- Zope - Zope lists

ANNOUNCE: updated Hotfix release for recent mutable object issue
by Brian Lloyd 18 Aug '00

18 Aug '00

Hi all - We recently made a Hotfix release to address an issue dealing with Zope APIs returning mutable objects that could be changed inappropriately from DTML (Hotfix_08_09_2000). After further investigation, there was another aspect to the problem that was not addressed in the recent hotfix. I've uploaded a new hotfix release (Hotfix_2000-08-17) that supercedes the one from the 9th and includes the extra fix required. http://www.zope.org/Products/Zope/Hotfix_2000-08-17/ If you run a Zope site and allow untrusted users to edit DTML on your site, you should install this updated hotfix. There is no need to uninstall the prior hotfix release. These fixes will also be in the 2.2.1 release, expected next week. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

TEST (please discard)
by Jack Morgan 18 Aug '00

18 Aug '00

just a test, Sorry! Jack Morgan Debian GNU/Linux Enthusiast yojack(a)mandinka.org http://www.mandinka.org

1 0

Re: [Zope] Workaround and a tree and dtml-in problem
by Rik Hoekstra 18 Aug '00

18 Aug '00

-----Original Message----- From: Chris Withers <chrisw(a)nipltd.com> To: Phil Harris <phil.harris(a)zope.co.uk> Cc: zope(a)zope.org <zope(a)zope.org> Date: vrijdag 18 augustus 2000 14:44 Subject: [Zope] Workaround and a tree and dtml-in problem >Phil Harris wrote: >> Why isn't _ available in the tree tag? >> > >The workaround is to wrap it in a ><dtml-let posting = "_.getitem('sequence-item',0)"> > >But now I'm confused. > >Surely > > <dtml-in postingValues> > <dtml-let posting="_.getitem('sequence-item',0)"> > <dtml-tree posting branches="postingValues"> > <dtml-var id><BR> > </dtml-tree> > </dtml-let> > </dtml-in> > >should produce the same results as: > ><dtml-tree branches="postingValues"> > <dtml-var id><BR> ></dtml-tree> > >It doesn't :( A guess (I never quite understood this either) Isn't the difference : - first example the 'postingValues' in the context of your 'posting' object and - the second the 'postingValues' in the context of the default objectlist - presumably objectValues > >Why am I doing this you may ask? Well, I want to do batching at the top >level and, AFAIK, dtml-in doesn't support this :( > >any ideas? if so, you might want to wrap the postingValues as well in a <dtml-let postings="postingValues"> just guessing Rik

1 0

Product question, third posting
by Daniel Rusch 18 Aug '00

18 Aug '00

I've created a folderish product. When I select that product from the available objects list, thus creating an instance of that product, I can create objects like dtml document and dtml method in the new folderish object (very similar to what happens when you instantiate a folder object, you can have a dtml method created in the new folder). The question is why can't I create objects from the Products directory, such as Local File System????? The code below works great, I get a dtml document, two folders each with a dtml method in them.... HOW CAN I CREATE A LOCAL FILE SYSTEM OR ANY OTHER OBJECT FROM THE PRODUCTS DIRECTORY IN THIS MANAGE_ADD FUNCTION??????? def manage_addSimpleSite(self, id, title='', createNewFolder=0, createEditFolder=0, REQUEST=None): """Add a new SimpleSite object with id *id*. If the 'createNewFolder' and 'createEditFolder' parameters are set to any true value, an 'New sub Folder' and an 'edit sub Folder' objects are created respectively in the new SimpleSite. """ ob=SimpleSite() ob.id=id ob.title=title self._setObject(id, ob) try: user=REQUEST['AUTHENTICATED_USER'] except: user=None ob.manage_addDTMLDocument(id='index_html', title='') if createNewFolder: if (user is not None) and not ( user.has_permission('Add User SimpleSites', self)): raise 'Unauthorized', ( 'You are not authorized to add User SimpleSites.' ) ob.manage_addFolder(id='New'+id, title='', createPublic=1) if createEditFolder: if (user is not None) and not ( user.has_permission('Add Documents, Images, and Files', self)): raise 'Unauthorized', ( 'You are not authorized to add DTML Documents.' ) ob.manage_addFolder(id='Edit'+id, title='', createPublic=1) if REQUEST is not None: return self.manage_main(self, REQUEST, update_menu=1) Thanks, Dan

1 0

RE: [Zope] [Ann] Another Zope Book
by Chris McDonough 18 Aug '00

18 Aug '00

Much of the aim of the "Product Developer's Guide" (see http://www.zope.org/Wikis/Docs/ProductDevelopersGuide) is to address the issues you bring up. It's been slow going, although I almost have the security chapter completed. Hopefully this weekend I'll be able to release that chapter. > -----Original Message----- > From: Kapil Thangavelu [mailto:kthangavelu@earthlink.net] > Sent: Thursday, August 17, 2000 11:19 PM > To: Dieter Maurer > Cc: zope(a)zope.org; woessner(a)springer.de; frs(a)lysia.de > Subject: Re: [Zope] [Ann] Another Zope Book > great plan. > redundant no... desparetely needed? yes:) > > my thoughts... > > i've often felt thought that dc and zope cater a bit too much to the > newbie crowd in the sense that the documentation is built around on > touching upon a working knowledge of acquisition and the majority > focuses on dtml. i often felt the need (and perhaps i'll scratch the > itch) for a zope book for python developers. python is easy to learn, > there is no reason zope can't be if it were approached as a collection > of python frameworks. zodb (acqusition, persistence, zcatalog), > medusa(asyncore+orb), document template, security. > > many of the components of zope are very suitable for reuse outside of > zope to a python programmer if the pieces were understood as separate > entities and explained how they worked in synergy to make zope work, i > think there would be many more developers and products for zope. > > as is, you learn piecemeal unless you have the stomach and the time to > go through all the source code. i've learned a bit (still learning) > mainly from the source, but i think most developers are > forced to learn > through trial and error because the docs don't do the > components justice > since they tend to focus on working understanding of zope's framework > from dtml. and in the end they are forced to turn to the source which > can be confusing without knowing the parts of the framework from a > fundamental not a working perspective. > > comments? > > Kapil > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

unable to login with newly created user
by Corey 18 Aug '00

18 Aug '00

Hello all, I'm new to Zope - extreme apologies if this question has already been answered, but I'm simply at wits end here... Linux 2.2.14 Python 1.5.2 Zope 2.2.0 from source wo_pcgi Zserver I simply cannot for the life of me log in as non-superuser. I've installed and unininstalled and re-installed... and read, and re-read the docs but to no avail - I even went so far as to try from scratch on a wholy different computer all together and was met with the exact same issue. After spending plenty of time in the archives for the list and at the zope site's howto's I still have been unsuccessfull in gleaning any help. I must have missed something very simple along the way somewhere. Here, in step by step order, is what I've been doing: log in as superuser access the manage page traverse into the /acl_users folder add a new user correctly set and verify the password attach Manager and Owner roles to user submit the Change button restart Zope clear netscape cache close netscape restart netscape point browser to zope page attempt to login with new user into Manage page... *allways* fail *everytime* with an 'Authorizatin failed' msg ack! What is my feeble little mind not catching onto here? I've ran z2.py with the -D flag and logging, and went through the same steps but nothing at all in these logs provides me with anything remotely usefull... I've ran Zope as both root and nobody, with no change. This is very frustrating, I've been at it for most of the night now. I sure could use a clue... Thanks, Corey

2 3

<dtml-tree, the bane of my life :(
by Chris Withers 18 Aug '00

18 Aug '00

Okay, firstly, I notice dtml-tree doesn't support the standard abbreviation: <dtml-TAG "x"> -> <dtml-TAG expr="x"> As the following: <dtml-tree "_.getitem('sequence-item',0)" branches="postingValues"> gives me: Error Type: KeyError Error Value: "_.getitem('sequence-item',0)" nice... Now the one that has me stumped :( Why does the following: <dtml-tree expr="_.getitem('sequence-item',0)" branches="postingValues"> Give me: Error Type: NameError Error Value: _ This is all in 2.1.6... cheers, Chris PS: The traceback for the last one: Traceback (innermost last): File E:\Zope\2179E4~1.6\lib\python\ZPublisher\Publish.py, line 214, in publish_module File E:\Zope\2179E4~1.6\lib\python\ZPublisher\Publish.py, line 179, in publish File E:\Zope\2179E4~1.6\lib\python\Zope\__init__.py, line 202, in zpublisher_exception_hook (Object: ElementWithAttributes) File E:\Zope\2179E4~1.6\lib\python\ZPublisher\Publish.py, line 165, in publish File E:\Zope\2179E4~1.6\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: manage_postings) File E:\Zope\2179E4~1.6\lib\python\ZPublisher\Publish.py, line 102, in call_object (Object: manage_postings) File E:\Zope\2179E4~1.6\lib\python\App\special_dtml.py, line 120, in __call__ (Object: manage_postings) (Info: E:\Zope\2.1.6\lib\python\Products\Squishdot/Squishdot_manage_postings.dtml) File E:\Zope\2179E4~1.6\lib\python\DocumentTemplate\DT_String.py, line 502, in __call__ (Object: manage_postings) File E:\Zope\2179E4~1.6\lib\python\DocumentTemplate\DT_In.py, line 691, in renderwob (Object: postingValues) File E:\Zope\2179E4~1.6\lib\python\TreeDisplay\TreeTag.py, line 152, in render (Object: a tree tag) File E:\Zope\2179E4~1.6\lib\python\DocumentTemplate\VSEval.py, line 208, in eval (Object: _.getitem('sequence-item',0)) File <string>, line 0, in ? NameError: (see above)

2 2

cutting and pasting large folders
by Jean Jordaan 18 Aug '00

18 Aug '00

Hi Zopers I'm trying to cut and paste (or copy and paste) '/docs' to '/in/docs'. The browser spins for about a minute or two, and then returns "HTTP 500 - Internal server error". Is this because '/docs' is large (about 10 or 15 Mb) (not very large) or because it contains instances of my 'ccDoc' ZClass that doesn't want to be cut-&-pasted? Strangely (well, *I* think it's strange) I can copy everything inside of '/docs' (including a bunch of ccDoc's, a Zcatalog and a Ztopic) and paste them into (a new) '/in/docs' .. but now I have to transfer the properties on '/docs' to '/in/docs' .. or maybe this is a good time to move them to TinyTables. -- Jean Jordaan -- technical writer -- Mosaic Sofware -- Zope 2.1.6 on WinNT and W2K

1 0

RE: [Zope] NTUserFolder-1.3-Comments
by Jean Jordaan 18 Aug '00

18 Aug '00

> Or maybe everyone is quietly happy.... Well, yes :) So, would all of those quietly happy people perhaps give a shout to reassure those of us who are loathe to install all of IIS for the sake of NT domain authentication? -- Jean Jordaan -- technical writer -- Mosaic Sofware -- Zope 2.1.6 on WinNT and W2K

1 0

<dtml-with object> calls first?
by Chris Withers 18 Aug '00

18 Aug '00

Hi, Just noticed this: If you do <dtml-with object> where object is something callable, it calls it. That's a bit unpleasant for things like Squishdot Sites which do something (return a list of all their elements) when you call them. So the only way to _really_ do what I thought dtml-with is for was to do <dtml-with "object"> which is sucky to say the least. Comments, anyone? cheers, Chris

2 2