- Zope - Zope lists

Allowing secure 'import' access in zope folder hosting
by Ivo van der Wijk 17 Apr '01

17 Apr '01

Hi All, We provide zope hosting, both folder based (where people have access to their own folder, mapped to a domain, and no access to the zope server / source / var / import / lib directories) and pure zope hosting (i.e. an entire own zope server for this customer) In the folder case, one of our customers whishes to upload his locally developped site as .zexp to our zope server and import it there. Can this be done safely? I.e. withouth compromising the other customers security? >From some discussions where had on #zope I understand that expecialy proxy roles may be a problem which may be fixed by requiring the user to take ownership. Would this fix all security issues? Or are there any other unforseen problems? Would anyone know another solution to achieve the same functionality? (ftp won't work, as you can't, for example, upload userfolders) Would it be possible to perform a scan on an xml exports for unwanted proxy roles and other security issues? Thanks, Ivo -- Drs. I.R. van der Wijk -=- Brouwersgracht 132 Amaze Internet Services V.O.F. 1013 HA Amsterdam -=- Tel: +31-20-4688336 Linux/Unix based corporate Fax: +31-20-4688337 and Web: http://www.amaze.nl/ Internet Solutions Email: ivo(a)amaze.nl -=-

1 0

Fulltextsearch with ZCatalog
by Steffen Bergmann 17 Apr '01

17 Apr '01

Does anybody know how I can do a fulltext search over the whole content of a Zope structure with ZCatalog. In the ZBook it is mentoined but not explained. And is there any way of automatic indexing over all objects of ZOPE? In one ZClass this works good, but I don´t want too add an Catalog for each of my ZClasses. Steffen

2 1

Order of elements in folderish objects
by Ben.Peter＠t-online.de 17 Apr '01

17 Apr '01

Hi all, When presenting a site structure in a menu, the order of elements in a Folder or other folderish objects is (most likely) of some semantic relevance if this is to be done dynamically. In the management interface of folderish items, there is little possibility to rearrange the order of the elements, except for cutting and pasting, as new elements will be appended. While the management interface presents elements in alphabetical order, this will have the desired effect of changing the order when requesting the list of elements via objectItems(). This is, however, a rather clumsy approach. Is there some easy solution to remain flexible with this order, or will it be something like subclassing the relevant objects and add a property for the order by which the requested list can be sorted? Cheers, Ben -- Ben Peter - Feldstrasse 8 - 35091 Coelbe Ben.Peter(a)t-online.de ph: (+49) 6421 983520

2 1

ZEO
by Fritz Mesedilla 17 Apr '01

17 Apr '01

Please help! How do I start Zope as a client? And how do I make sure the other server is successful in running the ZEO server? I can only see two lines of processes. Thanks in advance. Fritz Mesedilla Systems Administrator "Ooops! Save your work, everyone. FAST!" ---------------------------------------------------------------------------- Summit Interactive, Inc. http://www.femalenetwork.com | http://www.candymag.com http://www.fhm.com.ph | http://www.cosmo.com.ph FHM | Seventeen | Candy | Cosmopolitan | Preview | Good Housekeeping ---------------------------------------------------------------------------- email: fritz(a)mesedilla.com icq#: 23476449 yahoo id: fritzcm http://www.fritzmesedilla.net and http://www.fritz.iscute.com ---------------------------------------------------------------------------- +Basta Ikaw Lord

2 1

Re: [Zope] zope + sql
by William Herring 17 Apr '01

17 Apr '01

I'll try. I have a list of records from a single sql table that are viewed by the browser using sql SELECT. I would like to go down and 'check' or mark certain specific records. Then, for only the records that are 'checked', I would like to use sql UPDATE to replace the a value for one of the variables. The value replaced for that variable would be the same for all of the marked records. Steve Drees wrote: > I'm not following your description of the problem. > Can you give a more specific example? > >> -----Original Message----- >> From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of >> William Herring >> Sent: Tuesday, April 17, 2001 7:49 AM >> To: zope(a)zope.org >> Subject: [Zope] zope + sql >> >> >> I hope someone has an example or suggestion. >> >> Using Znolk, I SELECT from a table and the list is viewed. >> However, I would >> like to choose certain records (mark them from the viewed list) and then >> change a variable of only the marked records to a single new >> value. The new >> and old variable values are finite, they could come from a pull down list. >> >> So the idea would be to show the list from SELECT, but have an pull-down >> menu of new values at the top of the page that should be replaced for the >> variable to edit. The user would choose the new value from the pull-down >> and then go down the page and mark each record for which that >> value would be >> UPDATEed in the table >> >> Once this is done the values would be passed back to sql and >> UPDATE used to >> replace the old values. I'm not quite sure how to do this either. Do you >> have a loop, where inside the loop the UPDATE is goes through each marked >> record, or do you loop inside the >> >> UPDATE tablename set >> variable=newvalue >> where ----loop here with or's------ >> >> Any suggestions or similar examples would be appreciated. >> >> -- >> ======================================== >> William Herring >> Beef Cattle Genetics >> S-132 Animal Science Research Center >> University of Missouri, Columbia 65211 >> voice:573.884.6860 >> fax:573.882.4798 >> ======================================== >> >> >> _______________________________________________ >> Zope maillist - Zope(a)zope.org >> http://lists.zope.org/mailman/listinfo/zope >> ** No cross posts or HTML encoding! ** >> (Related lists - >> http://lists.zope.org/mailman/listinfo/zope-announce >> http://lists.zope.org/mailman/listinfo/zope-dev ) >> -- ======================================== William Herring Beef Cattle Genetics S-132 Animal Science Research Center University of Missouri, Columbia 65211 voice:573.884.6860 fax:573.882.4798 ========================================

2 1

how to use cgi in Zope?
by Lee, Jaeho 17 Apr '01

17 Apr '01

Hello All, I am totally newbie to Zope. But I am pretty sure that this question is asked hunderd time before. Please execuse me if that is the case. I built web site with Zope. I am really happy with it. But I have problem to use cgi program that I used with Apache before (for example wwwcount). How can I use cgi program with Zope. Just calling it as I did in Apache does not work. Please help me !!! Thanks in advance. /Jaeho Lee

3 2

Umlauts and Structured Text
by Stefan Radke 17 Apr '01

17 Apr '01

Hi ! How would umlauts have to be entered to be interpreted correctly by the structured text processor in Zope, e.g for a hyperlink ? "Füssen":Füssen, or even "Füssen":Füssen don't work. Any Help ? Thank you, and best regards; Stefan.

1 0

Re: [Zope] zope rant: It's all about delegation
by Luciano Ramalho 17 Apr '01

17 Apr '01

One word defines what Zope is all about: DELEGATION. If you work alone or your project is so rocket-science that it requires a team made 100% of highly skilled programmers, then it may be better for you to use plain Python and Zope parts (like ZODB and ZPublihser), Quixote, WebWare or your own framework. Most projects in the real world are not like this. Most sites must be managed and updated by users of varying skills. Corporate sites, intranets, content portals must be built with tools that allow easy and safe delegation of management powers to many people, from journalists and salespeople to web designers with little programming skills. If you can't delegate, you get backlogs, tech staff burn-out, frustrated users and unhappy customers. An interesting point: in another "Why not Zope" piece, Chuck Esterbrook says he prefers a syntax like the ASP and PHP <%%> tags than DTML. We believe DTML is actually a strong selling point of Zope. Combined with Python Scripts and SQL Methods, DTML encourages separation of layout and logic much better than ASP and PHP. To define dynamic templates, dtml-var, dtml-in and the occasional dtml-if are enough. With proper support of Python Scripts, complex DTML expressions can be avoided, making DTML very easy to read and modify by anyone who knows HTML. And ZPT can be even easier. In ASP and PHP it is very common to see SQL and HTML fragments embedded in the <%%> parts, which means that DBAs, programmers and designers all have to touch the same code to make changes. If your site is so small that one person has all three roles, then maybe you can be more productive hacking away SQL, HTML, PHP and client-side JavaScript all in the same document. But if your site is that small, you really don't need a content management system like Zope. In medium to large sites, there are never enough all-knowing sysadmin/perl-hacker/dba/web-designer old-style "web masters" to go around... So Andrew Kuchling's and Chuck Esterbrook's texts should really be called "Why Zope is not for me?" instead of just "Why not Zope?". Best regards, Luciano

1 0

Customizing 404 errors
by Darryl Caldwell 16 Apr '01

16 Apr '01

Wondering if anyone has any input on how I can customize 404 messages that zope returns for files not found. I have reorganized my site with zope and I would like to let users know to revisit my main page. "Black Holes are where God divided by zero." -- Steven Wright

2 2

Another question about LoginManager (or similar products)
by l.p.arnesen＠usit.uio.no 16 Apr '01

16 Apr '01

After getting LoginManager working and following the steps of the LoginManager with SQL database HOWTO I realized that this was a solution to store administrators of the website in a database. I'm going to create a public service that requires all the users to register with a username and a password. After doing so they must log in every time they use the service. I really don't want to write the user login code if it exists in some form of a module or a product. Is there some examples of how to use the LoginManager to do this? PS: I guess I'm looking for a authentication mechanism like the one Mailman uses for it's administration pages. Yes, I can just take a look at how Mailman does it, but I guess there are some less complex examples to take a look at somewhere. :) -- Lars Preben

5 8