- Zope - Zope lists

Question on __roles__
by cg＠cdegroot.com 04 Jan '01

04 Jan '01

I have encapsulated most bits of my software in a product. One part simply shows database objects, and I've made a base class to handle most of the showing and editing stuff. In the base class, I keep a tab on what methods etc. are used for viewing and for editing, and I use these in the concrete classes to set the roles. Eg: Base.py: class Obj(OFS.SimpleItem.Item, Acquisition.Implicit, AccessControl.Role.RoleManager, AccessControl.Owned.Owned): view_objects = [] index_html = HTMLFile('default_view', globals()) view_object.append('index_html') ... etcetera Customer.py: class Obj(Base.Obj): __ac_permissions__ = ( ('View Own Info', Base.Obj.view_objects), ) ... Globals.default__class_init__(Obj) As far as I can see, this is all by the book. The whole idea is that the set of methods is the same, but the permissions on them can differ (for example, there are special restrictions on viewing and editing invoices). However, these protections don't work in most cases. They seem to work when they pertain to methods, but they don't when they pertain to DTML files. Is there something in the base class' base classes that influences how role lookup works? I've tried to trace down what happens, and found that ZPublisher.BaseRequest has a funny bit: when trying to find out the necessary roles on an object, it first tries to get the attribute '__roles__' on the subobject, and then combines the current entry name plus '__roles__' and tries to get that from the subobject. However, it seems to me that the latter getattr() needs to be done on the object, not the subobject - at least, my tracing seems to indicate that if it walks down, say 'Customer/53/index_html', that at a certain moment during the traversal object = <Customer instance> subobject = <Python method> entry_name = 'index_html' Here, looking up "index_html__roles__" in the subobject, the index_html method, doesn't seem to be very useful - it is expected to be found on the containing Customer instance. And indeed, if I change line 386 in BaseRequest.py from: roles = getattr(subobject, entry_name+'__roles__', roles) to: roles = getattr(object, entry_name+'__roles__', roles) things work as I expect them to work. As this is such a core piece of Zope, it seems quite unlikely to me that I found a bug here (although an older version of ZPublisher does check object instead of subobject). The only thing I can think of is that Acquisition should work for the getattr() and somehow I managed to disable Acquisition on these instances. Any hints as to what I'm doing wrong? -- Cees de Groot http://www.cdegroot.com <cg(a)cdegroot.com> GnuPG 1024D/E0989E8B 0016 F679 F38D 5946 4ECD 1986 F303 937F E098 9E8B

2 2

Zope Projects in NL/Europe?
by Jonathan 04 Jan '01

04 Jan '01

Hi all, Just wondering: are there any Zope projects are available in the Netherlands/Benelux/Europe? We did one last year but they seem hard to find. Are there commercial projects available or is Zope mostly used on internal projects? Is there any demand for Zope expertise around here? Reason I'm asking is that I'd love to continue working with Zope, but it's hard to justify in a company focused on Microsoft and Oracle, especially if there is no money to be made. I can learn Perl on company time and Linux is our internet server OS of choice, but JSP/Java and .NET (the latter is not that bad, uses SOAP/XML-RPC) is next if we don't find a use for our Zope expertise. Thnx Jonathan

5 6

ZBabel translation to Postgres
by Olaf Zanger 04 Jan '01

04 Jan '01

Hi there, i'm using ZPyGreSQL successfully for my database. To keep it simple i don't want to use MySQL for ZBabel. ZBabel though uses some MySQL specific syntax which i am unsuccessfully translating to PostgreSQL syntax: Description "md5Hash" are the same fore entries with different "lang" fields. They are used to translate depending on selected language. SELECT Phrases.* FROM Phrases LEFT JOIN Phrases as b ON Phrases.md5Hash = b.md5Hash AND Phrases.lang <> b.lang WHERE b.md5Hash is NULL AND Phrases.lang=<dtml-sqlvar srcLang type=nb> What does the whole thing do anyway? How can you join "Phrases.md5Hash = b.mdf5Hash", while "md5Hash is NULL"? What is different in the LEFT JOIN ... ON ... statement to a normal WHERE clause? My try for translation to PostgreSQL (which I assume is completely ignorant): SELECT Phrases.* FROM Phrases as b WHERE Phrases.md5Hash *= b.md5Hash AND Phrases.lang <> b.lang AND b.md5Hash is NULL AND Phrases.lang=<dtml-sqlvar srcLang type=nb> Has anybody ported ZBabel already? Thanks for help Olaf -- soli-con Engineering Zanger Dipl.-Ing. (FH) Olaf Marc Zanger Lorrainestrasse 23 3013 Bern / Switzerland Fon: +41-31-332 9782 Mob: +41-76-572 9782 mailto:info@soli-con.com mailto:olaf.zanger@soli-con.com http://www.soli-con.com

5 6

sqlgroup problems
by Dario Lopez-K�sten 04 Jan '01

04 Jan '01

Hello! I need help with the following SQL-method, which I don't know if it is a bug, or if it is my mistake. I am building a search interface to a database (Zope 2.2.4 w all HF's, Oracle 8.1.7, Solaris), and I want to use the following sqlmethod, to let the user enter any combination of search parameters, including none: select * from ladok.kurs <dtml-sqlgroup where> <dtml-sqltest kurs_kod column="kod" op="like" type="string" optional> <dtml-and> <dtml-sqltest kurs_namn column="benamns" op="like" type="string" optional> </dtml-sqlgroup> >From the Zope Book, Chapter 10, I got the impression that the "optional" part of the sqltest tag would render the parts that where not null; i.e. if I only specify the kurs_namn variable (first sqltest), the method would render the following SQL: select * from ladok.kurs where (kod like 'XX') or, if no search parameters where specified, it would render the following SQL: select * from ladok.kurs However this is not the case, what I get if I enter XX for kurs_kod is the following SQL: select * from ladok.kurs where (kod like 'XX' and benamns like '' ) Is this expected behaviour or have I misunderstood the docs? I can get around this problem by doing something like this (notice the op tag and the extra ",'%')" string at the end of each sqltest line) : <dtml-sqltest kurs_kod column="kod" op="like nvl(" type="string" optional>, '%') which renders the following SQL (the "%" is the Oracle wildcard operator): select * from ladok.kurs where (kod like nvl( 'XX', '%') and benamns like nvl( '', '%') ) however, i'd much rather that it didn't render the null variables at all. If this is known behaviour then the examples in Chapter 10 Any help appreciated. I searched the archives but didn't find any answers, TIA, /dario - -------------------------------------------------------------------- Dario Lopez-Kästen Systems Developer Chalmers Univ. of Technology dario(a)ita.chalmers.se ICQ will yield no hits IT Systems & Services

1 0

Re: [Zope] Non-ASCII-form-input -> HTML-entities?
by Dieter Maurer 04 Jan '01

04 Jan '01

Markus Kemmerling writes: > I would like to have users being able to enter german vowels ä, ö, ü and other non-ASCII-characters for which HTML-entities exist (ISO 8859-1) into a form-input-field and have them rendered as HTML-entities by the corresponding var-tag in the form-handler. > > The 'html_quote'-attribute only seems to convert &, <, and > (and quotes?). Of course I could write my own python-method with a lot of replaces. But that would probably mean to reinvent a wheel that already exists (this seems to be a rather common task to me). Or is there a way to do it in DTML? > > Any help appreciated. I would instead include a "charset" declaration and no longer worry about HTML entities for latin 1 characters. <dtml-call "RESPONSE.setHeader('Content-Type','text/html; charset=iso-8859-1')"> Dieter

3 2

Re: [Zope] Poor Procedural Programmer Needs OOPish Enlightenment
by Geoffrey L. Wright 04 Jan '01

04 Jan '01

sean.upton(a)uniontrib.com writes: > Not sure if this is your problem, but since methods don't have namespaces, > I'm not sure why your code could not be reduced to: > > <dtml-if expr="id != 'edit'"> > <dtml-var index.html> > <dtml-else> > <dtml-var chunk_editFrameset> > </dtml-if> You're right -- this works just as well, and is much cleaner. And I figured out my problem while yanking out another unneeded reference to PARENTS. In my framset code I had a reference to PARENTS[1] (not [0]!), so I was forcing Zope to look at the index.html method from the namespace of the test_site folder. DOH! Zope is a funny thing -- it makes some things so much easier, but I always find myself getting tangled up in stooopid namespace problems of my own making. I guess I'm just not used to thinking this way yet. Many thanks for the assist. > Sean //glw

1 0

[Newbie] ZSQL problem
by Michal Seta 04 Jan '01

04 Jan '01

Hello all. I'm a total newbie to Zope (a few days). I have a problem with getting some results throuh a ZSQL method. (I've been playing with a sample baseball database that came with PyGreSQL.) I have a form that accepts multiple choice: (generated by the wizard) <form action="search_data_result" method="get"> <tr><th>Home team</th> <td><select name="home_team" size="10" multiple> <option value="Indians">Indians</option> <option value="Blue Jays">Blue Jays</option> <option value="White Sox">White Sox</option> <option value="Red Sox">Red Sox</option> </select> <input type="SUBMIT" name="SUBMIT" value="Submit Query"> </td></tr> </table> </form> -------- My ZSQL method, called get_all_from_game is the following: select * from game where home_team= <dtml-sqlvar home_team type=string> and I have specified 1 argument: home_team ------ the output page: search_data_result looks like that: (it's been generated by the wizard) <dtml-in get_all_from_game size=50 start=query_start> <dtml-if sequence-start> <dtml-if previous-sequence> <a href="<dtml-var URL><dtml-var sequence-query >query_start=<dtml-var previous-sequence-start-number>"> (Previous <dtml-var previous-sequence-size> results) </a> </dtml-if previous-sequence> <table border> <tr> <th>Home team</th> <th>Visiting team</th> <th>Home team runs</th> <th>Visiting team runs</th> <th>Game date</th> <th>Game number</th> </tr> </dtml-if sequence-start> <tr> <td bgcolor="#A6A6A6"><dtml-var home_team null=""></td> <td><dtml-var visiting_team null=""></td> <td><dtml-var home_team_runs null=""></td> <td><dtml-var visiting_team_runs null=""></td> <td><dtml-var game_date null=""></td> <td><dtml-var game_number null=""></td> </tr> <dtml-if sequence-end> </table> <dtml-if next-sequence> <a href="<dtml-var URL><dtml-var sequence-query >query_start=<dtml-var next-sequence-start-number>"> (Next <dtml-var next-sequence-size> results) </a> </dtml-if next-sequence> </dtml-if sequence-end> <dtml-else> There was no data matching this <dtml-var title_or_id> query. </dtml-in> --- When I select one item in the list I get the results as specified in the SQL query. However, I get nothing when I select more than one item. What am I doing wrong? Thanks in advance. MiS

1 0

RE: [Zope] Poor Procedural Programmer Needs OOPish Enlightenment
by sean.upton＠uniontrib.com 04 Jan '01

04 Jan '01

Not sure if this is your problem, but since methods don't have namespaces, I'm not sure why your code could not be reduced to: <dtml-if expr="id != 'edit'"> <dtml-var index.html> <dtml-else> <dtml-var chunk_editFrameset> </dtml-if> The namespace of index_html right now is 'edit' (or another folder that acquires it) ...and... if the namespace of index_html is 'edit' than the namespace of index.html will also be, and ergo, the namespace of chunk_dspPrimaryCol will also be edit (index.html doesn't have a method unto itself), changing your code to: <dtml-if expr="id != 'edit'"> <dtml-var chunk_dspPrimaryColPublic> <dtml-else> <dtml-var chunk_dspPrimaryColEdit> </dtml-if> Just keep in mind, that any object with a namespace (folders, documents, certain class instances) that is in the acquisition path can have that namespace explicitly invokes with <dtml-with name_of_object>. This only works for object with a namespace; methods are not acquirable objects, and though you might call them objects (in a loose sense) they are not objects in a Zopish sense. I don't know if my sugestion will work for you, but hopefully it will help. Sean ========================= Sean Upton Senior Programmer/Analyst SignOnSanDiego.com The San Diego Union-Tribune 619.718.5241 sean.upton(a)uniontrib.com ========================= -----Original Message----- From: Geoffrey L. Wright [mailto:gwright@integritysi.com] Sent: Wednesday, January 03, 2001 3:16 PM To: zope(a)zope.org Subject: [Zope] Poor Procedural Programmer Needs OOPish Enlightenment or... "A Cry for Namespace Help" I seem to have run into one of those Zope namespace issued that's starting to make me dizzy. I have a index_html method that displays content conditionally depending on where it's called. It looks like this: <dtml-if expr="PARENTS[0].id != 'edit'"> <dtml-var index.html> <dtml-else> <dtml-var chunk_editFrameset> </dtml-if> The chunk_editFrameset method also displays the same index.html file in one of two frames. This works like a champ. If I'm in a directory called edit when this is called, it displays the frameset. Otherwise, it displays the index.html directly. The index.html method is contains a bunch 'o static html plus another method called chunk_dspPrimaryCol that also conditionally displays information based on where it's called. chunk_dspPrimaryCol looks like this: <dtml-if expr="PARENTS[0].id != 'edit'"> <dtml-var chunk_dspPrimaryColPublic> <dtml-else> <dtml-var chunk_dspPrimaryColEdit> </dtml-if> This doesn't work like I'd hoped, since I have to move back up the namespace stack to find index.html, and by the time I do I'm no longer in the edit folder. So I _always_ end up displaying the chunk_dspPrimaryColPublic method, even if I call the index_html method from within the edit folder. What I need (I think) is a way to keep all of this activity in the edit Folder. Or I need some other way of solving this problem. Any thoughts? I hope my description was clear enough... -- Geoffrey L. Wright Developer / Systems Administrator (907) 563-2721 ex. 4900 http://www.integritysi.com _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

A bug in Membership product? (member password can be revealed by dtml method accessible by anonymous)
by Dirksen 04 Jan '01

04 Jan '01

Hi Bill, A dtml method with these lines: <dtml-with "acl_users.getItem('z')"> <dtml-var password> </dtml-with> will show the password, despite that the methode is accessible by anonymous. Members in my site is allowed to use dtml method. How can I prevent them from reading others' properties? Dirksen __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/

1 0

Poor Procedural Programmer Needs OOPish Enlightenment
by Geoffrey L. Wright 03 Jan '01

03 Jan '01

or... "A Cry for Namespace Help" I seem to have run into one of those Zope namespace issued that's starting to make me dizzy. I have a index_html method that displays content conditionally depending on where it's called. It looks like this: <dtml-if expr="PARENTS[0].id != 'edit'"> <dtml-var index.html> <dtml-else> <dtml-var chunk_editFrameset> </dtml-if> The chunk_editFrameset method also displays the same index.html file in one of two frames. This works like a champ. If I'm in a directory called edit when this is called, it displays the frameset. Otherwise, it displays the index.html directly. The index.html method is contains a bunch 'o static html plus another method called chunk_dspPrimaryCol that also conditionally displays information based on where it's called. chunk_dspPrimaryCol looks like this: <dtml-if expr="PARENTS[0].id != 'edit'"> <dtml-var chunk_dspPrimaryColPublic> <dtml-else> <dtml-var chunk_dspPrimaryColEdit> </dtml-if> This doesn't work like I'd hoped, since I have to move back up the namespace stack to find index.html, and by the time I do I'm no longer in the edit folder. So I _always_ end up displaying the chunk_dspPrimaryColPublic method, even if I call the index_html method from within the edit folder. What I need (I think) is a way to keep all of this activity in the edit Folder. Or I need some other way of solving this problem. Any thoughts? I hope my description was clear enough... -- Geoffrey L. Wright Developer / Systems Administrator (907) 563-2721 ex. 4900 http://www.integritysi.com

1 0