March 2005 - Zope - Zope lists

how to set request http status.
by bahriesz＠yahoo.com 11 Mar '05

11 Mar '05

How do we set the http status of the Request reply back to browser?. This is needed in situation where we defined our own http status. Those you are familiar with snakelets framework, there is request.send_error(code, message). thanks. __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/

3 2

RE: [Zope] Does Zope support HTTP Trace method??
by Jay Zeemer 11 Mar '05

11 Mar '05

Actually if you query the Zope web service to see what it supports it tells you: Allowed HTTP Methods: GET, HEAD, POST, PUT, DELETE, OPTIONS, TRACE, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK, UNLOCK TRACE allows for some XSS problems and I just want to make sure I have the server locked down against as many vulnerbilities as I can. I can not find any mention of the Zope Web Server supporting TRACE so I am trying to find out if it actually does support it or if its just reacting to the query. The tool I used is called Nikto, its just an HTTP assult tool. It looks through a predefined list like Nessus, but restricts its self to possible HTTP issues. It also plays a lot nicer on a network :) Jay -----Original Message----- From: Chris Withers [mailto:chris@simplistix.co.uk] Sent: Friday, March 11, 2005 10:35 AM To: Jay Zeemer Cc: 'zope(a)zope.org' List Mailing Subject: Re: [Zope] Does Zope support HTTP Trace method?? Jay Zeemer wrote: > In a lot of HTTP servers there is a method used for debugging sessions and > such called TRACE. Does Zope support this?? And if so is it active, or > inactive by default?? How can I turn this on and off?? I'm not aware of any TRACE support in Zope. You run it behind Apache maybe? You been poking with Nessus? ;-) Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

2 1

Zope 2.7.0 like ZEO.
by Fernando Lujan 11 Mar '05

11 Mar '05

Hi, Where can I find a tutorial or how-to about using the ZODB like ZEO? I will upgrade from 2.6.0 to 2.7.5. Thanks in advance. Fernando Lujan

1 0

On a CMF site, when user get "404 Not Found" error, it appears they are logged out automatically....
by Gary Zhu 11 Mar '05

11 Mar '05

Hi, In a CMF site, (Plone site too) when a member tries to load a page that doesn't exist. They get the site error page. However, this page gives the appearance as if the user as been automatically logged out. Because, in the header of the site, CMF displays the user as Guest, and plone displays "you are not logged in". Is this a bug, or is there a reason behind this behavior. I am using zope 2.7.4, cmf 1.4.7, plone 2.0.5 Thanks, Gary

3 3

Re: [Zope] opening a ZPT from a script
by john blair 11 Mar '05

11 Mar '05

--- Leticia Larrosa <LETICIA(a)tesla.cujae.edu.cu> wrote: > Hi all: > I have the following script: > "return context.ss" > and in the same folder have a ZPT named ss whose > html code is: > "hi" > testing my script I obtain the following message: > "<ZopePageTemplate at ss>" > instead of the web page with the text "hi", any idea > why? > I use zope2.7 > thanks in advance > Leticia > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > try return context.ss() __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/

3 2

ExternalFile errors
by Chris H 11 Mar '05

11 Mar '05

Greets; Testing externalFile from collective cvs consistantly gives the following error upon creating an instance, regardless of user that starts the zope process. URL: manage_addExternalFileForm Line 36, Column 5 Expression: standard:'container/gethostname' Names: {'container': <__FactoryDispatcher__ instance at 40f65340>, 'context': <__FactoryDispatcher__ instance at 40f65340>, 'default': <Products.PageTemplates.TALES.Default instance at 0x40b8ae6c>, 'here': <__FactoryDispatcher__ instance at 40f65340>, 'loop': <SafeMapping instance at 40f653e0>, 'modules': <Products.PageTemplates.ZRPythonExpr._SecureModuleImporter instance at 0x40b8fb0c>, 'nothing': None, 'options': {'args': ()}, 'repeat': <SafeMapping instance at 40f653e0>, 'request': <HTTPRequest, URL=http://localhost:8080/manage_addProduct/ExternalFile/create>, 'root': <Application instance at 417e2a10>, 'template': <PageTemplateFile at /manage_addExternalFileForm>, 'traverse_subpath': [], 'user': chris} Module Products.PageTemplates.Expressions, line 201, in __call__ Module Products.PageTemplates.Expressions, line 189, in _eval Module Products.PageTemplates.Expressions, line 145, in _eval __traceback_info__: container Module Products.PageTemplates.Expressions, line 340, in restrictedTraverse __traceback_info__: {'path': ['gethostname'], 'TraversalRequestNameStack': []} Unauthorized: You are not allowed to access 'gethostname' in this context (Also, an error occurred while attempting to render the standard error message.) Any suggestions on how to resolve this? /ch

5 5

Re: [Zope] acquisition
by Arenz, Ralph 11 Mar '05

11 Mar '05

On Mar 11, 2005, at 10:17, Arenz, Ralph wrote: >> After upgrading from Zope-2.6.4 to Zope-2.7.3 i get the following >> error >> when i try to add an object from the add-list in zmi: >> >> Unauthorized: You are not allowed to access '<property-name>' in this >> context >> (Also, an error occurred while attempting to render the standard >> error >> message.) > > <Try your software on the current CVS Zope-2_7-branch and see if that > <solves the problem. Some overeager security checks were fixed after > <2.7.4. > > <jens > > I tried Zope-2.7.5-rc1 but the problem still exists! I can't get back > to > Zope-2.6.4 and i'am running in big trouble with that behaviour, because > > important elements won't be accessible for the many users. Of course i > can > change the factory-methods but in the end i'am not shure if there is a > real > bug or if there a common change in way container-properties are handled > within factory-methods. If it still doesn't work I don't know off-hand. Did you by any chance upgrade your live site without doing any testing first? jens sorry for confusion, in Zope-2.5.7-rc1 aquisition works as expected again. ralph

1 0

ZPT/ZSQL Two drop down menus
by Etienne Desgagné 11 Mar '05

11 Mar '05

Hi, In a ZPT, I have a form with two drop down menus (address and street) and submit button. The values of the second drop down (adresse) depend on what the user selected in the first (street). The values of both list come from ZSQL method. Is it possible to catch the value of the selection of the first drop down list (with the onChange event?) and pass it as argument to the ZSQL method of the second list. Thanks a lot Etienne

2 1

parameter problem continues
by prabuddha ray 11 Mar '05

11 Mar '05

thnx YUAN Ya i tried d the test code. its givin the district correctly with value. i sud tell u wat am i doin in the javascript method 'user10()' i'm invoking on the onchange() of 1st dropdown list. function user10(){ document.nlogin.user11.value='y' //for username dummy value document.nlogin.action="index_html" //this page id document.nlogin.method='post' document.nlogin.submit() } its still givin that compilation error. Error Type KeyError Error Value 'districtname' the tal code i used was <div tal:repeat="user python:context.getDistrictUser(districtname=request.form['districtname'])"> <option tal:content="user/username"></opt I think wen the page is getting loaded its not finding the districtname variable. so have to initialize it for the 1st load. something like <span tal:condition="districtname|nothing" tal:omit-tag="">  </span> this is jus fancy. gimme a soln .i'm freaked out. thanks again. On Fri, 11 Mar 2005 Hong Yuan wrote : >The request.form variable is set either through input fields in >an HTML form or parameters in the URL. Normally you don't have >to >set it explicitly in your ZTP template. > >Do you have a field named 'districtname' in your form? If yes >and >if the 'action' attribute of the form points to your page >template, then the 'districtname' variable should be available. > >You can check what varialbes are in the request.form by writing >a >test template, like test.pt, with the content: > ><p tal:content="structure request" /> > >and then point the 'action' attribute of your form to 'test'. >If >'districtname' is not there, then maybe you should check your >HTML code.

1 0

Re: Re: [Zope] parameter prob remains
by prabuddha ray 11 Mar '05

11 Mar '05

Ya i tried d the test code. its givin the district correctly with value. i sud tell u wat am i doin in the javascript method 'user10()' i'm invoking on the onchange() of 1st dropdown list. function user10(){ document.nlogin.user11.value='y' //for username dummy value document.nlogin.action="index_html" //this page id document.nlogin.method='post' document.nlogin.submit() } its still givin that compilation error. Error Type KeyError Error Value 'districtname' the tal code i used was <div tal:repeat="user python:context.getDistrictUser(districtname=request.form['districtname'])"> <option tal:content="user/username"></opt I think wen the page is getting loaded its not finding the districtname variable. so have to initialize it for the 1st load. something like <span tal:condition="districtname|nothing" tal:omit-tag="">  </span> this is jus fancy. gimme a soln .i'm freaked out. thanks again. On Fri, 11 Mar 2005 Hong Yuan wrote : >The request.form variable is set either through input fields in >an HTML form or parameters in the URL. Normally you don't have to >set it explicitly in your ZTP template. > >Do you have a field named 'districtname' in your form? If yes and >if the 'action' attribute of the form points to your page >template, then the 'districtname' variable should be available. > >You can check what varialbes are in the request.form by writing a >test template, like test.pt, with the content: > ><p tal:content="structure request" /> > >and then point the 'action' attribute of your form to 'test'. If >'districtname' is not there, then maybe you should check your >HTML code.

1 0