April 2002 - Zope - Zope lists

How to suppress aquisition of an attribute in a Catalog
by Jens Wolk 19 Apr '02

19 Apr '02

Hi everybody, I have two custom classes: a folderish myFolder class and contentish myContent class. Objects of the myFolder class have the attribute folderAttribute. The objects of the myContent class do not have this attribute. myContent objects typically reside inside a myFolder object. For example, I have an object 'AFolder' of the myFolder class in which resides the object 'AContent' of the myContent class. AFolder.folderAttribute is 'it is me!'. In a catalog I created a field index 'folderAttribute'. Now, if I search the catalog for objects with folderAttribute = 'it is me!', the result set contains the AContent object, too, because it aquires the attribute from the containing AFolder object. Is there a way to suppress this behavior (apart from defining a 'dummy' attribute for myContent class or iterating through the result set and excluding all non-myFolder objects)? Thank you very much. Jens Wolk

1 1

developing with zope, vim, cvs and cadaver
by dman 19 Apr '02

19 Apr '02

I've just recently learned zope, and it is great. Far better than J2EE, and faster to work with than plain old CGI. I've got a few difficulties, though. I use vim as my primary editor, and I would like to use cvs to backup my work. I can do this with ZPT and Script objects, but it is rather cumbersome to repeatedly upload the files through the web interface. In addition, I can't do that with ZSQL methods. As I was RTFMing, I discovered that I should be able to use cadaver to move files/objects between the local filesystem (where I use vim and cvs to work with them) and the ZODB. I can access ZPT and Script sources with cadaver, but I can't seem to upload changes with it. I also can't access or update ZSQL methods. Am I missing something really obvious, or is it just very difficult to develop a zope site using some traditional tools? TIA, -D PS. ftp isn't a viable option for this site -- Consider what God has done: Who can straighten what He has made crooked? Ecclesiastes 7:13

3 3

Anonymous ftp
by Chetan Kumar 19 Apr '02

19 Apr '02

Hi all How can anonymous ftp be disabled on Zope ? ftp on port 8021 (medusa) does not need any login/password !!!! It just lets anybody in. This will be noticed by any automatic security checking tool (I used nessus). However, it does not allow any listing/getting/putting of files. TIA Chetan

2 1

PIL Installation Problem
by William GARCIA 19 Apr '02

19 Apr '02

I would like to use the ZPhotoAlbum product to create thumbnails. This product need PIL (Python Imaging Library downloadable at http://www.pythonware.com/products/pil/index.htm) As a newbie, I have some problems with installing PIL If somebody can tell me the steps to set-up PIL, and to test PIL by running a sample, I'm very interested. Thanks in advance. Will

4 3

XUF Tools - unpickable error, anyone else having same?
by Heimo Laukkanen 19 Apr '02

19 Apr '02

Hi, My config: Zope 2.5.0 CMF 1.3 beta exUserFolder 10.8 XUF 0.0.91 ( version.txt btw says it is 0.90, fix that ,-) ) When I try to create new users in the CMF I get unpickable error with traceback below. The same happens on different propertysources. Propertysources themselves seem to work otherwise ok, as does the exUserFolder and CMF. Any ideas? -huima File /root/zopenew/Zope-2.5.0-linux2-x86/lib/python/ZPublisher/Publish.py, line 150, in publish_module File /root/zopenew/zope/Products/Localizer/__init__.py, line 65, in new_publish File /root/zopenew/Zope-2.5.0-linux2-x86/lib/python/ZPublisher/Publish.py, line 114, in publish File /root/zopenew/Zope-2.5.0-linux2-x86/lib/python/Zope/__init__.py, line 158, in zpublisher_exception_hook (Object: Intranet) File /root/zopenew/Zope-2.5.0-linux2-x86/lib/python/ZPublisher/Publish.py, line 102, in publish File /root/zopenew/Zope-2.5.0-linux2-x86/lib/python/Zope/__init__.py, line 172, in commit File /root/zopenew/Zope-2.5.0-linux2-x86/lib/python/ZODB/Transaction.py, line 233, in commit File /root/zopenew/Zope-2.5.0-linux2-x86/lib/python/ZODB/Connection.py, line 345, in commit (Info: (('Products.exUserFolder.zodbPropSource.zodbPropSource', 'zodbPropSource'), '\x00\x00\x00\x00\x00\x00N\xe3', '')) UnpickleableError: (see above)

1 0

tree widget question
by Dennis Allison 19 Apr '02

19 Apr '02

Anyone had experience using the tree widget to render mixed structures? I have a layout something like this -- >>>>>>> Folder Folder XML Folder XML Folder XML Folder XML Folder Folder Folder and so forth. I'd like to point the tree widget at the top level folder and have it render a set of stuff. When an XML (ParsedXML) folder is encountered, the branches method has to be different. (That was the effort of the day, getting tpValues to ignore implementation nodes. I did it by brain surgery on the Package source--a decision that will certainly come back to haunt me.) Presumably, the way to make it work is to use branches-expr and toggle between a folderish objectValues and a ParsedXML-ish tpValues. Anyone had any experience doing this? -d

1 0

url's
by Tom Deprez 19 Apr '02

19 Apr '02

Hi, This is, -I think- not a specific Zope question, but is there a way to: 'http://u10190/netwerk/entities?sortBy=Hostname&sortOrder=asc' not show the '?sortBy=Hostname&sortOrder=asc' part, but without using hidden input fields, or core session product (cookies, etc). Is that even possible? Regards, Tom.

7 7

Re: [Zope] adventure: return tuples from python scripts
by H.de.Wit＠SFK.NL 19 Apr '02

19 Apr '02

>When I "tested" the >script using the "Test" tab, I got a variety of strange and incorrect >results, none quite the same as what you describe. But when I called the >script from a dtml page, the results displayed on the screen were (1,2) for >all the variations I tried. You are completely right. When called from dtml, returning a tuple give correct results, but from a test tab it is not correct. Is this a bug, should i post this to the bug collector wherever that may be? Is is a small one, but shoudn't be necessary to have incorrect results from a test tab. Met vriendelijke groeten, Hans de Wit Stichting Farmaceutische Kengetallen Postbus 30460 2500 GL DEN HAAG Tel. 070-3737448 Fax 070-3737445

1 0

Fw: Zope insecure handling on XML-RPC will reveal information about the server's physical paths.
by Rossen Raykov 19 Apr '02

19 Apr '02

----- Original Message ----- From: "Rossen Raykov" <raikovr(a)yahoo.com> To: <webmaster(a)zope.org>; <webmaster(a)zope.com> Cc: <sacure(a)zope.org>; <secure(a)zope.com> Sent: Thursday, April 18, 2002 10:41 PM Subject: Zope insecure handling on XML-RPC will reveal information about the server's physical paths. > A request like the quoted below will cause Zope to reveal information about > physical paths on the server and about the local servers on which it is > relaying (the last one may be miss configuration, sorry I'm not so familiar > with the platform). > > > > As fare, as I know this problem is present on all currently released Zope > versions including 2.5.0. > > Running the server without -D option wouldn't help. > > > > The last version from CVS seems to handle this correct. > > Thanks to Chris Withers and Shane Hathaway I was able to test in on the > build from 15/04/02 and it worked just fine. > > > > I'm interested to know if there is any other way to fix that bug. > > > > BW when the next release will be available? > > > > Regards, > > Rossen > > > > > -------- CUT HERE --------- > > POST /Foo/Bar/MyFolder HTTP/1.0 > Content-Type: text/xml > Content-length: 95 > > <?xml version="1.0"?> > <methodCall> > <methodName>objectIds</methodName> > <params/> > </methodCall> > > > > _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

ParsedXML tree-widget
by Dennis Allison 19 Apr '02

19 Apr '02

I now have gotten a version of tpValues that seems to do the job and allows display of the DOM in tree form without the noise of the inserted DOM nodes -- necessary if the display is to make sense from the XML source. The fix was to simply detect node types with special names (I did not match against the legal ones, only against the leading character ('#'), so this is a quick workaround not a solution. The problem I have is that to get it all to work I needed to do it by brain surgery, actually modify the Product sources. None of the usual mechanisms has the right namespaces, or so it appears. This has the disadvantage that it effects everything that uses the tree widget on the DOM, including the management screens. I've not checked yet as to what I did there. :-| The change is pretty simple -- in ManageableDOM.py: def tpValues(self): """Return a list of immediate subobjects. Used by the dtml-tree tag. If it's a system inserted tag (e.g., #<something> ) just add the children in instead. This should always be unary.. -dra """ retList = [] # dtml-tree wants to own this for i in self.childNodes: if( i.nodeName[0] == '#'): kids= i.childNodes for k in kids: retList.append(k) else: retList.append(i) return retList

1 0