- Zope - Zope lists

HTTP PUT
by David 05 May '06

05 May '06

Hi I need confirmation (mainly for some peace of mind, but also because reading google results, all sorts of questions from in my head). I have a user messing with a site using HTTP PUT to upload files. The user has access privileges to use a simple CMS (although for the time being now, they're revoked). Will switching off the permission for "WebDAV access" prevent any successful PUT or do we need to take further actions? We also allow FTP access to certain directories. Can this be abused to upload files elsewhere? Here's a log entry: 10.0.9.1 - potter [03/May/2006:17:02:02 +0100] "PUT /site/microsites/ harry/home/Home Page/page/add_block?block=1/ter_restrnt.jpg HTTP /1.1" 204 221 "" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: 1.7.12) Gecko/20050915" 10.0.9.1 - potter [03/May/2006:17:02:02 +0100] "PUT /site/microsites/ harry/home/Home Page/page/add_block?block=1/small_show.jpg HTTP/ 1.1" 204 221 "" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: 1.7.12) Gecko/20050915" 10.0.9.1 - potter [03/May/2006:17:02:03 +0100] "PUT /site/microsites/ harry/home/Home Page/page/add_block?block=1/small_c-exhibition00 31.jpg HTTP/1.1" 204 221 "" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915" 10.0.9.1 - potter [03/May/2006:17:02:04 +0100] "PUT /site/microsites/ harry/home/Home Page/page/add_block?block=1/College Logo.jpg HTT P/1.1" 204 221 "" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: 1.7.12) Gecko/20050915" 10.0.9.1 - potter [03/May/2006:17:02:04 +0100] "PUT /site/microsites/ harry/home/Home Page/page/add_block?block=1/page/Home Page HTTP/ 1.1" 204 221 "" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: 1.7.12) Gecko/20050915" Thanks for any help. DR

3 2

[Warning] "ManagableIndex" "Zope2.8+" incompatibility
by Dieter Maurer 05 May '06

05 May '06

WARNING! We hit an incompatibility of "ManagableIndex" with "Zope 2.8+". For Python new style classes, "__len__" instance attributes are no longer taken into account in the implementation of the "len" builtin. "len" now only looks for "__len__" class attributes. From "Zope 2.8+" on, all persistent Zope objects are instances of new style classes. Especially, "ManagableIndex"es are new style classes. "ManagableIndex"'s "__len__" instance attribute is no longer used by "len". Some Zope base class defines the class method "__len__" to return 1. As a consequence, "len" applied to a "ManagableIndex" always returns 1 in Zope 2.8 and later (until "ManagableIndex 1.3.1"). The badly behaving "len" can seriously confuse "AdvancedQuery" (and other similar query frameworks) that uses "len(index)" to guide the implementation of sorting. In our observed case, "AdvancedQuery" sorting was 3 to 5 times slower and read 3 times more objects than necessary. The bug is fixed in "ManagableIndex 1.3.1". Download <http://www.dieter.handshake.de/pyprojects/zope> -- Dieter

1 0

How to set property from external method or pythonscript?
by Jaroslav Lukesh 05 May '06

05 May '06

HI all, External methods and pythonscripts are fine, but I did not find how to set some property or bulk of properties to use in dtml document after calling this ext.method or pythonscript. The passing variables I was find for pythonscripts only. Many thanks, JL.

2 1

Re: [Zope] Re: Questions on ZODB BTrees versus bsddb BTrees
by Terry Jones 05 May '06

05 May '06

Hi Simon >>>>> "Simon" == Simon Pamies <s.pamies(a)banality.de> writes: Last year I Simon> hacked some ZCatalog replacement because I had a non-zope standalone Simon> ZODB application. It is only one single file containing a complete Simon> customizable indexer. Perhaps it is also useable here. Simon> http://files.banality.de/public/standaloneindexer.py I grabbed it, and will have a look soon. Thanks. Terry

1 0

Re: [Zope] Questions on ZODB BTrees versus bsddb BTrees
by Terry Jones 05 May '06

05 May '06

>>>>> "Chris" == Chris Withers <chris(a)simplistix.co.uk> writes: Chris> Terry Jones wrote: >> Usually you find database records by means of the record's key. >> However, the key that you use for your record will not always contain >> the information required to provide you with rapid access to the data >> that you want to retrieve. Chris> Ah, okay, you do this with multiple BTrees in Zope, unless you want Chris> to swallow the whole ZCatalog... I think I'll roll my own, at least for now. I don't want to use ZCatalog for the indexing part, at least not yet. The BaseIndex class in src/zope/app/catalog/README.txt of the Zope3 SVN tree illustrates pretty much all I need right now. See, I'm still relying on reading the docs :-) | >> For example, suppose your database contains | >> records related to users. The key might be a string that is some unique | >> identifier for the person, such as a user ID. | | Chris> from BTrees.IOBTree import IOBTree | Chris> chris = object() | | Chris> id2user = IOBTree() | Chris> id2user[1234] = chris | | >> is, by the information stored in the key), it may also on occasion want | >> to location people by, say, their name. | | Chris> from BTrees.OOBTree import OOBTree, OOSet | Chris> name2user = OOBTree() | Chris> name2user['chris'] = chris | | Chris> Now, if you have more than one value, you use a set: | | Chris> dan = object() | Chris> age2user = OOBTree() | Chris> age2user[27] = OOSet(chris,dan) Thanks for the code too. Terry

1 0

Re: [Zope] Questions on ZODB BTrees versus bsddb BTrees
by Terry Jones 05 May '06

05 May '06

Hi Chris >>>>> "Chris" == Chris Withers <chris(a)simplistix.co.uk> writes: You may Chris> have more joy with these questions on the zodb-dev(a)zope.org mailing Chris> list... Thanks, I've re-sent. Thanks for the other comments & pointers too. Regards Terry. >> - ZODB BTrees do not allow you to set up secondary keys (a la bsddb). Chris> Dunno what that means. I think you're just use two BTrees for this... [Sorry if the following is off-topic for the list. It's presumably good for the archives, and, I suppose, is the end of the thread.] >From the Berkeley DB docs: Usually you find database records by means of the record's key. However, the key that you use for your record will not always contain the information required to provide you with rapid access to the data that you want to retrieve. For example, suppose your database contains records related to users. The key might be a string that is some unique identifier for the person, such as a user ID. Each record's data, however, would likely contain a complex object containing details about people such as names, addresses, phone numbers, and so forth. While your application may frequently want to query a person by user ID (that is, by the information stored in the key), it may also on occasion want to location people by, say, their name. Rather than iterate through all of the records in your database, examining each in turn for a given person's name, you create indexes based on names and then just search that index for the name that you want. You can do this using secondary databases. In DB, the database that contains your data is called a primary database. A database that provides an alternative set of keys to access that data is called a secondary database. In a secondary database, the keys are your alternative (or secondary) index, and the data corresponds to a primary record's key.

4 3

default_zpublisher_encoding not supported
by MIlos Prudek 05 May '06

05 May '06

Zope 2.8.6 is supposed to support default_zpublisher_encoding in zope.conf. But when I uncomment the example in zope.conf, default_zpublisher_encoding utf-8 I cannot launch Zope: Error: 'default_zpublisher_encoding' is not a known key name (line 863 in file:///home/makina/bili/etc/zope.conf) -- Milos Prudek

2 4

Re: [Zope] Questions on ZODB BTrees versus bsddb BTrees
by Terry Jones 05 May '06

05 May '06

>>>>> "Chris" == Chris Withers <chris(a)simplistix.co.uk> writes: Chris> ZCatalog ships as a standard part of Zope, no need to download. Chris> It's covered extensively in the zope book on Plope.org... Chris> Not everything is as hard as some people manage to make it ;-) OK, thanks. I hope you'll agree though that the three excerpts below from http://www.zope.org/Documentation/How-To/ZCatalogTutorial do give the clear impression that ZCatalog is available as a separate standalone entity and is available somewhere as ZCatalog-x-x.tgz for download. | * Usable outside of Zope. The software is broken into a Python Catalog | which wrapped by a ZCatalog. The Python Catalog can be used in any | Python program; all it requires is the Z object database and the | indexing machinery from Zope. | * The ZCatalog is a free, Open Source part of the Zope software | repository and thus is covered under the same license as Zope. It is | being developed in conjunction with the Zope Portal Toolkit | effort. However, the ZCatalog product is managed as its own module in | CVS. | Installing ZCatalog | | ZCatalog can be downloaded from the Zope download area and is also a | module in the public CVS for Zope. Untar it while in the root directory | of your Zope installation: | | $ cd Zope-2.0.0a3-src/ | $ tar xzf ../ZCatalog-x.x.tgz Or, do you really want to shoot the messenger? :-) BTW, I did see the ZCatalog stuff in the Zope2 tarball, but I assumed that was the Zope Product, not the implied standalone. Anyway, I'll get on with it. Thanks. Terry

3 2

CMS question - Compound Doc
by Aaron Siegel 05 May '06

05 May '06

Hello I am an web administer for a very non-profit organization. We where looking in to hiring someone to develop a CMS for us, We received a proposal from a company that develops their sites using Compound Doc. I just found out today that they will be signing the papers on Tuesday, I am a little nervous. Does anyone have any experience using Compound Doc? Thank you Aaorn

1 0

RE: [Zope] how to decode base64 in DTML?
by Andreas Jung 05 May '06

05 May '06

--On 4. Mai 2006 22:22:25 +0200 Jaroslav Lukesh <lukesh(a)seznam.cz> wrote: > > import cStringIO > import mimetools > from Products.PythonScripts.Utility import allow_module > allow_module("base64") > > Please read carefully. The documentation tells you to put allow_module() inside somewhere in Products/YOUR_PRODUCT/__init__.py but not inside the PythonScript itself. -aj -- ZOPYX Ltd. & Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany Web: www.zopyx.com - Email: info(a)zopyx.com - Phone +49 - 7071 - 793376 E-Publishing, Python, Zope & Plone development, Consulting

1 0