- Zope - Zope lists

XUF and authentication problem
by L. Pelletier 21 May '02

21 May '02

I am a zope security newbie. I want to limit access to several folders in my website using a postgres table and the extensible User Folder (XUF) product. I've successfully installed XUF. What should the security tab look like on the folders I want to limit access to? I've turned off acquire View permissions and checked View for the Authenticated column. This causes the loginForm of XUF to appear, but typing in a valid username and password doesn't seemt to log me in. Is this problem related to my security tab or does it have something to do with the non-encrypted storage of the passwords in my postgres table (I was using UserDB and a much older version of zope before). Any help would be greatly appreciated. Thanks in advance, Liz

2 1

Zope alone or under Apache
by Fearless Froggie 21 May '02

21 May '02

>From my research I understand that Zope alone is much faster than under Apache. Are there any advantages to running Zope under Apache that would make the decrease in speed worthwhile? There seem to be plenty of zope products available to take care of things missing in zope like cgi-bin, etc. I'd be grateful for any "personal experiences" people would have to offer. Many Thanks, Rita Mikusch __________________________________________________ Do You Yahoo!? LAUNCH - Your Yahoo! Music Experience http://launch.yahoo.com

1 0

Autologout
by Richard Wesley 21 May '02

21 May '02

Is there any way to attach an expiration time to a Zope user. And does exUserFolder support this? TIA, - rmgw <http://www.trustedmedianetworks.com/> ---------------------------------------------------------------------------- Richard Wesley Trusted Media Networks, Inc. "Does anybody really know what time it is? Does anybody really care?" - Chicago

1 0

PCGI & HTTP HEAD command
by Tom Nixon 21 May '02

21 May '02

Hi I'm running Zope 2.5.0 through IIS using PCGI. It works perfectly for HTTP GET requests, but it returns a 404 error if you request a page with the HEAD command. Does anyone know how to tweak either IIS or Zope to fix this? Thanks Tom

1 0

ZPT condition attribute question
by Mark A. Lilly 21 May '02

21 May '02

hello, i have an input tag, and i want to set the value attribute to either a defined value or a blank string. my python expression either returns a single instance or an empty list. right now, i am using two Input tags in tandem. Only one remains after rendering b/c one is removed. my question, is it possible to write this so i don't have to have nearly identical Input tags all over my page? thanks, mark <input type="text" name="input_name" tal:condition="task/task_name | nothing" tal:attributes="value task/task_name" /> <input type="text" name="input_name" tal:condition="not:exists:task/task_name" tal:attributes="value string:hi" />

3 2

I cannot copy paste zClass based products
by Max M 21 May '02

21 May '02

I have an application where some of my Products are Python based and others are zClasses. As far as I remember it was possible to copy paste the zClass based objects when I first wrote the app. But somewhere along my upgrades I seem to have lost the ability to copy/paste those objects. My Python based products can be copied nicely. Has anybody got an idea as to why ??? regards Max M --------------------------------------- Error: "The object /ProjektNet/ does not support this operation" Traceback (innermost last): File C:\zope\zope251\lib\python\ZPublisher\Publish.py, line 150, in publish_module File C:\zope\zope251\lib\python\ZPublisher\Publish.py, line 114, in publish File C:\zope\zope251\lib\python\Zope\__init__.py, line 159, in zpublisher_exception_hook (Object: 2_semester) File C:\zope\zope251\lib\python\ZPublisher\Publish.py, line 98, in publish File C:\zope\zope251\lib\python\ZPublisher\mapply.py, line 88, in mapply (Object: manage_pasteObjects) File C:\zope\zope251\lib\python\ZPublisher\Publish.py, line 39, in call_object (Object: manage_pasteObjects) File C:\zope\zope251\lib\python\OFS\CopySupport.py, line 144, in manage_pasteObjects (Object: 2_semester) File C:\zope\zope251\lib\python\OFS\CopySupport.py, line 373, in _verifyObjectPaste (Object: 2_semester) Copy Error: (see above) RoboVenture ProjektNet Undervisere Kursusplan Emner Materiale Diskussion Kursister Skema Undervisere Kursusplan Emner Materiale Diskussion Kursister Skema Evaluering Max M 1 Undervisere Kursusplan Kursister

3 3

Python 2.1.3 on Debian
by Tim Wilson 21 May '02

21 May '02

Hi everyone, I've got a Debian Woody server here and I'd like to upgrade the Python to 2.1.3. The current testing version of Python is stuck at 2.1.2-2 I believe. Does anyone know if the stability-enhancing features of Python 2.1.3 w.r.t. Zope are in 2.1.2-2? Anyone know where I can get a .deb of 2.1.3? -Tim -- Tim Wilson | Visit Sibley online: | Check out: Henry Sibley HS | http://www.isd197.org | http://www.zope.com W. St. Paul, MN | | http://slashdot.org wilson(a)visi.com | <dtml-var pithy_quote> | http://linux.com

4 3

RE: Security Assertions, maybe time to change SimpleItem?!
by Pierce, Scott 21 May '02

21 May '02

Exactly, the fact that I could still access them is what caused me to abandon the feature 4 weeks ago not realizing the other effect. Trust me, I have likely read that element of the ZDG 5 times if not more. Although I believe in RTFM, with something as esoteric as Zope you gotta lighten up. Zope needs a mentoring program. The docs just aren't there yet. It honestly was not my intention to threaten anything. I was simply scared that I was going to have to jump ship with only a week and a half to go. Hmmm... my class was explicitly inheriting SimpleItem.SimpleItem so I wouldn't have to bother with the order in which I inherited. Another Zope lesson learned. Unfortunately, I only have some much cranial capacity to spare. I'm afraid I am going to have to drop a few birthdays and an anniversary to make room. Scott -----Original Message----- From: Chris Withers [mailto:chrisw@nipltd.com] Sent: Tuesday, May 21, 2002 8:02 AM To: Pierce, Scott Cc: 'zope(a)zope.org' Subject: Security Assertions, maybe time to change SimpleItem?! "Pierce, Scott" wrote: > > OK, I'll publicly humilate myself now. Not entirely, other than not really reading the bit about security in the ZDG ;-) > my own oversight. I incorrectly believed that having turned off permission > acquisition and limiting 'View' access to a few select roles would be > sufficient regarding DTMLFiles. I assume you're developing a Python Product here? The answer is that it probably should, but you got caught out by a peice of history. It is documented that if you make no security assertions about a method in a python product that nothing will be able to access them, which is what you should have been experiencing, and which would have told you much more quickly that you had forgotten to make any security assertions. However, this policy was only(?!) introduced back in Zope 2.2 and so, for fear of breaking lots of code, a class called SimpleItem has an __access_unprotected_subobjects__=1 assertion. This basically makes unprotected stuff anonymously viewable, which was the old policy. Sadly, prettymuch everything subclasses SimpleItem, so the documented security policy isn't realyl adhered to much, hence when you forgot to make security assertions, the methods became anonymously viewable, which, from your poitn of view, sux ass. > I believe, and am not completely sure, that > this is not the case because they are global having been 'instatiated' via: > index_html = DTMLFile('index_html', globals()) within a product. ...so this isn't quite correct. > frustration/desperation as inappropriate. Zope can be a dark mistress. ...some would say a complete bitch ;-) Maybe it's time to change that assertion in SimpleItem and finally break all the code that peopel should have fixed long ago? cheers, Chris

1 0

always anonymous user despite basic authentication
by Pierce, Scott 21 May '02

21 May '02

(notice I changed the subject line) Well, thanks to all the advice but upgrading to 2.5.1 is still showing 'Anonymous User' though I just authenticate via the browser interface. I could change things around and create the dtml stand-alone but I use extensive use of traverse_subpath. In doing this, for some reason, I lose this REQUEST variable. Scott Pierce Sonopress US - Digital Services 828.658.6157

4 3

Fwd: [Zope] Doubt
by Bernd Kulawik 21 May '02

21 May '02

....oops - I forgot to click on "answer all" :-) > Von: Bernd Kulawik <kulawik(a)biblhertz.it> > Datum: Die, 21. Mai. 2002 14:44:36 Europe/Berlin > An: BZ <bz(a)bwanazulia.com> > Betreff: Re: [Zope] Doubt > > > Am Dienstag den, 21. Mai 2002, um 11:42, schrieb BZ: > >> Not a "good" way. >> >> Go with Mac OSX. Seriously. I used to have to do all my dev work on my >> Linux server now, I have as many versions of Zope running on my >> Powerbook (right next to word, excel, photoshop, iTunes, etc). There >> is a nice package of pre-compiled versions here for OSX (2.3.3 -> >> 2.5.2) >> >> http://opensource.spvi.com/ >> >> You have to use the command line > > not if you look for the 2.4.1 (or was it 2.4.3?) Version for OS X in > the Download-Section at Zope.org: this one comes with an installer and > a "Starter" for the Dock too - very nice :-) > >> , but hey, that is what it is all about. :) > > of course, you're right :-) > This hint was only for people who hesitate to learn more about the > abstract beauty of (for instance): rm -rf * > > :-) > >> >> BZ > > > Bernd >

1 0