- Zope - Zope lists

Re: [Zope] Security problem i 2.2 final - Bug?
by Peter Arvidsson 19 Jul '00

19 Jul '00

Thats what I did .. same problem. However when I installed a new 2.2 final and did exactly the same (same stuff, same permissions) then it worked. There must be some problem with the upgrading... Peter Pierre Rougier skrev: > Hi > > Just to see... try to give all the proxy roles to your method... (manager, owner > and anonymous)... I had this problem, and it work like that.... > > Pierre > > Peter Arvidsson wrote: > > > Hi > > > > Thanks for the tip. I gave the method the correct roles but unfortunatelty the > > problem still exists. > > > > Peter > > > > Pierre Rougier skrev: > > > > > Hi :) > > > I may say something idiot, but... > > > > > > Did u try to change the proxy roles of the method which call the fonction > > > manage_editProperties? > > > (in case of: to do it, edit your method and choose proxy at the top of the > > > window), u can edit the role of your method. > > > > > > Piotr. > > > > > > Peter Arvidsson wrote: > > > > > > > I have a very anoying problem... > > > > > > > > I have created a news-product and have several news-objects. Now I want > > > > to change the properties of a news-object. This is my code for that: > > > > > > > > <dtml-with "newsEntries"> > > > > <dtml-call "_[objId].propertysheets[1].manage_editProperties( > > > > header=REQUEST['header'], > > > > date=REQUEST['date'], > > > > author=REQUEST['author'], > > > > email=REQUEST['mail'], > > > > text=REQUEST['text'], > > > > )"> > > > > > > > > </dtml-with> > > > > > > > > 'newsEntries' is the folder where I store my news-objects. > > > > 'objId' is the id of the product as a string. > > > > > > > > Everytime I try to change properties a login prompt is displayed. The > > > > problem is that I get access denied whoever I login as. My user has the > > > > same permissions as the superuser and even when I login as the superuser > > > > I get access denied. I have changed so that I am the owner of both the > > > > product 'news' and the news objects, the methods that I use and the > > > > folders that my objects and methods are in. I really dont know what this > > > > problem could be. I thought these problems was supposed to be resolved > > > > for 2.2 final but maybe there are some bugs left? I dont get this > > > > problem when I run the code in 2.1.6. > > > > > > > > I have also tried different possibilities in the code, I have both used > > > > changeProperties and editProperties. I have also tried to write the name > > > > of the propertysheet instead of '[1]' but everything renders the same > > > > problem. > > > > > > > > Really beacause I am the owner of everything and I have the same rights > > > > as the superuser I dont think I should be "unauthorized" to change my > > > > objects. I have no problem to add and to delete these objects so why > > > > cant I change them? > > > > > > > > _______________________________________________ > > > > Zope maillist - Zope(a)zope.org > > > > http://lists.zope.org/mailman/listinfo/zope > > > > ** No cross posts or HTML encoding! ** > > > > (Related lists - > > > > http://lists.zope.org/mailman/listinfo/zope-announce > > > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Newbie question about permissions in zclass
by Nathalie Bernier 19 Jul '00

19 Jul '00

Hello everybody ! I'd like to have some explanations about the "define permisions" view and the permission mappings in zclass. Maybe something exists in the zope documentation, but I haven't found anything. Thank you for helping. Nathalie Bernier ********************************* Développeur web 03.82.24.00.41 multiThématiques Centre Jean Monnet Longlaville 54400 LONGWY http://multithematiques.com Chaînes thématiques sur câble et satellite *********************************

1 0

RE: [Zope] Bi-directional update of Data.fs
by Chris McDonough 19 Jul '00

19 Jul '00

Perhaps. Patches accepted :-) > -----Original Message----- > From: Chris Withers [mailto:chrisw@nipltd.com] > Sent: Wednesday, July 19, 2000 5:27 AM > To: Chris McDonough > Cc: 'Brenton Bills'; zope(a)zope.org > Subject: Re: [Zope] Bi-directional update of Data.fs > > > Chris McDonough wrote: > > There is no generic diff or merge facility for two > arbitrarily modified > > Data.fs files. > > Perhaps Zope or ZEO could do Lotus Notes - style replication at some > point in the future? > > cheers, > > Chris > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

New How-To on Cookies (need feedack)
by J. Atwood 19 Jul '00

19 Jul '00

I started a little how-to on cookies. Take a look and send your feedback. http://www.zope.org/Members/BwanaZulia/cookies/index_html J

3 2

z2.py with -a option: ZServer FTP server not listening on correct ip address
by Joseph Wayne Norton 19 Jul '00

19 Jul '00

I'm using the following start file: #! /bin/sh reldir=`dirname $0` PYTHONHOME=`cd $reldir; pwd` export PYTHONHOME exec /usr/local/bin/python \ $PYTHONHOME/z2.py -u zope -a zope.domain.com -w 80 -f 8021 -F 8080 \ -D "$@" and for simply testing purposes, I have defined the following hosts in my /etc/hosts file: # localhost 127.0.0.1 namaste localhost # zope 127.0.0.40 zope-prd.domain.com zope.domain.com and the following information was displayed after starting zope: bash-2.03# ./start ------ 2000-07-18T14:36:17 INFO(0) ZServer Medusa (V1.13.4.1) started at Tue Jul 18 23:36:17 2000 Hostname: zope-prd.domain.com Port:80 ------ 2000-07-18T14:36:17 INFO(0) ZServer FTP server started at Tue Jul 18 23:36:17 2000 Authorizer:None Hostname: namaste Port: 8021 ------ 2000-07-18T14:36:17 INFO(0) ZServer FastCGI Server (V1.0) started at Tue Jul 18 23:36:17 2000 IP : zope.domain.com Port : 8080 Socket path : None ------ 2000-07-18T14:36:17 INFO(0) ZServer Monitor Server (V1.5) started on port 8099 I was expecting the ZServer FTP to be listening on either zope-prd.domain.com or zope.domain.com IP addresses, but it is listening on my localhost instead. I also haven't tried yet, but I'm not sure what ip address the ZServer Monitor is listening on. Is this a bug, a feature, or problem with my setup on linux? thanks, - joe n. -- Joseph Norton norton(a)alum.mit.edu +81-3-3822-6936 2-10-7 Tabata, Kita-ku, Tokyo 114-0014, Japan (〒114-0014 東京都北区田端２丁目10-7)

2 1

Date time format
by wai＠mahirnet.com 19 Jul '00

19 Jul '00

Hi all, Anyone know if there is any good tutorial for date time format ? Like abstract the day or month or year in a ZopeTime string. Please help. Cheers Wai

3 2

Security problem i 2.2 final - Bug?
by Peter Arvidsson 19 Jul '00

19 Jul '00

I have a very anoying problem... I have created a news-product and have several news-objects. Now I want to change the properties of a news-object. This is my code for that: <dtml-with "newsEntries"> <dtml-call "_[objId].propertysheets[1].manage_editProperties( header=REQUEST['header'], date=REQUEST['date'], author=REQUEST['author'], email=REQUEST['mail'], text=REQUEST['text'], )"> </dtml-with> 'newsEntries' is the folder where I store my news-objects. 'objId' is the id of the product as a string. Everytime I try to change properties a login prompt is displayed. The problem is that I get access denied whoever I login as. My user has the same permissions as the superuser and even when I login as the superuser I get access denied. I have changed so that I am the owner of both the product 'news' and the news objects, the methods that I use and the folders that my objects and methods are in. I really dont know what this problem could be. I thought these problems was supposed to be resolved for 2.2 final but maybe there are some bugs left? I dont get this problem when I run the code in 2.1.6. I have also tried different possibilities in the code, I have both used changeProperties and editProperties. I have also tried to write the name of the propertysheet instead of '[1]' but everything renders the same problem. Really beacause I am the owner of everything and I have the same rights as the superuser I dont think I should be "unauthorized" to change my objects. I have no problem to add and to delete these objects so why cant I change them?

2 2

Broken products in 2.2 - bug?
by Peter Arvidsson 19 Jul '00

19 Jul '00

Is products treated in a different way in 2.2 final than in 2.1.6? When I restart Zope all instances of my (and some imported) products become broken because it cant find the product it is an instance of. 963996281 (This object from the unknown product is broken!) I have compared with Zope 2.1.6 and the data of the news object are the same in both distributions: <?xml version="1.0" ?> <ZopeData> <record id="8178" aka="AAAAAAAAH/I="> <pickle> <tuple> <tuple id="8178.3"> <string id="8178.1" encoding="repr">*ZENGX/ck1V8gtZ9GtNHQ7w==</string> <string id="8178.2" encoding="repr">News</string> </tuple> <none /> </tuple> </pickle> ... </ZopeData> Also the data about my News object are the same where 'News' have 'class id'='ZENGX/ck1V8gtZ9GtNHQ7w==' Now the only difference is that there is no '*' in the 'class id' but there is the same difference in 2.2 final as in 2.1.6 som that shouldnt mean any differences. When I add instances in 2.1.6 and restart the server everything works fine but when I do the same thing in 2.2 final my news objects become broken. The same thing happens to for example the PDFProduct that I downloaded. Is there a different way to handle products in 2.2 final or is this a bug?

1 0

sequence-item and ""
by Diego Rodrigo Neufert 19 Jul '00

19 Jul '00

Hi ppl... Why I cant use dtml-var "sequence-item">?? Every time I try to access sequence-item under "" in a dtml-call dtml-var or anything else I got this error: Error Type: NameError Error Value: sequence Well, I found a solution: <dtml-let si=sequence-item> <dtml-var "si"> </dtml-let> Now everything is ok... but I dont want to do this, I want to access the *&@%$#@& sequence-item in "". Can anyone help me? ----------------------------- Diego Rodrigo Neufert -webmaster --------------------------- (Magic Web Design) (email) (diego(a)magicwebdesign.com.br) (curitiba) (pr)

5 5

http://www.atomasoft.com/yahoo-yes!.something
by Jonathan Desp 19 Jul '00

19 Jul '00

Hi, If you go there -> http://www.atomasoft.com/yahoo-yes!.something You will see my "Not Found" page, because there is no such page in my database. But I'm always seeing those ugly sentences below, and I'd like to cut them and then don't see them anymore, what I can do ? Where is the file to edit ? What I need to erase ? I searched the mailing list with several keyword, my "standard_html_footer (Standard Html Footer) " file is very good and perfect, but I don't want to see the "ugly sentences" like: Traceback (innermost last): File /home/jonano/Zope-2.2.0-src/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /home/jonano/Zope-2.2.0-src/lib/python/ZPublisher/Publish.py, line 187, in publish File /home/jonano/Zope-2.2.0-src/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: ElementWithAttributes) File /home/jonano/Zope-2.2.0-src/lib/python/ZPublisher/Publish.py, line 162, in publish File /home/jonano/Zope-2.2.0-src/lib/python/ZPublisher/BaseRequest.py, line 354, in traverse File /home/jonano/Zope-2.2.0-src/lib/python/ZPublisher/HTTPResponse.py, line 533, in debugError NotFound: (see above) Anyone can help me a little bit ? my business is cool ? more to come, I will announce the opening of my site soon, on this mailing lis ! mailto:jonathandesp@atomasoft.com Very truly yours, <><><><><><><><><><><><> Jonathan Desp Atomasoft Matter will become software http://www.atomasoft.com <><><><><><><><><><><><> "I used to think that the brain was the most wonderful organ in my body. Then I realized who was telling me this."

3 4