- Zope - Zope lists

BUG? Non-manager can't edit ZPT with WebDAV or FTP; can with ZMI (fwd)
by Joel Burton 20 Feb '02

20 Feb '02

(Apologies if you're seeing this message twice; after 24 hours, I haven't seen it appear on the list, so I'm re-sending.) Synopsis: A highly-privileged non-manager user can edit all content types through WebDAV or FTP *except* PageTemplates. If user is changed to a manager, they can now edit PageTemplates through WebDAV/FTP. Demonstration/Walkthrough: 1) in folder "/foo", create local role "test" 2) in "/foo", give role "test" *all* permissions (in theory, this person would only need a few privileges; to remove any possibility that we're guessing the wrong privileges, select them all) 3) add user "bob" w/role=test 4) create a ZPT document "test.pt" in "/foo" 5) create a DTML DOcument "test.dtml" in "/foo" 5) see that bob can edit both documents using ZMI w/o problem. (therefore, it's not privileges per se that's causing the problem) 6) see that using WebDAV/FTP, bob can edit "test.dtml" (therefore, it's not WebDAV setup per se that's causing the problem) 7) see that using WebDAV/FTP, bob *cannot* edit "test.pt" (!) 8) add manager role to bob 9) now bob can edit "test.pt" through WebDAV/FTP (therefore, it's not simply ZPT+WebDAV that's causing the problem) Notes: I've tried FTP and 3 WebDAV clients (cadaver, WebDrive, Dreamweaver); all return an unauthorized message. This isn't a firewall, client, or locking problem: I can't do it from the server using cadaver; I've tried different client machines; using cadaver, I can't even GET the file (which makes no attempt to lock it.) WebDAV editing of ZPT is a critical feature for my clients. I can't give the editors "manager" role w/o opening huge security holes. Using cadaver w/debug settings, I can get detail on the requests and responses: the forbidden edit request (step #7 above) just re-requests authentication twice and fails. Happy to send the cadaver log to anyone who might find it helpful. Can anyone edit ZPT through WebDAV or FTP with non-managers? Can anyone shed any light on this problem? I do read zpt(a)zope.org, but a cc to me directly would be appreciated. Thanks in advance! -- Joel BURTON | joel(a)joelburton.com | joelburton.com | aim: wjoelburton Independent Knowledge Management Consultant

1 0

AW: [Zope] Priority of processes in Zope
by oliver.erlewein＠sqs.de 20 Feb '02

20 Feb '02

Hi all It seems that Problems with Solaris threading should be solved after installing Python 2.1.2 or Python 2.2. The thread to read up on this can be found at: http://groups.google.de/groups?hl=de&threadm=slrn9phonu.vq6.bbrox%40bbland.b brox.com&rnum=2&prev=/groups%3Fq%3Dsolaris%2Bthreading%2Bpython%26hl%3Dde%26 selm%3Dslrn9phonu.vq6.bbrox%2540bbland.bbrox.com%26rnum%3D2 The corresponding Python patchnumber is #460269. I'll try this on my Sun Solaris 2.8 and on my Intel Solaris 2.7 next week (my administrator's on holliday - !!!Grrrrrr!!! ;-) I'll post my results. Thanx to all who have helped solve the problem and burned a few calories thinking about the solutions! If anybody has more questions or can confirm the successful use of Python 2.1.2 (see problems in thread "threading, dtml and performance"), then please respond to the list. Oliver Erlewein

1 0

Python 2.2 RPMs OK for Zope 2.5.x on RH 7.2?
by Jeff Kowalczyk 20 Feb '02

20 Feb '02

My Zope experimenting has been done on Windows machines to date. I'd like to start using Python and Zope on my Linux boxes, but wondered if unlike Windows, I need to have an externally installed Python version synchronized with Zope's expected v2.1. Does anyone have any feedback on whether the Zope 2.5.x series will coexist nicely with the Python 2.2 RH7.2 RPMs at http://www.python.org/2.2/rpms.html ? I'd probably wait to use the Zope RPMs at TauPro when the 2.5.x version becomes available.

3 2

dtml-var weirdness
by Joseph A Knapka 20 Feb '02

20 Feb '02

Hi everyone, Stupid question of the day: Why might the following code result in a KeyError? It does in some contexts under Zope 2.5.0. <dtml-if expr="REQUEST.has_key('xyz')"> <dtml-else> <dtml-call expr="REQUEST.set('xyz','Hello world')"> </dtml-if> Sometimes the next line results in a KeyError, value 'xyz': <dtml-var name="xyz"> In such cases, this works fine: <dtml-with REQUEST only> <dtml-var name="xyz"> </dtml-with> Huh? TIA, -- Joe "I should like to close this book by sticking out any part of my neck which is not yet exposed, and making a few predictions about how the problem of quantum gravity will in the end be solved." --- Physicist Lee Smolin, "Three Roads to Quantum Gravity"

7 14

Re: [Zope] Cookie authentication: CUF and XUF (fwd)
by Dieter Maurer 20 Feb '02

20 Feb '02

darrylc writes: Can you please stay on the mailing list? (Added again) > I have been running tests with IE 5 and IE 6 and am running into the same > problem. If I set the CUF to expire the cookies after the browser session, > I can view the first page on my site, but if I go to another link within > the same site/level I get thrown back to the authorization page and zope > thinks I am an anonymous user. This is with the expiration set to end > after the session. > > Testing with Netscape, Galeon, or Opera works fine. > > Anyone else see this? A colleague may have seen something similar: He works on a Zope-CMF based portal. When he logs in from deep inside the portal, he looses the authentication cookie when he later visits pages higher up in the portal. This is normal behaviour when the "setCookie" call does not contain a "path" parameter. However, when I tried to reproduce the behaviour, I have been unable to do so. The difference: while I work with Netscape/Konqueror my colleague uses IE (5.5). I did not investigate further because our client wants the authentication immediate at the portal entrance, a case handled correctly by IE, too. I cannot help you further. I am essentially a Unix-only guy. Investigating problems restricted to IE is quite difficult for me. Therefore, please stay on the list... Dieter

3 2

Re: [Zope] ZSQL and last_insert_id
by Frank Tegtmeyer 20 Feb '02

20 Feb '02

"Chad Nantais" <cnantais(a)rednaxel.com> writes: > What is the right syntax for getting the id of the last recorded inserted > with ZSQL methods? I tried this: > SELECT LAST_INSERT_ID() AS last_insert_id Depending on your database this may be a dangerous way to do this. For example MySQL handles last_insert_id on a per thread base. This means that you could run into a race condition where one Zope thread grabs last_insert_id while another thread has inserted your record. In this case you get the wrong value. We used an external method to generate unique id's - in this case by opening a separate connection to the database, inserting into a counter table and getting last_insert_id. The connection is closed after that. Other implementations are of course possible: for example using the FSCounter product or an object based on Dieter Maurers SharedResource (http://www.dieter.handshake.de/pyprojects/zope/SharedResource.html) Like Perl programmers say: there is more than one way to do it :) Regards, Frank -- CTO fte(a)Lightwerk.com http://www.Lightwerk.com/ Fax: +49-2434-80 07 94 Phone: +49-2434-80 07 81 Lightwerk GmbH * An der Kull 11 * 41844 Wegberg * Germany Besuchen Sie uns auf der CeBIT: Halle 6, Stand F68 / 595

1 0

AW: [Zope] Priority of processes in Zope
by oliver.erlewein＠sqs.de 20 Feb '02

20 Feb '02

Hi Matthew Well I changed the -i Option of Zope already. I used 10, 100, 120. There was no change in behaviour. Pitty. I'll have a look at the sections you mentioned. Maybe I'll find something. Thanx for the detailed help! Oliver Erlewein

1 0

ip redirect
by Tom Scheidt 20 Feb '02

20 Feb '02

Hi, I'm looking for a quick way to redirect users from certain IP addreses as in the example below. Notice the wildcard (*). Thanks in advance for your help. <dtml-if "REMOTE_ADDR == '255.255.2255.*'"> <dtml-var "RESPONSE.redirect('/redirect_html')"> </dtml-if> Tom

3 2

Re: [Zope] timeTime() function question
by Anthony Baxter 20 Feb '02

20 Feb '02

In addition, note that the original number is a unix timestamp - seconds since 01/01/1970. So to add two weeks to it, you'd do: t + ( 2 * 7 * 24 * 60 * 60 ) Anthony >>> "Andreas Jung" wrote > Why do you want to use the timeTime() representation ? > Just add 14 (2*7 days) to the instance of the corresponding > DateTime object. > > newDate = DateTime("2002/02/05") + 14 > > - aj > > ----- Original Message ----- > From: <hpinson(a)indepthl.com> > To: <zope(a)zope.org> > Sent: Tuesday, February 19, 2002 20:12 > Subject: [Zope] timeTime() function question > > > > Can anyone explain the math behind the Python / Zope UTC > > timeTime() function? I need to add two weeks to a timeTime > > generated date, for post processing. > > > > For example; with the timeTime() generated number: > > > > 1014071233.22 > > > > What would two weeks from this number be, in timeTime format? > > > > Harlow Pinson > > Indepth Learning > > Email: hpinson(a)indepthl.com > > Web: http://www.indepthl.com > > Voice: 505-994-2135 > > FAX: 208-475-7678 > > > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) > -- Anthony Baxter <anthony(a)interlink.com.au> It's never to late to have a happy childhood.

1 0

timeTime() function question
by hpinson＠indepthl.com 20 Feb '02

20 Feb '02

Can anyone explain the math behind the Python / Zope UTC timeTime() function? I need to add two weeks to a timeTime generated date, for post processing. For example; with the timeTime() generated number: 1014071233.22 What would two weeks from this number be, in timeTime format? Harlow Pinson Indepth Learning Email: hpinson(a)indepthl.com Web: http://www.indepthl.com Voice: 505-994-2135 FAX: 208-475-7678

2 2