- Zope - Zope lists

recursive security changes
by martin f krafft 11 May '03

11 May '03

are there any products or tools out there that i can use to manage the security settings of a rather bug site? i know that acquisition takes care of most, but one thing i would like to do at first is to reset all permissions of all children of the root folder to 'acquire' and nothing more, and then gradually go from there... any tips appreciated! -- martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net@madduck keyserver problems? http://keyserver.kjsl.com/~jharris/keyserver.html get my key here: http://madduck.net/me/gpg/publickey the dump was so full that it had to refuse more refuse.

2 1

Problem with send in ZClass
by Jamie White 11 May '03

11 May '03

I built a ZClass and I want to send an email if a certain property is missing, the script I am using to try to do this looks like this # Send an Email if draft == None: body="Content Provider " + AUTHENTICATED_USER.getUserName() + " has completed work on. Please review for publishing" context.MailHost.send(body, mto="jamie(a)brobus.net", mfrom="zope(a)brobus.net", subject="Content Done", encode=None) return body else: return "No Message" It when I test it alone, but for some reason when it is in the zclass it says I am not allowed to send in this context. I changed the proxy role on the script to manager but that didn't help. Jamie jamie(a)brobus.net

1 0

Great opportunity
by senserospj＠freg.com 10 May '03

10 May '03

1 0

Re: [Zope] Re: Consistent Data.fs corruption in 2.6.1
by David Lutz 10 May '03

10 May '03

Quoting Maik Jablonski <maik.jablonski(a)uni-bielefeld.de>: > Robin Breathe wrote: > > I believe we have found a bug in the 2.6.1 release (possibly more > > specifically in ZODB 3.1.1). > > > > ----------- > > # Summary: > > ----------- > > > > When an undo is the last transaction preceeding a "pack(days:float=0)", > > the FileStorage is corrupted. > > Hi, > > can you add your whole valuable description as followup to: > > http://collector.zope.org/Zope/875 > > Seems to be the same wired bug which killed already some of my objects... > > Cheers, Maik We are running Zope 2.6.1 on FreeBSD. Our website was down for 3 days (after packing) with a POSKeyError, probably caused by the same bug. I eventually fixed the Data.fs by using an old installation of 2.5.1 and the fsrecover.py that shipped with it. David

1 0

Help with DTML Forms
by Greg & Janet LINDSTROM 09 May '03

09 May '03

I would like to create a DTML Form that may be called with or without an argument (say, member_number). I have tried something like this, a DTML Form named AddAddressForm: <dtml-var standard_arfs_header> <dtml-form method=post action=AddAddress> <table> <dtml-unless member_number> <tr> <th>Member Number</th> <td><input type=text name=member_number></td> </tr> </dtml-unless> <tr> <th>Address</th> <th>City</th> </tr> <tr> <td><input type=text name=address type=string></td> <td><input type=text name=city type=string></td> </tr> <tr> <td colspan=2><input type=submit></td> </tr> </table> </dtml-form> My intent is to have a form that, if called with no input paramters, will display a field so I can enter the member_number. If the form is called with an input parameter, the member_number field will not be displayed, but the passed in value will be passed on to the AddAddress Method. The AddAddress method called by the form is a DTML Method which, in turn, calls a ZSQL Method to add the information to the database. The AddAddressForm will be called from another DTML Form. The line calling the above code looks like this: <a href="......./AddAddress?member_number=&dtml-member_number;">Add</a> The only way I can "see" the member_number in the AddAddressForm is to use <dtml-var member_number>. The shorthand _['member_number'] and &dtml-member_number; do not seem to work. Is this because of the namespace issues with the DTML Form? Am I trying to do too much here? I could make two forms, but I don't like the idea of maintaining two nearly identical forms. Can this be done? Thanks for your help. --greg

2 1

Batch upload to FileLibrary?
by Chen Fu 09 May '03

09 May '03

Hi! My insitute want a simple File share server to exchange file between us. I play with the examples FileLibrary in zope2.6 these days. And suggest to add some keyword or abstract features in FileLibrary will make it a good candidate :) I try to write a python client(not web interface) to upload and download some files in batch. By search on google and python manual, i think it is something to do with httplib. There is a simple demo in python doc of the usage of "POST" method. ================================================= >>> import httplib, urllib >>> params = urllib.urlencode({'spam': 1, 'eggs': 2, 'bacon': 0}) >>> headers = {"Content-type": "application/x-www-form-urlencoded", ... "Accept": "text/plain"} >>> conn = httplib.HTTPConnection("musi-cal.mojam.com:80") >>> conn.request("POST", "/cgi-bin/query", params, headers) >>> response = conn.getresponse() >>> print response.status, response.reason 200 OK >>> data = response.read() >>> conn.close() ================================================ But because of my limited knowledge in HTTP and python, i still don't know how to do with a file upload. Anybody can lend me a hand? Thank you! ===== Remote Scensing Satellite Ground Station Chinese Academy of Science _________________________________________________________ Do You Yahoo!? 相见不如聊天!不出门一样面对面！网络摄像头对对派送中~赶快用你的雅虎电邮帐号参与吧…… http://cn.rd.yahoo.com/mail_cn/tag/?http://cn.messenger.yahoo.com/

2 1

Adding Security permissions/roles to a product
by MidnightFears＠aol.com 09 May '03

09 May '03

In researching how to implement customized security for my product, I have seen two ways to approach this. The first is through the __ac__permissions and the second is through the use of the ClassSecurityInfo. In attempting the first way, I declared the following in my class: __ac_permissions__= Folder.__ac_permissions__ + ( ('View', ('Administrator', 'Manager', 'Custodian', 'Restricted Access'), ), ('Access contents information', ('Administrator', 'Manager', 'Custodian', 'Restricted Access'), ), ('View management screens', ('manage', 'manage_main', 'manage_workspace',), ('Administrator', 'Manager', 'Custodian', 'Restricted Access'), ), ) Nothing spectacular here, however, the Custodian can't get access to any of the management screens. I am pulling my hair out over this one. What am I doing wrong? Should I be using the ClassSecurityInfo instead? Does anyone have a good resource that will show me how to go about implementing security? Thanks in advance!!

3 2

GET vs. POST
by Dennis Allison 09 May '03

09 May '03

Zope uses use GET for URL/cgi information transfer. Most browsers expose the information transfered via a GET in the displayed URL. Some of our users find this confusing. Is there a simple way to avoid the URL display as users traverse the site?

4 7

Consistent Data.fs corruption in 2.6.1
by Robin Breathe 09 May '03

09 May '03

I believe we have found a bug in the 2.6.1 release (possibly more specifically in ZODB 3.1.1). ----------- # Summary: ----------- When an undo is the last transaction preceeding a "pack(days:float=0)", the FileStorage is corrupted. ------------ # To repeat: ------------ Start with a 'consistent' FileStorage, e.g. Data.fs that passes fstest.py without error: 1368329: transaction tid 0x034cd1c220785077 #32 1368792: transaction tid 0x034cd1dbeb647922 #33 no errors detected Change an object (e.g. its contents, rename or delete it. whatever). Immediately undo that change ("oops"). Pack the Database (days:float=0). Your FileStorage should be corrupt: 1368329: transaction tid 0x034cd1c220785077 #32 1368792: transaction tid 0x034cd1e0caa0286e #33 1369330 object serialno 0x034cd1e0caa0286e does not matchtransaction id 0x034cd1e11516ba55 Now try changing an object (perhaps the same one again). In the event.log, you should have something like the following: 2003-05-09T17:18:56 INFO(0) ZODB conflict error at /VirtualHostBase/https/twww.brookes.ac.uk:8443/VirtualHostRoot/Brookes/www/manage_delObjects (1 conflicts since startup at 2003-05-09T17:16:34) ------ 2003-05-09T17:18:57 INFO(0) ZODB conflict error at /VirtualHostBase/https/twww.brookes.ac.uk:8443/VirtualHostRoot/Brookes/www/manage_delObjects (2 conflicts since startup at 2003-05-09T17:16:34) ------ 2003-05-09T17:18:58 INFO(0) ZODB conflict error at /VirtualHostBase/https/twww.brookes.ac.uk:8443/VirtualHostRoot/Brookes/www/manage_delObjects (3 conflicts since startup at 2003-05-09T17:16:34) ------ 2003-05-09T17:19:01 INFO(0) ZODB conflict error at /VirtualHostBase/https/twww.brookes.ac.uk:8443/VirtualHostRoot/Brookes/www/manage_delObjects (4 conflicts since startup at 2003-05-09T17:16:34) Without ZEO (2.0.1b1) this is only repeated once, and the operation seemingly succeeds (on top of the corrupted FileStorage), but with ZEO all transactions involving a write to the FileStorage fail, throwing the following error: ZODB.POSException.ConflictError Traceback (innermost last): * Module ZPublisher.Publish, line 150, in publish_module * Module ZPublisher.Publish, line 127, in publish * Module ZPublisher.Publish, line 127, in publish * Module ZPublisher.Publish, line 127, in publish * Module ZPublisher.Publish, line 122, in publish * Module Zope.App.startup, line 142, in zpublisher_exception_hook * Module ZPublisher.Publish, line 102, in publish * Module Zope.App.startup, line 200, in commit * Module ZODB.Transaction, line 246, in commit * Module ZODB.Connection, line 680, in tpc_vote * Module ZEO.ClientStorage, line 722, in tpc_vote * Module ZEO.ClientStorage, line 706, in _check_serials ConflictError: database conflict error (oid 0000000000000af6, serial was 034cd1e0caa0286e, now 034cd1e11516ba55) The site is useless until both ZEO and the Client Instance have been restarted, at which point it is possible to change the errant object, and pack again (assuming no undo), which then fixes the consistency. However restarting your site whenever someone chooses to undo an operation just before your automated pack. ------------- # Workaround: ------------- Don't let an undo be the last transaction preceeding a pack (easier said than cleanly done with automation). -------- # Notes: -------- Machine: SunOS lr1 5.9 Generic_112233-04 sun4u sparc SUNW,Ultra-Enterprise Zope: Primarily we tried the binary Solaris release of 2.6.1 and ZEO 2.0.1b1: Zope Version: (Zope 2.6.1 (binary release, python 2.1, solaris-2.8-sparc), python 2.1.3, sunos5) Python Version: 2.1.3 (#4, Sep 16 2002, 15:52:14) [GCC 2.95.3 20010315 (release)] System Platform: sunos5 SOFTWARE_HOME: /app/zope/zope_2.6.1/lib/python ZOPE_HOME: /app/zope/zope_2.6.1 INSTANCE_HOME: /data/zope/zope_2.6.1/test/client CLIENT_HOME: /data/zope/zope_2.6.1/test/client/var We have also tried our own homegrown from CVS (Zope-2_6-branch) as of 2003/05/09 15:20, along with our own Python 2.1.3 and a snapshot of /ZEO from CVS (HEAD) (in various combinations): Zope Version: (unreleased version, python 2.1.3, sunos5) Python Version: 2.1.3 (#1, Mar 26 2003, 16:28:24) [GCC 3.2.2] System Platform: sunos5 SOFTWARE_HOME: /app/zope/zope_2.6.1-cvs/lib/python ZOPE_HOME: /app/zope/zope_2.6.1-cvs INSTANCE_HOME: /data/zope/zope_2.6.1-cvs/test/client CLIENT_HOME: /data/zope/zope_2.6.1-cvs/test/client/var Further we found that the fsrecover.py script packaged with 2.6.1 release is useless. It always removes EVERYTHING from the Data.fs bar the magic number. This was our primary incentive for trying Zope-2_6-branch since it includes jeremy's recently improved ZODB management scripts. Note however that jeremy's recent fstest.py does not throw an error on inconsistencies of the type mentioned above (despite the fact they still seem to cause problems?). Anything else I can say? Rather a longwinded message for such an easily repeatable bug, but nevermind. Obviously we'd be happy to help find a solution, be that by providing corrupt Data.fs, extra details, testing patches, etc. Hoping for a fix, - Robin -- Robin Breathe, Computer Services, Oxford Brookes University, Oxford, UK rbreathe(a)brookes.ac.uk Tel: +44 1865 483323 Fax: +44 1865 483073

2 1

RE: [Zope] Quotes and DTML
by Passin, Tom 09 May '03

09 May '03

[ Wim Bekker] > > What are quotes doing here: > > 1: <dtml-var propertyValues> > 2: <dtml-var propertyValues()> > 3: <dtml-var "propertyValues"> > 4: <dtml-var "propertyValues()"> > > 1 and 4 gives the same result. > 2 gives Error Type: KeyError; Error Value: propertyValues(). > 3 gives a > > (1) calls propertyValues() if it is callable - in this case it is, so the result is the same as (4) - otherwise it gets the value of propertyValue if it has one. (2) is a DTML error because an object cannot have a name that includes "()". An expression in double quotes is evaluated as a Python expression and the results displayed. In Python, propertyValues (without any parentheses) returns the Python object of that name. If that object is a function, it is not called (because the "()" are missing), just returned as an object. How that object is displayed depends on the type of object. Python and DTML access the same collection of objects (since DTML is using Python to do its accessing). Cheers, Tom P

1 0