- Zope - Zope lists

Zope Security
by Alastair Burt 16 May '01

16 May '01

I am getting aggravation from our sysadmin, who is reluctant to poke holes in our new firewall for my Zope ports. He claims he knows of no software in the last few years that has so many security holes. Is there anything to justify this claim? I know there are an alarmingly large number of Zope hotfixes on the security mailing lists and that login passwords get sent in the clear, when not using ssl. On the other hand, I know of no attempt to hack a Zope site. --- Alastair

8 9

question about PathHandler
by Kevin L 16 May '01

16 May '01

Hi, I have a PathHandler in my root. If I make it redirect to a DTML method also in the root it works fine. But I want the PathHandler to call a DTML method in a subfolder, for example /folder1/subfolder1/index_html Is this possible and if so what is the syntax for the Method property of the PathHandler. thanks a lot -Kevin __________________________________________________ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/

2 1

Problem with Automatic Cataloging Example in ZopeBook
by Christian Wittern 16 May '01

16 May '01

Hi fellow Zopers, I've been running in some problems with Cataloging and went to the ZopeBook to see whats wrong. In trying to work through the examples in Chapter 9, Automatic Cataloging, I found that with the latest and greatest Zope 2.3.2, the Catalog fails to acquire and catalog the properties of my NewsItem. Just to verify that I am not doing something very stupid wrong, I went through the same exercise with an old Zope 2.2.1 I had lying around. No problem there, the Catalog looks as expected. Has anybody else run into this or a similar problem? Is it a bug in the ZOpeBook in ZOpe or in my (unplugged) brain? Any help appreciated, Chris -- Institute for Research in Humanities, Kyoto University 47 Higashiogura-cho, Kitashirakawa, Sakyo-ku, Kyoto 606-8265, JAPAN

4 3

SQLSession occasionally dying?
by Paz 16 May '01

16 May '01

Greetings, Since Zope-222, I have been using SQLSession for all sorts of things... I really like using it because you can compile all sorts of user-site interaction by the session id. But with my latest app, using Zope-232 and PoPy201, I've noticed that once in a while, I get SESSION key errors denoting that a key is not being accessed. I modified the sqlCreateSession method to write the HTTP_REFERRER into every new session. I have noticed here that when I get the key error, a new session is trying to be written and the refferer field is filled with the last page that I access. But my errors still come because I set session data once at the beginning that needs not be added again. My question is this: Is there something in either Zope232, SQLSession (umm.. 030?) PoPy201, ZPoPY that would cause the session to get lost somehow? It seems that all of a sudden, a new session has taken over, but how is this possible? This represents an instability that I cannot accept in the current site development because it leaves users clueless as to what is happening, and support calls get made when someone only needs to close the browser and start a new session.... from the beginning. Thanks in advance, Paz

1 0

Re: [Zope] MSWordDocument
by Takashi Linzbichler 16 May '01

16 May '01

Joachim Werner wrote: > > MSWord is a bit buggy. It's not your fault. ;-) > > You might check for a bug I remember: In the patch for Resources.py that you > have to apply, "type" instead of "typ" is used ... Oh, sorry, forgot to mention that: this was the first bug I discovered and fixed ... :-( But this did unfortunatly not solve any problem, just made it predictable. ta -------------------------------------------------------------------------- smartferret it-consulting Dipl.-Ing. Linzbichler KEG Dipl.-Ing. Takashi Veikko Linzbichler Tannhofweg 28/3 A-8044 Graz, Austria Tel.: 0316 / 39 89 40 -0 Fax: 0316 / 39 89 40 -20 Mobil: 0676 / 31 26 286 eMail: takashi.linzbichler(a)smartferret.com WWW: http://www.smartferret.com --------------------------------------------------------------------------

1 0

packing a data.fs from outside zope?
by Anthony Baxter 16 May '01

16 May '01

Don't suppose anyone's produced a nice convenient "pack a data.fs file" script that's runnable from outside Zope? Anthony

2 1

Re: packing a data.fs from outside zope?
by Anthony Baxter 16 May '01

16 May '01

>>> Anthony Baxter wrote > Don't suppose anyone's produced a nice convenient "pack a data.fs file" > script that's runnable from outside Zope? never mind. (here it is, for anyone interested) import ZODB from Persistence import Persistent store = ZODB.FileStorage.FileStorage("Data.fs") db = ZODB.DB(store) db.pack() print "done"

1 0

Anyone ever used webdav.client?
by Lalo Martins 16 May '01

16 May '01

I was looking for a Python-based webdav client library, and I was surprised and delighted to find out I already have one! Is there any documentation or example code on how to use this module? ($SOFTWARE_HOME/lib/python/webdav/client.py) []s, |alo +---- -- I say a prayer now our love's departed That you'll come back to stay Bring back the perfect day http://www.laranja.org/ mailto:lalo@laranja.org pgp key: http://www.laranja.org/pessoal/pgp Brazil of Darkness (RPG) --- http://www.BroDar.org/

1 0

Permission question
by Bruce Eckel 16 May '01

16 May '01

When I try run the following DTML, Zope makes me log in. Can someone set me straight about the permissions that I need to change so that an anonymous user is able to run this page? Thanks... (SeminarID() is a benign Python Script, semnumber is a property string, and yes, I am storing the stringified REQUEST.form dictionary in the document file). Thanks. <dtml-var standard_html_header> <dtml-let semid="SeminarID(name)"> <dtml-with "_.getitem('R%s' % semnumber)"> <dtml-call "manage_addDocument(semid, '', _.str(REQUEST.form))"> </dtml-with> <h1>Registration successful: <dtml-var semid></h1> </dtml-let> <dtml-var standard_html_footer>- Most current information can be found at: http://www.mindview.net/Etc/notes.html =================== Bruce Eckel http://www.BruceEckel.com Contains free electronic books: "Thinking in Java 2e" & "Thinking in C++ 2e" Please subscribe to my free newsletter -- just send any email to: join-eckel-oo-programming(a)earth.lyris.net My schedule can be found at: http://www.mindview.net/Calendar ===================

2 1

Re: [Zope] [OT] subject headings/clarification
by Frank Tegtmeyer 16 May '01

16 May '01

Michel Pelletier <michel(a)digicool.com> writes: > everyone else are welcome to continue to discuss it and you don't need my > consent or permission to do so. My opinion: Putting the list name into the subject is totally redundant and ugly. Everybody who gets mailinglists will sort them into folders (at least). A mail client that is only able to filter for subjects is broken and shouldn't be used. There are many good mail clients out there, even for the Windows and Macintosh world, so there is nearly no excuse not to use them. Rigid corporate environments are out of course. Regards, Frank

8 18