- Zope - Zope lists

Zope 2.4.0 bugs and comments
by Gold is Heavy 15 Aug '01

15 Aug '01

I was trying to decide the best place to report bugs and comments, and this looks like the best place to me. I didn't get inspired by the bug collector running on an old site. Maybe I've made the wrong choice, and if so please email me! **If you post a followup, please CC me, as I am not subscribed to the list.** First, I kept hearing all kinds of buzz about Zope, but I didn't really know why should I use Zope. There is no documentation with a clear and short reason why. Like, you can do this in Zope, but try this on <blah>. Or you can do this in 2 minutes in Zope, but how long does it take you on <blah>? Plus a short statement of what Zope is (and web services development framework is too fuzzy for me). So I decided to get this thing and see for myself. I must say, I AM IMPRESSED! Now that I see what it is, there is a lot to like. But I was also disappointed by one really obvious bug, that should not have remained for longer than a day. 1. When you try to logout, it just doesn't work! Here is what happens, and I tried this on IE 5.0, Mozilla Build 2001072408, Konqueror 2.1.1, so I don't think it's browser or OS dependent. When I select 'logout', it immediately prompts me with an authentication screen! Shocking. Ok, if I just click cancel or authenticate myself correctly, I REMAIN LOGGED IN, and nothing happens. However, if I type in bogus username and password, click OK, then when the stupid authentication window comes up again, hit CANCEL, I am logged out. However, "Logged in as <username>" still remains displayed, as If I am logged in. Here is what should happen: when I select 'logout' it should log me out immediately, and NOT ask me for authentication at all. It should further hide everything that was on my screen, and instead of saying "Logged in as blah" It should say, "Not logged in!" 2. When I took ownership of a folder, I was no longer able to relinquish ownership back to the way it was: unowned. I think I should be able to do that if I have the "Manager" role. This is pretty minor I guess. 3. When doing the Tutorial (it's a great Tutorial BTW!! Kudos!) I noticed that a few times Zope failed to render the page correctly and displayed chunks of ASCII from the dtml page, below the ZOPE logo. I have a feeling it might be connected to having or not having a newline character as the last character in the dtml file. 4. I've seen much really weird behavior from Zope that I can't reproduce. I've seen things like utterly garbled screen after installing latest Hotfix 8/4. I've seen Zope get really confused about my "login" status sometimes and display some folders with "index_html" as if I merely wanted to look at them instead of manage/edit them. I had to play some tricks with the login process to get it to recognize that, indeed I am logged in, and please, show me the contents of the folders instead of rendering 'index_html' for me. And there were more things that I just can't remember. The general feeling I had was that it was flaky and fragile and that I had to avoid doing certain things to stop it from breaking. 5. The link to latest 8/4 Hotfix on the zope.org is broken. I had to get the correct link from the mailing list archives. I am using Zope 2.4.0 with Python 2.1.1 on GNU/Linux (Libranet distro, based on Debian potato) and on Solaris 8. The same weirdness is observed regardless. I think overall that Zope is one of the coolest things I've seen for the web development, but it really could use some polish. I also have one question: is it possible to use Zope in a multi-user environment where each user can have their own virtual Zope domain, located in their own account on a unix box? What I mean is the usual setup by web hosting providers where they create 'public_html' for each account, and each person can manage their own web site separately. I know zope can allow this through the browser, but is it possible to achieve more separation and more virtualization, so that each user can appear to me the manager of / (root folder), and so that each users Zope development files and DBs could be located on their own respective accounts? I would be interested to know the answer to this. Thanks for making Zope :).

3 2

tabs interface for user pages
by Mitchell L Model 15 Aug '01

15 Aug '01

I'm new to Zope, but learning fast. I want my web site's pages to have a tab mechanism like /manage does. I've poked through the code enough to find the class Tabs, the file manage_tabs.dtml, and variables like manage_options. However, it still looks to me like there's no trivial way to plug this in to my user web pages the way I can do a tree (like /manage does) in one line and a short filter method. I would greatly, and urgently (demo Friday!) appreciate any suggestions on how to incorporate (flexible) tab views into my site pages. Do I need to create a subclass of Tabs? Do I need to define my own versions of various dtml methods used by manage_tabs? Is there a product that does something like this, either that I could use or that I could learn from? I can't be the first person to want this!?!

2 1

Sorting case-insensitivly
by Peter Bengtsson 15 Aug '01

15 Aug '01

In the ZMI all the objects are by default sorted alphabetically starting with Capital A and ending with small z. What if you don't want it to be case sensitive? It's prett darn ugly the way it is at the moment. I do something like this: <dtml-in GetLotsOfObjects sort=id> And it returns Peter Zope bengtsson rocky When I'd like it to be: bengtsson Peter rocky Zope Cheers, Peter

6 5

RE: [Zope] Forum under Zope 2.4
by Farrell, Troy 15 Aug '01

15 Aug '01

Like squishdot? http://www.squishdot.org/ Troy > -----Original Message----- > From: christophe robert [mailto:christophe.robert6@wanadoo.fr] > Sent: Wednesday, August 15, 2001 5:52 PM > To: zope(a)zope.org > Subject: [Zope] Forum under Zope 2.4 > > > Hello > > > I search a forum, which work under Zope 2.4 > > > thank > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

RE: [Zope] CoreSessionTracking-based LoginMethod for LoginManager
by Andy Gimblett 15 Aug '01

15 Aug '01

> It's as secure as the key shared by the login method and the object in > the session data. ie, choose it well. :-) > Yeah, although it's really the same thing in this case. > Encrypting the user info with a shared key and storing it in a > cookie isn't really all that much less secure that storing the user > info in a session data object. Although I guess it could be argued Yes, I see that - but I didn't think any of the existing cookie-based products even did that... I thought they just encoded a concatenation of username and password in base64 (which is trivially decodable) and stored that. Was I not looking hard enough? > > Of course, I'm assuming that CST includes checks to guard against > > cookie-hijacking. :-) > > Um... maybe. What kind of checks did you have in mind? ;-) :-) Hmmm, let's see... OK, I've never done this myself but I remember reading that it's a good idea to do this kind of thing to your cookie values to ensure they're not hijacked: 1. Start with the data you want to store 2. Append identifying information, eg the IPs of the client and server, and the current date/time. 3. Make a digest of this plus a secret string which only you know, and append that as a fingerprint. Then when you interpret the cookie, check that the fingerprint is as you'd expect (ie the cookie hasn't been interfered with by a man in the middle) and then check anything else you want to check (eg the IP/date). Once you're happy with the fingerprint, you check that the server IP is the IP of the host box, that the client IP is good too, and that the date/time aren't unreasonably out of date - the idea is to guard against re-use of old cookies or cookies from somewhere else. As I say, I've never done this but it sounds reasonable in principle. Make sense? -Andy -- Andy Gimblett - Programmer - Frontier Internet Services Limited Tel: 029 20 820 044 Fax: 029 20 820 035 http://www.frontier.net.uk/ Statements made are at all times subject to Frontier's Terms and Conditions of Business, which are available upon request.

3 2

The Profiler for measuring Zope calculation times
by Kamon Ayeva 15 Aug '01

15 Aug '01

Hello, I have been using the Profiler from the Control Panel to try to figure ut the bottleneck parts of our site, but I don't really get results I can exploit. It goes too deep in Python for what I need at the moment. What I would need is some indication of the time used to calculate and render specific objects from the ZODB tree. For example the index_html rendering the contents of a specifc folder, or the left_bar_html if there is one called by this index_html. Is there a tool for doing that ? Regards, Kamon eXperts-MD

3 7

Re: [Zope] Hurrah Hosting
by Michel Pelletier 15 Aug '01

15 Aug '01

On Wed, 15 Aug 2001 10:13:24 -0400 "Brian D. Goodwin" <brian(a)fuddmain.com> wrote: > Greetings, > > Searching the archives I ran across two posts > recommending Hurrah > (www.hurrah.com) for Zope hosting. These posts were from > the beginning of > the year and I was hoping for a more current endorsement. > I would > appreciate any information anyone could give regarding > their experiences > with Hurrah. > > They seem to have everything I'm looking for at a great > price. All I need > is some positive feedback from Hurrah customers. I use hurrah for my personal web site and they're great. Best of all, the use the same ISP in the same city as my DSL line, so I'm only five super-fast hops from my site. Still haven't recieved a bill though... ;) -Michel

1 0

Instance of ZClass
by Walter Hupfeld 15 Aug '01

15 Aug '01

I want to build an instance of ZClass like <dtml-call "REQUEST.set('id',REQUEST.form['id_neu'])"> <dtml-with "manage_addProduct['Tauschboerse']"> <dtml-call "SkizzeClass_add(_.None,_, NoRedir=1)"> </dtml-with> <dtml-call "REQUEST.set('meine_skizze',_[REQUEST.form['id_neu']])"> <dtml-call "_['meine_skizze'].propertysheets.Beschreibung.manage_changeProperties({ 'Name':REQUEST.form['Name'], 'Email':REQUEST.form['Email'], 'Sprache':REQUEST.form['Sprache'], ..... where 'Sprache' is the name of a CHECKBOX. It works fine, if all checkboxes are checked. But if not all checkboxes are checked, I will get an keyerror. What can I do? -- ----------- -------------------- Walter Hupfeld --------------------------------

2 1

Zope is good for...
by Ryan Ware 15 Aug '01

15 Aug '01

I am learning Zope and have been lurking for a short period. What kinds of problem spaces have you found zope to be good at solving (types of websites etc)? Thanks, Ryan

1 0

Authorization Help
by Todd Loomis 15 Aug '01

15 Aug '01

Hi: I'm trying to build a file system with access control. So when a user logs in they only see the folders/files they have access to see. Does anybody have any suggestions as I've tried and can't seem to get the Authorization to work, everybody gets to see everything. Thanks, Todd ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Todd Loomis Web Developer (SAIC) Defense Modeling & Simulation Office 1901 N. Beauregard Street, Suite 500 Alexandria, VA 22311 Office: 703.824.3407 Fax: 703.379.3778 tloomis(a)dmso.mil

2 2