- Zope - Zope lists

RE: [Zope] FW: Security question - precision
by Bocquillon Philippe 02 Nov '01

02 Nov '01

Dieter, Thanks for your answer. You are right: it seems there is a problem in traversing back to the root (looking at the trace). However, my classes are already inheriting from Acquisition.Implicit. So, this is not sufficient to solve the problem. Philippe > -----Original Message----- > From: Dieter Maurer [mailto:dieter@handshake.de] > Sent: dimanche 28 octobre 2001 19:04 > To: Bocquillon Philippe > Cc: 'zope(a)zope.org' > Subject: Re: [Zope] FW: Security question - precision > > > Bocquillon Philippe writes: > > Zope refuses "add object" permission to any user having a > role other than > > Manager, i.e. Zope refuses to add objects in containers > whose classes are my > > proper classes (inheriting ObjectManager), even if I give > all permissions to > > these other roles, at root level and acquiring them. > > When a role adds these objects in _standard_ Zope Folders, > no problem, Zope > > permits it. > Looks as if your classes do not inherit from > "Acquisition.Implicit" (probably "Acquisition.Explicit" will > work, too). > > In such a case, the Zope security machinery is no longer able > to traverse back to the root. Consequently, it rejects the > request (more precisely, it uses its default role assignment, > "Manager"). > > > Dieter >

1 0

a metric for killing DTML.
by Anthony Baxter 02 Nov '01

02 Nov '01

Like any site that's been around for a while, we've got a lot of DTML that shouldn't be DTML. We're gradually killing it, but we're looking at detecting stuff that _shouldn't_ be in DTML. One metric that's come up is "any DTML method that has 3 or more calls to REQUEST.set() is probably up to no good." Have other people found other useful rules of thumb about when to avoid DTML? Anthony

11 12

Re: Zope digest, Vol 1 #1748 - 43 msgs
by Frederic Faure 02 Nov '01

02 Nov '01

At 10:13 01/11/2001 -0500, you wrote: >From: Oleg Broytmann <phd(a)phd.pp.ru> > >On Thu, Nov 01, 2001 at 10:50:40AM +0100, Frederic Faure wrote: > > In the mean time, is there a way to just use Zope as a personal and > > convenient repository, and tell it to extract an entire site into HTML so > > wget, pavuk or any other websucker will do. Thx. Does Zope provide an internal tool for this? FF.

2 1

Any way to know if in ZMI?
by Sidnei da Silva 02 Nov '01

02 Nov '01

There is any way or property that I can test to know if im inside the ZMI or not? Thanx. -- Sidnei da Silva X3ng Consultoria e Desenvolvimento Ltda. sidnei(a)x3ng.com.br

2 1

RE: [Zope] zope operations atomic?
by Clark OBrien 02 Nov '01

02 Nov '01

This thread is getting hard to follow. The second block below that you attribute to me was actually Kapil's response to something I had said. -----Original Message----- From: Chris McDonough [mailto:chrism@zope.com] Sent: Thursday, November 01, 2001 4:50 PM To: Kapil Thangavelu; Clark OBrien Cc: zope(a)zope.org Subject: Re: [Zope] zope operations atomic? Clark wrote: > > suppose I have a method AtoB that changes every > > letter A to B. > > suppose I have another method BtoC that changes the > > leter B to C. > > > > what is the outcome of invoking these methods in > > different thread contexts > > on the > > string ABABABAB? > > Kapil replied: > it depends on the concurrency. if both methods execute > concurrently, than one will conflict and one will > commit from trying to write on the same object. which > one is hard to determine apriori... i'm taking a wild > guess that it would be first one to commit. Chris, > could you comment on this? I'm not totally sure I understand the question (was it an allegory?) but a literal response is: If there is a conflict created by a first-time concurrent run of the two methods, the string AAAAAAAA will be modified to become: BBBBBBBB if AtoB wins the commit or ACACACAC if BtoC wins the commit The "loser" of the commit would on a retry subsequently cause the string to become: CCCCCCCC (if BtoC was the loser) or BCBCBCBC (if AtoB was the loser) (crossing fingers ;-) Clark said: > > >your joking, right... besides the fact that > > excessive locking kills > > >performance and scalability, i *know* i don't want > > to have to litter my > > code > > >with locks and thinking about concurrency. the zodb > > greatly mitigates > > >concurrency issues, making them almost non-existent > > for most code. moving > > >from this paradigm to some application level > > locking paradigm greatly > > >complicates code and would make it damm near > > impossible to be productive > > with > > >zope, IMO. I sorta feel like I'm answering brainteasers at this point. Can I help somebody solve an actual problem here? ;-) - C

1 0

add ons for zope
by jimmy coyne 02 Nov '01

02 Nov '01

Hi all, Is there a standard way to install add ons for zope ? I'm asking this because I download the InternationalObjects which only has two files( __init__.py and __init__.pyc) and no instruction on what to do with them .Has any body installed any thing similar . thanks in advance Jim

2 1

DocumentLibrary 1.0b3 / Zope 2.4.2 (newbie?) problem
by Kolb, Hap 02 Nov '01

02 Nov '01

Hi, any attempt to submit a document to my newly created document library under zope 2.4.2 yields the following error (traceback appended below): Error Type: NameError Error Value: global name 'ZopeTime' is not defined Now that's an error so basic that I suspect that it's me who is doing something wrong---if I only knew what...! Any help would be highly appreciated! Best, ...hap Traceback (innermost last): File /data1/software/Zope/zope-2.4.2/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /data1/software/Zope/zope-2.4.2/lib/python/ZPublisher/Publish.py, line 187, in publish File /data1/software/Zope/zope-2.4.2/lib/python/Zope/__init__.py, line 226, in zpublisher_exception_hook (Object: library) File /data1/software/Zope/zope-2.4.2/lib/python/ZPublisher/Publish.py, line 171, in publish File /data1/software/Zope/zope-2.4.2/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: document_submit) File /data1/software/Zope/zope-2.4.2/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: document_submit) File /data1/software/Zope/zope-2.4.2/lib/python/OFS/DTMLMethod.py, line 195, in __call__ (Object: document_submit) File /data1/software/Zope/zope-2.4.2/lib/python/DocumentTemplate/DT_String.py, line 546, in __call__ (Object: document_submit) File /data1/software/Zope/zope-2.4.2/lib/python/DocumentTemplate/DT_Try.py, line 212, in render File /data1/software/Zope/zope-2.4.2/lib/python/DocumentTemplate/DT_Try.py, line 221, in render_try_except File /data1/software/Zope/zope-2.4.2/lib/python/DocumentTemplate/DT_With.py, line 148, in render (Object: Documents) File /data1/software/Zope/zope-2.4.2/lib/python/DocumentTemplate/DT_With.py, line 133, in render (Object: addDocumentFile(REQUEST)) File /data1/software/Zope/zope-2.4.2/lib/python/DocumentTemplate/DT_Util.py, line 231, in eval (Object: addDocumentFile(REQUEST)) (Info: REQUEST) File <string>, line 2, in f File /data1/software/Zope/zope-2.4.2/Products/DocumentLibrary/DocumentStore.py, line 355, in addDocumentFile (Object: Documents) File /data1/software/Zope/zope-2.4.2/lib/python/OFS/ObjectManager.py, line 324, in _setObject (Object: Documents) File /data1/software/Zope/zope-2.4.2/lib/python/Products/ZCatalog/CatalogAwarenes s.py, line 114, in manage_afterAdd (Object: 1004694129.27) File /data1/software/Zope/zope-2.4.2/lib/python/Products/ZCatalog/CatalogAwarenes s.py, line 184, in index_object (Object: 1004694129.27) File /data1/software/Zope/zope-2.4.2/Products/DocumentLibrary/CatalogPlus.py, line 122, in catalog_object File /data1/software/Zope/zope-2.4.2/lib/python/Products/ZCatalog/Catalog.py, line 382, in catalogObject File /data1/software/Zope/zope-2.4.2/lib/python/Products/ZCatalog/Catalog.py, line 495, in recordify File /data1/software/Zope/zope-2.4.2/lib/python/OFS/DTMLMethod.py, line 188, in __call__ (Object: date) File /data1/software/Zope/zope-2.4.2/lib/python/DocumentTemplate/DT_String.py, line 546, in __call__ (Object: date) File /data1/software/Zope/zope-2.4.2/lib/python/DocumentTemplate/DT_Util.py, line 231, in eval (Object: ZopeTime().Date()) (Info: ZopeTime) File <string>, line 2, in f (Object: guarded_getattr) NameError: (see above)

1 0

Assigning One dtml-var to Another
by Ben Ocean 02 Nov '01

02 Nov '01

Hi; I have a dtml-var called *select-blueline* It reads thus: <dtml-var expr="_.whrandom.choice(images.bluelines.objectValues(['DTML Method']))"> I need to be able to assign the value generated from this method to ANOTHER method that I can call. In other words... <dtml-var x> = <dtml-var select-blueline> Then later call <dtml-var x> How do I do this? TIA, BenO

6 6

REQUEST.items() problem
by Juan Garcia Garcia 02 Nov '01

02 Nov '01

Hi, i'm trying to show all data contained by REQUEST, but when i write the next code, the computer overloads and Zope doesn't response: <dtml-in "REQUEST.items()" sort> <dtml-var sequence-key>:<dtml-var sequence-item><BR> </dtml-in> If i use REQUEST.form.items() or REQUEST.cookies.items(), it works perfectly, but there is data in 'Other' that i need. Am i doing something wrong or is a problem of Zope? I'm using Zope 2.3.3, python 1.5.2 and Debian/woody. Thanks. Bye.

4 7

Re: [Zope] RE: CMF Newbie Presentation and Viewlet Info
by Stephan Goeldi 02 Nov '01

02 Nov '01

>And me prevents this funny technology from viewing the application because >I do not want to download any binary plugin. I thought that it does not need any plugin because it depents on a Java applet. When a java applet is a plugin for you ... >You will say: Just do not use such stupid browsers. I will never say something like this, especially because I am trying to be a usability designer. Usability design is done for humans and not for browsers. When the Viewlet approach sucks for a lot of people, then I have to look for another solution. But you won't tell me that e.g. flash would be a solution, would you? _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

4 3