- Zope - Zope lists

RE: [Zope] Show Viewable folders
by Montagne, Michael 02 Aug '01

02 Aug '01

Apparently checking or unchecking the permission "Access Contents Information" is the key. I was thinking that "View" would designate whether "skip_unauthorized" is triggered. I guess it is because there is a reference to <dtml-var id> in the code. Works good noe though. -mjm -----Original Message----- From: J. Cameron Cooper [mailto:jccooper@rice.edu] Sent: Thursday, August 02, 2001 8:09 AM To: zope(a)zope.org Subject: Re: [Zope] Show Viewable folders > > >That returns all the folders, including the one I'm not authorized to view. > I'd say that's a symptom of a permissions or authentication problem. A dtml-in trying to use unauthorized objects will explode, unless you skip them with the skip_unauthorized. There's a bug in (at least) 2.3.3 that screws up the sequence-first/index/last stuff, but I don't think that's relevant right now. But it doesn't let you view unauthorized objects. Either you are authenticated as someone you don't think you are, or your permissions aren't doing what you think they should. --jcc (credentials) _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

ping?
by Chris Withers 02 Aug '01

02 Aug '01

3 2

Redirect authentication to SSL
by Stephan Goeldi 02 Aug '01

02 Aug '01

Shouldn't an apache directive like RewriteRule /manage/ https://www.website.com/$1 [P] or RewriteRule /manage/ http://www.website.com:443/$1 [P] be enough to redirect all login-attempts to the ssl-enabled virtual server? (of course there are other moments, where ssl would be desired, but for the beginning I would be happy, if this would work) _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

2 1

python class instances named index_html
by Mark James Adams 02 Aug '01

02 Aug '01

Hi, gang: I have a python class with an index_html default method. If I access http://localhost/myobject it returns the output from the index_html method correctly. However, if myobject is named index_html (http://localhost/index_html) I get the following error: Site Error An error was encountered while publishing this resource. Resource not found Sorry, the requested resource does not exist. Check the URL and try again.  Traceback (innermost last): File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 187, in publish File /usr/local/Zope/lib/python/Zope/__init__.py, line 226, in zpublisher_exception_hook (Object: LockableItem) File /usr/local/Zope/lib/python/ZPublisher/Publish.py, line 173, in publish File /usr/local/Zope/lib/python/ZPublisher/HTTPResponse.py, line 308, in setBody File /usr/local/Zope/lib/python/ZPublisher/HTTPResponse.py, line 547, in notFoundError NotFound: (see above) However, if I call my method as http://localhost/index_html/index_html, I get the correct output. From the "MyPythonClass instance at 14fa320" in the error log, I imagine that Zope is returning my actual class instance, rather than calling index_html. Perhaps it autmatically calls "index_html" and the first thing it finds in the namespace is my object named index_html. My only guess is that I need to override __call__, but I'm not sure what's involved in doing that. Thanks!

1 0

Re: [Zope] Mail Host problem
by complaw＠hal-pc.org 02 Aug '01

02 Aug '01

Here is the revised code: try: mailhost = context.SuperValues('Mail Host')[0] except: raise AttributeError, "Cannot find a Mail Host object." ..and this is the error message: Zope Error Zope has encountered an error while publishing this resource. Error Type: AttributeError Error Value: Cannot find a Mail Host object. Troubleshooting Suggestions The URL may be incorrect. The parameters passed to this resource may be incorrect. A resource that this resource relies on may be encountering an error. For more detailed information about the error, please refer to the HTML source for this page. If the error persists please contact the site maintainer. Thank you for your patience. Traceback (innermost last): File /usr/local/zope/2-3-1/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /usr/local/zope/2-3-1/lib/python/ZPublisher/Publish.py, line 187, in publish File /usr/local/zope/2-3-1/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: Traversable) File /usr/local/zope/2-3-1/lib/python/ZPublisher/Publish.py, line 171, in publish File /usr/local/zope/2-3-1/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: test_mail) File /usr/local/zope/2-3-1/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: test_mail) File /usr/local/zope/2-3-1/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__ (Object: test_mail) File /usr/local/zope/2-3-1/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in _bindAndExec (Object: test_mail) File /usr/local/zope/2-3-1/lib/python/Products/PythonScripts/PythonScript.py, line 336, in _exec (Object: test_mail) (Info: ({'script': <PythonScript instance at 8a65798>, 'context': <Folder instance at 89c4640>, 'container': <Folder instance at 89c4640>, 'traverse_subpath': []}, (), {}, None)) File Script (Python), line 5, in test_mail AttributeError: (see above) Note, the Mail Host object is in the same folder as the script. Incidentally, I noted another user who mentioned an issue about permissions. I took out all references to acquire permissions and set all of them manually. Even when running as manager (expressly allowed in the security settings), I still got the above error message. How did people get this working in the past? Thanks again, Ron > > try: > > mailhost=getattr(context, context.SuperValues('Mail Host')[0].id) > > except: > > raise AttributeError, "Cannot find a Mail Host object." > Perhaps you get an AttributeError on SuperValues() > > Isn't it: superValues() ?? > ....if it makes a difference at all. > > Besides, superValues() returns a sequence of objects ordered in how close > they are to 'context', so you can: > mailhost = context.superValues('Mail Host')[0] > > rm the try: for a moment and paste the error and traceback next time. > > Peter

3 2

Re: [Zope] Help (emergency) How to Undo last ZODB transaction when Zope
by Shai Berger 02 Aug '01

02 Aug '01

Chris wrote, > > Try: > > http://yoursite/_SUPPRESS_ACCESSRULE/manage > And I was shocked and dismayed to find out that this actually works. It seems like a huge potential security breach for the unwary, since it is available for any attacker. Granted, access rules are not really intended for security, but it is very easy to assume that they always work, and make decisions with security implications based on that assumption. I read digests, so I only saw Gerd's request for help now; I would expect the right answer to be what the AccessRule product says: """ If an Access Rule is broken, and is preventing normal access, it can be disabled by restarting Zope with environment variable SUPPRESS_ACCESSRULE set. """ Because this is only available to people who can manage Zope anyway. (looking for the exact variable name, I ran into the URL modification trick mentioned under "History"... so I hereby RTFM myself. Well, not really; I have read the FM before, and it wasn't there!) Have fun, Shai.

3 3

RE: [Zope] Show Viewable folders
by Montagne, Michael 02 Aug '01

02 Aug '01

That returns all the folders, including the one I'm not authorized to view. -mjm -----Original Message----- From: Phil Harris [mailto:phil.harris@zope.co.uk] Sent: Wednesday, August 01, 2001 4:50 PM To: Montagne, Michael; zope(a)zope.org Subject: Re: [Zope] Show Viewable folders How about: <dtml-in expr="PARENTS[0].objectValues('Folder')" skip_unauthorized=1> ?? ----- Original Message ----- From: "Montagne, Michael" <montagne(a)BOORA.com> To: <zope(a)zope.org> Sent: Thursday, August 02, 2001 12:35 AM Subject: [Zope] Show Viewable folders > > I'm trying to display only the folders that a User has viewing rights to. > The following code snippets are my two different attempts that both seem > flawed. I created a user and a role. Only when that user is assigned the > Manager role at the root level will the ifs test true. I'm deselecting > Acquire permission settings and checking view for the role. I know this is > working because I can view the folder. I tested this by unchecking View and > relying on Acquisition. When I did this, I could not view the folder, just > as it should be. So it seems something in these code snippets is screwy. > What could it be? > > > <dtml-in expr="PARENTS[0].objectValues('Folder')"> > <dtml-if "AUTHENTICATED_USER.has_permission('View','<dtml-sequence-item>')"> > <li><a href="<dtml-var absolute_url>"><dtml-var title_or_id></a> > <dtml-else> > Nope<br> > </dtml-if> > </dtml-in> > > > <dtml-in expr="PARENTS[0].objectValues('Folder')"> > <dtml-if expr="_.SecurityCheckPermission('View','<dtml-sequence-item>')"> > <li><a href="<dtml-var absolute_url>"><dtml-var title_or_id></a> > <dtml-else> > Nope<br> > </dtml-if> > </dtml-in> > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev )

3 2

getting your ISP on the right track...
by Stuart Quimby 02 Aug '01

02 Aug '01

I'm in the middle of converting my site to a zope framework, and just started talking to my ISP about hosting. Is there a URL I could point my ISP's web hosting people to that clearly explains what's required on the service provider's end to host Zope sites ? Stuart Quimby Pres. Design Science Toys, Ltd. 1362 Rt.9 Tivoli, NY 12583 845.756.4221 (fax)4223 stuq(a)dstoys.com

1 0

Problems with zclass and instances!!
by Edgardo Zulian 02 Aug '01

02 Aug '01

Hi there: I have created a product 'X' with a zclass call 'X1'. This X1 zclass in the propertysheet has a Common Instance Property Sheet called 'section' (/Control_Panel/Products/X/X1/propertysheets/common/section), with some properties with default values: ie. one of it's property is call ed 'section1' with the default value 'left side', the type of this property is 'string': section1 'left side' string Then in the views of the zclass I 've added a method "propertysheets/section/manage", so when I create an instance I can enter to this propertysheet. So the problem is here: When I create an instance of this 'X1' zclass an I enter to this propertysheet/section , I can change the default value of 'section1' which was 'left side' to 'center side' for example. But then if i change the original default value of my zclass 'X1' to 'right side' let say. The change will not be reflected in my instance, which is okey because i have change d the value to 'center side' before. Another case is when I create another instance of 'X1' zclass without making any change to the value of 'section1' and click on save changes, then if I change the default value in the zclass, the change will not be reflected in this instance. So the question is: There is a way to recognize when an instance will not take the changes that are make to the default values of a propertysheets (in this case thepropertysheet 'section' ) of a zclass from which they inheritance? I try with this lines in an external method, but nothing: self=self._getOb('instanceTest') # instanceTest is the name of the instance of the 'X1 Zclass' a=getattr(self,'meta_type') b=getattr(self.__class__,'meta_type') # in this example the answer was the same: X1 a=eval('self.__class__.propertysheets.section._propertyMap()') b=eval('self.propertysheets.section._propertyMap()') # the answer was again the same: {'id': 'section1', 'type': 'string','meta': {}, 'mode': 'w'} #I try acceding to the zclass to know if it was different from theinstance... a=eval('self.Control_Panel.Products.X.propertysheets.common.section.propertyMap()') # the answer not help: {'id': 'section1', 'type': 'string', 'meta': {}}, I cannot found any property or something that help me... I don't know where to look or what to try next....if anybody can help me with this....... Thanks in advance Edgardo

1 0

Passing parameters for Oracle Stored Procedures
by ricardo＠cnbe.mar.org.uk 02 Aug '01

02 Aug '01

Hi, I have created a package with a procedure name test_2 that has a OUT parameter type number. see code below... PACKAGE test_pkg IS FUNCTION conta_reg RETURN NUMBER; PRAGMA restrict_references(conta_reg,wnds,wnps,rnps); PROCEDURE test_2(tot OUT NUMBER); END; PACKAGE BODY TEST_PKG IS FUNCTION conta_reg RETURN NUMBER IS total NUMBER; BEGIN SELECT COUNT(*) INTO total FROM ASSUNTOS; RETURN total; END; PROCEDURE test_2(tot OUT NUMBER) IS total NUMBER; BEGIN SELECT COUNT(*) INTO total FROM ASSUNTOS; tot:= total; END; I have tried to call the test_2 procedure using this anonimous block: begin TEST_PKG.test_2(:outvar); end; and I received the following error: Error, dco2.DatabaseError: (1008, 'ORA-01008: not all variables bound') Does anybody knows what is wrong? Regards Ricardo

1 0