- Zope - Zope lists

Securing Zope
by Jamie Heilman 25 Sep '03

25 Sep '03

There was some recent interest in security issues with Zope installations, so I just thought I'd announce that I'm now keeping a public collection of notes about outstanding security problems at http://audible.transient.net/zope/ Its not complete yet (only addresses open collector issues currently), I'll probably be adding to it for the next few days until it is (inasmuch as it can be just representing my knowlegde on the subject). -- Jamie Heilman http://audible.transient.net/~jamie/

3 4

[Bug ?] Weird behaviour with security when updating a class...
by Sinclair 25 Sep '03

25 Sep '03

Hi all, I had a very stange experience with my Zope instance today. (Zope 2.6.0 (binary release, python 2.1, win32-x86), python 2.1.3, win32) When I added an empty method to my application container class, then refreshed my product, the access to subobjects was lost for a couple of roles. When, after that, I deleteted the method, refreshed product, and retry, access was back ! Whatever was the name or the content or the place in the module of the added method, same result ! Now, when I removed a method instead of adding one, no problem at all. So, I decided to code my method elsewhere, on a subobject, and refreshed product. No problem anymore. Why ? What the hell happened ? Did I miss something ? Is there a link between permission, role, and changing classes ? Please help me before I go mad... Sinclair

2 3

sum() produces floats not integers
by Wayne Connolly 25 Sep '03

25 Sep '03

Hi ya all, When I sum a column decimals(floats) are returned. ie. 2.0, 3.0. but i only want the integer instead of the trailing ".0" I cant seem to work out how to do this however i assume its controlled by the sum() function. Can anyone help me on this? Below is the code fragments which currently work but with the ".0" Zsql SELECT title, SUM(plays) AS plays FROM charts GROUP BY title PageTemplate <TR bgcolor="#333333" tal:repeat="charts here/getChartsMethod"> Title Plays </TR> Cheers, wayne __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com

4 4

CMF / Plone Vulnerability
by Thomas Kristensen 25 Sep '03

25 Sep '03

Hi, You have issued a hot fix for CMF: http://cmf.zope.org/download/CMFHotfix_20030908/announce-CMFHotfix_20030908 And an update of Plone is apparently affected by this issue as well: http://plone.org/download/changelog We would like a bit more information about this issue, to ensure that users of these products are made aware of any security issues, so that they can apply the relevant updates. -- Kind regards, Thomas Kristensen CTO Secunia Toldbodgade 37B 1253 Copenhagen K Denmark Tlf.: +45 7020 5144 Fax: +45 7020 5145

1 0

[Announce] New Colorz Zope/Plone Package
by Max M 25 Sep '03

25 Sep '03

The "Colorz Zope/Plone Package" is a pair of product used in combination for creating color schemes for Zope/Plone based websites. "Colorz Zope/Plone Package" consists of 2 seperate modules "Colorz" and "ColorzSkin". For ease of use they are released in a combined package. More information downloads, screenshots etc. can be found "here":http://www.mxm.dk/products/commercial/colorz/. **Colorz** Colorz is a standard Zope product, and can be used to generate derived colors from a few basic colors. Using standard color theory. This makes it extremely easy to generate reusable color schemes. *Colorz can be used without ColorzSkin.* The idea is that you have 1 main color. Typically the same color as the logo. You insert the hex value of that color in the text field and save your color scheme. Then you can enter a color difference in degrees into another field to generate a new set of colors. You can try out different degree settings and see the results on some test pages that uses different color schemes. There is also a color table available that gives an overview of the colors generated. You don't have to use generated colors though. You can just insert color values manually, and enjoy the other benefits of the module. More info, and screenshots "here":http://www.mxm.dk/products/commercial/colorz/colorz_info **ColorzSkin** Is a set of skins for Plone. Each skin implements a different color scheme. *ColorzSkin depends on Colorz, and cannot be used without it.* It is relatively easy to create new skins for Plone-based sites. But if you want to change the colorscheme of a site, you have to change color values in many different places. For it to look good, you have to know something about color theory. The ColorzSkin products makes it easy to use the colorz product in Plone. You can easily create a new Plone skin in a different style, using different color schemes. Most of the work is done for you automatically. Best of all, you don't have to know anything about color theory to use it. More info, and screenshots "here":http://www.mxm.dk/products/commercial/colorz/colorz_skin_info regards Max M

1 0

RE: [Zope] first-variables in a simple loop on a list
by Smith, Neil (Worcester) 25 Sep '03

25 Sep '03

On Thu, 25 Sep 2003, Dieter Maurer wrote > Smith, Neil (Worcester) wrote at 2003-9-24 16:42 +0100: > > Now I really only want the unique values from the list. > > I think, the "reorder" function (available in "DTML" > as "_.reorder") is a better choice. > > You use it this way: "[x[0] for x in _.reorder(l)]" > where "l" is your list. > > Dieter Excellent, just what I wanted. I'd looked at reorder but hadn't been able to figure out from the documentation exactly what it did. I'm still not sure about the with and without, but I'll check the source now I know it's useful. Thanks Dieter -- Neil ********************************************************************** The information contained in this e-mail is confidential and intended only for the use of the addressee. If the reader of this message is not the addressee, you are hereby notified that you have received this e-mail in error and you must not copy, disseminate, distribute, use or take any action as a result of the information contained in it. If you have received this e-mail in error, please notify postmaster(a)npower.com (UK 01384 275454) and delete it immediately from your system. Neither Npower nor any of the other companies in the Innogy group from whom this e-mail originates accept any responsibility for losses or damage as a result of any viruses and it is your responsibility to check attachments (if any) for viruses. Npower Limited Registered office: Windmill Hill Business Park, Whitehill Way, Swindon SN5 6PB. Registered in England and Wales: number 3653277. This e-mail may be sent on behalf of a member of the Innogy group of companies. **********************************************************************

1 0

Indexing by search engine
by Marko Kruijer 25 Sep '03

25 Sep '03

I've got a zope site at myzopeserver:portnumber/mysite the url www.mysite.com is rerouted by Apache to zoperoot/mysite if i enter www.mysite.com in my webbrowser zope renders the index_html inside mysite. That's fine, however if i submit my site to a search engine the search engine indexes the folder's (mysite is the folder) title! my index_html has al necessary tags, i.e. title, meta tags etc. so somehow the search engine doesn't render my index page whereas my browser does. í am now using a dtml method as index_html, could this be the problem? or is there something else wrong here?

1 0

ZWiki + Plone = funny link
by Chihiro Kuraya 25 Sep '03

25 Sep '03

Greetings, I have installed Zope-2.6.2 + CMFPlone-1.0.5 + Zwiki-0.22.0 and created [ZWiki Web] object inside plone site. ZWiki has default page titled HelpPage, which contains some anchor link as follows: "User interface":#ui "Navigation":#navigation "Email subscription":#email But this link jump to FrontPage instead of HelpPage itself. Why this happens ? Are there any work around to this problem ? --- Chihiro Kuraya

1 0

run zope and missing inituser
by Riccardo Gaggero 25 Sep '03

25 Sep '03

i install zope in my home directory in debian (NOT ROOT) wget http://www.zope.org/Products/Zope/2.6.2/Zope-2.6.2-linux2-x86.tgz gunzip -c Zope-2.6.2-linux2-x86.tgz |tar xvf - cd Zope-2.6.2-linux2-x86 ./install the file inituser is ok start zope the index page is ok but i can not logon http://plutone:8080/manage the user admin not work stop zope and the file inituser is missing run ./bin/python ./zpasswd.py -u=admin -p=pippo ./inituser the file inituser is ok start zope the index page is ok but i can not logon http://plutone:8080/manage stop zope and the file inituser is missing WHY????

3 2

looping over plone folders
by Mitch Pirtle 25 Sep '03

25 Sep '03

Hi list, Another newbie-ish question, looked in the FAQ but couldn't find an example that was clear enough... I'm recreating the navbar in a plone portal by hand, looping over the plone folders in the root folder of the plone site. Ok, that's what I *want* to do, and need help from a zenmaster on how to do it within plone :^) The reason for this is that I'd like it to be dynamically-generated, based on the folders created; and hope to have a javascript-based dynamic menu populated by the objects within those root folders. So far, when I use examples of looping (via ZPT documentation), Plone throws a security error and refuses to cooperate. So I suppose the two questions are: 1) How do you do this in Plone? 2) Is there a better approach? -- mitchy

3 3