April 2002 - Zope - Zope lists

Ri:Re: Zope and Databases
by Stefano Vedovelli 04 Apr '02

04 Apr '02

Hello On Monday 2002-02-25 at 12:22:27 -0500, Matthew T. Kromer wrote: > Is it the case, then, that DCOracle2 works with Oracle 9i? It should, as I have compiled without problems time ago, but cannot tell you if recently Oracle changed something and now it does not anylonger. It will be interesting if you post the result, or maybe write an how-to. Rgds Stefano

1 0

More on Calling a dtml method from a product
by Geoff Armstrong 04 Apr '02

04 Apr '02

>Date: Wed, 3 Apr 2002 20:03:46 +0200 >To: hans <hans(a)beehive.de> >From: Geoff Armstrong <geofstro(a)monaco.mc> >Subject: Re: [Zope] Calling a dtml method from a product >Cc: >Bcc: >X-Attachments: > >OK, I tried this: > >myResult_if_any = DTMLMethod.DTMLMethod.__call__(self.myMethod, >REQUEST=REQUEST) > >But; I'm still getting the error "NameError: >Error Value: global name 'REQUEST' > >The method I'm calling is contained by self, which is a folderish object. > >I'm making this call from one of the methods of the product class >that self is an instance of. > >Any further thoughts? > >Thanks again > geoff > > > >>Geoff Armstrong wrote: >> >>> At 15:54 +0100 3/4/02, hans wrote: >>> >>> ><dtml-call "REQUEST.set( 'yourname', yourvalue)"> >>> >>> Yes, I have a number of such calls in the DTMLMethod I'm attempting >>> to call from the python product. >> >>i understand, that you call a DTMLMethod, which contains these calls >> >>> >> I know this must seem like a dumb question; but can you tell me how >>> >> to pass an empty REQUEST object in the call, so the DTMLMethod can >>> >> set and make use of these variables? >>> >> >>> > > __call__(myDTMLMethod, REQUEST???) >> >>from the top of my head >>myResult_if_any = myDTMLMethod(self, REQUEST=REQUEST) >>or >>myResult_if_any = myDTMLMethod(self) >> >>This effects a "binding" of the REQUEST object (right hand side) >>to a parameter named REQUEST (in the second case default = {} >> >>> >a) REQUEST is an object that seemingly behaves just like a python >>> >dictionary >>> >b) the __call__-method of DTMLMethod has REQUEST={}, >>> >so by default if no 2nd parameter is given, it is empty. Note that >>> >DTMLMethods >>> >are usually interpreted in the context (=namespace) of their caller. >> >>= client >> >>> >c) the third parameter **kw is a sequence of keyword parameters. >>> >>> So does that mean I need to pass an empty dictionary as the second >>> parameter to _call_ so that my DTMLMethod will have a REQUEST object >>> that it can start filling with variables using <dtml-call >>> "REQUEST.set( 'yourname', yourvalue)"> ? >>> >>> Could you provide the exact syntax I need to use in _call_ ? Whatever >>> I try, I always get the error "global name 'REQUEST' is not defined"? >>> >>> Presumably because the DTMLMethod I'm calling is trying to set >>> variables in a REQUEST object; but it's not getting one, and I still >>> don't understand how to provide this. I'll also need to provide some >>> other variables to the DTMLMethod. I guess I need to use **kw for >>> that? Again the exact syntax I need to use, by example, would be >>> appreciated. >>> >>> The end of the traceback is as following: >>> >>> (Object: REQUEST.set('newsMgr', id)) >>> (Info : REQUEST) >>> File <string>, line 2, in f >>> NameError: (see above) >> >>The name "REQUEST" is not bound to >>------------------------------------------------------------- >>Who's got only a hammer sees the world as a nail >>hans augustin (software developer) hans(a)beehive.de >>beehive elektronische medien GmbH http://www.beehive.de >>phone: +49 30 847-82 0 fax: +49 30 847-82 299 > -- http://www.imagebites.net/newsland The most convenient news site on the net!

1 0

How to escape from restricted code in Python Script?
by Garikoitz Araolaza 04 Apr '02

04 Apr '02

Hi! I'm too used to the "magic of Zope" and when it doesn't work I have to ask to the wizards. ;-) I'm recycling the ShoppingCart demo in Zope 2.5 in order to use session tracking for a shopping cart system I'm developping. I have problems with the last lines in the addItems Python Script: return container.index_html(REQUEST) The problem is that when calling /MyShop/addItem?..... It seems that namespace is limited to the addItem Python Script, so my Zope can't even found the standard_html_method to render it inside the index_html method I'm trying to return to the user. It works however, whet I call directly /MyShop/index_html Where could I be missing something? Thanks for your help! Gari _________________________________________________________ Aurki Euskara hutsezko bilatzailea http://www.aurki.com Zure laguntza behar dugu. Egin zaitez editore!

2 2

XML-RPC , can not use objectIds trough the web
by Robert Rottermann 04 Apr '02

04 Apr '02

Hi Zopistas, I am trying to access Zope trough xml-rpc as described by Amos in http://www.xml.com/pub/a/2000/01/xmlrpc/index.html?page=1 (and as found in other examples) This examples assume that you can access the content of a folder trough the web by visiting something like http://localhost:8080/objectIds however this results in following error: The object at http://localhost:8080/objectIds has an empty or missing docstring. Objects must have a docstring to be published. is there a way to circumvent that? thanks for your tips Robert www.redcor.ch

4 5

Re: [Zope-dev] Re: [Zope] isecure XML-RPC handling.
by Rossen Raykov 04 Apr '02

04 Apr '02

Hi all, My point was that Zope is revealing internal information that is believed to be private and invisible for the Internet users. It happens in its default (debug) installation and even after -D option is removed from the startup script. I try some XML-RPC requests against www.zope.org (2.3.2) and against the default 2.5.0 installation for Windows (with and without -D option). In both cases Zope was reviling the physical location of the distribution. In the case of www.zope.org it was reviling even information about it's internal network (this may be also possible in 2.5.0 but I do not have the time to create complicated enough configuration). In general Zope have not to reveal any physical information neither about it's installation nor about the internal network behind it. If you need to print traces - use relative paths to the server root. If the debug option is omitted - just print the error and do not print any stack dumps at all! People have to be aware that the default installation is in debug mode and the results of that. I believe many people will be surprised to learn that they are exposing information about their private networks and server setups. Finally two clarifications: 1. Zope 2.3.2 do support XML-RPC. Try example one against www.zope.org it will work just fine! 2. Zope Zope 2.5.0 in it's default installation (debug mode) still is revealing information about the physical location of the installed server. See the dump in example two. It is produced as a result of the XML-RPC example from my first e-mail. Regards, Rossen ------------ Example one --------------- POST /Foo/Bar/MyFolder HTTP/1.0 Content-Type: text/xml Content-length: 110 <?xml version='1.0'?> <methodCall> <methodName>title_or_id</methodName> <params> </params> </methodCall> ------------ Example two --------------- ... Bobo-Exception-File: C:\PROGRA~1\WebSite\bin\lib\xmllib.py ... Traceback (innermost last): File C:\PROGRA~1\WebSite\lib\python\ZPublisher\Publish.py, line 150, in publish_module File C:\PROGRA~1\WebSite\lib\python\ZPublisher\Publish.py, line 114, in publish File C:\PROGRA~1\WebSite\lib\python\Zope\__init__.py, line 158, in zpublisher_exception_hook (Object: Zope) File C:\PROGRA~1\WebSite\lib\python\ZPublisher\Publish.py, line 63, in publish File C:\PROGRA~1\WebSite\lib\python\ZPublisher\HTTPRequest.py, line 357, in processInputs File C:\PROGRA~1\WebSite\lib\python\ZPublisher\xmlrpc.py, line 47, in parse_input File C:\PROGRA~1\WebSite\lib\python\xmlrpclib.py, line 531, in loads File C:\PROGRA~1\WebSite\bin\lib\xmllib.py, line 172, in close File C:\PROGRA~1\WebSite\bin\lib\xmllib.py, line 405, in goahead File C:\PROGRA~1\WebSite\bin\lib\xmllib.py, line 794, in syntax_error Error: (see above) ----- Original Message ----- From: "Brian Lloyd" <brian(a)zope.com> To: "R. David Murray" <bitz(a)bitdance.com>; <zope-dev(a)zope.org> Cc: "Rossen Raykov" <raikovr(a)yahoo.com> Sent: Wednesday, April 03, 2002 12:20 PM Subject: RE: [Zope-dev] Re: [Zope] isecure XML-RPC handling. > > I think most people missed the point here. I don't think Rossen > > is asking for help on running zope or getting xml-rpc to work with > > it. He's observed a "security" problem: he believes the fact that > > a traceback including path names is included in the error response > > is a security exposure. This has been discussed on zope-dev before, > > but the fact remains that the security community *does* treat > > exposure of filesystem path information as a security issue. > > Right. There is already code for Zope 2.6 and Zope 3 that > addresses this. Shane's new traceback formatting makes the > trace information far more readable in addition to removing > filesystem path information. > > > Brian Lloyd brian(a)zope.com > V.P. Engineering 540.361.1716 > Zope Corporation http://www.zope.com > _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

locale roles don't work with HTMLDocument procucts
by Marcus Schopen 03 Apr '02

03 Apr '02

Hi, I have problems with HTMLDocument (both products) on on Zope 2.5.0 (woody debian). Installed the HTMLDocument product (http://www.zope.org/Members/sf/HTMLDocument) After that I created a local role "lehstuhl", which has for testing purpos same rights as a manager (I just selected all). Then I created a new folder "/test" with an user "test". User "test" is set to local roles "lehrstuhl". As user "test" I created some HTMLDocuments in the /test folder using Zope's managment screen. Problem: when connecting via FTP as user test to folder "/test", it's impossible to to download these HTMLDocuments. FTP Client says "unauthorized". Upload is fine. Giving user "test" the role "Manager" everything works fine. That's strange, because role "lehstuhle" has all rights like a manager !!! I get a similar behaviour with the other HTMLDocument wrapper (http://www.zope.org/Members/unfo/howto_wrapper) Here is download o.k., but upload doesn't work. Before upgrading to Zope 2.5.0 both products worked without problems with 2.3.3. Any help is welcome !!! Thanks & bye Marcus -- ,---- [ Marcus Schopen ] | (0> | //\ P.O. Box 10 25 25 | V_/_ D-33525 Bielefeld, Germany | `----

1 2

ZPT and Python Product
by Thomas Guettler 03 Apr '02

03 Apr '02

I have a problem with ZPT and a Python Product. I set the page template like this: class myClass(Folder): StandardTemplate=PageTemplateFile('StollDMS-www/StandardTemplate', globals(), __name__='StandardTemplate')) it works to use TAL. But it fails if I try to define a macro. I get: Error Type: TALESError Error Value: exceptions.NameError on global name 'aq_parent' is not defined in "standard:'container/StandardTemplate/macros/page'", at line 1, column 1 StandardTemplate: <html metal:define-macro="page"> <head> <title>The Title</title> </head> <body> <a href="search">[Suchen]</a><br> <a href="create_new_doc">[Neues Dokument]</a><br> <div metal:define-slot="body"> This is where the page's body text goes. </div> </body> </html> Page that uses StandardTemplate: <html metal:use-macro="container/StandardTemplate/macros/page"> <body> <span metal:fill-slot="body"> <form action="edit_lists_action" method="get"> ... I use the ZPT that comes with Zope2.5.1b1 thomas

2 1

Zope produce core file
by Eyal Marantenboim 03 Apr '02

03 Apr '02

Hi, I have a problem with zope. im using the Zope 2.5.0 (i downloaded the binary version from zope site). and once in a while zope just dies producing a core file with no log messages. I have it as a fastcgi under cobalt with apache 1.3.20. anyone had the same problem?? thanks in advance, Eyal.

2 1

Problem with ZWiki, manage, Attribute Error, __getslice__
by PAULICKA,CHRISTOPHER (HP-PaloAlto,ex1) 03 Apr '02

03 Apr '02

Hello, I manage a number of ZWikis on top of Zope here at HP EMSO (http://www.hp.com/products1/embedded/) After creating my third ZWiki, I left the manager in charge to edit it like crazy. Now, neither he nor I can access the management page for the ZWiki. Whenever we go to http://batik.corp.hp.com/ChaipediaWiki/manage, we get the following error: Zope Error Zope has encountered an error while publishing this resource. Error Type: AttributeError Error Value: __getslice__ None of the other ZWikis are effected. No matter how I access it, from the root, to manage, down to the Zwiki, or from Zwiki to manage, I always get this problem. Even the root management screen can no longer enter into ChaipediaWiki to edit properties and pages, but just gets the above Zope Error. Are there any ideas for solutions? Can I reinstall Zope, or Zwiki? Will this destroy my existing ZWikis and Zope content? Suggestions would be greatly appreciated. :-) Christopher Paulicka christopher_paulicka(a)hp.com Artifex in Batik Group Embedded Software Organization (EPS) Hewlett-Packard 1501 Page Mill Road, 1603 (6L-W61) Palo Alto, CA 94305 (650)857-2336

2 1

Z-SQL Method performance
by Rudi Wurm 03 Apr '02

03 Apr '02

my situation: Zope 2.4.2 (binary release, python 2.1, linux2-x86) ZMySQLda 2.0.8, MySQLdb Revision 1.11 My problem is the perfomance when executing a Z SQL Method selecting a huge number of records, like 'select nr, name, ... from <table> where ...'. dependend on the where-specification i have to deal with sets about =~ 10000. my mysql-client tells me, that mysql by itself takes about .02 to .04 secs to perform the query, when enterd by hand into the mysql-client. a small python-program using routines from the _mysql-module doesnt take much longer. But telling a dtml-method to use the Z-SQL-Method in an <dtml-in <name of z-sql-method>> statement, it takes about 4-5 seconds, and thats very long. Does one know how to speed it up or how to tune a z-sql-method, and whats the reason for the delay ? And: when i test a query in the Z SQL Method test-tab, i get 50 results per page, with the same speed-delay. but when i click on the <next 50 ...> link, i get instantly the next 50 records displayed. How is this perfomed and how can i achieve this in batch-processing via <dtml-in start=?? ...> ? The batch-approach i use looks like <dtml-in expr="sql-query(REQUEST)" size=10 start=query_start> <dtml-if sequence-start> <dtml-if previous-sequence> <a href="<dtml-var URL><dtml-var sequence-query>query_start=<dtml-var previous-sequence-start-number>"</a> </dtml-if> </dtml-if> (my display of data) <dtml-if sequence-end> <dtml-if next-sequence> <a href="<dtml-var URL><dtml-var sequence-query >query_start=<dtml-var next-sequence-start-number>"></a> </dtml-if> </dtml-if> </dtml-in> , its like the example from the zope-book, batch processing with in-tag, chapter 8. activating caching for the Z SQL method helps not, because when i use it it returns allways the old set of data although the variables specifying the where-clause have changed, when a new query is send. thanks in advance Rudi free people, free living, free software

2 1