- Zope - Zope lists

Big Work Ahead - any advise ???
by George Osvald 18 Nov '00

18 Nov '00

Hello Everyone, I have been playing with ZOPE for some time and I absolutely love it. I have my own site running without a problem for about six months. Recently I was able to demonstrate ZOPE to a "VERY" major player in entertainment industry (music and video). I sold the idea to them and in about one month I am supposed to start to redesign a major web site(and then may be another one). It contains about 2000 pages at the moment. Is there anything I should be aware of when designing a site of such magnitude in ZOPE? (streaming video and music is not going to be served from the ZOPE site) George Osvald

1 0

(no subject)
by George Osvald 18 Nov '00

18 Nov '00

Hello Everyone, I have been playing with ZOPE for some time and I absolutely love it. I have my own site running without a problem for about six months. Recently I was able to demonstrate ZOPE to a "VERY" major player in entertainment industry (music and video). I sold the idea to them and in about one month I am supposed to start to redesign a major web site(and then may be another one). It contains about 2000 pages at the moment. Is there anything I should be aware of when designing a site of such magnitude in ZOPE? (streaming video and music is not going to be served from the ZOPE site) George Osvald

1 0

Running Mailman CGI under Zope ZServer
by Fred Wilson Horch 18 Nov '00

18 Nov '00

Hello out there, I'm looking for someone with some more Zope "Zen" to help me figure out how to add support for legacy CGI scripts (specifically Mailman 1.1) to Zope. To recap, I know and understand how to get Apache to play nicely with Zope. What I'm trying to do is remove the need for Apache by allowing ZServer to serve CGI scripts itself. The motivation is to allow me to run Mailman 1.1 on my Zope site without having to have Apache (or any other web server) configured and running. First, am I really the first person to try running CGI scripts from ZServer? I have found some hints here and there of people doing somewhat similar things, but I haven't yet found a product for easily adding legacy CGI scripts to a Zope site. It seems most people run Zope behind Apache. Is ZServer really slow or buggy or something? Second, is Mailman going to be integrated with Zope? It seems like a natural fit. It would be nice to move away from the pipermail archiving and use the Zope object database for archiving messages instead. Third, thanks to code from Eric Walstad and Chris Withers (author of PathHandler), I have hacked up an external method that sort of works. It attempts to add to Zope the functionality of ScriptAlias in Apache. But I'm running into some problems with the HTTP header. The attached code simply ignores the HTTP header sent by the Mailman CGI script, letting Zope do its thing. But this becomes a problem when Mailman wants to set cookies for authentication. Can anyone help me figure out how to convince Zope to let the CGI script send both the HTTP header and message body? Thanks, Fred Here's my external method. It is called by a Path Handler object. Some notes: 1) REQUEST['PATH_INFO'] seems to be brain dead 2) the path_to_handle key is inserted by the PathHandler product 3) this is written for Linux; I'm not sure how Windows handles os.popen 4) I don't understand why sometimes this function gets called with one argument and sometimes with two -- I always just ignore the second argument import os, os.path, string def testing(self, second=None): if self.REQUEST.has_key('path_to_handle'): script = self.REQUEST['path_to_handle'][0] if script: script_path = '/home/mailman/cgi-bin/%s' % script if os.path.isfile(script_path): ENV = '' if len(self.REQUEST['path_to_handle']) > 1: ENV = ENV + 'PATH_INFO=/%s' % string.join(self.REQUEST['path_to_handle'][1:],'/') elif self.REQUEST['PATH_INFO'][-1] == '/': ENV = ENV + 'PATH_INFO=/' ENV = ENV + ' HTTP_HOST=%s' % self.REQUEST['HTTP_HOST'] ENV = ENV + ' SERVER_NAME=%s' % self.REQUEST['SERVER_NAME'] f = os.popen("/usr/bin/env %s %s" % \ (ENV, script_path)) header = 1 while header: if (f.readline() == '\n'): header = 0 output = f.read() # grab the output of the CGI here status = f.close() else: return '%s: CGI script not found.' % script else: return 'No CGI script specified.' else: return 'No path to handle.' return output + '<hr>' + str(self.REQUEST.keys()) + '<hr>' + str(self.REQUEST)

6 5

Need some help with installing ZPatterns
by Steve Waterbury 18 Nov '00

18 Nov '00

I'm a newbie. Have successfully installed the precompiled Zope 2.2.2 on Solaris 2.6, running with apache 1.3.14 via fastcgi. Now trying to install ZPatterns-0-4-3b2. Untarred it into the zope dirs, so now its source is in zope/lib/python/Products/ZPatterns Following the instructions in README.txt, I looked for a Makefile.pre.in ... it wasn't included, so I looked around in the zope distribution and found one in /lib/python/Shared/DC/xml/pyexpat -- it claims to be "Universal Unix Makefile for Python extensions", and it says it works with Python 1.5 or newer: # Build *and install* the basic Python 1.5 distribution. See the # Python README for instructions. (This version of Makefile.pre.in # only withs with Python 1.5, alpha 3 or newer.) ^^^^^ (sic -- is that a Python idiom? :^) ... so I figured it might work, but when I try "make -f Makefile.pre.in boot", I get the following: rm -f *.o *~ rm -f *.a tags TAGS config.c Makefile.pre python sedscript rm -f *.so *.sl so_locations VERSION=`python -c "import sys; print sys.version[:3]"`; \ installdir=`python -c "import sys; print sys.prefix"`; \ exec_installdir=`python -c "import sys; print sys.exec_prefix"`; \ make -f ./Makefile.pre.in VPATH=. srcdir=. \ VERSION=$VERSION \ installdir=$installdir \ exec_installdir=$exec_installdir \ Makefile make: Fatal error: Don't know how to make target `/vol01/software/zope/lib/python1.5/config/Makefile' Current working directory /vol01/software/zope/lib/python/Products/ZPatterns *** Error code 1 make: Fatal error: Command failed for target `boot' ****************** What blockheaded thing am I doing? TIA! -- Steve. oo _\o \/\ \ / ____________________________________________ oo _________________ "Sometimes you're the windshield; sometimes you're the bug." - Knopfler Stephen C. Waterbury Component Technologies Code 562, NASA/GSFC and Radiation Effects Branch Greenbelt, MD 20771 Engineering Web/Database Specialist Tel: 301-286-7557 FAX: 301-286-1695 WWW: http://misspiggy.gsfc.nasa.gov/people/waterbug.html _________________________________________________________________

1 0

off toic, but... ange-ftp only works as unix root
by Bill Welch 18 Nov '00

18 Nov '00

even though I can ftp into zope from unix root and non-root. As unix non-root, ange-ftp asks for password and then hangs emacs. Does respond to C-g. Same zope user in all cases. The obvious problem is some file or port permission, but I'm hoping someone can show me the way instead of me going for another bushwhack. Debian woody, emacs 20.7.2. Any ideas? Bill.

1 0

Re: [Zope] Web mail with POP3
by seb bacon 17 Nov '00

17 Nov '00

* Aleksander Salwa <ololo(a)zeus.polsl.gliwice.pl> [001116 09:00]: > I need to build a web mail product with pop3 back-end. > There is WorldPilot, but AFAIK it has no pop3 support. > I'm thinking about taking web inteface/application design from WorldPilot > and writing code to talk to pop3 server (probably based on POPMail > product). What do you mean, 'pop3 support'? If you want people to access their mailboxes both through the web and from a pop3 mail client, then all you need to do is use a mail server like UW-imap which speaks both pop3 and imap. Then you can just stick with WorldPilot, for now at least. That's what I do, anyway. seb. ----- End forwarded message -----

3 2

Re: [Zope] How to get around non-propogating proxy roles, also security problem with zsql traversal?
by Dieter Maurer 17 Nov '00

17 Nov '00

Brad Clements writes: > 1. Why is it that proxy roles don't propogate and accumulate when > methods are called? I do not know exactly but suppose it is to reduce the danger of trojan horses. It was changed with the new Zope 2.2 security policy. > 2. I'm actually using simple ZSQL traversal, like this: > > mysite.com/MyFolder/MyZSQL/138348343/PublicInfo > > PublicInfo is the DTML Doc with proxy role = PUBLIC. > > MyZSQL is an SQL Method that doesn't appear to be viewable by > anonymous. However when called using simple traversal shown above, > the SQL method IS executed. > > Is this a security bug? It seems that anonyous users can "call" an sql > method using traversal even if security disallows anonymous View. It is not the view permission that is relevant for Z SQL method use, but "Use database methods". Nevertheless, I can imagine that it will nevertheless be possible to use the method, even if the permission is not granted. This is due to the way, the permission checking is implemented. The ZPublisher first locates the object to be accessed by URL traversal without any security checks (as it does not yet have any user information). After the object is located, it determines its protection and then walks back along the objects visited to find the object in order to find a user folder able to authenticate a user with sufficient privileges. Security restriction of these intermediate objects are only relevant if they were inherited by the final object. Thus, indeed, you may have found a security whole. Put it into the collector. Dieter

1 0

Re: [Zope] ZClasse default in the product
by Dieter Maurer 17 Nov '00

17 Nov '00

Jean Rodrigo Ferri writes: > .... preventing (local) ZClasses to be shown in the global "Available Objects" list .... You may define the local ZClasses inside the global one. Then they will only be seen inside that global ZClass. I think, you will find something about this in the Zope book. Dieter

1 0

Re: [Zope] Visualization of inherited attributes
by Dieter Maurer 17 Nov '00

17 Nov '00

Jean Rodrigo Ferri writes: > .... access to properties in ZClass property sheets .... You may be able to access them by simply using their name: <dtml-var property> If you want more control, you may look at the "PropertySheetManager" and "PropertySheet" API's in your Zope online help. Dieter

1 0

PTK good for MyNetscape-style read-only personalised portals?
by Hamish Lawson 17 Nov '00

17 Nov '00

I'm looking to put together a portal site where members can choose from various content sources and personalise the layout but wouldn't be authoring content, similar to sites like MyNetscape and MyYahoo. Is the PTK good for this? Hamish Lawson ____________________________________________________________ Do You Yahoo!? Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk or your free @yahoo.ie address at http://mail.yahoo.ie

1 0