- Zope - Zope lists

Syntax Issue with dtml-in iteration
by Dan Shafer 15 Aug '03

15 Aug '03

(Sorry if this posts twice. I posted earlier but from an unsubscribed account and I'm assuming that one will get booted out by the system.) I'm tripping over what seems like should be fairly straight-forward syntax. Hopefully someone here can point out what I'm overlooking. Situation: I have a folder that contains a bunch of folders, each of which has a property named "coach_id" that I've created and updated programmatically. Task: I have one user who is allowed to see the contents of all folders. All other users are restricted to folders where they are the Coach (i.e., where their AUTHENTICATED_USER== the coach_id of a particular folder). Approach: I have a DTML method that loops over all the folders and displays a list of folder links for each folder the user is authorized to see. That method works fine when I don't try to limit it by authenticated user name. I use a simple <dtml-in> construct for this purpose: <dtml-in expr="objectValues('Folder')" sort=title_or_id> I placed a <dtml-if> statement inside the <dtml-in> construct. That is where the problem is popping up. My if statement should look like this, I think: <dtml-if expr="(AUTHENTICATED_USER.getUserName() == 'Magic User') | (AUTHENTICATED_USER.getUserName() == sequence-var-coach_id)"> But I get an error from Zope indicating the public variable "sequence" isn't defined? I'm in a <dtml-in> so I *believe* sequence should have meaning. Am I wrong? I tried this with only one logic clause in case the problem was the OR syntax or logic. But this: <dtml-if expr="AUTHENTICATED_USER.getUserName() == sequence-item.coach_id"> produces the same "global variable sequence not defined" error. If i hard-code a name into that same sequence, the operation works but, of course, does not filter on the coach_id. <dtml-if expr="AUTHENTICATED_USER.getUserName() == 'Magic User'"> It seems evident that I'm missing something about how <dtml-in> works. I have believed that in the midst of a <dtml-in> I'm iterating over a sequence that is represented by the built-in Zope variable, "sequence." Evidently I'm wrong. Can anyone help?

1 0

Re: [Zope] Zope application offline - how to apply a license ptotection?
by Gabriel Genellina 14 Aug '03

14 Aug '03

At 14/8/2003 10:40, you wrote: > > Our company is developing an application, supposed to be run under >dedicated > > zope server, placed offline in our customers corporate environment and > > requested via LAN. > > > What would be the right way to protect this mechanism from hacking, >provied > > that zope is an open-source platform, so any code is hypothetically > > accessable by the customer and apllication is run completely offline with >no > > intercation with our information system? > > > > The required level of protection is not really high, but we need to be >safe > > from attempts to hack the application by modest programmers at least. > >1. use dedicated server with crypted FS (eg., Linux), does not share ANY >passwords. >2. does not allow to users gone above specified hierarchy of folders. >3. disable for all other access than "view" all DTML Methods and >code-critical DTML documents. >etc... Except 1) the other measures protect against thru-the-web access, but not from local access. Anyone who can read data.fs can see the user passwords, which the standard UserFolder stores without encryption by default, and then can log in as Manager and change anything. And anyone with write permission to the filesystem can create an emergency user, log in as such, and modify all objects inside Zope (the emergency user can do almost anything without restrictions, just can't create new objects). Zope may have a good shield from web attacks but I think it is very vulnerable for local intrusion or sabotage. Gabriel Genellina Softlab SRL

3 2

accessing attributes of a referenced object via ZPT
by Derrick 'dman' Hudson 14 Aug '03

14 Aug '03

I am trying to make a nice display of some objects using ZPT. These objects refer (by storing the path as a string) to other objects and I want to display an attribute of the referred-to object in the display. What is the best design to achieve this? The following ZPT code works, but I highly doubt it is the best design :-) <td tal:content="python:here.restrictedTraverse(employee.department).title" /> Would it be best to write a python script that iterates over the actual objects creating a "mirror" object for each that contains the attributes to be displayed (without the intermediate references) and let the ZPT handle only the mirror objects? TIA, -D -- If we claim to be without sin, we deceive ourselves and the truth is not in us. I John 1:8 http://dman13.dyndns.org/~dman/

2 1

get url for localfs objects
by Michael Bleijerveld 14 Aug '03

14 Aug '03

Hi, I am using the following statements for displaying links to Localfs objects. <tr tal:repeat="files batch" > <td><input type="checkbox" name="ids:list" value="<dtml-var id>"></td> <td><a href="HOME_URL" tal:attributes="href python:getLink(id)" tal:content="files/id">HOME TITLE OR ID</a></td> <br> </tr> However when I use the python script getLink I receive the following error. What's wrong ? Traceback (innermost last): a.. Module ZPublisher.Publish, line 98, in publish b.. Module ZPublisher.mapply, line 88, in mapply c.. Module ZPublisher.Publish, line 39, in call_object d.. Module Shared.DC.Scripts.Bindings, line 252, in __call__ e.. Module Shared.DC.Scripts.Bindings, line 283, in _bindAndExec f.. Module Products.PageTemplates.ZopePageTemplate, line 228, in _exec g.. Module Products.PageTemplates.PageTemplate, line 95, in pt_render <ZopePageTemplate at /Smartstorage/test3> h.. Module TAL.TALInterpreter, line 200, in __call__ i.. Module TAL.TALInterpreter, line 244, in interpret j.. Module TAL.TALInterpreter, line 636, in do_loop_tal k.. Module TAL.TALInterpreter, line 244, in interpret l.. Module TAL.TALInterpreter, line 295, in do_startTag m.. Module TAL.TALInterpreter, line 363, in attrAction_tal n.. Module Products.PageTemplates.TALES, line 223, in evaluateText o.. Module Products.PageTemplates.TALES, line 217, in evaluate URL: /Smartstorage/test3 Line 18, Column 10 Expression: <PythonExpr getLink(id)> Names: {'container': <Folder instance at 017F7D68>, 'default': <Products.PageTemplates.TALES.Default instance at 0141AC54>, 'here': <Folder instance at 017F7D68>, 'loop': <SafeMapping instance at 018F2B18>, 'modules': <Products.PageTemplates.ZRPythonExpr._SecureModuleImporter instance at 0141A84C>, 'nothing': None, 'options': {'args': ()}, 'repeat': <SafeMapping instance at 018F2B18>, 'request': <HTTPRequest, URL=http://10.0.0.151:8080/Smartstorage/test3>, 'root': <Application instance at 017EF6E8>, 'template': <ZopePageTemplate at /Smartstorage/test3>, 'traverse_subpath': [], 'user': admin}p.. Module Products.PageTemplates.ZRPythonExpr, line 48, in __call__ __traceback_info__: getLink(id) q.. Module Python expression "getLink(id)", line 2, in f NameError: global name 'getLink' is not defined. Regards. Michael

3 5

How to enhance verbosity of answers of incorrectly filled forms
by Andreas Tille 14 Aug '03

14 Aug '03

Hi, is there any clever way to give the user a more verbose answer - preferably in an apropriate layout if I use <form action="report.html" method="get"> <input name="Id:int:required"> <input name="Text:string:required"> </form> instead just Empty entry when integer expected Well I know I could change the layout a little bit by changing the default error method but I would like to give the user a hint *which* field(s) has to be filled. I could do this with a Python script but I'm currently trying to test the power of PageTemplates and ZSQL methods instead of my former way to use Zope with more or less sticking to Python Scripts exclusively. Kind regards Andreas.

2 1

ZPT format date string
by Michael Bleijerveld 14 Aug '03

14 Aug '03

Hello, How can I format the date string in the following ZPT statement ? <span tal:replace="file/mtime"></span> Regards, Michael

2 1

Re: [Zope] startup error
by Michael Long 14 Aug '03

14 Aug '03

> Isn't there a "try: ... except: " around this? It is actually a "try: ... except: ... else: " which I don't think is valid. --mike

2 1

asyncore+Zope: different behavior in Windows and Linux
by Dmitry Dembinsky 14 Aug '03

14 Aug '03

Hello Zopers, I currently develop a Zope product, part of which will handle incoming TCP connections. To avoid multithreading, I intended to use asyncore module. ZServer already runs asyncore.loop(), so the idea was to put a server socket to a global asyncore.socket_map to have it checked for network events in a main ZServer loop and trigger overriden handle_* methods. To prove the concept, I created a very small test product (see the code below). Outside of Zope the code works fine on both Linux and Windows When running as Zope product it still works on Windows, but on Linux causes Zope to crash with the following traceback: ------------------------------------------------------------- Traceback (most recent call last): File "/usr/local/zope/z2.py", line 910, in ? asyncore.loop() File "/usr/local/zope/lib/python/ThreadedAsync/LoopCallback.py", line 150, in loop poll_fun(timeout, map) File "/usr/local/zope/lib/python/ThreadedAsync/LoopCallback.py", line 102, in poll r, w, e = select.select(r, w, e, timeout) select.error: (9, 'Bad file descriptor') ------------------------------------------------------------- My guess is that somehow, closed socket descriptor is not removed from the socket_map causing select() function to fail. (In this case I assume that there's a problem with Zserver) I searched bug collector and mail archives but didn't find any relevant information. Any ideas, please? My working environment: ------------------- Windows: OS: Windows XP Profesional SP1 Zope Version: (Zope 2.6.1 (binary release, python 2.1, win32-x86), python 2.1.3, win32) Python Version: 2.1.3 (#35, Apr 8 2002, 17:47:50) [MSC 32 bit (Intel)] Linux: OS: RedHat 7.2, kernel 2.4.20-19.7 Zope Version: (Zope 2.6.1 (binary release, python 2.1, linux2-x86), python 2.1.3, linux2) Python Version: 2.1.3 (#1, Sep 19 2002, 13:15:46) [GCC egcs-2.91.66 19990314/Linux (egcs-1.1.2 release)] Below is the code of the test product: File __init__.py: -------------------------------------------------------------- import socket import asyncore class AsyncTestDispatcher( asyncore.dispatcher ): def start ( self ): self.create_socket( socket.AF_INET, socket.SOCK_STREAM ) tAddr = ( '0.0.0.0', 1234 ) self.bind( tAddr ) self.listen( 1 ) print self.__class__.__name__, "listening on %s:%d" % tAddr def stop ( self ): self.close() print self.__class__.__name__, "stopped" _g_oDisp = None def start (): print 'AsyncTest: starting' global _g_oDisp _g_oDisp = AsyncTestDispatcher() _g_oDisp.start () def stop(): print 'AsyncTest: stopping' global _g_oDisp _g_oDisp.stop() _g_oDisp = None # Zope staff __roles__ = None __allow_access_to_unprotected_subobjects__ = 1 def initialize( context ): print 'AsyncTest initialized' -------------------------------------------------------------- I put AsyncTest in a Products directory within my Zope installation, started Zope and created 2 python scripts via ZMI: asyncstart: -------------------------------------------------------------- from Products.AsyncTest import start start () print "AsyncTest started" return printed -------------------------------------------------------------- asyncstop: -------------------------------------------------------------- from Products.AsyncTest import stop stop () print "AsyncTest stopped" return printed -------------------------------------------------------------- Then I run asyncstart and asyncstop number of times Usually the crash happened on the first or the second iteration, always in stop() function: start -> stop -> crash (during stop) start -> stop -> start -> stop -> crash (during stop) in a rare cases there were 3-4 times before the crash Thanks in advance, Dmitry

1 0

RE: [Zope] Need help with ImageMagick or PIL with CMFPhoto for ph oto resize
by Meilicke, Scott 14 Aug '03

14 Aug '03

Hmm, that I don't know. I am cc'ing the list - maybe someone else does. I have always used Photo 1.2.3, and CMFPhoto only just to 'have a look see'. When I uploaded a bmp, Photo 1.2.3 would not resize it, perhaps the same is true of CMFPhoto. Photo would resize a jpg. Seems like the thing to do is install jpg support for imagemagick. Perhaps bypass the Redhat version and install imagemagick from source? Scott -----Original Message----- From: Jim Barbara [mailto:jbarbara11@yahoo.com] Sent: Thursday, August 14, 2003 6:36 AM To: Meilicke, Scott Subject: RE: [Zope] Need help with ImageMagick or PIL with CMFPhoto for ph oto resize I found out that it's just the jpg support that is not installed....so, I am able to do the convert with a bmp file. Now then, my next question/issue that you might be able to help me is with Zope and Plone. Since I can use the command line "convert -resize" a bmp file, I would figure that I can go to my Plone site and add a bmp file as a Photo object and then view the different sizes. However, I can only see the Photo (or bmp) in its original size. This tells me that Plone/Zope/Python does not "know" to use ImageMagick as the engine to use for resizing. Is there another tweak I must do to get my site to use ImageMagick? --Jim --- "Meilicke, Scott" <scott.meilicke(a)intp.com> wrote: > sounds like imagemagick isn't installed correctly... > I can't help you > there, unfortunately. > > Scott > > -----Original Message----- > From: Jim Barbara [mailto:jbarbara11@yahoo.com] > Sent: Wednesday, August 13, 2003 11:16 AM > To: Meilicke, Scott > Subject: RE: [Zope] Need help with ImageMagick or > PIL with CMFPhoto for > ph oto resize > > > Yes, I did try the convert after copying a jpg to my > tmp folder and got the following results: > > [root@localhost tmp]# convert Snowmen_Rabbit.jpg > Snowmen_Rabbit.gif > convert: No decode delegate for this image format > (Snowmen_Rabbit.jpg). > > --Jim > --- "Meilicke, Scott" <scott.meilicke(a)intp.com> > wrote: > > Have you tried ImageMagick from the command line? > > Something like > > > > convert -g 500x500 originalimage.jpg > > > > This will resize originalimage.jpg to be 500 px > max > > high or wide. It will > > maintain the aspect ratio. > > > > If that works, then zope isn't seeing > imagemagick... > > I'm not enough of a > > linux person to tell you want to do in this case. > > > > Scott > > > > -----Original Message----- > > From: Jim Barbara [mailto:jbarbara11@yahoo.com] > > Sent: Wednesday, August 13, 2003 10:15 AM > > To: zope(a)zope.org > > Subject: [Zope] Need help with ImageMagick or PIL > > with CMFPhoto for > > photo resize > > > > > > I am using: > > > > Zope 2.6.1 > > Plone 1.0.1 > > CMF 1.3 > > > > I can add a CMFPhotoAlbum as well as a CMFPhoto on > > my > > Plone site. I want to be > > able to view the photo sized differently than the > > Original Size. I tried to > > install ImageMagick using the rpm for Redhat 9 > > (i386). > > Since it asked for a > > lot of XFree86 modules, I used the -nodeps option > > and > > it seemed to install just > > fine. However, I still cannot resize the photos. > I > > am a newbie but I am > > learning. Could you please help me? > > > > Thanks, > > Jim Barbara > > > > > > __________________________________ > > Do you Yahoo!? > > Yahoo! SiteBuilder - Free, easy-to-use web site > > design software > > http://sitebuilder.yahoo.com > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://mail.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > > http://mail.zope.org/mailman/listinfo/zope-announce > > http://mail.zope.org/mailman/listinfo/zope-dev ) > > The information contained in this email message > may > > be privileged and is > > confidential information intended only for the use > > of the recipient or any > > employee or agent responsible for delivering it to > > the intended recipient. > > Any unauthorized use, distribution or copying of > > this information is > > strictly prohibited and may be unlawful. If you > > have received this > > communication in error, please notify the sender > > immediately and destroy the > > original message and all attachments from your > > electronic files. > > > > > __________________________________ > Do you Yahoo!? > Yahoo! SiteBuilder - Free, easy-to-use web site > design software > http://sitebuilder.yahoo.com > The information contained in this email message may > be privileged and is > confidential information intended only for the use > of the recipient or any > employee or agent responsible for delivering it to > the intended recipient. > Any unauthorized use, distribution or copying of > this information is > strictly prohibited and may be unlawful. If you > have received this > communication in error, please notify the sender > immediately and destroy the > original message and all attachments from your > electronic files. > __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient or any employee or agent responsible for delivering it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files.

1 0

get user password
by ijsman 14 Aug '03

14 Aug '03

I'm using this code to try and get a user's password. from AccessControl import getSecurityManager request = context.REQUEST user = getSecurityManager().getUser() curpas = user._getPassword() but this gives me an error because i can't run a method that has a '_' in it's name. How do i then get a user's password? It would be nice to be able to mail people's password if they forget it :)

2 1