDOC under Zope
by Dennis Allison 11 Oct '02

11 Oct '02

I've put up HTMLDOC and am using it under Zope using an External Method to construct the document. Major problems getting the embedded figures to get recognized by HTMLDOC even though they were specified by absolute URLs (which referenced into a LFSProduct instance). Eventually, I backed off and referenced files in the physical file system. Now everything sorta works. I can create pdf documents on the fly, but the behavior at the browser is not what I expect. The HTMLDOC command line is set up in the string "command". Pipes are setup the the htmldoc program run, returning a string which is returned in RESPONSE after the Headers are set. (stin, stout) = os.popen2( command ) stin.write( file.getvalue() ) stin.close() pdf = stout.read() stout.close() # set the response headers for the appropriate content type RESPONSE.setHeader('Content-Type','application/pdf') RESPONSE.setHeader('Content-Length', str(len(pdf)) ) RESPONSE.setHeader('Content-Disposition','inline; filename="%s"' % (outfile_name,)) RESPONSE.write( pdf ) Under Opera 5 with no Acrobat plug-in, this triggers a save-as dialog and saves the new pdf in the browser's local file system. Under IE with an Acrobat plug-in installed, I expect the pdf document to be displayed with an option to save. As it happens, the document raises a diagnostic window indicating that the application type is "unknown" and, hence, the appropriate Active-X control can't be found. The Acrobat reader on the my IE test machines is appropriately configured and regularly downloads pdf's with the desired behavior. Can anyone point out what the problem is? Thanks. -dra

2 1

postgresql and zope
by Alexis Roda 11 Oct '02

11 Oct '02

Hello all, I need to work with a postgresql database from Zope. I've been looking at zope.org but the only product I've found seems a bit outdated (ZPyGreSQLDA-0.3-rjr2.tar.gz, 1999/08/15). Is there some other alternative? TIA -- //// (@ @) ---------------------------oOO----(_)----OOo------------------------ Los pecados de los tres mundos desapareceran conmigo. Alexis Roda - Universitat Rovira i Virgili - Reus, Tarragona (Spain) --------------------------------------------------------------------

4 3