- Zope - Zope lists

RE: [Zope] Re: [Zope-dev] possible security flaw? - and, request for a phone conference. conference.
by Brian Lloyd 08 Jun '00

08 Jun '00

> > Basically, if a user with manager privileges to a folder changes > > their > > password to be empty, then anyone (from permitted domains) > can access the > > management screen for that folder Without Logging On... > Zope assumes that > > you are the user without the password and treats you as if > you have those > > rights. > > This is a feature, but I don't know if or where it is > documented besides > the source code (which is a bug if it isn't I guess). You're right - it is a feature. You are also right that it isn't documented anywhere that I can find :( I would suggest adding this to the Collector (as a 'Documentation Request'). Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

FW: troubles with installing zope
by Andy Gayton 08 Jun '00

08 Jun '00

Hi, I'm trying to install zope on an alpha box running CompaqTrue64 4.0F. I've created a seperate account to run zope under. I've installed zope under this user's home directory. Down the track I was hoping to link zope with apache, but for the moment I'm just trying to get it to work with ZServer. I configured the package with the command python wo_pcgi.py since apache is running on port 8080, I started ZServer with start -P 9000 This seemed to bring up the server ok, however there was a PROBLEM statement: ------ 2000-06-08T06:12:23 PROBLEM(100) ZServer Computing default hostname ------ 2000-06-08T06:12:23 INFO(0) ZServer Medusa (V1.13.4.1) started at Thu Jun 8 16:12:23 2000 Hostname: titan.onetel.com.au Port:9080 ------ 2000-06-08T06:12:23 INFO(0) ZServer FTP server started at Thu Jun 8 16:12:23 2000 Authorizer:None Hostname: titan.onetel.com.au Port: 9021 ------ I could then point my browser at the server on 9080 and get the introductory page. However, if I try to do anything else, like go to admin page or quick start documentation, the server raises the following debug message and the browser says that the document returned no data, try again later or contact system administrator : Stack overflow: pid 23282, proc python, addr 0x14085ffe8, pc 0x120038c18 Have I configured something wrongly ? thanks, Andy.

2 1

Re: [Zope] Plea: sequence-item and sequence_item in 2.2?
by Steve Drees 08 Jun '00

08 Jun '00

At 6/8/00 11:43:00 AM, you wrote: >Hi all, >Can I make a plea that the .diff patch that Jonothan Farr posted a >while back be included into the 2.2 release? >http://www.zope.org/Members/jfarr/Patches/dtml-in-sv I have yet to hear a downside to this patch. I second that motion. The patch has allowed me to clean up my code signifigantly.

1 0

www.zope.org cataloging server problem?
by Hung Jung Lu 08 Jun '00

08 Jun '00

I have been trying to catalog a "News Item" and a "Product Release" inside www.zope.org, but I get the error ======================================================= System Unavailable This site is currently experiencing technical difficulties. Please contact the site administrator for more information. For additional technical information, please refer to the HTML source for this page. Thank you for your patience. Error type: NameError Error value: getRoles ====================================================== <H2>Zope Error</H2> Zope has encountered an error while publishing this resource. Invalid request The parameter, submit, was omitted from the request.Make sure to specify all required parameters, and try the request again. <HR NOSHADE> ...  ============================================================ regards, Hung Jung ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

2 2

FSSession newbie problem
by Marcello Lupo 08 Jun '00

08 Jun '00

Hello, i'm trying to use the FSSession to have a little shopping cart for e-commerce. I can initialize the dictionary named "cart" and it is created in the datafile. When i try to update it with the data from my form i get the error: Zope Error Zope has encountered an error while publishing this resource. Error Type: AttributeError Error Value: 'None' object has no attribute 'update' For curiosity i tried the example bundled in README.txt of the FSSEssion and macically i obtain the same error. this is the code i used: <dtml-call FSSession> <dtml-unless "FSSession.has_key('cart')"> <dtml-call "FSSession.set('cart',{})"> </dtml-unless> <dtml-comment> ##### <dtml-var "REQUEST.form"> <dtml-in "REQUEST.form.items()"> <dtml-var sequence-item> </dtml-in> This is only to check that the form passes the values correctly ######## </dtml-comment> <dtml-call "FSSession['carrello'].update(REQUEST.form)"> Can anyone help me? Thanks ATIS

2 2

create object...
by Pierre Rougier 08 Jun '00

08 Jun '00

hi, following my question of this morning, I tried that: <dtml-with "Control_Panel.Products.Objet_BIB_Product.ObjetBIB.createInObjectManager(Key, REQUEST)"> which create me the object, but in the Control_Panel.Products.Objet_BIB_Product Folder.... I would like it to be created in the current Folder (the one from which I try to create the object)... and don't see how, if I try: <dtml-with "ObjetBIB.createInObjectManager(Key, REQUEST)">, zope tells me that ObjetBIB does not work... any idea???

1 0

Plea: sequence-item and sequence_item in 2.2?
by Tony McDonald 08 Jun '00

08 Jun '00

Hi all, Can I make a plea that the .diff patch that Jonothan Farr posted a while back be included into the 2.2 release? http://www.zope.org/Members/jfarr/Patches/dtml-in-sv I believe it would help a lot of newbies and delay the (inevitable :) day when they *really* need to use the _ namespace and python expressions.... Cheers, Tone ------ Dr Tony McDonald, FMCC, Networked Learning Environments Project http://nle.ncl.ac.uk/ The Medical School, Newcastle University Tel: +44 191 222 5888 Fingerprint: 3450 876D FA41 B926 D3DD F8C3 F2D0 C3B9 8B38 18A2

2 1

Re: ZSQL Bug in 2.1.6 [patch]
by Chris Withers 08 Jun '00

08 Jun '00

Phill, The zope list (zope(a)zope.org) is great for this sort of question ;-) Phill Hugo wrote: > Sorry to bother you. I've a quick question regarding acqusition in ZSQL > methods. When I pass args the method ignores the REQUEST stuff unless I > specify it in the args list. Is there a way to pass one arg specifically > while allowing the others to be seen in the aquired namespace? So you're calling <dtml-in "SQLMethod(parm='something')">? If so, you want: <dtml-in "SQLMethod(_.None,_,parm='something')"> If you're doing that already, I can't help you, it's probably a bug :/ cheers, Chris

1 0

Re: [Zope] Zope URLS (was re: WebObjects)
by Rik Hoekstra 08 Jun '00

08 Jun '00

>Gregor Hoffleit wrote: >> Regarding wget: >> >> AFAICS, the problem is that traditionally in a static web server, if you try >> to access a URL like 'http://host/xyz' (without trailing slash), the server >> will return you an error '301 Moved permanently' and will point you to the >> new location 'http://host/xyz/'. Zope instead (if 'xyz' is a folder and >> there's a document 'xyz/index_html') immediately returns the rendered >> index_html if you request 'http://host/xyz'. >> >> Now whenever the 301 to the URL with a trailing slash happens, wget takes >> this as a hint that this path must have been a directory, and saves the >> result as index.html. With Zope, wget doesn't get this hint. >> >> Reading this again, I wonder if this qualifies as a bug in Zope, or is there >> a good reason for this behavior ? > >It's not so much a bug as a complication caused by the fact that Zope >isn't a filesystem server, but an orb presented through the web (correct >me if I'm slightly out ;-) > >For example http://host/x/y/z > >Could be: >-A container object z (which should have a / after it?) >-A dtml-document in folder /x/y/ >-The result of executing the z method on the y object in the /x/ folder. >-The result of executing the z method on the result of executing the y >method on the x object in the root folder. > >I'm sure acquisition adds some more options/confusions to this... ;-) > >So, that's the problem, I don't know what the solution is :( > >I do think there must be a better way than Zope's kludgey BASE tag >thing. >Maybe all Zope URLs should end in a / ? so what is the use of the /? Couldn't all Zope URLs end without a /? > >Quite radical, but maybe the most sensible and least confusing? :/ > Rik

3 2

Re: [Zope] stupid question I guess
by josh on 08 Jun '00

08 Jun '00

> sure - where is it? :) great question, it took me ages to finds this again, I think it could be linked from zope resources, or documentation, it is in in the zdp: http://zdp.zope.org/projects/zfaq/faq/DTML#951171060 this is a link to the appropriate section, there is an answer to the question, how do I define variables in zope, which has the dtml-let answer, but it is less explicit and fleshed out than yours. josh on

2 1