March 2002 - Zope - Zope lists

Security Question
by Jonathan Bryant 15 Mar '02

15 Mar '02

Hi, I've been playing around with zope's users and roles to try and figure out a problem I have. I set up a test folder and created a subfolder. test/ test/folder1 I then create a dtml method called hello which reads: >>Hello <dtml-var "AUTHENTICATED_USER.getUserName()" >! I give the method a proxy role of manager. In folder1/ I create a user called 'tester'. ('tester' is not a user in the parent folder test/) I the goto test/folder1/hello. Log in as tester and get the output >>Hello tester! When I got to test/hello, however I just get >>Hello Anonymous User! When I log in a manager 'jon' i get Hello jon! in both folders. It seems like if I use a proxy role for a method, and a user does not have permissions in that folder AUTHENTICATED_USER.getUserName() returns 'Anonymous User'. Is that correct? Thanks in advance for any help! Jonathan Bryant jonathanbryant(a)hotmail.com _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com

2 1

mozilla multipart/form-data
by Bryan C. Andregg 15 Mar '02

15 Mar '02

Recent versions of mozilla appear to change how multipart/form-data is handled by the client when an input type=file is used. mozilla-0.9.2.1 and the two versions of netscape that I've tried apparently send all form data such that empty file fields are still seen as file objects to Zope. mozilla-0.9.9 sends data such that empty file fields are empty strings (such as a regular input type=text). This of course breaks Zope products that check file field uploads by using the _.len(request['file']).read() method. They'll need to be wrapped in an if statement now, I guess. Has anyone else seen this? I've talked to some mozilla people and their take is that mozilla was and still is doing the right thing. -- Bryan C. Andregg Duke University Medical Center Programmer Dept. of Anesthesiology e <bryan.andregg(a)duke.edu> p +1 919 684 6201

2 1

Re: [Zope] Subfolders in LocalFS
by Jeff Nielsen / UgoFast 15 Mar '02

15 Mar '02

Thierry, I'm not sure I can show you the light, but I might be able to give you an idea. I do a similar thing on my site. I store a path in a FSSession variable and access the files in it with the following syntax: <dtml-in "images[FSSession['LoginCompanyImagesPath']].fileIds()"> With this, I can access subdirectories several levels deep. Hope this helps. >I'm trying to get the content of a subfolder from a directory structure using LocalFS doing the following : ><dtml-in expr="Pictures['subfolder1']['subfolder2']['subfolder3'].fileItems()"> ><dtml-var id> ></dtml-in> >So far, everything looks fine... >The actual problem is that I'm not able to enter a subfolder defined in a variable way. It works out fine when >there is only one subfolder : ><dtml-call "REQUEST.set('location','Summer')"> ><dtml-in expr="Pictures[Summer].fileItems()"> ><dtml-var id> ></dtml-in> >but what to do if we need a subfolder's subfolder ? We can try typing : ><dtml-call "REQUEST.set('location','Summer/Vacation')"> ><dtml-in expr="Pictures[Summer].fileItems()"> ><dtml-var id> ></dtml-in> >to get the content of the Summer/Vacation folder... >But this fails in ZOPE ! Can someone show me the light please. Thanks, Thierry Jeff Nielsen / UgoFast http://www.UgoFast.com Jeff(a)UgoFast.com

1 0

Re: [Zope] Our development Zope 2.5.0 crashes frequently
by Anthony Baxter 15 Mar '02

15 Mar '02

>>> Graham King wrote > Hi all, > > any thoughts? Has anyone had this experience? (and would you like to?) Can you run the Zope process under gdb, and see where it's crashing? Have you looked at the info in Matt's Stability FAQ? There appears to be a bug that's hitting some people - as yet no-one's tracked it down completely. :-( Anthony -- Anthony Baxter <anthony(a)interlink.com.au> It's never to late to have a happy childhood.

1 0

Re: [Zope] Re: get pages from wiki with dtml or python
by Lee Harr 15 Mar '02

15 Mar '02

> > I get a list of about twenty pages, but there are actually more like >fifty > > pages in the wiki. > >What makes you say so ? > [wups, sorry. Forgot to send to the list] If I go to the wiki in the management screens, I get the full list and get the full versions of all of the pages. It is only when I try to access the wiki pages from a separate dtml-method or python script when I do not get the full list, and get truncated versions of some pages. _________________________________________________________________ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com

1 0

RAMCaching: ZClass index_html
by zopedan 14 Mar '02

14 Mar '02

Hello, Prelim: Zope 2.5.0 tar on Redhat Linux 7.2 I have a simple setup, A list of 'Herbs' in a folder. Each 'Herb' is a Zclass, has only a property sheet and an index_html method with which to display itself. The 'Herb' Product was created via the 'Add Product' interface and is not a Zope-wrapped hand-written python class. The index_html is a page template and calls a main template. This is only slightly expensive but I wish to cache the result of each. However, I cannot get the RamCacheManager to recognize the existence of any of either my 'Herb' meta-class or it's index_html function as cacheable. The Herb class does have the 'Change cache settings' Security Permission Set. I'm asking How I get a Zclass I created to have a Ram Cacheable index_html method? Is the page template and the index_html somehow confusing the RamCacheManager? Perhaps I am a moron and am attempting to something it was not meant for, but I cannot seem to prove that I shouldn't be trying, so I will continue. -Dan

1 0

trouble starting zope
by David Kelly 14 Mar '02

14 Mar '02

Hi ... I have installed zope from Zope-2.5.0-linux2-x86.tgz on a virtual server in an ensim webppliance "hosting environment". Ensim creates a user home directory /home/usr and two other directories /home/usr/mainwebsite_cgi (which is a link to var/www/cgi-bin) and /home/usr/mainwebsite_html (which is a link to var/www/html) I have not been able to start zope once installed...it doesnt matter where I install I always get the same message: for example: from an install to a directory in the cgi-bin bash-2.04$ ./start ./start: dirname: command not found /home/usrname/mainwebsite_cgi/zope25/bin/python: can't open file '/home/usrname/z2.py' bash-2.04$ I get the same can't open file '/home/usrname/z2.py' wherever I install zope to (directly in the home directory, in the cgi-bin, in the usr directory etc).... and I dont have root permission to put the install anywhere else.....in order for it to work the install directory that is created when unpacking the tarball would also have to be called usrname (?) Can I get ./start to look for z2.py in the directory it installs to? (in the case of the above example it was in /home/usrname/mainwebsite_cgi/zope25) any help would be gratefully recieved!! regards David

2 1

RE: [Zope] Structured Text and ZPT
by Tom Nixon 14 Mar '02

14 Mar '02

> Subject: Re: [Zope] Structured Text How do you render STX in a ZPT? T.

3 2

Slow mgmt-screens due to Page Templates
by Petter Enholm 14 Mar '02

14 Mar '02

Hi, I have a site running with appx 20K data records in Zope dabase (footprint) and data stored in SQL. I am using page templates which we find to be an excellent way of building pages. However, having about 10 different page templates and one master (StandardLookAndFeel.html :-) ) really slows down the opening of the management screens. Without the page templates it takes two seconds to completely load www.site.no/manage, with the page templates in the root folder it takes 35 seconds (Linux Rehat 7.0 and newer, Intel Celeron 500MHz processor). It is also slow on a really fast twin CPU intel PIII server, running latest versjon of Redhat. FTP and cd into the folder is also sloooooow. The actual site (aside from the management screens) is fast and running OK. So it does not affect the actual performance of the different page templates. Have tested this to be a problem both under 2.4.3 and 2.5.1b1. Does anybody else have this problem ? I am also troubled with Zope restarting every now and then. I am running 2.4.3 and Python 2.1.2. Have seen that the 2.4.3 is unstable, so I am planning an upgrade. Best regards Petter Enholm

4 5

Zope Logo
by Hugh Shiels 14 Mar '02

14 Mar '02

Could someone point me in the right direction. Where is some information on the permissions to use the Zope Logo and is there more than one version of the logo? i.e. when can one add the logo to their website? Thanks Hugh Shiels http://movies.yahoo.com.au - Yahoo! Movies - Vote for your nominees in our online Oscars pool.

2 1