May 2003 - Zope - Zope lists

How to modify 'title' of an object
by Rares Vernica 29 May '05

29 May '05

Hi, How can I modify the 'title' of an object in DTML? Thanks in advance, Rares _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com

3 3

Zope Training : California, USA, Feb 18-21, 2003
by Munwar Shariff 30 May '04

30 May '04

Hi All, Zope Training is re-scheduled to start from Feb 18th,2003 instead of Feb 17th, 2003. We are pleased to announce that CIGNEX Technologies, Inc., a Zope® Corporation training partner, has scheduled Zope Training in San Jose, CA February 18 through February 21, 2003. Additional information and participation details are available at: http://www.cignex.com/site/Services/ZopeTraining/index_html Best regards, Munwar Shariff CTO, CIGNEX Technologies, Inc T: 408.501.0455 x303 "Digital Strategies. Defined. Implemented!"

1 5

Dynamic script loading
by Pawel Lewicki 17 Nov '03

17 Nov '03

Hello, I don't know if my question is more zopish or pythonish. I have a Zope product. I had to add the specific functionality which is needed very rarely. I would be glad to import external module only when it is needed, do the job and free my mind and extra memory it consumed. How should I do that? I have to admit that I don't find myself as an experienced Python programmer. I just discover depths of this incredible language while extending my Zope product. Maybe anyone would help me with some relevant links. Thanx in advance, Pawel Lewicki

5 7

Temporary Folder Content - Session Data
by Edward Pollard 27 Sep '03

27 Sep '03

Sometimes I feel really bad writing to the list for help. It's when I have very simple, very basic questions. I'm sure that the answer is somewhere, but I've not been able to find it. I'm having a thought that each of my Zope projects that uses sessions should use individual session containers. I had some problems when one of our student developers and I both shared the same variable names. Quite hilarious. However, it seems to be conventional wisdom to store session data containers in temporary folders, as the default session data container is. This of course goes away on a restart. Is there anyway to get them to stick, as the default session data container does? Thanks a ton Edward

5 6

External Editor stopped working for me
by Roger Fisher 12 Sep '03

12 Sep '03

I love the External Editor product - it's worked flawlessly on a Win98 system. I just moved to a Win/XP system. External Editor worked for about a week, but now for some reason always fails with: FATAL ERROR: {Errno 1] No such file or directory: C:\\Documents and Settings\\Roger\\Local Settings\\Temporary Internet Files\\Content.IE5\\mumble\object[1].zope I'm wondering why this worked for awhile, and now stopped. And for some reason, my actual directory structure now includes ...\Local Settings\Temp\Temporary Internet Files\Content.IE5 Not sure how the extra Temp got in there, or how to circumvent it. Thanks for any advice.

3 3

getSlice error in wiki folder with many objects?
by Bill Seitz 30 Jun '03

30 Jun '03

I thought maybe the problem below was related to running zope 2.3.2. But experimenting on my laptop with v2.5.1 doesn't seem to help, either. This makes it impossible to change object properties, etc. ------ I get this when I try to view a particular folder through the ZMI. I suspect I have too many items in the folder. I'm running zope 2.3.2, and don't want to change right now (until I make some zwiki code changes). Is there a workaround? Or a hack to add/copy a DTML document into the folder? Error Type: AttributeError Error Value: __getslice__ Traceback (innermost last): File /usr/local/Zope-2.3.2-src/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /usr/local/Zope-2.3.2-src/lib/python/ZPublisher/Publish.py, line 187, in publish File /usr/local/Zope-2.3.2-src/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: Traversable) File /usr/local/Zope-2.3.2-src/lib/python/ZPublisher/Publish.py, line 171, in publish File /usr/local/Zope-2.3.2-src/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: manage_main) File /usr/local/Zope-2.3.2-src/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: manage_main) File /usr/local/Zope-2.3.2-src/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__ (Object: manage_main) File /usr/local/Zope-2.3.2-src/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in _bindAndExec (Object: manage_main) File /usr/local/Zope-2.3.2-src/lib/python/App/special_dtml.py, line 236, in _exec (Object: manage_main) File /usr/local/Zope-2.3.2-src/lib/python/Shared/DC/Scripts/Bindings.py, line 338, in __render_with_namespace__ (Object: manage_tabs) File /usr/local/Zope-2.3.2-src/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in _bindAndExec (Object: manage_tabs) File /usr/local/Zope-2.3.2-src/lib/python/App/special_dtml.py, line 236, in _exec (Object: manage_tabs) File /usr/local/Zope-2.3.2-src/lib/python/DocumentTemplate/DT_With.py, line 146, in render (Object: _(manage_options=filtered_manage_options())) File /usr/local/Zope-2.3.2-src/lib/python/DocumentTemplate/DT_In.py, line 717, in renderwob (Object: manage_options) File /usr/local/Zope-2.3.2-src/lib/python/DocumentTemplate/DT_Util.py, line 334, in eval (Object: URL[-(_.len(action)):]==action or URL[-17:]=='/manage_workspace' and _['sequence-start']) (Info: action) File <string>, line 0, in ? File /usr/local/Zope-2.3.2-src/lib/python/DocumentTemplate/DT_Util.py, line 174, in careful_getslice AttributeError: (see above) __________________________________ Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. http://search.yahoo.com

2 2

Using tal and no dmtl.
by John Kipling Lewis 12 Jun '03

12 Jun '03

We are trying to use only TAL in our Zope documents. It's been frustrating in some ways. Is there a way in TAL to simply run a python function? We've been using the omit-tag to do this, but I find this cludgy. <div tal:omit-tag="python:foo()"></div> Are other people just using dmtl for this sort of thing. Is there a way to do it in TAL that isn't cludgy? John -

7 10

Adding Custom Namespaces to ZPT?
by Hartmut Goebel 09 Jun '03

09 Jun '03

Hi, I want to add custom namespaces and/or entities to ZPT. How can I do this? I tried searching the web, but did not find a sollution. What I want to do is something like this: <my-ns:email name="Egon Meier" /> or &author; # link to author's mail-address I know, this is possible using TAL/METAL and tags like <span metal:replace="python:my_ns.email(name='Egon Meier')" /> but this is obvious a bit longish and clumsy to type. Any hints for solving this? +++hartmut

3 4

Storing Data inside Zope
by Tom P. Allred 06 Jun '03

06 Jun '03

Just how bad an idea is it to use Zope object Properties to store numeric/text application data? My first Linux (or otherwise) Zope app will be a gratis case tracking system for a friend's small (himself plus 3 staff) law office. Other than setting up new clients and cases (maybe a few a day) the most frequent data changes will be adding new activity detail records which are small. Only a couple of reports are run each day. Overall transactions will be few and small. My initial idea was to use MySQL or PostgreSQL for data storage. While developing the framework of the app I want to be able to store/retrieve a few records for testing. Since every bit of Zope (HTML, DTML, Python, etc.) is new to me, every time I start to do something I have to learn something else first. I'm not complaining - that's how I expected it to be - but if I could sort of skip over learning ZSQL and defining/using MySQL tables right now and stay focused on my input forms and reports, then come back to data storage later, that would really nice. My plan is to use scripts for all I/O which would allow me to change I/O methods later without changing whatever code is calling the scripts. I considered using text files or XML data files within Zope for testing but in each case I'd have to write the parsing and update-data code myself which would take time and be thrown out later by the final ZSQL code. Then I thought about defining some object that takes Properties, adding Property names/types for (example) the client master record and saving that as a data template (not ZPT). Then each time there was a new entry I'd make a copy of the template and update the Properties using Zope's built-in APIs without ever giving the data objects any content. I think I could also use Zope catalog features for data searches. Without knowing more about Zope the only downside I see is the data being encapsulated in the app tree, therefore requiring any data to be purged before copying/exporting the app somewhere. It will also make the Zope object grow but adding data is going to make any database grow no matter which is used. I can also imagine there might be a philosophical point about keeping the data outside the Zope object. But is it a bad idea for some practical reason? That's a question with two branches. The first is, is it completely bad and I shouldn't do it even temporarily for testing? The second is, is it bad for production but okay for development/testing? If there isn't a good reason for not doing it then it would certainly be nice to be able to stay in Zope for everything so that only Zope would have to be installed to move the package to new machines and so I can stay on track without having to branch off into data storage issues. I was thinking about using the File object as my data object since it supports Properties. Any other suggestions? Thanks, Tom P. Allred, MCSE, RHCE, CCNA Allred Data Consulting, Inc. 704-633-0311 x826 www.AllredData.com Tom(a)AllredData.com

9 15

issues of trust, why security via mod_rewrite fails
by Jamie Heilman 03 Jun '03

03 Jun '03

Since February I've been railing on about the importance of protecting your Zope installations and their Products with rewrite rules and URI filters. Well, unfortunately I was overlooking something rather obvious--Zope's built in magical type coercion gets around most URI matches entirely. The rewrite rules I've suggested in the past aren't enough. If this style of filtering is to be continued it must be augmented with filters that are capable of examining the request resource, the query parameters, and basically anything that can externally control Zope's traversal stack. Couple of brief examples; whereas before you may have desired to filter access to the HelpSys mechanism (a notorious leak of information[1] about what products your zope service has installed as well as a potential vector for other badness) by doing something like RewriteCond %{REQUEST_URI} /(Control_Panel|HelpSys)(/|$) RewriteRule .* - [F] in your Apache configuration, now I realize its not enough. Getting around that restriction is as easy as http://examplehost/?HelpSys:method= The type coercion hooks, :method, :action, :default_method, etc. evidently alter the traversal stack. Even stuff like http://examplehost/?_vh_foo:method= will work, bypassing the URI filters I've been extolling[2] for protecting Virtual Host Monsters. Dylan had good reason to voice suspicion about type coercion back in March[3], but the issue was skirted and ended up focusing on tainting application data (which, of course, is also important). So where do we go from here? Its becoming evident to me that while I can probably finagle a rewrite rule that looks for certain tainted names in the GET and POST query variables, Zope has more avenues of control than your typical web application. There's still things like WebDAV, XML-RPC, etc. to worry about, any of which may contain additional hooks which allow frobbing the traversal stack. Writing filters for all those is going to be seriously trying. I'll postulate that the path of least resistance is simply giving up any hope of filtering requests for sanity, and instead focusing on replacing the problem Products and establishing new, secure, paths of configuration. HelpSys should not allow non-authenticated access. VirtualHostMonsters should not obtain their rewriting information from the traversal stack, indeed the traversal stack should not be viewed as a source of trusted information, much like the the request URIs can't be viewed as trusted[4]. ... and so on. This should be fun. -- Jamie Heilman http://audible.transient.net/~jamie/ "We must be born with an intuition of mortality. Before we know the words for it, before we know there are words, out we come bloodied and squalling with the knowledge that for all the compasses in the world, there's only one direction, and time is its only measure." -Rosencrantz [1] http://marc.theaimsgroup.com/?l=zope-dev&m=103893600209090&w=2 [2] http://marc.theaimsgroup.com/?l=zope&m=104426779414836&w=2 [3] http://marc.theaimsgroup.com/?l=zope&m=104718222616059&w=2 [4] http://collector.zope.org/Zope/813 I should point out the VHM workarounds for bug 813 I mentioned are made moot by this latest realization, the only sane thing to do now is to patch, patch, and patch some more.

2 4