- Zope - Zope lists

RE: [Zope] WEBDAV
by sean.upton＠uniontrib.com 23 Nov '01

23 Nov '01

Frankly, this one good reason you should consider the use of a proxy server in front to Zope like Apache or Squid, which is the usual setup for Production Zope deployments. You use proxy ACLs to screen for certain things, and can use an authenticator for things Zope doesn't authenticate on, as long as you use the same user names and passwords, or user director service. That said, you can see object ids in folders, but nothing else using WebDAV. You can also see the method objectIds callable via URL; if this concerns you, a proxy ACL is a simple, graceful solution, to keep your object id listings more obscure, and you should be able to setup ACLs for WebDAV and for things like /objectIds. You could bind an ACL to a authenticated user for this, or bind it to a group of source addresses, or a particular interface on the proxy server. True security is almost always a proper integration issue. Zope has strong security, but comprehensive solutions in a production environment really require the smart use of a reverse-proxy server / http-accelerator as a front end. Sean -----Original Message----- From: netadmin [mailto:netadmin@technifind.com] Sent: Wednesday, November 21, 2001 5:49 PM To: zope(a)zope.org Subject: Re: [Zope] WEBDAV I was using Webfolders under Windows 98 to access my webdav folder on a linux server. I found that I could access not only the directory ( and see all the files listed ) but the actual contents without having to authenticate [ scared the ? out of me ]. Is this standard? I double checked everything. I disabled acquisition and all persons on the anonymous user and I was still able to get to the contents of a file. ----- Original Message ----- From: sean.upton(a)uniontrib.com To: netadmin(a)technifind.com ; zope(a)zope.org Sent: Wednesday, November 21, 2001 6:37 PM Subject: RE: [Zope] WEBDAV It works; you need to specify the client you are trying to use, as some clients are non-standard, or do funky things. Most clients should work without problem, AFAIK... Sean -----Original Message----- From: netadmin [mailto:netadmin@technifind.com] Sent: Wednesday, November 21, 2001 5:30 PM To: zope(a)zope.org Subject: [Zope] WEBDAV Is webdav just pre-beta or what? It just doesn't seem to be working right at all. Is there a Zope-Webdav tutorial or faq or something I can get my hands on that might help me? Thanks ahead of time for any help, Luis.

1 0

ZODB and ZSQL
by Stephan Goeldi 23 Nov '01

23 Nov '01

Let's assume I have two databases. An external connected SQL database and the ZODB. In the external DB I have a table with two columns: 'name' and 'email'. In the ZODB I have a table with the columns 'name' and 'place'. How can I extract data from both in one turn using the foreign key 'name'? e.g. I want this result: name - email - place Is this possible? _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

2 1

zope-zcvsmixin help
by Radu-Adrian Popescu 23 Nov '01

23 Nov '01

Hello, i'm pretty new to Zope and I can't install properly the zope-zcvsmixin package. The CVS part of the installation worked fine, but i get lost at step 2. I created the ZCVS folder, even restarted Zope, but no CVS objects or "CVS folder" appeared. Can someone help ? Thank you !

3 2

Re: [Zope] Re: Line Wrap and the Zope Community?
by Oliver Bleutgen 23 Nov '01

23 Nov '01

> Simon Michael wrote: >[...] > 2. Not to mention VISUAL ALACRITY! Where's the color, the captivating > use of fonts, eye catching graphic highlights, nicely styled paragraphs, > hypertext references, perhaps even an animated image or two?... Right, > right... it's 1.1 CMF... as if THAT'S AN EXCUSE? > And get this... THIS IS CLASSIC... Scroll down to Table 05.01 for a > demonstration on just what it takes to modify a CMF color... Need I say > more? > If it were 1995 I would expect this, but the world has moved on. > What... it's the author's responsibility? Go start MS Word, load any one > of their templates, type "I am just a data source" and press PRINT! Does > this exercise light any bulbs??? > If _I_ wrote Zope... I would be sending the above author MY APOLOGIES > for what I've done to their work - how many of YOU reading this page > would feel either PRIDE in the presentation or would be willing to BLAME > ITS AUTHOR!?! > This was sent to me privately: "the issue you are talking about has > _nothing_ to do with zope". > What? Nothing to do with Zope? My apologies then... Let's just blame the > user, the author, very convenient, very helpful, and very bound to > improve Zope as a Web Publishing Platform. Did I send this above sentence privately? Sorry, it should go to the list. Again, this has really really nothing to do with zope. The culprit on the above page are long sentences in a <pre> tag: PRE>Line 9 The form action has to be changed to cv_metadata_edit to call the correct DTML Method. Line 18 The link to the full metadata edit form has to be modified for the new DTML Method full_cv_metadata_edit_form. Line 32 The Description field is now called Introductory Self-Description </PRE> See what I mean? I can do that in plain html, perl, php, BEA weblogic, Domino, whatever. Yes, you are right that the html on that page is not perfect, but to change that one would not patch zope. html specs change, browser implementations change, people want to use zope to serve xml/wap etc.. Repeat with me: We don't want an application/content server that prevents us from writing stupid (wrong) html (or structured text, in that case). If I want to do an unwrappable line which is 5000 chars long, zope better gets out of my way. You could as well blame http or the tcp/ip-protocol for the look of that page. I have the feeling that you don't really see what zope is about. I would not call it content management server or web publishing server in a strict sense. It's more like a plattform which enables people to build such a server - tailored to ones needs. Again, this belongs to zope-web, and I guess when you make a nice cmf skin for the coming zope-server it might be considered to use that as an option. cheers, oliver

3 2

Is there a way to askZope whether it is running multithreaded
by Robert Rottermann 23 Nov '01

23 Nov '01

I am using Wing as a debugger. This excellent tool needs Zope to run singlethreaded. Otherwise it dies so miserably that it kills even the Linux it is running on. Wing uses a patched z2.py where it has a call to connect to wing added. I would like to be able to avoid connecting to Wing when Zope is running multithreaded. thanks Robert

3 5

Proxy......
by James van der Veen 23 Nov '01

23 Nov '01

Hi All, I know most of you can help me... How do we prevent a page to be cached by a proxy or whatever? I know It doesn't matter what language... I think you can set it inthe header right? I'm afraid my colleague will have to use it for (yuck) asp(yuck) but could you please help us? I will want to use it for my zope pages 2. (anyone around that does know a lot about MySQLuserfolder?) Hope someone can help me (us) tnx! Greetz, Jamez!

3 2

Difference between Pydoc and DocFinder
by Damir Bartakovic 23 Nov '01

23 Nov '01

Hallo all, I really like the idea of pydoc and DocFinder but I am a bit confused. I couldn't find out if it is the same or not. And if not what is the advantage or disadvantage of using pydoc or DocFinder with Zope. I am referring to following sites: http://www.zope.org/Members/shh/DocFinderEverywhere/ http://www.handshake.de/~dieter/pyprojects/zope/DocFinder.html http://www.handshake.de/~dieter/pyprojects/zope/pydoc.html thanks Damir

2 3

arrgghhh syntactical hell!!
by Jacob Singh 23 Nov '01

23 Nov '01

So here is my tragedy: I have an SQL query which pulls a record from a database. One of the fields is called file1. It contains a path to a file (i.e. media/inline/asdasd.jpeg). This file is accessible through LocalFS. LocalFS requires a syntax like media['inline']['asdasd.jpg'], so I wrote a script to convert the Unix style path to something LocalFS can understand. This works fine. Here is the code I use in my DTML doc to render asdasd.jpg: <dtml-call expr="REQUEST.set('imgpath',makeLocalFSPath(file1))"> <dtml-var "_.getitem(imgpath,1)" null="_[media['none.gif']]"> The first line calls the pythinon script that will make the LocalFS path. The second one endeavors to render the image using DTML's built in MIME to HTML technology which is necessary because using <IMG src=..... would not give me the with and height and is bad practice anyway. The null tag is just to shove that empty image marker in in case there is nothing in the field. When I call the page it gets a key error Error Type: KeyError Error Value: media['inline']['asdasd.jpeg'] But if I put <dtml-var "media['inline']['asdasd.jpeg']"> in any document in renders just fine. So basically the variable value gets rendered, but since It's not a variable but an expression, Zope doesn't know what to do. Oh and I tried putting double quotes on imgpath via the makeLocalFSPath function to no avail. Thank you for your help Jacob

2 3

SiteAccess/TinyTablePlus perplexed - help.
by Trevor Toenjes 23 Nov '01

23 Nov '01

I am trying to write some data to a TinyTable via an AccessRule. I am stuck and have tried the obvious "security" overrides on the table. I get the following DTML errors-but cant identify the security problem. Unauthorized >>You are not authorized to access html_impression I am using Zope2.4.0. The code is using Embedded Session Values. The call works fine without the AccessRule. <dtml-let stack="REQUEST['TraversalRequestNameStack']"> Don't intercept management requests <dtml-unless "stack[0][:6]=='manage'"> Is the next path segment a positive integer? <dtml-if "_.int(stack[-1])>0"> Save it and remove it from the path <dtml-call "REQUEST.set('SessionID', stack.pop())"> Add it back into the logical path <dtml-call "REQUEST.setVirtualRoot(REQUEST.steps+[SessionID])"> <dtml-call "html_impression.setRow(sessID='sessionID2',timestamp='time',IP=_.render(REM OTE_ADDR))"> <dtml-else> <dtml-raise type="Invalid">Invalid Session ID!</dtml-raise> </dtml-if> </dtml-unless> </dtml-let> TIA4help, Trevor

3 4

return another Zope object in a dtml-method
by Andrew Thompson 23 Nov '01

23 Nov '01

2 1