- Zope - Zope lists

Bug in dtml-tree (with patch)
by Sebastien Nameche 25 Feb '01

25 Feb '01

Hi there, There is a bug into "lib/python/TreeDisplay/TreeTag.py" that prevents the SQL example that can be found here : http://www.zope.org/Members/anthony/tree-coding-tricks from running with MySQL. The error that is returned by Zope is : -- Error Type: TypeError Error Value: call of non-function (type long int) -- It's because MySQLDA returns a longint type for int columns of a MySQL table. I have made a little patch that corrects the problem. It's available here : http://www.virtual-net.fr/zope/TreeTag-patch.py.gz Since I am very surprised nobody found this bug before, I think it may comes from the version of one og the component I am using. For information, these are the versions of all the softwares I use : Zope: 2.2.5 MySQL: 3.22.32 Distutils: 1.0.1 MySQL-python: 0.3.3 ZMySQLDA: 2.0.4 -- S. Namèche (snameche(a)virtual-net.fr) Société Virtual Net Immeuble Gallium Tél. +33 2 2321 0630 80, avenue des Buttes de Coësmes Fax. +33 2 9938 1685 35700 Rennes - France Mob. +33 6 1670 2998 -- "It's easy to stop making mistakes, just stop having ideas." -- Someone in the Zope mailing list

1 0

Security policies and roles problem
by Kenneth Chin 25 Feb '01

25 Feb '01

Dear All, I'm using Zope 2.2.5 on Linux and I have a problem of setting security policies and roles. I have the following structure: / |--acl_users | |--user0 | |--user1 | |--user2 |--user1 | |--acl_users | |--pygresql_db_connection | |--index_html |--user2 |--acl_users |--index_html In the root folder (/), I defined a user defined role 'Admin'. For each user, I set the following roles: 'user0' is 'Manager'; 'user1' is 'Admin'; 'user2' is 'Operator'. I intend to have 'user0' as the administrator of the entire site, so Manager role should be appropriate. Both 'user1' and 'user2' are local managers, and they should be defined in acl_users folders in the respective folders. But I need each of them to have access to each other's folders, hence I have to defined them in a higher structure. I also enabled ALL permissions for 'Admin' in 'user1' and 'Operator' in 'user2' folders, but enabled only Access contents information, View and View management screen for both 'Admin' and 'Operator' in root so that each user can view the root but can make changes only in their respective folders. The problem comes when I log in as either 'user1' or 'user2'. For example, as 'user1', I add a new object acl_users in /user1. acl_users is created successfully, but when I click on it, the Contents tab is not visible, ie. I cannot manage users. I can set permissions, take over ownerships, but cannot manage users. Similarly, I can create and delete PyGreSQL database connection in /user1, but the Properties tab of PyGreSQL is not visible. 'user1' can have access to acl_users/Contents and PyGreSQL/Properties ONLY when I reset the role to Manager in /acl_users. I need 'user1' to have Manager-equivalent permissions ONLY in user1 folder, but have limited access to other folders. It seems to be that acl_users and PyGreSQL grant the user full access ONLY when they are Manager, regardless of the permissions enabled in their user defined roles. Is this a bug or a feature, or have I misunderstood something here. This scenario is like the one described in the Zope Book Chapter 6: Security --- Scientist and SalesPerson. I would like Scientist or user1 and SalesPerson or user2 to have full control in their folders WITHOUT being Manager so that the administrator or user0 can be Manager. Is there a way round this? Thanks! Regards, Kenneth

1 0

calling Zope objects from php
by Guy Redwood 25 Feb '01

25 Feb '01

Hi Just wanted to share this with you. We use the phorum bulletin board in php and Zope for the rest of our site (truly smitten with Zope). I've just realised how to add the menus and banner adverts (built in Zope) into the headers and footers of the bulletin board php scripts. I originally thought of embedding php into Zope... but it's easier to call zope from php! Use the 'include' function to call Zope dtml methods through http. Really easy.... <?php include ("http://www.siberianhuskyclub.com/banners/show_banner"); ?> This just places the code for our banner adverts in the right place. Guy http://www.siberianhuskyclub.com

1 0

Re: [Zope] Zope+Apache+ProxyPass
by Ragnar Beer 25 Feb '01

25 Feb '01

>I'm confused by a note in your caching howto about managing Zope using >an SSL connection: > > Apache+ZServer+SSL From the author of this How-To I also got a very > good tip for what to do if you want to manage your website via https > to avoid sending your unencrypted password over the net: Reverse the > setup he describes, i.e. instead of creating a folder "ssl" and > making the base of the site root "https://..." create a folder > "http" and make the base of the site root "http://..." > >Isn't the username/password still sent in clear text (mime-encoded) as >soon as you attempt to manage anything in the /http folder because of >the unencrytped connection (http://...) specified by the siteroot? > >-kevin Of course you need to use the https protocol! The advantage of the reversed setup is that if you configure it that way then the "natural" way to access the site can be https and http is the special case and not the other way round. Ragnar

1 0

Re: [Zope] multipart pushing
by Philippe J 25 Feb '01

25 Feb '01

The idea come from the book "web application development with php4.0" by Ratschiller and Gerken. The web site is http://www.phpwizard.net/ The idea was to build an irc client. You may ask them wether it's a foolproof solution or not. Beside the fact that some browsers may have a timeout setting, I do not see why it wouldn't work. Philippe > Cool idea! I never heard about it. Do you know whether that works > with all kinds of browsers (especially older versions)? > > Ragnar Beer

1 0

reinstall
by Patrick 25 Feb '01

25 Feb '01

Hi, I am running FreeBsd and I did a make install to upgrade my zope from 2.2 to 2.3. My validation is done by apache using the <directory> directive of the cgi- bin directory but it does not seem to work. I keep getting the error below. Can anyone give me any ideas on how to set it up again probably from scratch? Thanx. Zope Error Zope has encountered an error while publishing this resource. Error Type: IndexError Error Value: list index out of range -------------------------------------------------------------------------------- Troubleshooting Suggestions The URL may be incorrect. The parameters passed to this resource may be incorrect. A resource that this resource relies on may be encountering an error. For more detailed information about the error, please refer to the HTML source for this page. If the error persists please contact the site maintainer. Thank you for your patience. Traceback (innermost last): File /usr/local/www/Zope/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /usr/local/www/Zope/lib/python/ZPublisher/Publish.py, line 187, in publish File /usr/local/www/Zope/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: ApplicationDefaultPermissions) File /usr/local/www/Zope/lib/python/ZPublisher/Publish.py, line 162, in publish File /usr/local/www/Zope/lib/python/ZPublisher/BaseRequest.py, line 440, in traverse File /usr/local/www/Zope/lib/python/AccessControl/User.py, line 505, in validate (Object: RoleManager) IndexError: (see above)

1 0

FW: Reading properties from nested objects.
by Michael Van Cleave 25 Feb '01

25 Feb '01

I have am using something similar to the Yihaw Pointer in the Yihaw class to reference objects elsewhere in the folder structure of my site. The pointer has a property on it that stores the absolute url of an object that it is referencing. I cannot figure out how to use the stored absolute url to read elements off the remote object. >From an arbitrary dtml-method, how can I render a variable property on a remote object. For example in the following site structure /root /x index_html pointer_method (has a property "url" which is "/y/objectZ") /y objectZ The index_html file calls pointer_method and reads the property "url", creating a link to the object that "url" points to (objectZ). This works great. However, I would like to read properties off that remote item (say the title for example) and render them in the index_html file. I have tried this, but it generates a key error: <dtml-call "REQUEST.set('location', _.string.replace(pointer, '/', '.'))"> <dtml-var location.id> If I hard code it as such: <dtml-with y> <dtml-with objectZ> <dtml-var title> </dtml-with> </dtml-with> I can read the title, but I cannot figure out how to convert the absolute url into a with statement or a var. Any help is greatly appreciated. -m

1 0

Re: [Zope] sidebar sorting
by Dieter Maurer 24 Feb '01

24 Feb '01

Oliver Vecernik writes: > I have following DTML method for a sidebar construction: > <ul> > <dtml-in expr="objectValues('Folder')" sort="_.[sort]"> > <li><a class="sidemenu" href="&dtml-absolute_url;"><dtml-var > title_or_id></a><br></li> > </dtml-in> > </ul> "sort" interprets its value as a list attribute names separated by ','. In your example, it would use the attribute with the literal name "_.[sort]". But you want "_.[sort]" evaluated and use the result as sort specification. You can do that with "sort_expr" (rather than "sort"). Dieter

1 0

Re: [Zope] How do I use variable variables in pythonscript?
by Dieter Maurer 24 Feb '01

24 Feb '01

Jason.Jones(a)awl.com writes: > I would like to do something like the following: > > <dtml-var "_[getform('do')]"> When you have bound the namespace (--> bindings), then you can use "_[getform('do')]". Dieter

1 0

Re: [Zope] 2 more questions :-|
by Dieter Maurer 24 Feb '01

24 Feb '01

Klaus Herrmann writes: > <dtml-in "PARENTS[0].objectValues(['DTML Document','Folder'])" sort="id, > meta_type" > > BUT: i want to sort meta_type in reverse order (to have the folders on top), > and the id in "normal" order. > is that possible? how? "in"'s sort does not support this. You can do it in an external method using Python's "sort" method or extend "in"'s sorting capabilities. > (2) i have a dtml-tree, but i don't want to list the contents of the current > folder but of PARENTS[1]. <dtml-tree "PARENTS[1]"> Dieter

1 0