- Zope - Zope lists

Re: [Zope] Zope 2.9 and SSL
by Janusz Zamecki 16 Feb '06

16 Feb '06

zope napisa?(a): > Hi, > > zhttps provides an HTTPS Zserver to Zope-2.9.0. This zope product uses > M2Crypto. I think this may give you a hint towards SSL and Zope-2.9.0 > > http://www.zope.org/Members/lerouxa/zopehttps > > Try it first with test certificates provided with > M2Crypto/demo/zope/{ca.pem,server.pem,dh1024.pem,randpool.dat} > > > Best regards > > Al > Hello, thank you. I've tried to install this software, but it doesn't work. First of all the downloaded package seems to be inclomplete. bunzip complains about garbage at the end of the file. Second, after copying files and patching __init__.py in the ZServer directory, zope doesn't start anymore. It complains about missing HTTPS_Server package. If I borrow this one from m2crypto 0.15, then it complains about missing asyncore, then missing FCNTL. I'm stuck. What else can I do? Best regards, Janusz

2 1

Render image from external method.
by Jason C. Leach 16 Feb '06

16 Feb '06

Hi, I'm wondering how I can render an image from an external method without creating a permanent image object in Zope? What I have is a python script I call in my ZPT. The python script does some things, and calls an external method that returns PNG image data. If I do tal:attributes="src python:python_script()" What I get is the string containing the PNG image data, but it's not rendered. An example of what I get is: <img src="?PNG <PAGE OF BINARY DATA>" /> Any ideas? I don't really want to create a permanent image object, and I know that will work because I have used it to create thumbnail images before. Thanks, Jason. -- ........................................ .... Jason C. Leach .... PGP Key: 0x62DDDF75 .... Keyserver: gpg.mit.edu

3 2

how to create a image from PIL and save into the zope database?
by Allen Huang 16 Feb '06

16 Feb '06

I'm been playing around with python PIL library for a while now but I'm confuse about how to dynamically generated image or modified an image, create a new image object, and save it back into zope database. can someone walk me through the steps? --------------------------------- What are the most popular cars? Find out at Yahoo! Autos

2 1

Importing a ZClass from Zope 2.8.1 to Zope 2.9.0
by Edward Huixquic 16 Feb '06

16 Feb '06

Hi Zopistas: I am trying to import into a Zope 2.9.0 installation, a ZClass that lives and runs fine in a Zope 2.8.1. I am getting an error which I attach below (from my event.log): What I am getting is a "ZClassName" does not support this operation. Does any of you have any idea what is going on and, in any case how can I make to import that ZClass into the Zope 2.9.0 FYI, the Zope 2.8.1 runs in Fedora Core 4 with python 2.3.5, the Zope 2.9.0 runs on the same machine with Fedora Core 4 but under Python 2.4.2 Thanks in advance for any help and/or suggestions. Best regards. Edward. EVENT.LOG print out below: ------ 2006-02-15T14:21:53 ERROR Zope.SiteErrorLog http://server:8080/Control_Panel/Products/manage_importObject Traceback (most recent call last): File "/usr/local/Zope-2.9.0/lib/python/ZPublisher/Publish.py", line 113, in publish request, bind=1) File "/usr/local/Zope-2.9.0/lib/python/ZPublisher/mapply.py", line 88, in mapply if debug is not None: return debug(object,args,context) File "/usr/local/Zope-2.9.0/lib/python/ZPublisher/Publish.py", line 40, in call_object result=apply(object,args) # Type s<cr> to step into published object. File "/usr/local/Zope-2.9.0/lib/python/OFS/ObjectManager.py", line 585, in manage_importObject set_owner=set_owner) File "/usr/local/Zope-2.9.0/lib/python/OFS/ObjectManager.py", line 604, in _importObjectFromFile if verify: self._verifyObjectPaste(ob, validate_src=0) File "/usr/local/Zope-2.9.0/lib/python/OFS/CopySupport.py", line 527, in _verifyObjectPaste action = 'manage_main') Copy Error: <HTML> <HEAD> <TITLE>Not Supported</TITLE> </HEAD> <BODY BGCOLOR="#FFFFFF"> <FORM ACTION="manage_main" METHOD="GET" > <TABLE BORDER="0" WIDTH="100%" CELLPADDING="10"> <TR> <TD VALIGN="TOP"> <BR> <CENTER><B><FONT SIZE="+6" COLOR="#77003B">!</FONT></B></CENTER> </TD> <TD VALIGN="TOP"> <BR><BR> <CENTER> The object <em>Formas</em> does not support this operation. </CENTER> </TD> </TR> <TR> <TD VALIGN="TOP"> </TD> <TD VALIGN="TOP"> <CENTER> <INPUT TYPE="SUBMIT" VALUE=" Ok "> </CENTER> </TD> </TR> </TABLE> </FORM> </BODY></HTML> ------

3 2

Zope and roles and hierarchy
by David 15 Feb '06

15 Feb '06

Hello Zope, Is it true that even though a user Role like 'author' is defined at zope root that users defined lower in the hierarchy *also* with role 'author' cannot access objects at root with role 'author' and permissions of view and access? The online zope book seems to say so. If so, couldn't we have some extra attribute to a role like "upwardly mobile"? (I want to share a code base for several folders sub-folders and I do not wanta to give it anonymous access). David

5 13

Zope/Plone logon security strategy etc
by michael nt milne 15 Feb '06

15 Feb '06

Just a quick question about Zope/Plone logins and security etc. When I go to www.domain.com:8080/manage I get a login box which seems to function in exactly the same way as the www.domain.com:8080/login_form page. My question is, what was the rational for implementing this logon strategy in Zope as it obviously acts as authentication and authorisation but falls down on confidentiality and data integrity? Also would there be any plans at all in the future to make this logon process authenticate, be confidential and have integrity? I know that you can do it in Apache etc but for most people that's probably quite a big step. Most people probably reckon that the appearance of the logon box makes their site secure. I'm only talking about the logon areas here, etc. Thanks Michael

6 13

VerboseSecurity and zope 2.8.5
by Peter Bengtsson 15 Feb '06

15 Feb '06

I'm not getting any verbose security messages in my zope 2.8.5. zope.conf reads: security-policy-implementation python verbose-security on I'm trying to log in as a user but get rejected which is probably because I've incorrectly configured one method or object to require one permission too many. I've tried looking in error_log, event.log and the printed output from ./bin/runzope Any ideas? -- Peter Bengtsson, work www.fry-it.com home www.peterbe.com hobby www.issuetrackerproduct.com

2 2

RE: calling getOwner on an ExtFile instance raises an Unauthori zed ex ception
by Palermo, Tom 15 Feb '06

15 Feb '06

Tres, Thanks. I didn't know about that. I will try that. Also, I just used owner_info['id'] instead of getOwner(). It returns the same thing. I'm not sure why owner_info worked and getOwner did not both methods are in AccessControl.Owner.py Thanks, Tom -----Original Message----- From: Tres Seaver [mailto:tseaver@palladion.com] Sent: Wednesday, February 15, 2006 10:46 AM To: Palermo, Tom Subject: Re: calling getOwner on an ExtFile instance raises an Unauthorized ex ception -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Palermo, Tom wrote: > All, > > Does anyone know why calling getOwner() on an instance of ExtFile > raises an unauthorized exception? > Error Type: Unauthorized > Error Value: You are not allowed to access 'getOwner' in this > context > > ExtFile imports SimpleItem which, in turn, imports AccessControl.Owner > > Here's the code from ExtFile: > from OFS.SimpleItem import SimpleItem > > Here's the code from SimpleItem: > import AccessControl.Role, AccessControl.Owned, App.Common > > I've got some other custom objects in my application which import > SimpleItem and I am able to call getOwner() on them no problem. TUrn on verbose security in your zope.conf and retry; you should get a lot more information about why the security machinery is blocking access in the error log. Tres. - -- =================================================================== Tres Seaver +1 202-558-7113 tseaver(a)palladion.com Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFD80zG+gerLs4ltQ4RAh1HAKCedCG/jVjr+eBtsS++kwdrs18nYwCfXEGq /CQ06fqfosuMDtt0u9NXwtA= =68is -----END PGP SIGNATURE-----

1 0

calling getOwner on an ExtFile instance raises an Unauthorized ex ception
by Palermo, Tom 15 Feb '06

15 Feb '06

All, Does anyone know why calling getOwner() on an instance of ExtFile raises an unauthorized exception? Error Type: Unauthorized Error Value: You are not allowed to access 'getOwner' in this context ExtFile imports SimpleItem which, in turn, imports AccessControl.Owner Here's the code from ExtFile: from OFS.SimpleItem import SimpleItem Here's the code from SimpleItem: import AccessControl.Role, AccessControl.Owned, App.Common I've got some other custom objects in my application which import SimpleItem and I am able to call getOwner() on them no problem. Thanks, Tom

2 1

Advice needed before settling on Zope
by Rainsford, David 15 Feb '06

15 Feb '06

> Hi Zope users! > > We have to build a content/document management system for our company, > and I have been assigned to look into this and make a start. The > system has quite a few requirements, which I'll outline below. > > Version Control: we need quite complex version control. Lets say we > have document x. This document will be developed and worked on by > multiple users. At the same time, this will also be translated into > other languages. If a change is made to the English version, then > that change will have to be made in other languages too. I think that > in Version Control speak, the different languages can be thought of as > different renditions. > > Workflow Control: because of the number of people involved, we need to > have a decent workflow control system. The workflow could be > A->B->C->D, D rejects so back to B, B makes mods and sends to E for > final review. Or something, the point is we need to be able to have > quite a lot of control over it, and the workflow isn't necessarily a > linear 'up and down the chain' type of thing. > > Document Management - the system is all about documents. They would > like the ability to organise the documents into different pages for > people to download. They should be able to download older versions or > different renditions. Also each document will be available only to > certain groups or roles. > > Our client is quite specific about what they require and how they want > it to be presented, so ease of customisation and extensibility is a > major factor. We have looked around at existing CMSes but have not > found one that fulfills all of our requirements or that is > customisable enough that we can fulfill our requirements with a bit of > work. We looked at Plone, and then I decided we might be better off > going down a level and building on Zope. > Does this sound like a good idea to you guys? Do you know of any better suited frameworks or even existing systems that we should use? Finally if we do settle on Zope, would we be wiser using the 2.x version or the 3.x version? I imagine that 2.x has more documentation and more addons (e.g. for versioning, workflow etc.). > Another consideration is that the skillset here is mainly in PHP and > Java, however I don't think anybody is fazed by having to use Python > if Zope is the best option for us.

8 10