- Zope - Zope lists

Getting https://..... pages to redirect to Zope
by Deja User 29 Jan '01

29 Jan '01

I can't get my buy page to work on Etailer I'm not sure if it the rewrite rules in apache or the ssl setup. It seems that the https:// request doesn't get converted to call Zope When it tries to access https://192.168.0.102/Kayak/kl/buy from the browser, I get page not found. The apache error log says "File does not exist: /usr/local/httpd/htdocs/Kayak/kl/buy I can change the Document root section in the ssl virtual host, and the error remains the same (but the path changes). The accesslog says "POST /Kayak/kl/checkOut HTTP/1.1" <--- this worked (http) "POST /Kayak/kl/buy HTTP/1.1" <-- this didn't (https) The end of the httpd.conf file is: #-------------------- RewriteLog "/var/log/httpd/rewrite_log" RewriteEngine on RewriteRule ^/static/(.*) /usr/local/httpd/htdocs/$1 [L] RewriteRule ^/cgi-bin/(.*) /usr/local/httpd/cgi-bin/$1 \ [e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,L] RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^/(.*) /usr/local/httpd/zope-cgi-bin/Zope.cgi/$1 \ [e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,L] #----------------------------- Interestingly when I access https://192.168.0.102/ I get the old static web pages, so I think the rewrite rule isn't hitting the https accesses. When I access http://192.168.0.102/ I get the Zope welcome screen ------------------------------------------------------------ --== Sent via Deja.com ==-- http://www.deja.com/

1 0

Did I miss some major change in Z SQL Methods ?
by Curtis Maloney 29 Jan '01

29 Jan '01

Green things, I have a few methods poking about that just don't seem to make sense.... A Z SQL Method ( Returner.sql.getDetails ) which simply contains: SELECT * FROM Returner WHERE ReturnerID=<dtml-sqlvar User type="int"> Which returns everything as expected. The I have a Python Method which refers to it, simply wrapping it up, and taking the first (of what should be only one anyway) element. It contains the following: ( Returner.getDetails(self, User) ) return self.sql.getDetails(User=User)[0] Now.. for some reason, the following throws complaints about not being able to find ANY of the fields in the row: <dtml-with "Returner.getDetails(Returner, User=12)"> <dtml-var fieldName> </dtml-with> Now, previously I've accessed my ZSQL Methods directly from DTML, but this time I was trying to abstract slightly, for various reasons... But this bizarre behaviour has begun. Can anyone explain what I'm missing? Zope 2.2.5 ZMySQLDA 1.2.0 PythonMethods 0.1.7 Linux (RH 6.1 +) Have a better one, Curtis Maloney

5 7

Re: [Zope] subtransactions
by Dieter Maurer 29 Jan '01

29 Jan '01

Chris McDonough writes: > Currently, yes. This is arguably wrong. Can you tell us, what the semantics of subtransactions is? It has been my impression that subtransactions are a kludge, essentially implemented for ZCatalog, to reduce the amount of main memory for large transactions. Rather than keep all modified objects in memory, they are flushed onto a file to be copied from there when the transaction is finally commited. If this is the case, then objects that do not need such hackery, simply provide empty "commit_sub" and "abort_sub" and do all their work in "commit". Dieter > > ----- Original Message ----- > From: "Chris Withers" <chrisw(a)nipltd.com> > To: "Chris McDonough" <chrism(a)digicool.com> > Cc: "Ian Sealy" <Ian.Sealy(a)bristol.ac.uk>; <zope(a)zope.org> > Sent: Friday, January 26, 2001 10:35 AM > Subject: Re: [Zope] subtransactions > > > > Chris McDonough wrote: > > > > > > Because most databases don't have the notion of a subtransaction. > > > > Hang on... how come, if a file upload needs to commit a subtransaction, > that > > means that an SQL method you call while processing the same request also > needs > > to support sub-transactions? > > > > confusedly, > > > > Chris > > > >

3 3

Re: Zope Inheritance with ZClasse
by Martijn Pieters 29 Jan '01

29 Jan '01

Hi Ernesto, The best place to ask these questsions is on the zope(a)zope.org mailinglist. More information about the mailinglists can be found at: http://www.zope.org/Resources/MailingLists/ I forwarded your mail to the list. Hope this helps! On Sun, Jan 28, 2001 at 08:14:18AM -0500, Ernesto Revilla wrote: > Dear Developers of Zope, > > I'm trying to model an ERP system using ZClasses. As I have the model > running under MS-Access, I know exactly how the model has to be. It's > natural form is very, very object-oriented and requires inheritance. > > I made a simple example model using ZClasses, but the environment does > not work how I did expect. Example: > > I have orders, delivery notes and invoices. Meanwhile the three are > based on the same base ZClass (say OrdDelInv), orders and delivery notes > are based also on a common ZClass (say OrdDel) based on OrdDelInv. > Defining a General Property Sheet for each class, and designing the > properties needed for each class, and defining a General view for the > General Property Sheel in the base classes (OrdDel and OrdDelInv), not > the bottom-level (Orders and Delivery Notes), the environment should me > offer a 'General' View for each Order or Delivery Note I create. > > So, > > 1. views are not inherited, from one base class to a sub class? > > 2. Property Sheets do not mix up the properties defined in each class of > the class hierarchy, making able to edit them all in the same view? > > Best regards, Erny > > -- Martijn Pieters | Software Engineer mailto:mj@digicool.com | Digital Creations http://www.digicool.com/ | Creators of Zope http://www.zope.org/ ---------------------------------------------

2 1

Python Methods can't "construct literal dictionaries"?
by Fred Yankowski 29 Jan '01

29 Jan '01

I'm trying to create a Python Method, using PythonMethod 0-1-7, that validates a set of form values before updating a database. I planned to return any/all errors as a dictionary keyed by the errant field name. But statements like this in my Python Method input_errors = {} input_errors['password'] = "password must not be empty" ... return input_errors result in the following error when I try to save the change to the code: Error Type: Python Method Error Error Value: Forbidden operation STORE_SUBSCR at line 3 What's up with that? I can't create dictionaries in Python Methods? I must be missing something. Is there some way around this? -- Fred Yankowski fred(a)OntoSys.com tel: +1.630.879.1312 Principal Consultant www.OntoSys.com fax: +1.630.879.1370 OntoSys, Inc 38W242 Deerpath Rd, Batavia, IL 60510, USA

2 1

How do I get a uniqueValuesFor() a subset of the catalog?
by Philip Aylesworth 28 Jan '01

28 Jan '01

I am trying to get a list of unique values for one particular meta_type. The uniqueValuesFor() works great but is there a way to get unique values for a subset of data such as meta_type='car' then uniqueValuesFor('make') would list the makes of cars but not of toasters? I was thinking that I could use multiple cataloges but that seems like a real pain. Phil. -- Philip Aylesworth paylesworth(a)stclaircollege.ca

1 0

Re: [Zope] basic authorization triggered inside LoginManager context
by Tres Seaver 28 Jan '01

28 Jan '01

Fred Yankowski <fred(a)ontosys.com> wrote: > I've set up LoginManager with SQL and it's working OK, but I've run > into a case where the browser pops up a basic/HTTP authentication > request when I try to access a particular object inside the > LoginManager-protected area. > > I particular, I added the following line to the index_html DTML > Document (at the same level as the LoginManager acl_users folder): > > <dtml-var "_.getattr('AUTHENTICATED_USER', '__class__')"> No can do, no how, no way: attribute names beginning with "_" are absolutely verbotten in through-the-web DTML. > Without this line I can access the index_html file after logging in > via the LoginManager scheme as a user with the 'Members' role. But > with this line I get the basic authorization popup and if I cancel > that I can see the following exception in the "Zope Error" page: > > ================ > Traceback (innermost last): > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 222, > in publish_module > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 187, > in publish > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 171, > in publish > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\mapply.py, line 160, > in mapply > (Object: index_html) > File D:\PROGRA~1\Zope225\lib\python\ZPublisher\Publish.py, line 112, > in call_object > (Object: index_html) > File D:\PROGRA~1\Zope225\lib\python\OFS\DTMLDocument.py, line 177, > in __call__ > (Object: index_html) > File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_String.py, > line 528, in __call__ > (Object: index_html) > File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_Util.py, > line 337, in eval > (Object: _.getattr('AUTHENTICATED_USER', '__class__')) > (Info: _) > File <string>, line 0, in ? > File D:\PROGRA~1\Zope225\lib\python\DocumentTemplate\DT_Util.py, > line 144, in careful_getattr > Unauthorized: __class__ > ================ > > So it looks like attempting to access the '__class__' attribute > triggered this, but I don't understand why it lead to basic > authentication. If this required 'Manager' permissions, why didn't I > just get some kind of "forbidden" response? You are already authenticated in LM, but don't (can't, acutally) have the role to do this operation (grep the Zope source for '_what_not_even_god_should_do'). The LM can't authenticate you for what you asked, so you bang out to Zope's default, which is to try basic auth. In this case, it is particularly pointless, as there does not exist *any* user who can execute your method. > It looks like the careful_getattr() function will raise a > ValidationError on any attempt to access a variable whose name starts > with '_'. Fine, maybe I was being naughty. But I still don't > understand why this wasn't handled using LoginManager. How can I keep > Basic/HTTP authentication from running when I've got LoginManager in > place? Or is there reason to want both at once? The real problem is that, at the end of the day, Zope is returning an HTTP 401 for this request, which is the only possible result (it is your browser who converts that into a dialog box) Tres. -- =============================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

Re: [Zope] separate zope from site products
by Tres Seaver 28 Jan '01

28 Jan '01

corey(a)axcelerant.com asked: > Ok, I saw it by accident while searching for something else > the other day, and now can't find the HOWTO on getting > your Zope install separate from your local products, so that > future Zope upgrades don't require re-installation of all > your already existing products. > > So where can I find this document I'm looking for? Evan Simpson's excellent INSTANCE_HOME writeup: http://www.zope.org/Members/4am/instancehome -- =============================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

Re: [Zope] Can't reproduce :-(
by Dieter Maurer 28 Jan '01

28 Jan '01

Ian Sealy writes: > I've finally managed to replicate the bug consistently, so I've just > submitted it to the Collector: > > http://classic.zope.org:8080/Collector/1895/view Very good! In fact, this problem was known but not recognized in the new context! The incompatibility between "subtransaction" and "Z SQL methods" is a well known problem documented with ZCatalog. Apparently, someone at DC decided that subtransaction are good, too, to upload images. Maybe, this was not so good an idea. While for ZCatalog, subtransactions can be disabled, this apparently is not the case for image uploads. Dieter

2 3

Re: [Zope] Creating a namespace
by Dieter Maurer 28 Jan '01

28 Jan '01

Stephan Richter writes: > I want to make my own name space with the following situation: > > class X: > > attributes = {'foo': 'bar'} > > x = X() > > > Then I want to use it like that: > > <dtml-with x> > <dtml-var foo> > </dtml-with> > > The result should be : bar > > I found out that I have to somehow use TemplateDict and InstanceDict, but I > have no clue how to use it....Of course there is no documentation on any > web site or in the Zope code itself.... It is not you that use TemplateDict or InstanceDict, it is "dtml-with" that does this (for you). However, you need to look at permissions. Read Brian's "Upgrade to Zope 2.2" or the reference Zope security paper. Dieter

1 0