June 2003 - Zope - Zope lists

Security doubt
by Ricardo Núñez 07 Jun '03

07 Jun '03

Hi, How could I avoid sending a cleartext password through the net when I use a http://....../manage? How and where should I configure what? I hope it'd be possible... I'm a RedHat 7.3, Apache 1.3., Zope FastCGI computer manager. Other things: - Muuultiple apache virtual hosts - We have a few https sites. - Zope is recently installed, but we have decided to use it very seriously. - People upload their files with FTP... A big security hole. - With Zope we'd like to authenticate with a LDAP authentication server with passwords in the old crypt encryption. OK, I already know that there are Zope products to do the "LDAP part", that's not an issue. I notice that the "natural way" to manage Zope sites is through '.../manage' interface. I agree that it lets me use any computer all over the world and that's perfect for me, but.... I have doubt with sending cleartext passwords like FTP does. Saludos, Ing. Ricardo Núñez Webmaster de la DST Universidad Simón Bolívar E-Mail: rinunez(a)usb.ve

4 7

slicing ZTUtils.Batch
by Jordan Baker 06 Jun '03

06 Jun '03

Hi I'm writing some somewhat convoluted ZPT that should work tho, <tr tal:repeat="row python:range(2)"> <td align="center" tal:repeat="plate python:plates[row * 2:(row * 2) + 2]"> FORMAT CONTENT </td> </tr> Zope is giving me an error complaining about a missing __getslice__ I was thinking about writing one but then I found out that __getslice__ is deprecated in newer versions of Python. What's the deal here?? TIA, Jordan Baker Contradix Corporation "Holistic IT Solutions"

2 2

Flash remoting and Zope
by Jet Wilda 06 Jun '03

06 Jun '03

Hi, Does anyone know how to get Flash to work with zope so that we can load dynamic data into flash from zope objects(zSQL, python scripts, DTML, etc). I found this // In Flash, from a button instance... on (release) { loadVariablesNum ("http://www.yourzopesite.com/zsqlMethods/loadData", 0); } # In Zope Where loadData is a DTML method with this content: <dtml-call expr="readDB(_)"> That loads a ZSQL method called readDB with the following SQL: SELECT * FROM myTable WHERE user_id = 1; at http://www.ultraviolet.org/mail-archives/zope.2002/0219.html <http://www.ultraviolet.org/mail-archives/zope.2002/0219.html> and it doesn't seem to work. Then I found an XML-RPC client for Flash http://sourceforge.net/projects/xmlrpcflash and that doesn't seem to work. I think to get it to work I would need to run apache 2 and rewrite the header http://www.zope.org/Members/ike/Flash-Zope/FLASH_xmlrpc_zope . Is there anyway to get dynamic data into and out of Flash using zope objects? Also without using apache? Any and all help on this would be greatly apreciated. Thank you for your time. Jet

2 1

Using "Class-Hierarchies" in Zope
by Andreas Pakulat 06 Jun '03

06 Jun '03

Hi, I've got a question regarding ZClasses and the building of Hierarchies using them. For example I have ZClass A and the ZClasses B and C "derived" from A What does Zope do if I create a new Instance of B using manage_addProduct['myproduct'].B_add(myparam). I know that the B_add Script I created is called, but is also the A_add Script called, or can I call it in the B_add script, or do I have to reimplement all necessary things from A_add in B_add? Andreas -- There is a fly on your nose.

3 6

deleting comment
by Stephan Göldi 06 Jun '03

06 Jun '03

how can i delete a comment in plone?

1 0

tree traversal question
by Ruslan Spivak 06 Jun '03

06 Jun '03

Hello, zope users. Does any body have simple solution (python script) for tree traversal(not recursive), so that i can traverse objects level by level from root to bottom? Thanks in advance. Best regards, Ruslan

5 4

LDAP User Folder Problems
by Edward Pollard 06 Jun '03

06 Jun '03

Ok, so I've HUGE problem with the LDAP User Folder I am using the LDAP User Folder to restrict access to a directory to only users that can authenticate against LDAP. This, I thought, was working fine. Then I noticed that if I tried to login successively I no longer required the correct password. Checking the log file, the user is cached. So, when a user is in the authenticated cache, anyone can login with that username and a gibberish password. Anyone with thoughts on this subject? Edward

2 3

Getting Propertysheets of Baseclasses
by Andreas Pakulat 06 Jun '03

06 Jun '03

Hi, hope this is possible to do with ZClasses: I have a ZClass with a property sheet named Attributes and then I derive a ZClass from the first one. This new ZClass gets a propertysheet NewAttr, but in it's _add script I need to set some properties which are only in the base class' property sheet. How do I acces it, as .Attributes.manage_editiProperties doesn`t work Andreas -- You'll feel much better once you've given up hope.

2 1

Reordering objects of an ObjectManager
by Gilles Lenfant 06 Jun '03

06 Jun '03

Hi, I need to change and choose the "natural" order of objects in an ObjectManager (Folder and other subclasses) such as returned by objectIds() or objectValues(). Many thanks for hints. --Gilles

2 3

Re: [Zope] MimeWriter and encode64 with zope file objs
by Dieter Maurer 06 Jun '03

06 Jun '03

Please stay on the list... drew nichols wrote at 2003-6-6 10:00 +1000: > >If your files are not too large, you can use "encode_string" > >and convert the "file" into a string with "str(file.data)". > > > About how large can i go (or is it depndant on the memeory available on > the server? Sure. When you convert the file content into a string, then you need its size as memory. Almost surely, the "sendmail" tag builds its message completely in memory before it transfers it to the mail server. Thus, you will need the message size anyway in memory. Converting to a string will at most double the required memory. Thus, maybe not a big problem. Dieter

1 0