- Zope - Zope lists

ANNOUNCE: Zope 2.3.1 final released
by Brian Lloyd 30 Mar '01

30 Mar '01

Hello all, Zope 2.3.1 final has been released - you can download it from Zope.org: http://www.zope.org/Products/Zope/2.3.1/ Zope 2.3.1 contains fixes for a number of issues that have come up since 2.3.0, including the fixes for the issues addressed by the 02/23 and 03/08 hotfixes. It also contains a number of changes to address issues with ZCatalog. New data structures have been introduced to reduce the number of conflict errors caused by object indexing under some types of usage, and to reduce the amount of object database bloat that occurs when indexed objects change frequently. The changes to ZCatalog have been designed so that newly created ZCatalog objects will take advantage of the new data structures. Existing ZCatalog objects will continue to work with the old data structures, but will not gain any of the benefits of the new code. It is possible to upgrade an existing ZCatalog object to use the new data structures by following the How-To at: http://www.zope.org/Members/mcdonc/HowTos/UpgradeToNewCatalog Many thanks go to those who helped exercise the new code and the catalog upgrade process during the beta cycle. Many thanks as well to Jim Fulton, Chris McDonough and Andreas Jung for their hard work and the prodigious amount of unit tests produced for the new (and old) Catalog code! With the 2.3.1 release we have added a Linux Itanium binary distribution. Note that the Itanium binary is bundled with Python 2.0 instead of Python 1.5.2. This release (Zope-2.3.1-linux2-ia64-alpha.tgz) is named with "alpha" because it is the first for the platform. All unit tests pass and moderate testing has found no problems (actually, any problems you find are more likely to be issues with Zope on Python 2.0 rather than issues with the platform). **IMPORTANT NOTE** for users of the source release or users of the "diff" update releases Users of the Zope source releases should note that this release contains changes to C code. If you are using a source release (or the source diff update), be sure to run 'w_pcgi.py' or 'wo_pcgi.py' as appropriate before starting Zope to ensure that your binaries are rebuilt. Also, there has been some recent work on getting Zope to run on the Mac OS X platform. As a result of this work, the names of certain C extension modules were changed to avoid symbol name clashes on systems with a global dynamic module namespace. The result of this is that if you install a diff update over an existing installation, you need to do a few things manually: - If you are using a source release and apply the source update, visit the directories 'lib/python/BTrees' and 'lib/python/Shared/DC/xml/pyexpat'. In each, run 'make clean' and remove any .so files in those directories before rebuilding the extensions. - If you are running a binary release and have applied the diff update for your platform, before restarting Zope visit the 'lib/python/BTrees' directory and remove any .so (or .pyd) files that do *not* have names beginning with an underscore and in the directory 'lib/python/Shared/DC/xml/pyexpat', remove the file 'pyexpat.so' (or .pyd) For more information on what is new in this release, see the CHANGES.txt and HISTORY.txt files for the release: http://www.zope.org/Products/Zope/2.3.1/CHANGES.txt http://www.zope.org/Products/Zope/2.3.1/HISTORY.txt Note that we have also posted "diff" updates as .tgz files that will let you easily upgrade an existing 2.3.x site. These updates are available for those currently using the 2.3.x source release or the 2.3.x binary releases. To apply a differential update to your site: - download the appropriate .tgz file from zope.org - shutdown your Zope process - copy the .tgz to your Zope directory and extract it - SEE THE NOTE ABOVE!! - run w_pcgi or wo_pcgi *if you are not using a binary release* - restart your process Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

Changing text in all methods
by Diego Rodrigo Neufert 30 Mar '01

30 Mar '01

I want to change a text in all my dtml methods in Zope. There's a way to do this? In php I do this with a perl regular expression... Thanks... -- Diego Rodrigo Neufert System Administrator / Security Manager - Magic Web Design ----------------------------------------------------------- diego(a)magicwebdesign.com.br www.magicwebdesign.com.br Curitiba - PR - Brasil

2 1

Re: [Zope] folders recursively
by Petr Knapek 30 Mar '01

30 Mar '01

>>>>> On Thu, 29 Mar 2001 16:45:43 +0200 (CEST), Peter Sabaini <sabaini(a)niil.at> said: Hi Peter, PS> On 29 Mar 2001, Petr Knapek wrote: >> Hi Zopists, >> >> I would like to call some DTML method on all Folders in my ZODB. >> I think the best way should be recursion but I do not know how to >> do it in DTML. >> >> Please, can you help me, or do you know any HOW-TO etc? I have >> found nothing. >> >> Petr >> >> PS I need it for Zope 2.1.6 and 2.3.0 also PS> maybe PS> http://www.zope.org/Members/sabaini/recursionminihowto I have tried it and after watching it I had the same idea. I have created DTML method called 'recursion' with this body: <dtml-in "objectItems(['Folder'])"> <dtml-with sequence-item> <dtml-var id> <dtml-var recursion> </dtml-with> </dtml-in> But when I call it (on Zope 2.1.6 on Debian Linux), a Zope error is raised. Zope Error Zope has encountered an error while publishing this resource. Error Type: ValueError Error Value: Invalid Header (0): a b c aa Peter, do you know what does it mean. I have not test it on 2.3.0 Thank you, Petr -- Petr Knápek NEXTRA Czech Republic, s.r.o., Hlinky 114, 603 00 Brno, Czech Republic e-mail: mailto:petr.knapek@nextra.cz tel:+420-5-43 554 150 FAX:+420-5-43 554 214

2 1

RE: [Zope] Sudden authentication problem
by Dunigan, Craig 30 Mar '01

30 Mar '01

Thanks for the response, I was beginning to think I wasn't going to get one. > > which forces a login and points them to their home > folders, in a folder > > called "People." > We do not see that a login is forced. > But you are sure, it is? Sorry, I missed the fact that the DTML method does not acquire permission settings (explicitly unchecked in the management interface), and is only viewable by an authenticated user. *That* forces the login. > > .... > > (Object: Catalog({'meta_type':'Yihaw Folder'})) > > File > /opt/Zope/ZopeInst/lib/python/DocumentTemplate/DT_Util.py, line 334, > > in eval > > (Object: > REQUEST['AUTHENTICATED_USER'].has_permission('Add EW Nav > > Links', REQUEST.resolve_url(BASE0+getpath(data_record_id_)))) > > (Info: BASE0) > > File <string>, line 0, in ? > > File > /opt/Zope/ZopeInst/lib/python/ZPublisher/HTTPRequest.py, line 724, in > > resolve_url > > Unauthorized: (see above) > Your catalog contains something that can not be accessed by your user. Hmm. This seems likely. I didn't write this site, I'm trying to pick up after someone who left the company. I honestly hadn't any idea what "data_record_id" referred to. From what you've said, I've done a little more digging and found that it's the unique identifier which "getpath" needs in order to find a cataloged object. I had no idea the catalog was even involved here, so this provides a whole new avenue to investigate. Thanks! > > ... > > But from this, I read that AUTHENTICATED USER doesn't have > the permission > > 'Add EW Nav Links' (our own concotion, obviously) > I do not think so. > "Add EW Nav Links" is the permission that you want to test for. > But the "Unauthorized" exception is already raised when > the catalogued object is looked up. Forgive my inexperience, but how do you know this? > > lacks that permission in 'BASE0+getpath(data_record_id),' > which I presume > > evaluates to the current folder? Each user has a local > role of Manager in > > his/her own folder, which I thought is what the current > folder would be. > Do you have a catalog in each of these folders or is there a > global catalog. With a global catalog, it is well possible > that it contains something inaccessible for some users. Only one global catalog. > I do not know precisely, how "resolve_url" works. > Maybe, it checks access rights on its way down to the object. > Then, a folder to the object may not be accessible for your > user. That is exactly how "resolve_url" appears to behave to me. It should be checking through all objects in a folder hierarchy, and reporting which ones the permission "Add EW Nav Links" exists for that user. The loop is here: <dtml-call "REQUEST.set('YihawFolders', [])"> <dtml-in expr="Catalog({'meta_type':'Yihaw Folder'})"> <dtml-if "REQUEST['AUTHENTICATED_USER'].has_permission('Add EW Nav Links', REQUEST.resolve_url(BASE0+getpath(data_record_id_)))"> <dtml-call "YihawFolders.append(getpath(data_record_id_))"> </dtml-if> </dtml-in> According to a Chris McDonough email in the archives, "resolve_url uses the exact same publishing machinery as calling a URL through the web; it does _not_ bypass the security machinery. If you do not have enough privledge to access to an object, then you will get an Unauthorized, just like when you call it through the web." Another bit I did not know. Now I can safely assume that there is a "Yihaw Folder" somewhere in the site hierarchy that does not have appropriate permissions set. This also solves the mystery of how the problem was caused in the first place. I do know that my "technically challenged" co-worker was creating some Yihaw folders yesterday. It now appears to me that he made one with incorrect permissions. Am I thinking right here? I'll check it and see. Thank you very much, Dieter! Craig

1 0

How to change <dtml-tree> starting(root) folder ?
by Anton A. Zotov 30 Mar '01

30 Mar '01

Hello society !:-) Lots of thanx for all previous advices. Another question: My DTML document, containing <dtml-tree> tag persists in ZClass. I create an instance of the class in some folder. Now if I call that document, I don't see any tree at all, but I'd love to see the tree based on the folder, instance of ZClass is created in. Does anybody have an idea related to this ? I'd appreciate a couple. Thanx in advance, Anton.

1 0

Re: [Zope] Sudden authentication problem
by Dieter Maurer 30 Mar '01

30 Mar '01

Dunigan, Craig writes: > .... > Users login with this DTML method: > > <dtml-let userid="REQUEST['AUTHENTICATED_USER'].getUserName()"> > <dtml-call expr="RESPONSE.redirect('/base/People/' + _['userid'])"> > </dtml-let> > > which forces a login and points them to their home folders, in a folder > called "People." We do not see that a login is forced. But you are sure, it is? > .... > (Object: Catalog({'meta_type':'Yihaw Folder'})) > File /opt/Zope/ZopeInst/lib/python/DocumentTemplate/DT_Util.py, line 334, > in eval > (Object: REQUEST['AUTHENTICATED_USER'].has_permission('Add EW Nav > Links', REQUEST.resolve_url(BASE0+getpath(data_record_id_)))) > (Info: BASE0) > File <string>, line 0, in ? > File /opt/Zope/ZopeInst/lib/python/ZPublisher/HTTPRequest.py, line 724, in > resolve_url > Unauthorized: (see above) Your catalog contains something that can not be accessed by your user. > ... > But from this, I read that AUTHENTICATED USER doesn't have the permission > 'Add EW Nav Links' (our own concotion, obviously) I do not think so. "Add EW Nav Links" is the permission that you want to test for. But the "Unauthorized" exception is already raised when the catalogued object is looked up. I do not know precisely, how "resolve_url" works. Maybe, it checks access rights on its way down to the object. Then, a folder to the object may not be accessible for your user. > lacks that permission in 'BASE0+getpath(data_record_id),' which I presume > evaluates to the current folder? Each user has a local role of Manager in > his/her own folder, which I thought is what the current folder would be. Do you have a catalog in each of these folders or is there a global catalog. With a global catalog, it is well possible that it contains something inaccessible for some users. Dieter

1 0

Re: [Zope] Objects and atributes...
by Dieter Maurer 30 Mar '01

30 Mar '01

After Dark writes: > Hi, I need to remove a file from the project through the > site.To add, I used "folder".addFile, and how can I do to > delete a file and folder? > > And I can do it only with the root folders, how to solve it? > > Other doubt, how can I change the value of an atribute of an > objetc? Like the title or id... Looks like you should read some documentation.... * the Zope book * the built-in Zope online help -> API reference -> ObjectManager * maybe: URL:http://www.dieter.handshake.de/pyprojects/zope/book/chap3.html Dieter

1 0

Re: [Zope] Unauthorized
by Dieter Maurer 30 Mar '01

30 Mar '01

Sebal writes: > ... > BUT I cannot send query nor view the methods I've just created ... > ... > verify_watermark > Unauthorized: You are not authorized to access this resource. I think, "verify_watermark" should protect against tampering with the authentication information in the REQUEST object, e.g. call an object with a REQUEST-like object that is not the request at all. I do not know, why the protection is activated in your system. I had is once when I reloaded the ZPublisher.HTTPRequest module. But, of course, that is not your problem. If you are under some pressure, you could disable the test "User.py:711" until you found the reason for this strange behaviour. Be careful, however, you open up security risks. Dieter

1 0

Re: [Zope] Form processing in Zope
by Dieter Maurer 30 Mar '01

30 Mar '01

Gitte Wange writes: > > <dtml-if expr="ActionList == '1'"> > > Do this > > <dtml-elif expr="ActionList == '2'"> > > Do that. > > </dtml-if> > ... > Then I get a NameError Then your form control is not named "ActionList" or it is a multiple selection with no option selected... You can use <dtml-var REQUEST> to see precisely, what your request contains. Even better, install Shanes excellent ZDebug. Then you will see the request info (and lots more) whenever an exception is raised in a DTML object. I think the following reading will help you, too: URL:http://www.dieter.handshake.de/pyprojects/zope/book/chap3.html Dieter

1 0

RE: [Zope] LocalFS product
by Capesius, Alan 30 Mar '01

30 Mar '01

Error 5 is Access denied under NT. Check the passwords and domain. You may need to specify it as DOMAIN\PASSWORD >>>-----Original Message----- >>>From: Dieter Maurer [mailto:dieter@handshake.de] >>>Sent: Friday, March 30, 2001 12:55 PM >>>To: ASHISHRANJAN_V >>>Cc: zope(a)zope.org >>>Subject: RE: [Zope] LocalFS product >>> >>> >>>ASHISHRANJAN_V writes: >>> > I tried mapping the share and then use the LocalFS . >>> > The server is running on windows. >>> > I get the error : >>> > Error Type: OSError >>> > Error Value: [Errno 5] Input/output error >>>This problem has nothing to do with Zope. >>> >>> The code tries to read or write and gets an "input/output error" >>> from the underlaying C library. >>> >>> This may happen, if a communication channel got closed, >>> the file system is full or similar problems. >>> >>> >>>Dieter >>> >>>_______________________________________________ >>>Zope maillist - Zope(a)zope.org >>>http://lists.zope.org/mailman/listinfo/zope >>>** No cross posts or HTML encoding! ** >>>(Related lists - >>> http://lists.zope.org/mailman/listinfo/zope-announce >>> http://lists.zope.org/mailman/listinfo/zope-dev ) >>>

1 0