- Zope - Zope lists

String manipulation
by Spicklemire, Jerry 27 Sep '00

27 Sep '00

"how can I manage it to cut a string. for example: a string property (testtext) with 500 words. but only want to give out 20 characters of tis text." Python sequence slicing syntax can be done with DTML, like so: <dtml-call "REQUEST.set('first_20_char', '_['some_long"string'][:20])"> <dtml-var first_20_char> wher the '[:20]' means from the begining of the string, through the 20th "slice". One thing to be aware of is that the positions start counting at 0, and are best thought of as falling "between" the individual characters, like so: a b c d e f g 0 1 2 3 4 5 6 7 So the 20th position ('slice') is just past the 19th character, if the first character is counted as 0.

2 1

Exceptions, exceptions...
by Ramiro Brito Willmersdorf 27 Sep '00

27 Sep '00

Hi, Yesterday I posted the message below, and I'm happy to inform all that the problem was basically just my advanced braindeath. I decided to triple check everything today, after a good night of sleep, (and a so so day of real work) and found out that the variable I could swear was being used inside the external method wasn't really. It would be referenced only after the location where the exception was triggered, so it being undefined didn't trigger an error as I had naïvely expected. I just had forgotten to set it explicitly in the page that called the external method. The good news is that the exception machinery then seems to work exactly as one would expect, and quite wonderfully at that. Many thanks to all those that developed such a great system, Ramiro. > Hi, > > I have a DTML document with the following structure: > > <dtml-var standard_html_header> > <dtml-try> > <dtml-call "my_external_method(REQUEST)"> > <p> Report that everything was ok and wait for ack. > <form method=POST action=index_html> <input type=submit value="OK"> </form> > <dtml-except MyException> > <p class="warning"> Warn about problem found by external method. > <form method=POST action="treatError"> <input type=submit value="OK"> </form> > </dtml-try> > <dtml-var standard_html_footer> > > and it works wonderfully, to be honest I thought it was quite uncanny to define > and raise an exception inside the python module, and having it caught by the > DTML document. > > Now, to improve the treatment of errors I need to refer, inside the > <dtml-except> block, to some variables that were defined in the REQUEST > variable (I'm pretty confident of this because I used them inside the external > method), but it seems that the original REQUEST variable is no longer set > inside the <dtml-except> block. Is this correct? What actually happens (in > simple terms, please :) when an exception is thrown? > > I also tried the very few other tricks I know with DTML (<dtml-with > "_.namespace..."> outside the <dtml-try> block, plus some other voodoo) but > couldn't get it to work, either. > > Should I return these values as error values with the exception? I can do it > if this is the only option, but I'm already using the return value for > information related to external method things, and I'd rather not mix the two > ``domains'', so to speak. > > Many thanks for any tips, -- Ramiro Brito Willmersdorf rbw(a)demec.ufpe.br GPG key: http://www.demec.ufpe.br/~rbw/GPG/gpg_key.txt

1 0

Re: Download Problem
by Shane Hathaway 26 Sep '00

26 Sep '00

Suzette Ramsden wrote: > > I have had this same problem downloading squishdot zip files and I don't > know if it is something I am doing. > When I attempt to unzip the file, I keep getting: > "error reading header after processing 0 entries" What archiver are you using? I'm guessing you're talking about some product I wrote, all of which are "tar.gz" files, not "zip" files. WinZip can read them, however. Shane

3 2

[Fwd: Zope Question]
by Ryan Booz 26 Sep '00

26 Sep '00

2 1

Zope.org FYI
by Shane Hathaway 26 Sep '00

26 Sep '00

Zope.org has been having some problems with memory leaks and "ghosts". Please excuse the occasional interruption. Also, /Members is now a new kind of BTreeFolder. An update to the BTreeFolder product will soon be released. With this change, some DTML installed on zope.org may have problems if it contains the expression "Members.<username>". Just change the DTML to "Members['<username>']". Updates forthcoming this week... Shane

2 1

Nasty subtle security bug
by Martijn Faassen 26 Sep '00

26 Sep '00

Hi there, I'm about to describe a very nasty bug that appears to exist in different guises in at least Zope 2.1.6 and Zope 2.2.2. The bug is nasty because it occurs under rather restricted circumstances, so nobody else noticed it yet, but it keeps biting _me_. The circumstances: * we have external method E in the root * we have a user defined in the root. This user has a certain role A. * we authenticate that user with a DTML method in root for role A. (so role A in this setup exists to force authentication only) * we give the user a local role B (or local user account with same username/password with that role) in a higher folder, X. * the external method E has security permissions to only work with role B (and manager), not with anonymous. As far as I am aware, our user should be able to execute E in the context of X and any subfolders, as the user has the right role there. Our user should not be able to execute E in the context of any other folder, however. (the execution happens through a DTML call) The symptoms: In Zope 2.1.6, the user cannot execute the external method E. Instead, the user is asked to reauthenticate. Naturally, reauthenticating the user again as himself won't work. In Zope 2.2.2, the user cannot execute the external method E either. Instead, the calling DTML code raises a NameError, basically saying our external method does not exist. The subtle bits -- when it *does* work fine --: This is probably why nobody actually ran into this one before. * it works fine when the user has manager role (at least in root) * it works fine when the external method is executable by anonymous. * it works fine when the external method is defined in another folder (not root folder) * it works fine with DTML methods * it even works fine (tested in 2.1.6) when the role is *not* added as a local role or with a local user account; if the user has role B from the start, it works. This one particularly gave me a lot of grief. The workaround that gets closest to what I want is to define the external methods in folder higher up instead. But that's not really desirable, in my circumstances I want the external method callable in the entire site, if the user is authenticated. Some minor observations: * ZClass instances seem to be affected as well. I'm not as sure about the symptoms here though. Anyway, I tried to upgrade to 2.2.2 to avoid this bug in particular, but the only thing I got was a NameError instead of an Authentication error. Sigh.. It doesn't appear to be a security leak, it appears to be overzealeous security instead. :) I'll also dump this description into the collector, but posted to the list because I like to complain. And who knows, perhaps someone else ran into the same. Regards, Martijn

3 6

ZFormulator -- how to make an SQL insert?
by Mike Renfro 26 Sep '00

26 Sep '00

I looked in the archives for anything concerning this, and came up empty. I have zformulator set up with postgres, and it appears to work fine, except that I've not found the zen to make it actually do an SQL insert -- I know the GetSQL method will extract the proper code, but am I missing something trivial that'll let me actually execute the SQL code? Thanks. -- Mike Renfro / R&D Engineer, Center for Manufacturing Research, 931 372-3601 / Tennessee Technological University -- renfro(a)tntech.edu

2 1

Re: Zope Question
by Chris McDonough 26 Sep '00

26 Sep '00

----- Original Message ----- From: "Ryan Booz" <ryanbooz(a)alumni.psu.edu> To: "Comp Ed List" <seul-edu(a)seul.org> Sent: Monday, September 25, 2000 3:03 PM Subject: Zope Question > Hey gang, > > I'm posting this question here because I know a while back some people > had mentioned they were using Zope. I'm trying to start using it, > getting used to the DTML and all the other stuff. I can get it running > with my Apache server, and that's all well and good. But I have these > two questions which I can't seem to find answers to in current Zope > documents and help. > > 1. How do I get the server process to run as a daemon? I've tried the > one script for an rc process I found on a site, but my server just hangs > and I never get a command prompt back. All other processes I've ever > run at startup are either designed to be daemons, or have a specific > switch to add to the program name. Removing the -D (debug) switch from the z2 line in start.py will cause Zope to release control of the terminal from which it was started. > 2. OK, this is kind of two part. First, where does Zope actually store > all of the directories and files you create for a site. If I have a > fake directory as the "trigger" for the persistent CGI process, than > where does it actually store this pages I'm creating? As an example, > following the install instructions that comes with Zope, I've set Apache > to send every request for /zope to the FastCGI process running in the > background. That directory does not exist in my htdocs directory. > Where is this stuff going? In the "ZODB" (Zope Object Database). See http://www.zope.org/Members/mcdonc/HowTos/gainenlightenment for some nuggets. This is a tough one to wrap your head around when you first get started. > > Two, can I get Zope to answer the general requests for a site (like > www.bms.school my internal server and fake domain.) Rather than having > to specify a directory, it would just send all requests to Zope. But to > take that one step further, if I had user accounts set up with the > /~username convention, would this stuff be able to pass through Zope and > actually go to those directories? I don't think I'm making this > question clear, but I don't know how else to state it right now. See the SiteAccess product on Zope.org

1 0

http://webcompare.internet.com/
by Hung Jung Lu 26 Sep '00

26 Sep '00

Hi, I just ran across this website: http://webcompare.internet.com/ Interesting that I did not see anything on Zope. Shouldn't we write something to webcompare(a)internet.com and let them know about Zope? (Look also under http://serverwatch.internet.com/appservers.html ) regards, Hung Jung _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

2 1

trouble with SiteAccess; can't manage subtree mapped to inaccessible domain name
by Fred Yankowski 26 Sep '00

26 Sep '00

I set up SiteAccess 2-0-0b3 on Zope 2.2.2 so that two virtual hosts front-ended by Apache map to two different subtrees in Zope. That worked OK until the local DNS server lost the entry for one of my domains. I'm working on fixing that (it's out of my hands) but I find that in the meantime I can't even get to the corresponding Zope subtree in manage mode! I think the SiteAccess object I created is still mapping URLs to the domain name which now fails to resolve. How do I get out of this jam? I tried deleting the Products/SiteAccess folder, restarting Zope, and deleting the SiteAccess product from the Control_Panel/Products view, but now I'm getting an AttributeError when I try to access the subtree that has a SiteAccess object. Since I can't get to that tree, I can't figure out how to delete that object. Is there some way to delete it by name from a higher point in the tree? -- Fred Yankowski fred(a)OntoSys.com tel: +1.630.879.1312 Principal Consultant www.OntoSys.com fax: +1.630.879.1370 OntoSys, Inc 38W242 Deerpath Rd, Batavia, IL 60510, USA

3 3