- Zope - Zope lists

ANN: First public release of ZEO
by Paul Everitt 20 Jun '00

20 Jun '00

ZEO 0.2, an alpha version of ZEO, is now publicly available from the "ZEO page", http://www.zope.org/Products/ZEO/. ZEO is the clustering code for Zope. This version does *not* contain the multiplexing code that was holding up the release. Be sure to check the page for performance numbers posted by Greg Ward. Enjoy! --Paul

1 0

Re: [Zope] scared
by josh on 20 Jun '00

20 Jun '00

Thanks Chris, > As for your error, it looks like something bad happened when zope tried > to write to the log file. Did you do any funny configuration fro your > logging? What version of Zope are you using? I haven't changed anything to my knowledge. It did stop working after a crash though. Perhaps something is corrupted, I got a friend to test my site. He kept rightclicking and choosing "back", as quickly as he could and then it crashed... I think the page it crashed on had some .js in it... erk, I am using "Notes on Zope 2.0" oh gee I thought I was using 1.6! What version would you recommend installing? Thanks, josh

1 0

Re: [Zope] comercial products using zope
by Anthony Baxter 20 Jun '00

20 Jun '00

>>> Terry Kerr wrote > Basically I want to know if anyone else has used zope for a commercial > product b4, and how they did it. Is there anything in particular that I > should know about. Should I just rely on a good software license to > protect my code? Also...are .pyc files as platform independent as .py > files? Yes. Digital Creations, and the product was called Principia. I don't know if all the stuff with the mangled and encrypted byte code support is still there, tho. Anthony

1 0

Re: [Zope] 2.2.0 zclass weirdness
by Roman Milner 20 Jun '00

20 Jun '00

Well, I figure this out. HomeDir_factory was getting its Use Factory permission set to (disabled). I think this was becuase HomeDirContaine didn't automatically have "Add HomeDirs" in its list. Is this a bug? ^Roman >>>>> "RM" == Roman Milner <roman(a)speeder.org> writes: RM> I've created a ZClass call HomeDirContainer that inherits from RM> ObjectManager. In that ZClass I created another ZClass called RM> HomeDir. The idea being that HomeDirs can only exist in RM> HomeDirContainers. RM> So, I add an instance of HomeDirContainer, then go into it and RM> click "Add" - which is attempting to post to the current RM> object and pass it :method=HomeDir_factory. And I get the RM> following error:

1 0

2.2.0 zclass weirdness
by Roman Milner 20 Jun '00

20 Jun '00

I've created a ZClass call HomeDirContainer that inherits from ObjectManager. In that ZClass I created another ZClass called HomeDir. The idea being that HomeDirs can only exist in HomeDirContainers. So, I add an instance of HomeDirContainer, then go into it and click "Add" - which is attempting to post to the current object and pass it :method=HomeDir_factory. And I get the following error: Zope Error Zope has encountered an error while publishing this resource. Resource not found Sorry, the requested Zope resource does not exist. Check the URL and try again. Troubleshooting Suggestions The URL may be incorrect. The parameters passed to this resource may be incorrect. A resource that this resource relies on may be encountering an error. For more detailed information about the error, please refer to the HTML source for this page. If the error persists please contact the site maintainer. Thank you for your patience. Traceback (innermost last): File /home/Zope-2.2.0b1-src/lib/python/ZPublisher/Publish.py, line 222, in publish_module File /home/Zope-2.2.0b1-src/lib/python/ZPublisher/Publish.py, line 187, in publish File /home/Zope-2.2.0b1-src/lib/python/Zope/__init__.py, line 221, in zpublisher_exception_hook (Object: RoleManager) File /home/Zope-2.2.0b1-src/lib/python/ZPublisher/Publish.py, line 162, in publish File /home/Zope-2.2.0b1-src/lib/python/ZPublisher/BaseRequest.py, line 427, in traverse File /home/Zope-2.2.0b1-src/lib/python/AccessControl/User.py, line 414, in validate (Object: RoleManager) File /home/Zope-2.2.0b1-src/lib/python/ZPublisher/HTTPResponse.py, line 520, in notFoundError NotFound: (see above) Is there something new I need to do in 2.2.0 to make this work - or is this a bug? Help is greatly appreciated. ^Roman

1 0

Embedding authentication in a Zope Website
by knight 20 Jun '00

20 Jun '00

Greetings, Please bear with me, I'm still slightly new to Zope, but I'm pretty up on the structure, miscellaneous administration, etc. I'm also beginning to do well with Python development. I wanted to start adding authentication to my site via HTML forms, and I saw mysqlUserFolder. There aren't any real docs that come with it. More or less, a README that explains the feature set of the Product is all that it has. Installing mysqlUserFolder wasn't the problem. The problem is now dynamically outputting content based upon login information. How do I manipulate who is logged in? How do I check to see if a user is logged in, etc? Do I need to read some plain zope authentication docs? If so, please point me in the right direction. What do I embed in my DTML in order to check for authentication? I really appreciate the help... The Zope documentation is still a little out of order, and slightly confusing to navigate. Knight

2 1

ZPatterns, "Hello, world."
by Jeff K. Hoffman 20 Jun '00

20 Jun '00

Hello, I am trying to wrap my head around ZPatterns--I am hoping to use it in a project I am currently working on. Unfortunately, I'm not doing too well. :-) Is there a, "Hello ZPatterns World." example out there, anywhere, that shows the simplest usage of the framework? It would do me tremendous good to see a working example. Thanks, --Jeff --- Jeff K. Hoffman 704.849.0731 x108 Chief Technology Officer mailto:jeff.hoffman@goingv.com Going Virtual, L.L.C. http://www.goingv.com/

2 1

SQL security at row level
by Hung Jung Lu 20 Jun '00

20 Jun '00

Hi, This is a general question. One can protect the ZSQL methods by employing user folders. This offers table-level protection. But what about protecting database information at row level? (This can come from hackers tweaking form variables.) Currently I store some security information (like the owner of row, among other things) on all rows on all tables. When retrieving records from tables (in particular, for "select" and "update" methods), I'd like to verify that the current user indeed has the privilege for accessing a particular row. I know at least two ways for checking this information. (Notice that we may have complicated situations where not only the owner can have access... we may have group privileges, superuser user privileges, etc. Also, I have a few hundreds ZSQL statements, so it's not a small question.) (1) Pre-generate the allowed owner ids, so "select" statements can only select rows with given owner ids... I could put something like: (keeping in mind superusers, team-members, supervisers, etc.) where <dtml-sqltest owner_id column=owner_id type=int> or <dtml-sqltest additional_id1 column=owner_id type=int> or <dtml-sqltest additional_id2 column=owner_id type=int> ..... (2) Use a wrapper for ZSQL methods, and raise an exception when unauthorized rows are retrieved. I guess row-level protection is a very common issue, so I would like to know what other strategies are used. I would appreciate description of actual implementations. regards, Hung Jung ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

2 1

How can I upload files to mySQL
by jensebaer 20 Jun '00

20 Jun '00

Hello, I am using Zope and mySQL and want to load up text and Images to text or blob fields. How can I upload file content to TEXT (plain text) and BLOB (images: jpg, gif) using DTML? Thanks Jens

1 0

sifting through python sub-objects
by ed colmar 20 Jun '00

20 Jun '00

I've succesfully gotten the catalog to work (thanks everyone!), but in doing so, I've created a problem. Squishdot uses this code like this in order to add an item: id=self.createId() # make a datestamp id msg=PromoterPost(id,title) msg=msg.__of__(self) # ??? self.setItem(id,msg) # set the item This code is incompatible with the catalog. As far as I can tell because The catalog likes to see id's as strings, but I don't think the object gets completely added to the zope fs either. After changing the code that does the adding to the zope fs everything related to the catalog seems good. Here's the new code: ob=PromoterPost(id,title) ob.id = id ob.title = title self._setObject(id,ob) self.getCatalog().catalog_object(ob,id) So here's the problem, the methods that squishdot uses to locate sub-objects relies on a BTree() type method, called "data", and is used by a few methods like this: def objectValues(self): """ return list of subobjects """ return map(lambda x, p=self: x.__of__(p), self.data.map(self.ids)) or def is_local_user(self, thisuser): """ returns true with ID if user is a local user based on rev_id_list in squishdot """ rlist = map(None,self.ids) rlist = filter(lambda x,p=self : p.data[x].validated, rlist) rlist = filter(lambda x,p=self : p.data[x].meta_type == 'SRPersonPost', rlist) rlist = filter(lambda x,p=self,s=thisuser : p.data[x].title == s, rlist) return rlist Neither return any results, becuase in the new code, the data object is not getting updated. Do I need to keep a record of all the ids like squishdot does, or can I leave that up to zope? It seems like there should be an easier way than "self.data" to do this... Any ideas?

1 0