- Zope - Zope lists

Formulator - How to set up security to create fields inside a python script
by Gabriel Genellina 18 Nov '02

18 Nov '02

Hi I want to create and use a Formulator field inside a Python Script. That is, by example: from Products.Formulator.StandardFields import StringField MyField = StringField('alias', title='Alias', description='Alias de la columna') (The idea is to dynamically create and manage the field list). But I was unable to find out the right security assertions. I've tried (in the __init__.py module of another product): allow_module('Products.Formulator.StandardFields') or ModuleSecurityInfo('Products').declarePublic('Formulator') ModuleSecurityInfo('Products.Formulator').declarePublic('StandardFields') ModuleSecurityInfo('Products.Formulator.StandardFields').declarePublic("StringField") or even more esoteric approaches, but I always end with this security violation. >From the stupid_log_file: PROBLEM(100) Zope Security Policy '<Python Method object at 01956728>' passed as roles during validation of 'CheckBoxField' is not a sequence. This is generated by the validate() method in ZopeSecurityPolicy. As far as I can tell, the "roles" argument is expected to be None or a list, not a Python Method. I have no idea of what method it is, or why is it used instead of the true role. (The Zope security machinery is far beyond my current Python knowledge and it's a kind of magic for me :) ). Any help, please? Gabriel Genellina Softlab SRL

1 0

Access to properties without accessing the same properties in parent classes
by Dr. F. Tröster 18 Nov '02

18 Nov '02

Is there a possibilty with the method "hasProperty(...)" to test an object to have a special property without looking for the same property not inherited by the parents part of the object? Thank you very much Fritz

3 2

dtml-if and _.['sequence-item']
by Marie Robichon 18 Nov '02

18 Nov '02

Hi everyone, I canot get this example from the zope bible to work. Any ideas anyone?? I am calling the form with a value for month in the namespace so that's not the problem: <SELECT name="month"> <dtml-in "('January', 'February', 'March', 'April', 'May', 'June', 'July', 'August', 'September', 'October', 'November', 'December')"> <OPTION <dtml-if expr="month == _.['sequence-item']">SELECTED</dtml-if>value="<dtml-var sequence-item>"><dtml-var sequence-item></OPTION> </dtml-in> </SELECT> TIA Marie Robichon Web Task Force European Synchrotron Radiation Facility BP 220 38043 Grenoble Cedex France Tel: (33) 04 76 88 21 86 Fax: (33) 04 76 88 24 27

3 2

RE: [Zope] Regarding ZOPE backup procedure
by sean.upton＠uniontrib.com 18 Nov '02

18 Nov '02

Hmm... All the content types I am developing for my CMF site will serialize to something that will keep metadata. For documents, this is easy: use XML or embed metadata in HTML meta elements. For binary types (haven't addressed this yet), I might end up making them look like a folder for FTP purposes, and saving two files in the directory named after the object id: a text file in XML or RFC822 for metadata, and the binary file itself. You do make a good point about security about the objects. I'm really of the opinion at the moment that a good backup strategy is to get both neutral content, and Zope-specific ZODB storage backups to try and deal with this in the most comprehensive way. Sean -----Original Message----- From: Charlie Reiman [mailto:creiman@kefta.com] Sent: Thursday, November 14, 2002 1:21 PM To: sean.upton(a)uniontrib.com; Chinku_Simon(a)infosys.com; zope(a)zope.org Subject: RE: [Zope] Regarding ZOPE backup procedure > -----Original Message----- > From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of > sean.upton(a)uniontrib.com > Sent: Thursday, November 14, 2002 12:25 PM > To: Chinku_Simon(a)infosys.com; zope(a)zope.org > Subject: RE: [Zope] Regarding ZOPE backup procedure > > > Also worth considering: figure out a way to back up your content > in a format > other than just backing up your ZODB (serialize it and download it via FTP > or something). Consider some way to serialize your CMF content into > something like plain-text files so that you not only have a backup of your > database, but also a neutral (archival) backup of your content as well. > > For backup of your ZODB, consider use of DirectoryStorage. I would suggest you never back up with FTP. FTP generally does not present enough metadata to even begin to reassemble a site. For instance, folder properties and SQL method connection data are not in the FTP format. I imagine you would lose all security information as well. FTP is intended primarly for editing object bodies. Otherwise I agrew with Sean. If you are super lazy, you might also want to consider setting up a zsyncer as a quick & ditry backup solution. ZSyncer isn't designed for this purpose but it could be used in this way. This would also let you swap the backup server pretty quickly, though not automatically.

1 0

RE: [Zope] Re: Trouble with dtml-with
by Smith, Neil (Worcester) 18 Nov '02

18 Nov '02

A simple <dtml-with FolderB> should find it. The dtml-with uses aquisition to find FolderB, so if you're in FolderC it doesn't find it there, but descends into the folder below, and there it is. This works for me, does it not work for you? -- Neil -----Original Message----- From: Roger Fisher [mailto:rlfisher@sprynet.com] Sent: 16 November 2002 21:36 To: zope(a)zope.org Subject: RE: [Zope] Re: Trouble with dtml-with Sorry... I am not seeing this. Method1 (which is contained in FolderC) wishes to call Method2 which is in FolderB. FolderB is adjacent to FolderC (FolderC contains Method1). In my previous coding that hasn't been on the normal acquisition path: Method1 can't "see" Method2 unless I bring FolderB into the namespace. Thanks for your patience with me. -----Original Message----- From: Dieter Maurer [mailto:dieter@handshake.de] Sent: Saturday, November 16, 2002 11:51 AM To: rlfisher(a)sprynet.com Cc: zope(a)zope.org Subject: RE: [Zope] Re: Trouble with dtml-with Roger Fisher writes: > Naturally, the first thing I tried was <dtml-with FolderB> which returned a > KeyError on FolderB. > ... > > I cannot figure out how to <dtml-with> to get from Method1 (in FolderC) > to > > code in FolderB. FolderB is parallel to Method1's parent (FolderC). It is more important for what object you call "Method1" than where is lives (the latter is usually irrelevant). When you call "Method1" for an object in "FolderC", then it will find "FolderB" (through acquisition). Dieter ********************************************************************** The information contained in this e-mail is confidential and intended only for the use of the addressee. If the reader of this message is not the addressee, you are hereby notified that you have received this e-mail in error and you must not copy, disseminate, distribute, use or take any action as a result of the information contained in it. If you have received this e-mail in error, please notify postmaster(a)npower.com (UK 01384 275454) and delete it immediately from your system. Neither Npower nor any of the other companies in the Innogy group from whom this e-mail originates accept any responsibility for losses or damage as a result of any viruses and it is your responsibility to check attachments (if any) for viruses. Npower Limited Registered office: Windmill Hill Business Park, Whitehill Way, Swindon SN5 6PB. Registered in England and Wales: number 3653277 This e-mail may be sent on behalf of a member of the Innogy group of companies. **********************************************************************

2 1

RE: [Zope] Documentation ParsedXML
by sean.upton＠uniontrib.com 18 Nov '02

18 Nov '02

What: ParsedXML stores an XML document as a persistent DOM strucure within the object database. How: W3C DOM Level 2 interface for reading/writing/traversing the sturcture. Why: Because it doesn't store and have a need to parse XML and temporarily instantiate a DOM to get a useable structure; it doesn't store XML, it stores a DOM representation of it. Of course, you can always upload/download/view/edit the raw XML, it just gets stored as a persistent DOM. Sean -----Original Message----- From: Juan Manuel Ruiz Garcia [mailto:jmruiz@it.uc3m.es] Sent: Friday, November 15, 2002 4:42 AM To: zope(a)zope.org Subject: [Zope] Documentation ParsedXML Hi all, I'm looking for documentation about ParsedXML.. what is it, what it does, how it works... I wanto to reference it properly in the documentation of my project... Can anyone tell me where to look? Thanks in advance _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

store external documents to Zope
by Jessica Niewint 18 Nov '02

18 Nov '02

Hi first of all: I am a newbie to Zope, so please be patient with me. I want to save to Zope an external document automatically and for that I thought about a simple mechanism like this: The user got in his interface a send button to insert his document to the Zope portal. After pushing the send button his file will be added the the Zope source and readable in Zope. So how can I add a new document to the Zope portal without using the Zope interface ? Where do I have to add the document source to Zope ? Thank you a lot in advance ... J.

2 2

Problems with ZCatalog in Zope 2.6.0 and 2.6.0b2
by Josef Meile 18 Nov '02

18 Nov '02

Hi, I tried the following in two different clean installations of Zope (2.6.0 and 2.6.0b2) and the result was the same: 1- Export a folder with some DTML-Methods and Images from my current Zope 2.5.1 2- Import this folder into the root folder of the new Zope. 3- Create a ZCatalog with "Catalog" as id in this folder. With the new Catalog I did the following: 4- Press "Find Objects" 5- Select "All types" 6- Press "Find and Catalog" When I press the "Catalog" Tab I saw the all the objects inside my folder, but type says "ZCatalog" instead of "DTML Method" or "Image". In the previous zope (2.5.1), ZCatalog showed the correct types. Afterwards, I added the indexes "meta_type" and "Type", but the result was the same. How can I solve this problem? Thanks in advanced, Josef.

2 1

HEAD transactions?
by Howard Hansen 18 Nov '02

18 Nov '02

Looking through my Undo list, I found several transactions that look like: /ir/wa/ad_neorx.htm/HEAD by Anonymous User I fired up the browser and navigated to a page and then appended /HEAD at the end and after a while, I got a blank page back. I checked the history for the file and found a new transaction. I ran a diff on the current version and the prior one. No changes. So what the heck is HEAD and why does it create a transaction? Given my recent problem with runaway transactions, doesn't this represent a potential DOS vulnerability. You could keep pounding a server with /HEAD (give a server head?) and eventually fill up the hard drive. Howard Hansen http://zopenotes.com __________________________________________________ Do you Yahoo!? Yahoo! Web Hosting - Let the expert host your site http://webhosting.yahoo.com

2 1

ZCatalog: Huge Problems recataloging an item
by Timm Gebhart 18 Nov '02

18 Nov '02

Hi there. I seem to have a problem with CatalogAware Classes and index_object: Method code is as follows: <html><body> <dtml-call "REQUEST.set('active', 1)"> <dtml-with "content[pic]" only> <dtml-call "manage_changeProperties(REQUEST)"> <dtml-call reindex_object> </dtml-with> <p>Changes saved.</p> </body> </html> which is getting called from a form outside the management interface to update a catalogued item's properties. But it does not! Though the object has now the new values, the ZCatalog entry is not updated, and the DTML method returns without showing any errors. How can this possibly happen? I am a bit confused especially since the same method worked before restarting Zope. Thanks in advance, tmM -- Nobody writes jokes in base 13. Douglas Noel Adams +

2 3