- Zope - Zope lists

Re: [Zope] set accessrule
by jbr＠FIZ-Karlsruhe.DE 22 Mar '02

22 Mar '02

Hello, summary of set access rule with zope 2.5.0 1.) for a folder testfolder I have set "Set Access Rule" to python script accessHB to limit access 2.) as Chris McDonough has shown (thanks !) accessHB is working like: > From chrism(a)zope.com Thu Mar 21 19:21 MET 2002 > Subject: Re: [Zope] set accessrule > Date: Thu, 21 Mar 2002 13:26:28 -0500 > > Hi, > > I wouldn't bother to try to pass in REQUEST (the caller for access rules > does not pass any arguments in to the script). Instead, get the REQUEST > from context ala context.REQUEST. I think the test tab populates REQUEST > for you via magic that doesn't happen when an access rule is called. > > Your script becomes: > > ----------------------------------------- > ## Script (Python) "accessruleHB" > ##bind container=container > ##bind context=context > ##bind namespace= > ##bind script=script > ##bind subpath=traverse_subpath > ##parameters= > ##title= > > if context.REQUEST.SESSION.get('MySessionId') == None: > context.REQUEST.RESPONSE.redirect('/rootfolder') > ----------------------------------------- > But there is a security problem with "Set Access Rule": Any user even the unauthorized can get access to the folder (which is restricted by set accessrule) if he adds _SUPPRESS_ACCESSRULE to the url: http: ... testfolder/_SUPPRESS_ACCESSRULE gives access to restricted folder testfolder. This may be a bug or has been done to get access in case of emergency, but it makes set accessrule (more or less) useless. What can I do to prevent Zope to give access by adding _SUPPRESS_ACCESSRULE ? Do I have to modify the programmes which implement set access rule ? I even don't know where these programmes are located. With kind regards, Juergen Berger

2 1

Re: Error with context.absolute_url() in Python script
by Harry Wilkinson 22 Mar '02

22 Mar '02

I should also mention that although the traceback shows that I'm using Zope 2.5.0, the same thing happens on a CVS checkout.

1 0

[��]�� web�� ٽ�� ˾ƾ� �մϴ�
by INFO 22 Mar '02

22 Mar '02

1 0

help needed about expat
by Benjamin Buffereau 22 Mar '02

22 Mar '02

Hi all, Anybody knows how to get expat to work in the linux binary distribution of Zope 2.5.0? Thanks, Benjamin.

1 0

Re: [Zope] form with mutiple actions?
by jbr＠FIZ-Karlsruhe.DE 22 Mar '02

22 Mar '02

hello, in Zope 2.5.0 there is an Examples folder below the root folder. Perhaps the ShoppingCart example may give you some hint. With kind regards, Juergen Berger > From: Hamzal Kamal <k_hamzat(a)yahoo.com> > To: zope(a)zope.org > Cc: steve(a)spvi.com > Subject: [Zope] form with mutiple actions? > > Hi, > > Is it possible for form to have more than one actions? > > What i have in mind to do is to collect some user info through the > form and store them into table at the same time display this info in > another form for the user to enter the remaining info and then finaly > pass the info into secure form. > > Any idea on the matter will be appreciated. > > ===== > Hamzat kamaldeen Ishola > Dnet Systems Limited > 223 Ikorodu Road, Lagos. > 234 1 7749381, 234 08033011305 > > __________________________________________________ > Do You Yahoo!? > Yahoo! Movies - coverage of the 74th Academy Awards® > http://movies.yahoo.com/ > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

base url is missing port number
by Juergen R. Plasser / Hexagon 22 Mar '02

22 Mar '02

I am using the tool WebStress (http://www.paessler.com/) to test our Zope server performance, but I have a problem with the base url: WebStress gets as base url: <base href="http://195.xxx.yyy.zzz/" /> But IE gets (the correct url): <base href="http://195.xxx.yyy.zzz:8181/" /> The WebStress url is missing the port 8181. Why is this so? Juergen

1 0

Re and answer: Displaying users in acl_users caused error
by Andreas Rippel 22 Mar '02

22 Mar '02

I was reporting the following: we are managing users in the acl_users folder mostly via python. Our applications works, but when we click on individual users within the acl_users folder, we get the following error message: ... Zope has encountered an error while publishing this resource. Error Type: AttributeError Error Value: domains ... File .../lib/python/DocumentTemplate/DT_Util.py, line 160, in eval (Object: user.domains) (Info: user) File <string>, line 0, in ? AttributeError: (see above) Answer: Within our folders we had one named user, which obivously was resolved within the acquisition procedure. After renaming that folder to uppercase, everything works. So never name on object within your zope application user, it might cause unpredictable effects. \Andreas

1 0

Forms' "action" and (concatenation of) dtml-var's
by Dirk Van.Laanen 22 Mar '02

22 Mar '02

Hello, The following works in zope: a small form with some action defined and for the rest only a submit button, if the action is simple, like: <form method=post action="index_html"> <input type="submit" name="" value="submit"> </form> will bring up the index_html page. But compare the following: <dtml-in expr="decrQuery(datum=(_.str(datum)))" next size=1 orphan=1 start=teller> <a href="<dtml-var URL><dtml-var sequence-query >teller=<dtml-var next-sequence-start-number>"> volgend image </a> </dtml-in> This will work, the link will take you to the next batch of 1. But: <dtml-in expr="decrQuery(datum=(_.str(datum)))" next size=1 orphan=1 start=teller> <form method=post action="<dtml-var URL><dtml-var sequence-query >teller=<dtml-var next-sequence-start-number>"> <input type="submit" name="" value=">"> </form> </dtml-in> will give a name error because a variable (datum) is not recognised. even when i paste the correct url, like: action="/toondecr?datum=1796/03/02&teller=33"> i will get the same name error What is it with forms that variables that were recognised a few lines earlier (thus, apart from the form, in the same context), won't be read? In other words: what am i doing wrong? Remarkable: when i get the name error, the url has already changed to the correct one, eg: /toondecr?datum=1796/03/02&teller=33 When i reload that page i get the same error message. When i copy the new url and paste it into a new window, i get the correct page. cheers, Dirk

1 0

is it possible that packing the data.fs can slow down performance?
by Thomas ＠ HeadNet 22 Mar '02

22 Mar '02

Is it possible that packing the data.fs can slow down performance? (Was "Is somebody else having problems with the speed of their Zope-site...?") It is a theory from a guy (who actually isn't really a Zoper)... I am trying not to pack any data.fs's right now, and it seems that the site is "speeded up"... /Stoons :HeadNet: http://www.headnet.dk

5 5

Zope in a web based learning environment?
by Marcio Marchini 22 Mar '02

22 Mar '02

Hi, I was wondering if anybody out there is using Zope in a web based learning environment ? Would you care to share your experiences/opinions ? It could be courses online, free or not, anything SCORM related (http://www.adlnet.org/) etc. thanks ! marcio

3 2