September 2002 - Zope

Heads up! (OpenSSL worm in the wild)
by Adam Manock 13 Sep '02

13 Sep '02

More info at: http://online.securityfocus.com/bid/5363/discussion/ Also see below... Adam >Date: Fri, 13 Sep 2002 18:16:33 +0100 >From: Ben Laurie <ben(a)algroup.co.uk> >To: Bugtraq <BUGTRAQ(a)SECURITYFOCUS.COM>, > Cryptography <cryptography(a)wasabisystems.com>, > cypherpunks <cypherpunks(a)einstein.ssz.com>, > Apache SSL <apache-ssl(a)lists.aldigital.co.uk> >Subject: OpenSSL worm in the wild > > >I have now seen a worm for the OpenSSL problems I reported a few weeks >back in the wild. Anyone who has not patched/upgraded to 0.9.6e+ should be >_seriously worried_. > >It appears to be exclusively targeted at Linux systems, but I wouldn't >count on variants for other systems not existing. > >Cheers, > >Ben. > >-- >http://www.apache-ssl.org/ben.html http://www.thebunker.net/ > >"There is no limit to what a man can do or how far he can go if he >doesn't mind who gets the credit." - Robert Woodruff

1 0

ZCatalog bobobase_modification_time searching
by Jaroslav Lukesh 13 Sep '02

13 Sep '02

Hi all, I want to search documents that are older than specified date and mail results So I add Zcatalog, at Index I was set bobobase_modification_time and do process with Add Zsearch interface. But I dont know right question for bobobase_mod_time. Would you like to kick me, point into some product or howto, please? Many thanks, J. Lukesh

2 1

load_site.py and zpt files
by jbr＠FIZ-Karlsruhe.DE 13 Sep '02

13 Sep '02

Hello, I am trying to enhance the load_site.py script: Files with suffix .zpt should be created as a zope page template file. I am using Zope 2.5.1 on Unix, I copied load_site.py to load_site_fiz.py and added the function upload_zpt def upload_zpt(object, f): dir, name = os.path.split(f) f=open(f) call(object.manage_addProduct['PageTemplates'].manage_addPageTemplate( id=name, title='', text=f)) Running the modified script: load_site_fiz.py to upload file: test33.zpt gives the error message: upload_zpt test33.zpt Traceback (most recent call last): File "/opt/projects/idep/zope/utilities/load_site_fiz.py", line 311, in ? if __name__=='__main__': main() File "/opt/projects/idep/zope/utilities/load_site_fiz.py", line 102, in main for f in files: upload_file(object, f) File "/opt/projects/idep/zope/utilities/load_site_fiz.py", line 121, in upload_file return globals()['upload_'+ext](object, f) File "/opt/projects/idep/zope/utilities/load_site_fiz.py", line 301, in upload_zpt call(object.manage_addProduct['PageTemplates'].manage_addPageTemplate( id=name, title='', text=f)) AttributeError: Function instance has no attribute '__getitem__' Any suggestions how I should change the function upload_zpt ? Juergen Berger

3 2

RAMCacheManager Vs Cache manager in control panel
by Lea Smith 13 Sep '02

13 Sep '02

Hi, What is the difference between the cache settings in the control_panel compared to creating a RAMCachemanager for a specific site. Do they interact with each other or effect each other when you change settings? I guess the cache settings in the zope control panel effects all other caches, is this correct? Havn't been able to find much info about there use or how best to optomize them. Thanks for any help. Richard __________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com

3 2

Re: ZClasses and Permissions (Zope Collector 444)
by Dieter Maurer 13 Sep '02

13 Sep '02

Please stay on the mailing list! I do not want to become a private consultant! Brent Hendricks writes: > ... > The situation is this: My ZClass contains a script (called renameFiles) > that calls manage_renameObjects. I'd like anyone who can View that > script to be able to run it correctly. I first tried setting a proxy > role of Manager on the script, but that didn't work. The reason is almost surely a bug in "manage_pasteObject". It does not honour "execution permissions" such as proxy roles. > Digging into the > Zope code a bit, I discovered that manage_renameObjects falls under the > "View management screens" permission, Almost surely, your problem is not caused by a missing permission on "manage_renameObjects" itself, but inside "manage_pasteObjects". Cancel the browser login dialog and look at the traceback. Where does the exception come from? > so I mapped that permission to > "View" on the the ZClass "Define Permission" tab (ie. View Management The "Define Permission" tab in the ZClass itself is ineffective. It should be removed. I expect this is "Collector 444"). > Screens in the left column, and View in the right). This, however, also > failed to work. Next I tried doing the mapping on the "Security" tab of > the script itself. No go. This may be able to map "View management screens" such that you can access "manage_renameObjects", but probably "manage_pasteObjects" still fails because the necessary permission (create permission) is checked on the target ObjectManager. Please check what access is really denied to you (as described above). > What is the "correct" thing to do? Find out, what the real problem is. Then, we can think about it again. Dieter

2 2

Passing parameters to Pyhton method
by Juan Manuel Ruiz García 13 Sep '02

13 Sep '02

Hi all, I'm trying to do something that maybe can't be done... First, I get some variables joined in DTML variable "present" with: <dtml-call "REQUEST.set('present.name',name)"> <dtml-call "REQUEST.set('present.lastname',lastname)"> If I use <dtml-var present.name> I can see what I expected (the name), but I want to pass the "present" "record" to a Pyhton Method... I know that if I build a form and use the ":record", it would work, but I don't want to build a form unless necessary. Zope returns a "NameError" when I call the script with present as a parameter. Is there any way to make this work? Actually, my "present" variable contains 10 fields, so I just want to pass ONLY one parameter instead of 10, that's why I don't want to give all the parameters alone, I want them "grouped" Thank you... _______________________________________________________________ Yahoo! Messenger Nueva versión: Webcam, voz, y mucho más ¡Gratis! Descárgalo ya desde http://messenger.yahoo.es

3 2

Printer Friendly
by eric.n.dunn＠bankofamerica.com 13 Sep '02

13 Sep '02

Does anyone know how-to create a printer-friendly method for the CMF in ZOPE 2.5.1?

2 1

Weird ZMI error
by Jon Erickson 13 Sep '02

13 Sep '02

When I log into the zope ZMI with... http://127.0.0.1/manage/ ... i recieve the following error and traceback: ------------------------------------------------------------------------- Error Type: TypeError Error Value: ('len() of unsized object', , None) Traceback (innermost last): File /usr/local/src/zope/lib/python/Products/Hotfix_2002-04-15/__init__.py, line 51, in publish_module File /usr/local/src/zope/lib/python/ZPublisher/Publish.py, line 187, in publish File /usr/local/src/zope/lib/python/Zope/__init__.py, line 226, in zpublisher_exception_hook (Object: Zope) File /usr/local/src/zope/lib/python/ZPublisher/Publish.py, line 171, in publish File /usr/local/src/zope/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: manage_main) File /usr/local/src/zope/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: manage_main) File /usr/local/src/zope/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__ (Object: manage_main) File /usr/local/src/zope/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in _bindAndExec (Object: manage_main) File /usr/local/src/zope/lib/python/App/special_dtml.py, line 244, in _exec (Object: manage_main) File /usr/local/src/zope/lib/python/DocumentTemplate/DT_In.py, line 711, in renderwob (Object: objectItems) File /usr/local/src/zope/lib/python/DocumentTemplate/DT_In.py, line 839, in sort_sequence (Object: objectItems) File /usr/local/src/zope/lib/python/ZODB/Connection.py, line 544, in setstate TypeError: (see above) --------------------------------------------------------------------------- The error and traceback appear in the frame that should display the contents of the root folder. The frame on the left hand side of the page correctly displays all the directories. If I select a folder, it will display it's contents with no problems... just seems to be a problem with the root directory. Any help is appreciated, Jon

3 3

custom product with images
by Jim Kutter 13 Sep '02

13 Sep '02

I want to make a product that basically has two "properties": an image, and a blurb (HTML text) that an individual can upload the image source in the addForm... So I basically want an image with a blurb property (well, and a custom view method) Background info - I want to make a custom content object that someone can add using the ZMI that is a featured blurb on our site, which has an image and a blurb (and a linkthrough, but that's easy). Ideally the blurb would find the section's master template macro and use that, but I figured I'd learn to flap my wings before dive bombing... How would I go about doing this? Should I make a ZClass inherited off an Image? -jim

2 1

RE: [Zope] Printer Friendly
by sean.upton＠uniontrib.com 13 Sep '02

13 Sep '02

Hand-code it in postscript level 2? ;) I assume you mean printer-friendly html... Seriously, this would simply be yet another ZPT or DTML skin method in the skins tools for the skin you are using; this is not really a Zope issue as much as it is a template design issue (as well as understanding of the skins tool, and perhaps ZPT/DTML issue). You might get more mileage with this question if you send it to the Zope-CMF list, and search for 'skins' on cmf.zope.org. You will get even more mileage if you look at the skins ZPT code in the CMF portal_skins tool. If you search, I'm pretty sure there is even examples on cmf.zope.org for this particular case. Sean -----Original Message----- From: eric.n.dunn(a)bankofamerica.com [mailto:eric.n.dunn@bankofamerica.com] Sent: Friday, September 13, 2002 8:49 AM To: zope(a)zope.org Subject: [Zope] Printer Friendly Does anyone know how-to create a printer-friendly method for the CMF in ZOPE 2.5.1? _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0