October 2003 - Zope - Zope lists

freezope website
by Margaret Tam 24 Oct '03

24 Oct '03

Hi, I cannot access freezope.org or my own freezope websites. "Cannot find server" error. Thanks, Margaret _________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

1 0

RE: AUTHENTICATED_USER is not reliable! [Was: [Zope] become user(su inside Zope) - pretend to be another user]
by Jim Kutter 24 Oct '03

24 Oct '03

I've been using the REQUEST.OTHER namespace for this purpose. Is that safe to do? -jim -----Original Message----- From: Dario Lopez-Kästen [mailto:dario@ita.chalmers.se] Sent: Friday, October 24, 2003 12:20 PM Cc: zope(a)zope.org Subject: Re: AUTHENTICATED_USER is not reliable! [Was: [Zope] become user(su inside Zope) - pretend to be another user] Jens Vagelpohl wrote: >> Why is everybody so obsessed with AUTHENTICATED_USER? This variable is >> not suitable for anything deserving the name "security". It is NOT >> SAFE to assume that it will contain anything useful. > > > Amen to that. > > jens Right, when can we consider REQUEST to be fairly safe? I.e. I know that it cab be manuoulated by any kind of script during the lifetime of a request, and aslo be populated from the URL. I consider manipulation from scripts acceptable behaviour, from the URL not. What I am actually trying to say is the following: I need a secure namespace available, a` la REQUEST, during the lifetime of a request - lets call it SAFE_REQUEST, that cannot be manipulated from the URL. Preferrably RAM-bound. Any ideas on how to achieve that (other than reading source, which I allready have begun to). Thanks, /dario -- -- ------------------------------------------------------------------- Dario Lopez-Ka"sten, IT Systems & Services Chalmers University of Tech. _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

A plea for equality
by Dave Fregon 24 Oct '03

24 Oct '03

Hi all, I have come across something that I think most people have come across before in IT .. and in general .. something called sexism. Something a female zopista told me today tipped me over the edge to write this .. it's something I have seen myself on plenty of occassions ... No this is not something 'rampant' in the community .. just something that happens occassionaly .. and being one of those people that despise the ignorance that leads to these types of comments .. have to say something. I just wanted to ask everyone to think about the communities they are in, and that they are made up of all sorts, and all types. Our IRC channels are made up of them as well. A lot of the time these people stay 'quiet', and learn and listen ... to developers that talk about their female counterparts in derogatory ways .. as though the channels are made up up macho men. Knowing the community doesn't feel this way as a whole, I would like to say to those few people to THINK before being so ignorant. I know personally of people that are avoiding certain IRC channels due to the fact they find them male dominated, and sexist, and I find this SHOCKING. It's not in the people or who's there .. but some regular users attitudes to a community they feel comfortable with as they are leaders or regulars in their area. I just want people to think .. if you want to talk about your relationships .. or relationships, or peoples life choices in general .. be aware the community is made up of ALL of them. thanks for your time to read this .. Dave

8 7

__before_publishing_traverse__ and caching
by Tobias Herp 24 Oct '03

24 Oct '03

Hi, I have a Python product which features a __before_publishing_traverse__ method, setting some REQUEST variables and in turn deleting the optional "([language],[template])" path element. Now I'd like to get the Cache Manager to cache these http://the.domain/path/to/site/(en,default)/home etc. pages (and, of course, appropriate versions of http://the.domain/path/to/site/(en,default)/site.css etc as well). However, when I create a RAM Cache Manager in the site object, this won't use these virtual paths (with "(en,default)" just behind the site object) but the physical ones. Is it possible to tell the Cache Manager to cache just every request to a page object, preserving the given path? tia, Tobias

4 6

RE: [Zope] Permission with addFile module
by McDonnell, Larry 24 Oct '03

24 Oct '03

Hi, Thanks, I'll try this -----Original Message----- From: Paul Winkler [mailto:pw_lists@slinkp.com] Sent: Friday, October 24, 2003 10:18 AM To: 'Zope@Zope. Org' (E-mail) Subject: Re: [Zope] Permission with addFile module On Fri, Oct 24, 2003 at 10:09:22AM -0400, McDonnell, Larry wrote: > Hi, > > I need for my users to upload files within Zope. I have a copy of addFile You seem to be a bit confused about Zope. No crime in that :-) I don't know what you mean. You don't need to make copies of anything in order to let users add files. What is addFile? > and it works when I am superuser. I assume you mean Manager? > I tried setting permissions through the > security tab for the file but the users are prompted for user name and > password. These users do not have aacounts within Zope. I do not need this > since this is an intranet environment. Go to the management interface of the topmost folder where you want users to add files. Click on the Security tab. Find the permission labelled "Add Documents, Images, and Files". Check the box in the Anonymous columns. You're done. > Can someone point to some > documentation that addresses this problem. I googled around and this has > been addressed before but the link to those sites did not exist. Thanks. Read this, several times if necessary: http://zope.org/Documentation/Books/ZopeBook/2_6Edition/Security.stx -- Paul Winkler http://www.slinkp.com Look! Up in the sky! It's EXPLOSIVE RADIOISOTOPIC DEATH ON A STICK! (random hero from isometric.spaceninja.com) _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

Permission with addFile module
by McDonnell, Larry 24 Oct '03

24 Oct '03

Hi, I need for my users to upload files within Zope. I have a copy of addFile and it works when I am superuser. I tried setting permissions through the security tab for the file but the users are prompted for user name and password. These users do not have aacounts within Zope. I do not need this since this is an intranet environment. Can someone point to some documentation that addresses this problem. I googled around and this has been addressed before but the link to those sites did not exist. Thanks. Larry McDonnell

2 1

RE: [Zope] Problems migrating site
by Wilson, Derek 24 Oct '03

24 Oct '03

Check to make sure that the portalActions match on both the servers. Thanks, Derek Wilson -----Original Message----- From: Jesper Holmberg [mailto:jesperh@dsv.su.se] Sent: Wednesday, October 22, 2003 8:40 AM To: Plone-users List; Zope List Subject: [Zope] Problems migrating site I am trying to move my Plone site to a different server. But when I access some of the content on my site at the new location, I get error messages. This is what I have done: 1. Installed Zope, CMF, Plone and all relevant Products I use on the new server 2. Exported my Plone site in the ZMI of the old server, and imported it in the new server. 3. Ran the scripts found at http://cmf.zope.org/Members/cleath/movePortal, which supposedly updated the skins, and updated any ownership information. As an example, when I hit "my preferences", I get the errors: Site error This site encountered an error trying to fulfill your request. The errors were: Error Details Error Type AttributeError Error Value getActions Obviously there is something which misses the attribute getActions, but what does it mean? The backtrace from when I try to access "my preferences" goes like this (sorry so long): Traceback (innermost last): Module ZPublisher.Publish, line 98, in publish Module ZPublisher.mapply, line 88, in mapply Module ZPublisher.Publish, line 39, in call_object Module Shared.DC.Scripts.Bindings, line 252, in __call__ Module Shared.DC.Scripts.Bindings, line 283, in _bindAndExec Module Products.PageTemplates.ZopePageTemplate, line 228, in _exec Module Products.PageTemplates.PageTemplate, line 95, in pt_render <ZopePageTemplate at /wlplone/personalize_form> Module TAL.TALInterpreter, line 200, in __call__ Module TAL.TALInterpreter, line 244, in interpret Module TAL.TALInterpreter, line 703, in do_useMacro Module TAL.TALInterpreter, line 244, in interpret Module TAL.TALInterpreter, line 726, in do_defineSlot Module TAL.TALInterpreter, line 244, in interpret Module TAL.TALInterpreter, line 669, in do_condition Module TAL.TALInterpreter, line 244, in interpret Module TAL.TALInterpreter, line 669, in do_condition Module TAL.TALInterpreter, line 244, in interpret Module TAL.TALInterpreter, line 414, in do_optTag_tal Module TAL.TALInterpreter, line 399, in do_optTag Module TAL.TALInterpreter, line 394, in no_tag Module TAL.TALInterpreter, line 244, in interpret Module TAL.TALInterpreter, line 669, in do_condition Module TAL.TALInterpreter, line 244, in interpret Module TAL.TALInterpreter, line 668, in do_condition Module Products.PageTemplates.TALES, line 220, in evaluate URL: /wlplone/personalize_form Line 492, Column 12 Expression: standard:'personal' Names: {'container': <PloneSite instance at 9383130>, 'default': <Products.PageTemplates.TALES.Default instance at 0x873476c>, 'here': <PloneSite instance at 9383130>, 'loop': <SafeMapping instance at 9423980>, 'modules': <Products.PageTemplates.ZRPythonExpr._SecureModuleImporter instance at 0x873490c>, 'nothing': None, 'options': {'args': ()}, 'repeat': <SafeMapping instance at 9423980>, 'request': <HTTPRequest, URL=http://130.237.161.108/wlplone/portal_form/personalize_form>, 'root': <Application instance at 92d91c0>, 'template': <ZopePageTemplate at /wlplone/personalize_form>, 'traverse_subpath': [], 'user': Pepsi} Module Products.PageTemplates.Expressions, line 206, in __call__ Module Products.PageTemplates.Expressions, line 201, in _eval Module Products.PageTemplates.Expressions, line 108, in render Module Products.CMFPlone.PloneFolder, line 89, in __call__ Module Products.CMFPlone.PloneFolder, line 180, in _getViewFor AttributeError: getActions What is missing? TIA, Jesper _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

2 1

Changing the name of the access log file
by cnk＠caltech.edu 24 Oct '03

24 Oct '03

I have tried Googling for the answer to this but the words I have been trying seem to common - or return copies of how to turn on the rotating_file_logger. Did that, and it is swell. Now I would like my access log to be named something more descriptive than Z2.log. I am sure that someone has changed the logger - or the z2.py script - so that you can pass it a file name, not just the file path, for the access log. Can anyone point me to such a write up? Looking at the source, I have a couple of ideas what to chagne but would prefer to use a pre-tested hack to configure my first Zope server. -- cnk(a)caltech.edu

2 1

problem is SimpleUserFolder
by Sreekanth S Rameshaiah 24 Oct '03

24 Oct '03

Hi, I have implemented [ simple user folder ] based acl_users. After customizing all the zsqls , when i click on acl_users i see a list of check boxes followed by icons. but names are not being displayed. I cheked the href . It has http://202.56.252.23/abc/expert04/acl_users/manage_users?name=%3Cr%20instan… the getUserName sql is SELECT DISTINCT login as NAME FROM staff the getUserDetails sql is SELECT login as NAME,pword as password,role FROM staff WHERE staff.login=<dtml-sqlvar name type="string"> Am I doing anything wrong? Regards, - sree

6 9

New location for Zope Collectors
by Jens Vagelpohl 24 Oct '03

24 Oct '03

Hi everyone, The issue collectors formerly hosted on collector.zope.org have been migrated to the main zope.org website and are now available at the following address:: http://www.zope.org/Collectors/ I have tried to find all links to these collectors, but there might be old links in various places that still point to collector.zope.org. The hostname collector.zope.org will, once the DNS change has propagated, point to www.zope.org. jens

3 5