- Zope - Zope lists

Request regarding 'Hotfixes'
by Bill Anderson 24 Aug '01

24 Aug '01

I would like to ask that people developing patches to Zope that use the same method as ZC Hotfixes _NOT_ call them Hotfixes. It is confusing and misleading, and is causing a bit of a stir around here. Hotfixes should be reserved to ZC fixes to Zope security issues. This is the origin of the use in Zope, and many have already associated a Zope Hotfix with a security fix. Additionally, to those who review announcements/products on Zope.org for publication, could you _please_ not approve those that call themselves Hotfixes, unless of course they come from ZC? I have had a number of people come to me and ask just what security problem there is with Image tags, as a result of the recent Imagetag 'hotfix' announcement on zope.org. It is very important for the distinctin to be made. Consider the new reporter, who has seen ZC/DC issue security fixes, labelling them Hotfixes. Now imagine what happens when they see a list of fifteen, twenty, thirty 'hotfixes', what are they going to assume? Yes, we would hope they would do some research, though we _know_ that in many cases they will not. Next thing you know, Zope has twenty or thirty security exploits you need to fix. We do not need this. Anyway, just thought I would relay that. When I tell people these are not issues, I then get questioned as to why they are labelled as Hotfixes. Unfortunately, I do not have kind words with respect to the announcement/author's naming choice to reply to that with. The-road-to-a-bad-reputation-is-paved-with-mislabelled-hotfixes-ly y'rs Bill Anderson

12 15

Accessing higher namespace
by Karsten Kraus 24 Aug '01

24 Aug '01

Hi there, if got a little problem with dtml-namespaces. I'm using the dtml-in-tag for iterating over the results of a python script. I want to compare the results with the id of the document which calls the python script. My Question is: how can I access the namespace "above" the dtml-in-namespace? Example <dtml-let test="this().getId()"> <dtml-var test> // prints the documents id. <dtml-in "pythonmethod()"> <dtml-var test> // 'test' is not in my namespace anymore! What now? </dtml-in> </dtml-let> Anyone? TIA Karsten

2 2

RE: [Zope] Zope/PostgreSQL/PoPy
by Farrell, Troy 24 Aug '01

24 Aug '01

Who should we talk to that this will be included in future releases? Troy > -----Original Message----- > From: Jim Penny [mailto:jpenny@universal-fasteners.com] > Sent: Friday, August 24, 2001 8:46 AM > To: zope(a)zope.org > Subject: Re: [Zope] Zope/PostgreSQL/PoPy > > > On Thu, Aug 23, 2001 at 03:55:31PM -0500, Matt Hand wrote: > > On Thu, Aug 23, 2001 at 04:30:48PM -0400, Jim Penny wrote: > > > > > With any luck this is just a "me too" message. > > ZPoPyDA 2.0.7 does in fact have a serious problem > with strings. > > Fortunately the fix is extermely easy. > > At about line 25 of PoPy_DA.py, insert a line that says > import string > > I put it right before the line saying > from PoPy_db import DB > > Make sure you are editting the version in > $(ZOPEHOME)/lib/products/python/ZPoPyDA > > Restart zope after you make this edit. > > This will fix the problem both in the test tab and in actual use. > > Jim Penny > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

invokeFactory....
by Rustad, Aaron 24 Aug '01

24 Aug '01

Anyone know where invokeFactory is? It gets called by the action in folder_factories. I would like to add default pages when a new folder is created. Thanks! AR.

2 1

RE: [Zope] ZSQLMethod modification
by Schmidt, Allen J. 24 Aug '01

24 Aug '01

Don't leave us hanging! How did you do it? -Allen Kerekes Lajos wrote: >> Hi! >> >> I have an ZSQL method, named testSQLMethod. >> How can I modify this from python script? I try this, but it >> cant find manage_edit. >> >> container.manage_edit(title="testSQLMethod", >> connection_id="Test_Oracle", arguments="", template=query) >Sorry. I found the way. > > Bye: > > Lajos Kerekes

2 1

ZSQLMethod modification
by Kerekes Lajos 24 Aug '01

24 Aug '01

Hi! I have an ZSQL method, named testSQLMethod. How can I modify this from python script? I try this, but it cant find manage_edit. container.manage_edit(title="testSQLMethod", connection_id="Test_Oracle", arguments="", template=query) Thanks: Lajos Kerekes

1 1

Zope/PostgreSQL/PoPy
by Matt Hand 24 Aug '01

24 Aug '01

Hello all, I have successfully installed the PoPyDA product in Zope and am able to query existing PostgreSQL databses but am getting the following error when I try to INSERT a new record into the database: Error, exceptions.NameError: global name 'string' is not defined <snip/> File /usr/local/zope/lib/python/DocumentTemplate/DT_String.py, line 544, in __call__ (Object: <string>) File /usr/local/zope/lib/python/Shared/DC/ZRDB/sqlvar.py, line 206, in render (Object: job_num) File /usr/local/zope/lib/python/Products/zpopyda/PoPy_DA.py, line 103, in sql_quote__ (Object: RoleManager) NameError: (see above) I'm using the <dtml-sqlvar name type="string"> tag to insert the variables, which works fine when I use Gadfly. If anyone has any suggestions (or a FM I can R), I be most appreciative. Thanks, Matt Hand matt(a)bitflip.com

6 10

permissionsOfRole
by Ivan Raikov 24 Aug '01

24 Aug '01

Hello, I have the following situation: in a custom Folder object, there's a permissionsOfRole method, which is a slightly modified form of the original in AccessControl.Role in that it filters out all the permissions that do not belong to my product (and their names have a certain prefix, so that they can be distinguished from the default Zope permissions). I'm also using the roleEdit DTML file from the Zope distribution. It uses the permissionsOfRole method in order to present the user with all permissions that are assigned to a certain user-defined role, and, in my case it finds the modified permissionsOfRole method via acquisition, and correctly displays only the permissions that have been defined within my product. I also have a piece of code that tries to retrieve all the permissions for a certain role from within an object that's contained in the aforementioned custom Folder. When this code calls self.permissionsOfRole on a role that has been successfully edited via the DTML form, it receives strange results: the user-defined role appears to have _no_ permissions associated with it, although it has just been edited via the DTML interface. I tried creating new roles multiple times, but whenever I call permissionsOfRole programmatically, I get an empty set of permissions. Has anyone experienced similar problems with permissionsOfRole? Please let me know... Regards, Ivan Raikov

1 0

image upload
by Roman V. Isaev 24 Aug '01

24 Aug '01

Ick. Ack. I've switched from zope's standalone webserver to apache + fastcgi + zope and so far it looks stable and doesn't go wild with that accept error. But I stumbled on another problem -- images do not upload correctly at all. Then stared apache at port 80 and zope at 8080. If I upload image through site:8080/manage interface it uploads fine. But if I upload image through site/manage (or my own cgi form), image corrupts on the way! When I export both good and bad images into xml format and diff them, these files are slightly different in binary part. What can corrupt image on its way through apache and fastcgi? Of couse, it's easy to say use 8080 port to update the site. Unfortunately, I can't run zope at 8080 port, because of previous bug with accept :( I can't find that bug because it happens only once in two or three days, only under normal conditions (i.e. I ran httperf and put a big load on the site... everything worked okay, only to hang several hours later). And since my boss is very unhappy with webserver going down at odd hours when I'm unavailable, I can't really debug this situation :( -- Roman V. Isaev http://www.aroma.ru System Administrator P.S. My configuration is: Apache/1.3.20 mod_fastcgi/2.2.10 zope 2.4.0 python 2.1.1 openbsd 2.7

3 4

RAM [was MERLINO Nuovo Motore di ricerca Italiano]
by Huston, Virgil H. 24 Aug '01

24 Aug '01

This is true, but what I really don't get is the spam from China or Taiwan where my email client only sees a bunch of gibberish :-) To get on topic, is there a minimum amount of RAM required for good Zope performance on a Raq3? Or will it work fine for lower traffic sites with a lessor amount? Thanks, Virgil > Im my opinion, yes. Here's why: > > Most English spam we tend to ignore, because we immediately recognize it > AS > spam. We don't even bother to read or skim thru the message. > > Now Italian spam, it captures our attention. It looks different, which > draws > in our attention. Even if you can't read it, you still tend to skim thru > the > message, trying to discern what certain sentences, phrases, or sections > mean. So even though it IS spam, AND you can't understand it, you still > spend 5 minutes reading it. > >

2 1