- Zope - Zope lists

Products, ZClasses and CatalogAware-ness
by Aaron Straup Cope 09 Nov '00

09 Nov '00

Hi, Could someone clarify the following for me: I would like to create a Product that instantiates itself with a ZCatalog and a search interface "built-in". I'd like make all the Product's ZClasses update the catalog whenever they are changed. If I make all the classes catalog-aware and point them to the name of the "root" ZCatalog, will they (re)index the root catalog or a catalog local to the class itself? If the latter, can I force [it] to do the former? Thanks, + Product + ZClass + ZClass + ZCatalog - search/index_html - results + ...

2 3

Re: [Zope] Security and Acquisition
by Charlie Wilkinson 09 Nov '00

09 Nov '00

> [Charlie Wilkinson] > > | Greetings, > > Hola! > > | Now, referring to figure 1 (above :-), changes to security settings > | for the acl_test folder are having no effect on access to index_html. > | Only when I change the security settings on index_html itself, can I > | control access to it. > > Can it have something to do with acquirement of permission settings? > (The leftmost column on the security tab). Hi Morten, Yes. It's acting as if those little boxes were not checked! :) As I was replying to Jeff in a prior message, the mystery goes deeper. I grabbed a fresh copy of the latest CVS version, built it, set a superuser password and ran it. I then tried to visit the default index_html "Welcome to Zope" page and was presented with a BASICAUTH type login box. If I explicitly set anonymous View permissions for the index_html (Welcome to Zope) page, then I get in with no login as expected. That isn't normal is it? Root folder objects would appear to be having the same security setting acquisition problems as I was finding previously with sub-folders and LoginManager. I realize I'm on the bleeding edge of Zope running the CVS version, but I heard the 2.2.3 version is due out RSN and figured maybe a little "new version" pain now would be easier than upgrade pain later. I'd sure rather be saying "Here's a patch" than just "It's broke", but alas I don't grok Python that well yet. ("It's broke" still offers *some* value, right? :-) To the Zope developers: It seems pretty clear that Zope v2.2.cvs is broken in regards to security settings acquisition. Should I post to zope-dev, or is there already a sufficient awareness/understanding of the problem? Thanks, Charlie -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Charlie Wilkinson - cwilkins(a)boinklabs.com - N3HAZ Parental Unit, UNIX Admin, Homebrewer, Cat Lover, Spam Fighter, HAM, SWLer... Visit the Radio For Peace International Website: http://www.rfpi.org/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ CLOBBER INTERNET SPAM: See!! <http://spam.abuse.net/> Join!! <http://www.cauce.org/> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ QOTD: "Bush is a big corporation disguised as a human being running for president." -- Ralph Nader on David Letterman (9/28/00)

1 0

<img> tags, dtml-vars and css
by Farrell, Troy 09 Nov '00

09 Nov '00

I must be ignoramus, but I can't figure out modify <img> tags as generated by a image object. I have this: I use <dtml-var expr="img.logo_image"> to add an image object to a dtml document. How can I add a STYLE="color:silver;" or any other tag the HTML source? Troy Farrell Video Operations Technician III Williams VYVX Services 918.573.3029 918.573.1441 fax mailto:troy.farrell@wilcom.com http://www.williams.com

2 1

Security and Acquistition Problem
by Charlie Wilkinson 09 Nov '00

09 Nov '00

Greetings, I had posted about this on Zope-dev because I'm running the CVS version, but no response there. Also more research has yielded more info. I first discovered this issue with LoginManager, but the same problem occurs with standard acl_users too. First, 'Figure 1:' / (Root Folder) / acl_test (ACL Test Folder) acl_users (User Folder) index_html (Test Document) Now, referring to figure 1, changes to security settings for the acl_test folder are having no effect on access to index_html. Only when I change the security settings on index_html itself, can I control access to it. So what this boils down to is that as of v2.2.whatever, an acl_users folder apparently does not protect the folder it's in (parent folder), but only it's sibling objects and below. Meaning that instead of setting permissions on the parent object and being done with it, one now has to set permissions for each sibling. In my case that's 50 or more objects and I'm not done coding yet. Ouch! This *can't* be right, can it? I know there's a lot that's happened with the security model, so I'm really *really* hoping this is just a bug that's crept in. Thanks for any clues, Charlie -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Charlie Wilkinson - cwilkins(a)boinklabs.com - N3HAZ Parental Unit, UNIX Admin, Homebrewer, Cat Lover, Spam Fighter, HAM, SWLer... Visit the Radio For Peace International Website: http://www.rfpi.org/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ CLOBBER INTERNET SPAM: See!! <http://spam.abuse.net/> Join!! <http://www.cauce.org/> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ QOTD: "Bush is a big corporation disguised as a human being running for president." -- Ralph Nader on David Letterman (9/28/00)

2 2

Re: [Zope] Disabling SiteAccess/SiteRoot ..
by Karl Anderson 09 Nov '00

09 Nov '00

"Jason C. Leach" <jleach(a)mail.ocis.net> writes: > hi, > > I did that. Set the / to some web site and could not get back to the > console. I think you can just remove the product and it will restore > itself. You will then need to uninstall it from zope, and then reinstall > the product. SiteRoot doesn't mangle FTP paths, so you can get in there and remove the base - no reinstallation headaches for the product, then, and you don't have to restart the server. -- Karl Anderson karl(a)digicool.com

1 0

Re: [Zope] <dtml-if> newbie question
by Dieter Maurer 09 Nov '00

09 Nov '00

Stephan Goeldi writes: > ... > <select name="money"> > .... > </select> > ... > and the form_action method is this: > > <dtml-in money> "money" will come in as a string value not as a list. It would be a list, if you added a "multiple" to your "select". > <dtml-if "1000"> This will always be true. It is constant (an expression without variable, having always the same value independent of context). What you mean is: <dtml-if "money == '1000'"> This will be true, if "money" has the value "'1000'" in the current context. Note the '...' around 1000! Without special Zope magic, request variables come in as string values. The '...' indicates a string literal. You want to look at the upcoming Zope book to learn more about the possible Zope magic. Dieter

1 0

ZMethod (Safe)
by Spicklemire, Jerry 09 Nov '00

09 Nov '00

Hello Linguistas, Shorter is better. In this light, my recommendation was "mod", short for MODule, and / or MethOD, but it didn't get into the Poll List. > We've pretty much settled on restricted/unrestricted here. Also, I suggested "strict" as a shortened form of "reSTRICTed". Perhaps to much overloading from compiler directives, but it is the root word, after all. If it's not simple, it will get simplified in use, and then you've got some folks refering to things in "slang", which drives newbies bonkers. "Official slang" is preferable, at least then you have some chance of usage being consistent. Later, Jerry S.

1 0

access to DTML's quoting and formatting (was: [Zope] ID = "somebody@someserver.com"... ?) (was: [Zope] ID = "somebody@someserver.com"... ?)
by Dieter Maurer 09 Nov '00

09 Nov '00

Thomas Søndergaard writes: > .... > I know that I must use url_quote, but how do I do that...? Zope *SHOULD* export all quoting and formating functions to be used in expressions. Unfortunately, it does not. You can emulate it with specialized DTML methods. As an example: "url_quote": Define the DTML method: url_quote as: <dtml-var text url_quote> Ensure, there is no whitespace whatsoever before '<' or after '>'! You call this function with: url_quote(text=<your_text>) > <dtml-call "REQUEST.set('firstname', firstnam)"> > <dtml-call "REQUEST.set('surname', surnam)"> Get rid of these by using the correct name in the first place! > <dtml-call "REQUEST.set('email', eadr)"> <dtml-call "REQUEST.set('email', url_quote(text=eadr))"> > ... As someone else already pointed out, you can use "_.string.replace(eadr,'@','_')" if only the '@' makes problems. But email addresses may contain other funny characters not allowed in id's. Therefore, "url_quote" is safer (but not completely safe -> '/'). Dieter

1 0

Re: [Zope] Newbie help - method needs auth > anonymous. WHY?
by Dieter Maurer 09 Nov '00

09 Nov '00

jvoth(a)mobiltex.com writes: > <dtml-in objectValues> > <li><dtml-var id></li> > </dtml-in> > > I've put it in the standard_html_header. > > When I try looking at the root page (http://john:8080) I have to provide > authentication before the page will display. > > How can I alter the permissions so that an anonymous user doesn't > have to log in? Either one of the objects does not want to be accessed or there is one that can be accessed but does not provide access to "id". In the first case, you could add the argument "skip_unauthorized" to the "dtml-in" tag. This would simply skip the objects you should not see (quite nice). The second case is a bit more difficult. You would either need to allow "id" access (i.e. 'View') for "Annonymous" (for the refusing object) or give your method a proxy role with appropriate privileges. For your simple example, however, you can recode to avoid these troubles: <dtml-in objectIds> <li><dtml-var sequence-item> </dtml-in> Dieter

1 0

Re: [Zope] Can't get <dtml-tree> to work in a sub-folder.
by Dieter Maurer 09 Nov '00

09 Nov '00

jvoth(a)mobiltex.com writes: > I'm trying to make use of the <dtml-tree> gizmo and it only works in > the root directory. What does that mean? In which respect does it not work in lower level folders? Exceptions, does not unfold, seems to be empty, ...? Are you sure, that the "dtml-tree" does *NOT* sit in a DTML document (when it does not work)? > I'm trying to create a dynamic navigation display so users can click > their way through the sub-directories of files. Kind of a > "Zope Explorer". A Zope explorer as you see it in the left frame of the management interface? Dieter

1 0