- Zope - Zope lists

Dangerous permissions granted to Anonymous to allow ZClass instantiation?
by Milos Prudek 04 Jul '02

04 Jul '02

The following looks like a Zope bug (Zope 2.5.1): It seems that permissions such as Create class instances must be given to Anonymous so that Authenticated can create class instances. It seems impossible to only allow Authenticated to create class instances. Details: Error Type: Unauthorized Error Value: You are not allowed to access ORL_Art in this context The error above appears for the following Python Script line: context.manage_addProduct['ORL'].ORL_Art.createInObjectManager(id,Dct) The error appears if Authenticated role has the following permissions and Anonymous does not have them: Add Documents, Images, and Files Add ORL_Arts Create class instances Manage properties The error disappears if Anonymous is given the above roles. If this is not Zope bug, what might be causing it? The manage_addProduct did not have this problem in Zope 2.4.4. -- Milos Prudek

2 2

How can I force Zope to accept german date format in input fields
by Juergen R. Plasser / Hexagon 04 Jul '02

04 Jul '02

Hello! I recently asked the same question in the german Zope mailing list zope-de(a)yahoogroups.de but did not get any answers. Maybe someone can help me here. How can I force Zope to accept german date format (dd.mm.yyyy) in an input field? If I enter 13.07.2002, the field becomes 2002/07/13 correctly (clear, there isn't 13th month), however, when I enter 12.07.2002, Zope makes 2002/12/07. When I enter an invalid date like 31.02.2002 (2002/02/31) Zope hangs and does not response (browser never get's ready). I use Zope 2.5.1 with Python 2.1.3 on a linux2 box. I already tried the command line parameter -L "de_DE", but without success. The problem appears when I preset the value of a date property with the german date format like this: <input type="text" name="Datum:date" size="35" value="<dtml-var ZopeTime fmt="%d.%m.%Y %H:%M">"> Any hints? Regards, Juergen

3 6

Storing a reference to a page within a python variable.
by Alec Munro 04 Jul '02

04 Jul '02

Hi all, I want to be able to store references to different pages within a dictionary in python. I know how to store the actual page(by calling it and assigning the results), but sometimes that page depends on variables that might change a few times during the course of that pages life as a dictionary value. I'm sure there is a way to do this, and I haven't figured it out yet. As an added bonus, is it possible for this reference to be useful from within python and using TAL? Thanks very much, Alec Munro

2 1

(no subject)
by Dennis Allison 04 Jul '02

04 Jul '02

1 0

Re: [Zope] How should my ISP set up Zope?
by Felix Ulrich-Oltean 04 Jul '02

04 Jul '02

When we go live, we will have a dedicated server, or we may consider a zope hosting company. At the moment I just want to be able to run Zope and we already have all our stuff set up with aletia. I don't need superb performance at the moment, just a useable Zope system for some training and development. > Zopehosting shouldn't be done only because it is 'nice to have'. Have a look > at an ISP that specialized in Zope hosting and continues in fine-tuning like > e.g. http://www.zopehosting.ch >

1 0

Refactoring tool for python/SQL/page-templates/dtml?
by Page Page 04 Jul '02

04 Jul '02

Gang, I'd appreciate a refactoring tool for python, SQL, PTs and/or .dtml-files. There exist several for SmallTalk and Fortran, but I havn't found one for the stuff we are doing. Such a refactoring tool finds redundancies in code, i.e. identical or structurally equal snippets of text, that's it. Pointers appreciated, but according to google and alltheweb, the prospect looks grim. Best regards PAGE ______________________________________________________________________ Do you want a free e-mail for life ? Get it at http://www.hotmail.ro/

1 0

C&C hasRole, has_role, allowed, has_permission?
by Terry Hancock 04 Jul '02

04 Jul '02

Hi all, I was tracking down a weird but very repeatable "IOError 5" bug which still baffles me, but it led me to a section of code where I have used "hasRole()" to find out if a user is supposed to be able to manage a particular object. For whatever reason the bug didn't show up until I switched to 2.5.1 (From 2.4.3). Reading the Zope source, I found a deprecation warning on this method, but rather confusing suggestions as to what to use instead. I also found a note about it on zope.org which mentions yet another method. So I was wondering if anyone could tell me what the significant differences are between the following options: allowed has_role has_permission (the last is mentioned on the zope.org site, though I didn't see it in the source (as yet)). They all seem pretty much the same to me, though there are minor API differences, and a hint that they represent different security models. (e.g. what's an "object role"? Not the same as "local role" I would guess?). Note that this is in Zope 2.5.1 and I'm migrating from 2.4.3. I've called _.SecurityGetUser() to get my user (not sure why this is safer than AUTHENTICATED_USER, but I am told that it is). Then I'm asking whether that user is supposed to be able to see the "Edit" button on my page. If they have a local role of "Moderator", they should. Thanks, Terry -- ------------------------------------------------------ Terry Hancock hancock(a)anansispaceworks.com Anansi Spaceworks http://www.anansispaceworks.com P.O. Box 60583 Pasadena, CA 91116-6583 ------------------------------------------------------

2 3

pickling error
by Terry Hancock 04 Jul '02

04 Jul '02

Hi all, I'm hoping this is the last mystery before I release ... :-D For good or ill, I used a variation of the MiniPickle module (see the example on zope.org) to pack python data structures into a cookie. (I had to add an extra hex-encoding part to make legal cookies). I needed an external python method to do this in the prototype, and I thought it'd be trivial to just attach these as regular python methods in the product. However, when I try to call my "mini_dumps" method, I get a complaint about not being able to pickle an object in an "acquisition wrapper." A little searching on zope.org suggests this is referring to the internal mechanism that Zope uses to provide acquisition services. But why wouldn't the external method complain about it? And how can I unwrap this object? (I guess this means getting a direct reference to the object instead of an indirect one, though I'm still foggy on how acquisition works -- it seems pretty magical still). Thanks, Terry -- ------------------------------------------------------ Terry Hancock hancock(a)anansispaceworks.com Anansi Spaceworks http://www.anansispaceworks.com P.O. Box 60583 Pasadena, CA 91116-6583 ------------------------------------------------------

3 3

new browser window doesn't show content
by Santagostino Pretina, Luca 04 Jul '02

04 Jul '02

Hi list, I've got this prob I cant seem to solve: got two macros: first one called "main" applies a filter : <div metal:define-macro="main" tal:define="auth_filter nocall: modules/ZTUtils/LazyFilter"> <div tal:define="raw_items python: here.contentValues( filter={'Type':( 'Article' ) } ); items python: auth_filter( raw_items, skip='' ); "> and second one simply shows some content: <table tal:condition="here/contentValues" width="100%" border="0" cellspacing="0" cellpadding="4"> <tr tal:repeat="item here/contentValues"> The problem is that they work fine if I access through the "test" link, but If I open a new browser window the first one ("main") it doesn't show me anything... Why does that happen? what do I have to do? Need help please, thanks a lot Luca

1 0

ANNOUNCE: Pound - reverse proxy and load balancer - v0.5
by Robert Segall 04 Jul '02

04 Jul '02

This is to announce the release of Pound v0.5. Changes from previous version: - added support for configuration file options (instead of command-line flags). - major code restructuring and splitting. - better Makefile, with support for more systems. - some code fixes. What is Pound (from the Web page) - a reverse-proxy: it passes requests from client browsers to one or more back-end servers. - a load balancer: it will distribute the requests from the client browsers among several back-end servers, while keeping session information. - an SSL wrapper: Pound will decrypt HTTPS requests from client browsers and pass them as plain HTTP to the back-end browsers. - an HTTP/HTTPS sanitizer: Pound will verify requests for correctness and accept only well-formed ones. - an HTTP/1.1 to 1.0 proxy. - a failover-server: should a back-end server fail, Pound will take note of the fact and stop passing requests to it until it recovers. For further information, download, etc. please see http://www.apsis.ch/pound The software is at version 0.5 (beta quality). Further testing (especially under heavy loads), improvements and suggestions are welcome. Pound is distributed under the GPL. Enjoy and let me know how it works for you. -- Robert Segall Apsis GmbH Postfach, Uetikon am See, CH-8707 Tel: +41-1-920 4904

1 0