March 2002 - Zope - Zope lists

Zope Hotfix 2002-03-01 (Ownership Roles Enforcement)
by Matthew T. Kromer 01 Mar '02

01 Mar '02

This hotfix addresses an important security issue that may affect some users of Zope versions 2.2.0 through 2.5.x The issue involves the checking of security for objects with proxy roles. The context of the owner user that created the object with proxy roles was not being taken into account when determining access to the object with proxy roles. This flaw could allow users defined in subfolders of a site with sufficient privileges to access objects at higher levels in the site that they would not normally be able to access. We highly recommend that any Zope site running Zope 2.2.0 through Zope 2.5.x have this hotfix product installed to mitigate the issue. Zope 2.5.1 and 2.4.4 will contain a fix for the issue, at which time the hotfix can be removed. DOWNLOAD Download this hotfix from http://www.zope.org/Products/Zope/Hotfix_2002-03-01/Hotfix_2002-03-01.tgz -- Matt Kromer Zope Corporation http://www.zope.com/

1 0

Problem with saving error_message to db
by Jens Grewen 01 Mar '02

01 Mar '02

Hi, I want to save the error_message and/or the error_type/error_value to a connected Interbase DB. When an error is raised I call an sqlmethod from the standard_error_messege that should save the error_messeg to Interbase. The problem is that the transaction of the sql method probably rolles back because it is called from standard_error_message. Is there a way to submit the error_message. (commit the transaction) Thanks in advance Jens

1 1

ZSyncer with SiteRoot-apache proxypass ?
by de ZORZI Frederic 01 Mar '02

01 Mar '02

Hello, I'm trying to use ZSyncer between a production server and a development server in our lan. When I try to zsync from the production server, I have the folowing error : * ProtocolError * <ProtocolError for xxxxx/ZSyncer: 404 Not Found> Does ZSyncer support this configuration ? Thanks, Fred.

3 3

ZMySQLDA 2.0.8 and MySQL-python-0.9.0
by sbergmann＠weblog.de 01 Mar '02

01 Mar '02

Hi! Does somebody know if it´s possible to change the default values for the "Advanced Options" in ZMySQLDA? The Default is "Maximum rows to retrieve: 1000" "Maximum results to cache: 100". If I have a big table and want to select more then 1000 rows I always have to change the value after creating a new ZSQLMethod. When I forget these the results are not valid. I tried to to find the Values in the sourcecode but didn´t find. Bye Steffen

2 1

Re: [Zope] Making a folder-like object?
by Yves Bastide 01 Mar '02

01 Mar '02

Frank Tegtmeyer wrote: > > Pythonscripts are traversable - you can have a Python script > "retrieve" that handles the additional path information as > parameters or simply ignores some parts. > > Regards, Frank > Duh. I *knew* it was easy! Combining traverse_subpath and setHeader, I now have a perfect solution. Thanks everybody! Yves

1 0

setting default home page
by Adam 01 Mar '02

01 Mar '02

Greetings, all; I have Zope-2.4.3-linux2-x86 and am having problems making Zope look at my index.html as the default page. I can see Zope is currently looking at index_html but I want to change that setting to look at index.html. I'm accustomed to Apache which uses this in its httpd.conf: <IfModule mod_dir.c> DirectoryIndex index.html </IfModule> How can I set Zope to use index.html instead of index_html ? Thanks, Adam

3 2

Help with 'sequence-item'???
by Michael R.Keller 01 Mar '02

01 Mar '02

Hi, I have searched the archives for references to this and read what I could find in two Zope books and the online zope book, but cannot figure out why this one does not work. If anyone could help point me in the right direction, I certainly would appreciate!!!! :-> Running Zope 2.43 locally on a Windows platform (W2K) Installed the ExtFile product, can add files to folders and am using the following code to iterate over the contents: <ul> <dtml-in "objectValues('ExtFile')"> <li> <dtml-var "(_['sequence-item'].icon_gif())"> <a href="&dtml-absolute_url;"><dtml-var title></a> <dtml-var descr> </li> </dtml-in> </ul> The line referencing the 'sequence-item' should be returning the icon that is associated with this document mime type. Instead, I get a single icon and no text or URL output when this is run on a folder with 2 documents in it. If I remove the 'sequence-item' line, output is as expected, a URL and the description of the documents. Again, any help with that line would be appreciated!! Thanks, Mike

1 0

Re: [Zope] installing and running zope problem (r.h. linux 7.2)
by seb bacon 01 Mar '02

01 Mar '02

Keep it on the list! On Fri, 2002-03-01 at 17:12, Duane Douglas wrote: > At 05:02 PM 3/1/2002 +0000, seb bacon wrote: > >Not quite sure how you've got into that situation. To run Zope as a > >user 'zope' you can still *start* it as root. As root, try: > > > >./start -u zope > > now i'm getting the startup exception again. the output is below: > <snip> > 2002-03-01T17:20:31 PANIC(300) z2 Startup exception > Traceback (innermost last): > File /usr/local/zope/Zope-2.5.0-linux2-x86/z2.py, line 688, in ? > IOError: [Errno 13] Permission denied: > '/usr/local/zope/Zope-2.5.0-linux2-x86/var/Z2.pid' So, the user 'zope' does not have write access to the var directory and therefore cannot create the Z2.pid file. seb

2 3

RE: [Zope] Programmatically adding LocalFS objects
by abg＠comco-inc.com 01 Mar '02

01 Mar '02

Solved my own problem... Create the following External Method: <code> from Products.LocalFS.LocalFS import LocalFS from Products.LocalFS.LocalFS import manage_addLocalFS def addLocalFSInstance(self, id, path): ob = LocalFS('file_attachments', '', path, None, None) ob.id = id self._setObject(id, ob) </code> To call it via DTML: <dtml-call "addLocalFSInstance('foobar', 'C:/foobar/')"> Aaron Gillette abg(a)comco-inc.com > I'm sure there's an easy fix for this one, but I sure can't find it. > According to LocalFS' source, this should add a LocalFS to the ZODB: > > <dtml-call "manage_addLocalFS('name', 'title', 'basepath')"> > > It doesn't work. Here's the error: > > Error Type: NameError > Error Value: global name 'manage_addLocalFS' is not defined > > I've searched the message boards and found users with the > same problem, but > no posted solutions. > > Thanks In Advance, > > Aaron

1 0

installing and running zope problem (r.h. linux 7.2)
by Duane Douglas 01 Mar '02

01 Mar '02

hello i posted a similar message yesterday and i didn't get any responses. i'm new to zope and i'm trying to get 2.5.0 running on my box. i installed zope as root (which i'm now thinking was a mistake) and i got an exception when i ran the startup script. someone on this list suggested that i try running zope as another user. so, i created a user called *zope* and granted ownership of the zope directories to this user. i then ran the zope startup script as *zope*. i now get a permission denied message when the startup script runs. the output is below: [zope@grumpy Zope-2.5.0-linux2-x86]$ ./start ./start: /usr/local/zope/Zope-2.5.0-linux2-x86/bin/python: Permission denied ./start: exec: /usr/local/zope/Zope-2.5.0-linux2-x86/bin/python: cannot execute: Permission denied [zope@grumpy Zope-2.5.0-linux2-x86]$ pwd /usr/local/zope/Zope-2.5.0-linux2-x86 [zope@grumpy Zope-2.5.0-linux2-x86]$ cd bin [zope@grumpy bin]$ ls -l total 1424 -rwxrwxrwx 1 zope users 1453722 Jan 25 13:47 python [zope@grumpy bin]$ the file *python* is owned by the zope user who has full access to the file. yet, i'm getting a *permission denied* error when the startup script attempts to execute this file. any ideas on how to resolve this issue? should i uninstall zope and reinstall it as the zope user? tia

2 1