December 2002 - Zope

Catalog question
by Kevin Carlson 03 Dec '02

03 Dec '02

Is it possible using an expression to disallow an object being added to a catalog based on a certain string being contained in its path? For example, I want to include all objects in a subfolder except if the path includes the name 'sample' in the path. I think this may be possible utilizing the "expr" field on the Find Objects tab of a ZCatalog, but I'm not certain how to write the expression. Can anyone offer some advice? Thanks, Kevin

3 2

index_object() in CatalogPathAwareness
by Thomas Guettler 03 Dec '02

03 Dec '02

Hi! I think a CatalogPathAware object should raise an exception if there is no "default_catalog". I think it is not good that it does silently nothing: CatalogPathAwareness.py: def index_object(self): """A common method to allow Findables to index themselves.""" if hasattr(self, self.default_catalog): getattr(self, self.default_catalog).catalog_object(self, self.getPath()) What do you think? thomas -- Thomas Guettler <guettli(a)thomas-guettler.de> http://www.thomas-guettler.de

3 3

System Administrator Position Description Posted on Zope.com
by Careers At Zope 03 Dec '02

03 Dec '02

Zope Corporation is seeking an experienced System Administrator to work in Fredericksburg, VA. If you are interested in applying for the position, please read the Position Description at: http://www.zope.com/Corporate/CareerOpportunities If you qualify, please apply via email using the address supplied in the PD. Please note that only candidates who are invited for an interview will be contacted.

1 0

I wanted to put this in the archive
by working4aliving 03 Dec '02

03 Dec '02

In case anyone had any syntax issues with a psycopg install on mandrake. This is VERY useful. http://www.initd.org/pub/software/psycopg/FAQ

1 0

Yes, WebDAV and External Editor...
by Bo M. Maryniuck 03 Dec '02

03 Dec '02

Hello. If you use External Editor, you might be surprised: * Open an object, e.g. Python script * Leave and go coffee * After ~20-30 min back your object: a) Not locked anymore b) External Editor can still save!!.. * ...but you realize, that Session Timeout is turned _OFF_. What the problems is here? -- Regards, Bogdan Unix is an operating system, OS/2 is half an operating system, Windows is a shell, and DOS is a boot partition virus. -- Peter H. Coffin

1 0

WebDav lock, unlock query.
by Paul Naveen Raj Jeyaraj 03 Dec '02

03 Dec '02

Hi, We are using web folders for uploading contents into zope. As many users will be editing contents, we need to implement a locking mechanism(permissions to users to lock an item before doing any changes) . Any pointers would be helpful. Thank you. Regards, Paul.

1 0

Error message in DCOracle2
by Dieter Fischer 03 Dec '02

03 Dec '02

Hello Today I switched from an Zope 2.5.0 on SuSE 8.0 to the newest 2.6 of the cvs. Everything went well, but I get the following error message, when I access my Oracle DB. 2002-12-03T00:47:28 PROBLEM(100) TM jar missing sortKey() method: <Products.DCOracle2.db.DB instance at 0x8d55be4> The ZSQL method works well, and all the data is retrieved, but what does it mean? Any ideas? Dieter ++++++++++++++++++++++++++++++++++++++++++++ Dieter Fischer Grid IT GmbH Im Niederholzboden 24 CH-4125 Riehen Fix: +41 61 601 29 62 Mobil: +41 79 204 75 85 mailto:dieter.fischer@grid-it.ch http://www.grid-it.ch

2 1

RE: Permissions, ZPT and absolute_url
by Jay, Dylan 03 Dec '02

03 Dec '02

A bit more exploring reveals that I can call absolute_url on Folder object or aquition path of Folder objects regardless of the fact that they all fail to aquire a view permission. However if I try to do the same on another ZPT or PythonScript etc, then I get the follwing error " Error Type: Unauthorized Error Value: You are not allowed to access doRegistration in this context " It seems that the security framework barfs to a traversal of anything else other than folders??? > -----Original Message----- > From: Jay, Dylan > Sent: Tuesday, 3 December 2002 2:59 PM > To: 'zope(a)zope.org' > Subject: Permissions, ZPT and absolute_url > > > I'm having a bit of trouble with security and ZPT. I am > locking down my site such that only the cookie login page has > anonymous view permission. This page however is used with the > VirtualHost monster so all the links off it have something > like tal:attributes="here/reg/register.html/absolute_url". > > Now from looking at the code absolute_url is a public method > so shouldn't call be allowable without having to make > register.html viewable to anonymous? Without ZPT proxy roles > would be the answer but that isn't offer with ZPT :( > > ---- > Dylan Jay mailto:djay@avaya.com > Avaya Communication Tel: +61-2-9352-8642 > Level 3, 123 Epping Road FAX: +61-2-9352 9224 > Nth Ryde NSW 2113 Mobile: 0409 606 171 > AUSTRALIA >

1 0

Permissions, ZPT and absolute_url
by Jay, Dylan 03 Dec '02

03 Dec '02

I'm having a bit of trouble with security and ZPT. I am locking down my site such that only the cookie login page has anonymous view permission. This page however is used with the VirtualHost monster so all the links off it have something like tal:attributes="here/reg/register.html/absolute_url". Now from looking at the code absolute_url is a public method so shouldn't call be allowable without having to make register.html viewable to anonymous? Without ZPT proxy roles would be the answer but that isn't offer with ZPT :( ---- Dylan Jay mailto:djay@avaya.com Avaya Communication Tel: +61-2-9352-8642 Level 3, 123 Epping Road FAX: +61-2-9352 9224 Nth Ryde NSW 2113 Mobile: 0409 606 171 AUSTRALIA

1 0

RE: [Zope] iptables rules for zope webserver
by Jianping Zhu 03 Dec '02

03 Dec '02

Thank you for your advice, after i open the port 8022 the problem is still there. This is that ws_ftp can connect to zope, but the directoris in zope can not be seen in the ws_ftp window. i checked the iptables rules for regular ftp in my iptables.rules. Thesre are several lines as following:(this rule is set up by the privious administrator, and he has left) ------------------------------------------------------------------------- # Passive inbound and outbound FTP iptables -A INPUT -i $IFACE -p tcp --sport $UP_PORTS --dport $UP_PORTS \ -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -o $IFACE -p tcp --sport $UP_PORTS --dport $UP_PORcS \ -m state --state ESTABLISHED,RELATED -j ACCEPT ------------------------------------------------------------------------ I did some experiment to this. The interesting thing is that if i comment out this rules. regular ftp can access my linux server but the directories in my linux server can not be seen. My guess is maybe i need some lines like that for zope ftp to let passive tranfer mode work, but i do not how to do it. Any further suggestion will be appreciated. Jianping On Mon, 2 Dec 2002, Jeff Sacksteder wrote: > you need to allow port 8021 and 8022. > > iptables -A INPUT -i $IFACE -p tcp --dport 8021 -m state --state > NEW,ESTABLISHED -j ACCEPT > iptables -A OUTPUT -o $IFACE -p tcp --storc 8021 -m state --state > ESTABLISHED -j ACCEPT > iptables -A INPUT -i $IFACE -p tcp --dport 8022 -m state --state > NEW,ESTABLISHED -j ACCEPT > iptables -A OUTPUT -o $IFACE -p tcp --storc 8022 -m state --state > ESTABLISHED -j ACCEPT > > You might also consider writing them like this, I think it's easier to see > what is happening. > > iptables -A OUTPUT -o $IFACE -p tcp -m state --state ESTABLISHED -j ACCEPT > iptables -A INPUT -i $IFACE -p tcp --dport 8021 -j ACCEPT > iptables -A INPUT -i $IFACE -p tcp --dport 8022 -j ACCEPT > >>Date: Sun, 1DDec 2002 22:49:12 -0500 (EST) >>From: Jianping Zhu <zjp(a)arches.uga.edu> >>To: redhat-list(a)redhat.com >>Cc: zjp(a)arches.uga.edu >>Subject: iptables rules for zope webserver >>I have a redhat linux 7.1 server with a zope websever on iE. I use >>iptables as firewall. following is the iptables rules for zope:o >>#===========J===========i===============n=================== >>## Zope >>iptables -=aINPUT -i $IFACE -p tcp --dport 8080 -j ACCEPT >># Allow inbound ftp >>iptaeles -A INPUT -i $IFACE -p tcp --dport 8021 -m state --state \ >> NEW,ESTABLISHED -j ACCEPT >>iptables -A OUTPUT -o $IFACE -p tcp --storc 8021 -m state --state \ >> ESTABLISHED -j ACCEPT >.#======================================================================= >>I am trying to use ws_ftp to send files to zope sever via port 8021 ( in >>ws_ftp >>session property->advanced i set remote port as 8021 and checked passive >>transfers). If I stop iptables, i can conect to zope via ftp (port >>8021) >>and ftp files to zope. If the iptables is on, it still can connect to >>zope but i can not see the directories in the mote site text filed of >>the ws_ftp >>windows. it seems that it can connect to zope but can not display the >>directories in zope. and i failed to ftp it the zope server. >>Therefore, i believe the above iptalbles rules for zope have problem. >>how >>can i >>fix this problem and let zope ftp work? >>Any suggestion will be greatly appreciated. >>Jianping

2 2