July 2004 - Zope - Zope lists

Draconian security precautions in PythonScripts
by Michael Ekstrand 16 Jul '04

16 Jul '04

In a PythonScript I have, I am needing to iterate over a dictionary returned by another PythonScript. When I do: for key, val in container.time_extract(evt.time).iteritems(): some stuff I get an AccessControl.unauthorized.Unauthorized that says "You are not allowed to access 'a particular tuple' in this context." If I iterate over just the keys, it does the same, except for 'a particular string'. It's seeming like there are some sever restrictions on what I can do with some tuples or dictionaries. Should I be able to access them, and if so, what am I missing? Or is there a reason why this access is prohibited? TIA, -Michael

2 1

zope 2.7.0 rejecting data.fs from zope 2.6.2
by Hamzat Kamal 16 Jul '04

16 Jul '04

Hello, I am unable to copy my data.fs from my zope 2.6.2 to the new version of zope 2.7.0. Is there other way to do this than the normal way of using the data.fs to overwrite the existing data.fs of the new installation. Thanks

2 1

Re: [ZODB-Dev] Getting rid of ZODB versions (was Re: [ZWeb] Are Versions evil?)
by Dieter Maurer 15 Jul '04

15 Jul '04

Jim Fulton wrote at 2004-7-15 10:00 -0400: > ... >Given this, I'd like to formally announce the intention to deprecate >versions in both Zope and ZODB. We will formally deprecate versions when >we have a way to maintain long-running transactions in Zope. I have a good >idea how they would work and I'd be happy to advise volunteers on how to >proceed. Any volunteers? Any objections? Versions are nothing else than long running transactions (which the additional but not essential feature to be able to join such a transaction). Locking might be necessary for long running transactions as the longer the transaction the higher becomes the risk of conflicts and the more costly a redo of the transaction. When we get long running transactions I will be happy to let Versions alone. -- Dieter

1 0

[ANN] Zope 2.7.2 RC1 released
by Andreas Jung 15 Jul '04

15 Jul '04

Hi all, on behalf of Zope Corporation and the Zope community I am pleased to announce the release of Zope 2.7.2 RC1. You can download it the sources from http://www.zope.org/Products/Zope/2.7.2RC1/ Installers for Microsoft Windows will be available shortly! THIS RELEASE IS ALSO A SECURITY UPDATE AND CONTAINS A FIX FOR A SECURITY PROBLEM IN PAGE TEMPLATES. YOU ARE STRONGLY ENCOURAGED TO UPGRADE TO ZOPE 2.7.2 OR INSTALL THE HOTFIX #2004-07-13 WHICH WAS RELEASED YESTERDAY. For more information on what is new in this release, see the CHANGES.txt and HISTORY.txt files for the release: http://www.zope.org/Products/Zope/2.7.2RC1/CHANGES.txt http://www.zope.org/Products/Zope/2.7.2RC1/HISTORY.txt Zope 2.7.2 final will be released with the next seven to ten days. For more information on the available Zope releases, guidance for selecting the right distribution and installation instructions, please see: http://www.plope.com/Books/2_7Edition/InstallingZope.stx -- Andreas Jung (andreas at zopyx dot com)

5 19

Re: Getting rid of ZODB versions (was Re: [ZWeb] Are Versions evil?)
by Peter Sabaini 15 Jul '04

15 Jul '04

Jim Fulton wrote: > Peter Sabaini wrote: -- snip -- >> Should I advise against using Versions in the Zope Book? > > Yes. I suggest that moving versions to an appendix with an > introduction explaining their problems and noting that they will > be replaced some time in the furture. Ah, I like that -- this way theyre clearly marked as the special case that they probably are :-) Thanks, peter. > Jim >

1 0

mod_python and zope
by David Bear 15 Jul '04

15 Jul '04

is anyone using both mod_python and zope together? when installed mod_python the make file recommended building python without threads. Yet, zope needs python thread correct? Anyone know of a way to make these peacefully coexist? -- David Bear phone: 480-965-8257 fax: 480-965-9189 College of Public Programs/ASU Wilson Hall 232 Tempe, AZ 85287-0803 "Beware the IP portfolio, everyone will be suspect of trespassing"

2 1

i18n local content
by Milos Prudek 15 Jul '04

15 Jul '04

Can someone help me understand current i18n situation in Zope? I know that Localizer is obsolete. I have a working site in Localizer and I want to move to a non-obsolete solution. I migrated Localizer's MessageCatalog to Placeless Translation Service. Perfect. But I don't know how to migrate Localizer's LocalContent. LocalContent allows multiline strings in a single entity. PTS does not permit multiline strings. Which product can be used for this in Zope? -- Milos Prudek _________________ Most websites are confused chintzy gaudy conflicting tacky unpleasant... unusable. Learn how usable YOUR website is! http://www.spoxdesign.com

2 1

KeyError
by Asad Habib 15 Jul '04

15 Jul '04

Hello. I am calling a DTML method via a link and inside this method a Z SQL method is called. When this method is called, Zope flags me with a KeyError. The error is as follows: Site Error An error was encountered while publishing this resource. Error Type: KeyError Error Value: 0 Troubleshooting Suggestions This resource may be trying to reference a nonexistent object or variable 0. The URL may be incorrect. The parameters passed to this resource may be incorrect. A resource that this resource relies on may be encountering an error. For more detailed information about the error, please refer to the error log. If the error persists please contact the site maintainer. Thank you for your patience. The error log gives the following traceback: Traceback (innermost last): Module ZPublisher.Publish, line 100, in publish Module ZPublisher.mapply, line 88, in mapply Module ZPublisher.Publish, line 40, in call_object Module OFS.DTMLMethod, line 130, in __call__ - <DTMLMethod instance at 3a4f5f0> - URL: http://nameofmachine/edit_data/manage_main - Physical Path: /edit_data Module DocumentTemplate.DT_String, line 474, in __call__ Module DocumentTemplate.DT_In, line 676, in renderwob Module AccessControl.ImplPython, line 161, in guarded_getitem Module AccessControl.ZopeGuards, line 67, in guarded_getitem Module Shared.DC.ZRDB.DA, line 487, in __getitem__ Module Shared.DC.ZRDB.Aqueduct, line 313, in __getitem__ KeyError: 0 edit_data is the DTML method invoked via a link and the name of the Z SQL method is retrieve_names_sql and its definition is as follows: SELECT last_name, first_name, middle_name FROM test WHERE id = <dtml-var "REQUEST.SESSION.get('userId')"> The Z SQL method is called using the following statement: <dtml-call "retrieve_names_sql(REQUEST, _)"> Any help would be greatly appreciated. Thanks. - Asad

1 1

PluggableAuthService + CMF
by Nathan R. Yergler 15 Jul '04

15 Jul '04

I'm working on porting a CMF application to use the Pluggable Authentication Service (http://zope.org/Members/urbanape/PluggableAuthService/) on Zope 2.7. I've successfully implemented authenticate and roles scripts for a Scriptable Plugin. By successfully I mean it works for non-CMF folders in Zope. Under CMF, users who do not have the Manager role are just dumped back to the login screen. I initially believed this was due to their inability to create member folders in Members, but after setting permissions appropriately, the same behavior persists. Can anyone shed some light on this issue? Has anyone successfully used PluggableAuth with CMF? Thanks in advance for your help, Nathan

1 0

ZPT and URL's
by Michael Fox 15 Jul '04

15 Jul '04

Hi *, How can I tack on a sting to my request/BASE1? eg. something like the following. <a href=".." tal:attributes="href request/BASE1 + '/some_page_template'">link</a> Regards, Michael Fox ^-^ Analyst/Programmer <`-`> ___ Century Software ' `' '. Tel +61 2 9460 1422 `. ` ' .'. Fax +61 2 9460 3098 ||.' '._/'.`.' www.CenturySoftware.com.au "" "

3 2