- Zope - Zope lists

You are not authorized to access nachrichtenClass.
by Nils Wiegandt 14 Aug '01

14 Aug '01

Help, installed cookicrumbler yesterday ,all functioned very well. Today I want to use my ZClass and this ERROR was the result: I have logged in as manager! Site Error An error was encountered while publishing this resource. Unauthorized You are not authorized to access nachrichtenClass. Traceback (innermost last): File D:\WebSite\lib\python\ZPublisher\Publish.py, line 223, in publish_module File D:\WebSite\lib\python\ZPublisher\Publish.py, line 187, in publish File D:\WebSite\lib\python\ZPublisher\Publish.py, line 171, in publish File D:\WebSite\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: fileAction) File D:\WebSite\lib\python\ZPublisher\Publish.py, line 112, in call_object (Object: fileAction) File D:\WebSite\lib\python\OFS\DTMLDocument.py, line 199, in __call__ (Object: fileAction) File D:\WebSite\lib\python\DocumentTemplate\DT_String.py, line 544, in __call__ (Object: fileAction) File D:\WebSite\lib\python\DocumentTemplate\DT_With.py, line 148, in render (Object: manage_addProduct['nachrichten']) File D:\WebSite\lib\python\DocumentTemplate\DT_Util.py, line 230, in eval (Object: nachrichtenClass_add(_.None,_,NoRedir=1)) (Info: _) File <string>, line 2, in f (Object: guarded_getattr) File D:\WebSite\lib\python\OFS\DTMLMethod.py, line 187, in __call__ (Object: nachrichtenClass_add) File D:\WebSite\lib\python\DocumentTemplate\DT_String.py, line 544, in __call__ (Object: nachrichtenClass_add) File D:\WebSite\lib\python\DocumentTemplate\DT_With.py, line 133, in render (Object: nachrichtenClass.createInObjectManager(REQUEST['a'],REQUEST)) File D:\WebSite\lib\python\DocumentTemplate\DT_Util.py, line 224, in eval (Object: nachrichtenClass.createInObjectManager(REQUEST['a'],REQUEST)) (Info: nachrichtenClass) File D:\WebSite\lib\python\AccessControl\DTML.py, line 101, in guarded_getattr (Object: fileAction) File D:\WebSite\lib\python\AccessControl\ZopeGuards.py, line 120, in guarded_getattr File D:\WebSite\lib\python\AccessControl\ZopeGuards.py, line 103, in aq_validate File D:\WebSite\lib\python\AccessControl\SecurityManager.py, line 149, in validate File D:\WebSite\lib\python\AccessControl\ZopeSecurityPolicy.py, line 216, in validate Unauthorized: (see above)

2 1

Deriving ZClasses from Other Product's ZClasses
by Ronald L. Chichester 14 Aug '01

14 Aug '01

Can you derive a ZClass in one product from a base class in another (separate) product? Suppose, for example, that you have a "library" product, i.e., one that is used to hold the base classes for a variety of other generic objects, such as people, organizations, and documents. Other products could use the "library" classes to derive new -specific- classes, such as employees (from people), clients (from organization), and templates (from documents). This way, multiple products could share objects with a common base class. Which begs the next question... Can you search for multiple classes by searching for the base class. E.g., there is a (base) people class, from which other classes, such as "contact," "employee," and others are based. I know you can find all the employee classes, and all the contact classes, but can you ask for the "people" class and get all of the classes that are either a people class or derived therefrom (e.g., employee, contact, etc.)? Ron

2 1

Tree Tag
by Todd Loomis 14 Aug '01

14 Aug '01

Hi: Anybody know how you can control access to folders when using the tree tag? Thanks, Todd

1 0

User-controlled report sorting with Z SQL Methods
by Andy Dustman 14 Aug '01

14 Aug '01

Suppose you have a Z SQL Method which is used for generating a tabular report, and you want to add some buttons to the headers so that clicking on a button will resort the report based on that column, either ascending or descending. You've probably seen something like this. My first impulse is to do something like this: SELECT ... <dtml-if OrderBy>ORDER BY <dtml-var OrderBy></dtml-if> This has a couple of problems: You don't want to accept just any old value of OrderBy that someone manages to submit. You probably only want to allow sorting on columns that actually have an index. Worse, a malicious user might put other bad things in there. (Since we are passing in a column name, rather than a literal value, we cannot use sql_quote.) One solution to this could be to have a method (a Python Script is probably the best match) which returns the ORDER BY clause (or an empty string) after validating the ordering column. So let's say that doOrderBy is our method that does this, and our query looks like this: SELECT ... <dtml-var doOrderBy> However, nothing stops a malicious user from passing in doOrderBy on the form, which may do Very Bad Things. But, due to the DTML namespace, the client object is always on top of REQUEST, so any passed-in doOrderBy will not be seen (unless using <dtml-with REQUEST only>). Does this sound like a reasonable solution? -- Andy Dustman PGP: 0xC72F3F1D @ .net http://dustman.net/andy I'll give spammers one bite of the apple, but they'll have to guess which bite has the razor blade in it.

3 2

Install won't start
by Lalo Castro 14 Aug '01

14 Aug '01

Hi, We're running OpenBSD 2.9 and just installed Zope 2.4. Everything seemed to install correctly, but when we attempt to start the Zope service by ./start in the Zope directory we get a few lines of error messages, that follows. " Could not find platform independent libraries <prefix> Could not find platform dependent libraries <exec_prefix> Consider setting $PYTHONHOME to <prefix>[:<exec_prefix>] 'import site' failed; use -v for traceback Traceback (most recent call last): File "/web/Zope_directory/z2.py", line 296, in ? import os, sys, getopt, string ImportError: No module name os " Has anyone gotten this error before? Is this an OpenBSD library problem? Thanks for the help, McHenry library

3 2

Help
by Todd Loomis 14 Aug '01

14 Aug '01

Hi: Anyway to control access to folders when using the <dtml-tree> tag? Thanks, Tpdd ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Todd Loomis Web Developer (SAIC) Defense Modeling & Simulation Office 1901 N. Beauregard Street, Suite 500 Alexandria, VA 22311 Office: 703.824.3407 Fax: 703.379.3778 tloomis(a)dmso.mil

1 0

RE: [Zope] Is this a feature or a bug
by Max Møller Rasmussen 14 Aug '01

14 Aug '01

Its a feature. use the "Orphan" attribute to get rid of it: <dtml-in foo size=5 start=start_point orphan=0> regards Max M > From: Kerekes Lajos [mailto:lkerekes@xperts.hu] > I use <dtml-in foo size=5 start=start_point>. > For example if the start_point=5 and the length of the foo's tuple is > 13, then > everything is ok. I get 5 item. But if the length of the > foo's tuple is > 12, then > I get all 7 item remains in the tuple. > It works wrong if the length of the remaing part of the list is lesser > than > size+size/2. > Anybody knows about it? > > Thanks. > > Lajos > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

9 10

[Ann] copyPropertySheet
by Dieter Maurer 14 Aug '01

14 Aug '01

Zope's support for PropertySheets is very weak. They cannot be renamed or copied. They can be exported but only imported if they are empty. The reason for these restrictions: The property values are not stored in the sheet but in the associated v_self (value self). The persistence mechanism, on with copying, renaming and export is based, cannot find them in the current implementation. copyPropertySheet uses the specific PropertySheet interface to handle property values correctly. You can use it to copy a PropertySheet sheet into a container container and optionally give it a different id. sheet and container can be either strings or objects. Strings are resolved into objects with restrictedTraverse. container defaults to the sheets container. Download at URL:http://www.dieter.handshake.de/pyprojects/zope Dieter

2 2

ZClass properties and Python scripts
by Gilles Lenfant 14 Aug '01

14 Aug '01

Hi, I got a ZClass that has got a property sheet "infos". "infos" has a string property "titre" How do I get/change the values of such a property from a ZClass method in Python script ? TIA, I've tried so many things that I'm brain dead. --Gilles

2 1

Re: [Zope] solaris and zope
by Alex Kelly 14 Aug '01

14 Aug '01

Sorry I don't have any insight...But I can tell you that you are not alone. We have a similar box (E-250, Dual Processor w/ 2GB of RAM running Solaris 8). My other machine I tested was a Dual PIII-800 w/ 256MB of Ram with Redhat 7.1. The RedHat box is signifcantly faster. Originally we were using FastCGI to communicate between Apache and Zope on the Solaris box. We are now using just Zserver which did make an improvement, but is no where near as fast as the Linux box. I would also be interested if anyone has any input on this subject. Thanks, Alex Kelly >>> Jason Witt <jdwitt(a)umn.edu> 08/14/01 01:51AM >>> hi, I looking for anyone who has worked with zope on solaris 8. The problem I am having is that it runs super slow. I have compiled everything from source using cc to get the 64bit optimizations. Right now I have been benchmarking against just ZServer with no Apache between. No matter what I do I cannot seem to get the install up the speed it should be on Sun a E-250 with dual processors and 2 GB of ram. What's worse is that the same site that runs so slow on solaris flys on a Linux (redhat 7.1) box. The hardware is comparable (dual 700 mhz, 2 GB ram), but the benchmarks are about 2 times faster everytime. Any ideas why Linux is so much better than solaris?? thanks, ******************************************************** * Jason Witt Java and Web Services - ADCS * * Web Developer University of Minnesota, Mpls * * Systems Administrator 190 Shepherd Laboratories * * jdwitt(a)umn.edu Ph. 612-626-8663 * ******************************************************** _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0