- Zope - Zope lists

dtml escaping quotes
by Jonas 25 Oct '03

25 Oct '03

I'm trying to do the following in dtml: <dtml-call expr="updateInvoiceTotals(invoiceNumber=<dtml-var name="invoiceNumber")"> This works fine: <dtml-call expr="updateInvoiceTotals(invoiceNumber=22)"> Is there some way I can escape the inside double-quotes? I've tried all kinds of combinations. Thanks for any help. - Jonas

1 0

return value treated as dtml?
by Ted holden 25 Oct '03

25 Oct '03

Is it possible to have an external method return a string which would be treated by zope as a dtml page, i.e. to have the return string contain dtml commands which would execute?

3 7

epoz and Epoz
by Jim Penny 25 Oct '03

25 Oct '03

both look nice, but ... Three questions: does Epoz correctly support having multiple text windows in a single form -- i.e. <form> <div tal:replace="structure python:here.Epoz('group_notes', data='', style='width: 600px; height: 100px; border: 1px solid black')"></div> <div tal:replace="structure python:here.Epoz('line_notes', data='', style='width: 600px; height: 100px; border: 1px solid black')"></div> </form> For me, mozilla firebird 0.6.1, things are getting confused. If you click HR in the first box, it shows up in the second, for example. ---------------- Does epoz allow multiple editors in the same form? Could you please give some examples of the use of epoz? I.e, define a default editor in a page template, and define simplified epoz that has only the editor widget without the right panel, and at a reasonable height, say 100 px? Thanks. Jim Penny

1 0

CSS & Acquisition? /kv
by Kai Vermehr 24 Oct '03

24 Oct '03

How change the background color for the content of different subfolders as easily as possible? They all share the same index_html which is placed inside the top-level folder. This widely used index_html reffers to a style_sheet (dtml-doc) also placed inside the top-level folder. Now I just want to change the background colors for some subfolders without having to copy the complete style_sheet to them. If I did so, other changes on the top-level style_sheet would not apply to the folders with their own style_sheet. Only want to change the background color. This does not work: (why?) I created a style_background_color dtml-doc just with the plain color info (#FFFF55). Now I reference to it from the style_sheet (which resides inside the top-level folder). If I place the style_background_color object inside a sub-folder, change its color string to #000022 it should work for this and all subfolders. They all acquire the index_html dtml-method from the top-level folder which in turn uses the style_sheet dtml-doc inside the same top-level folder. And they don't use the local style_background_color dtml-doc with the different color ... why? thanks! -- 'K:)?

1 1

How do I change reST report_level? 2.7, ZWiki pages
by Kent Tenney 24 Oct '03

24 Oct '03

Howdy, I'm making ZWiki reStructuredText pages and getting warnings, info (1), which I'd like to suppress. I've tried changing the default report_level parameter in /products/reStructuredText/__init__.py from 1 to 2 def HTML(src, writer='html4zope', report_level=2, stylesheet='default.css', input_encoding=default_input_encoding, output_encoding=default_output_encoding): And in ZWikiPage.py changed report_level=0 to report_level=2 if reStructuredText: t = reStructuredText.HTML(t,report_level=2)#doesn't hide em I'm still getting the warnings. TIA for any suggestions. Kent

1 0

become user (su inside Zope) - pretend to be another user
by Brad Clements 24 Oct '03

24 Oct '03

I need to save and then "replay" web requests at a later time on behalf of an authenticated user, then email them the result. We use LDAPUserFolder and the user's passwords are encrypted, so I can't just lookup a user's password and feed it back to a web request using basic auth. of course I have "super user" access to the zope instance (2.7.0), is there any tricks I can play that will "su" inside a zope request context to become another user and set the AUTHENTICATED_USER roles correctly? I'm looking for an official mechanism to do this, rather than hacking up my user folder. Any ideas? -- Brad Clements, bkc(a)murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax http://www.wecanstopspam.org/ AOL-IM: BKClements

6 8

RE: [Zope] return value treated as dtml?
by Passin, Tom 24 Oct '03

24 Oct '03

[Ted holden] > Is it possible to have an external method return a string > which would be > treated by zope as a dtml page, i.e. to have the return > string contain dtml > commands which would execute? It would not be good design, so I wouldn't spend any more time trying to get it to work. You should have the external method return data structures to the calling dtml page/method (or you could use TAL) that takes the data and does the final formatting. Cheers, Tom P

1 0

freezope website
by Margaret Tam 24 Oct '03

24 Oct '03

Hi, I cannot access freezope.org or my own freezope websites. "Cannot find server" error. Thanks, Margaret _________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

1 0

RE: AUTHENTICATED_USER is not reliable! [Was: [Zope] become user(su inside Zope) - pretend to be another user]
by Jim Kutter 24 Oct '03

24 Oct '03

I've been using the REQUEST.OTHER namespace for this purpose. Is that safe to do? -jim -----Original Message----- From: Dario Lopez-Kästen [mailto:dario@ita.chalmers.se] Sent: Friday, October 24, 2003 12:20 PM Cc: zope(a)zope.org Subject: Re: AUTHENTICATED_USER is not reliable! [Was: [Zope] become user(su inside Zope) - pretend to be another user] Jens Vagelpohl wrote: >> Why is everybody so obsessed with AUTHENTICATED_USER? This variable is >> not suitable for anything deserving the name "security". It is NOT >> SAFE to assume that it will contain anything useful. > > > Amen to that. > > jens Right, when can we consider REQUEST to be fairly safe? I.e. I know that it cab be manuoulated by any kind of script during the lifetime of a request, and aslo be populated from the URL. I consider manipulation from scripts acceptable behaviour, from the URL not. What I am actually trying to say is the following: I need a secure namespace available, a` la REQUEST, during the lifetime of a request - lets call it SAFE_REQUEST, that cannot be manipulated from the URL. Preferrably RAM-bound. Any ideas on how to achieve that (other than reading source, which I allready have begun to). Thanks, /dario -- -- ------------------------------------------------------------------- Dario Lopez-Ka"sten, IT Systems & Services Chalmers University of Tech. _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

A plea for equality
by Dave Fregon 24 Oct '03

24 Oct '03

Hi all, I have come across something that I think most people have come across before in IT .. and in general .. something called sexism. Something a female zopista told me today tipped me over the edge to write this .. it's something I have seen myself on plenty of occassions ... No this is not something 'rampant' in the community .. just something that happens occassionaly .. and being one of those people that despise the ignorance that leads to these types of comments .. have to say something. I just wanted to ask everyone to think about the communities they are in, and that they are made up of all sorts, and all types. Our IRC channels are made up of them as well. A lot of the time these people stay 'quiet', and learn and listen ... to developers that talk about their female counterparts in derogatory ways .. as though the channels are made up up macho men. Knowing the community doesn't feel this way as a whole, I would like to say to those few people to THINK before being so ignorant. I know personally of people that are avoiding certain IRC channels due to the fact they find them male dominated, and sexist, and I find this SHOCKING. It's not in the people or who's there .. but some regular users attitudes to a community they feel comfortable with as they are leaders or regulars in their area. I just want people to think .. if you want to talk about your relationships .. or relationships, or peoples life choices in general .. be aware the community is made up of ALL of them. thanks for your time to read this .. Dave

8 7