- Zope - Zope lists

RE: [Zope] Casting to a list
by Daniel.Weber＠SEMATECH.Org 22 Mar '00

22 Mar '00

Ihis didn't work, then? Looks better than what I came up with, which, for the list vs. string situation goes like: <dtml-try> <dtml-in string_or_list_var> list stuff... </dtml-in> <dtml-except> non-list stuff... </dtml-try> If you have a string with multiple values to split, use the _.string.split() function, as... <dtml-in "_.string.split(str [,separator])"> This will probably choke on lists, though. Combine the two for a wholesome, good-start-to-your day breakfast code. :-) > -----Original Message----- > From: Ken Kinder [mailto:kkinder@messagemedia.com] > Sent: Wednesday, March 22, 2000 12:31 PM > To: zope(a)zope.org > Subject: [Zope] Casting to a list > > > Another question (soon I'll start answering more on this list :) - I > have a set of checkboxes with the same name that I iterate through > using dtml-in. However, when only one checkbox is checked, dtml-in > complains that a string cannot be used as input, it expects a > sequence. My initial thought was to do this: > > <dtml-if "type(var) == type('')"> > ... (do not iterate) > <dtml-else> > <dtml-in var> > ... > </dtml-in> > </dtml-if> > > How can I either cast a string to a list w/o messing up an existing > list, or gain access to Python functions such as type() from a > dtml-if statement? > > -- > Ken Kinder > 303.381.7631 > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

cannot modify security for a file object
by sathya 22 Mar '00

22 Mar '00

I get the following error when trying to modify security for a file objest. Any ideas why ?. I am using 2.1.4 and the file is a pdf doc Thanks ------------------------------ Zope Error Zope has encountered an error while publishing this resource. Error Type: AttributeError Error Value: tag Troubleshooting Suggestions The URL may be incorrect. The parameters passed to this resource may be incorrect. A resource that this resource relies on may be encountering an error. For more detailed information about the error, please refer to the HTML source for this page. If the error persists please contact the site maintainer. Thank you for your patience. -- ########################## necessity is the mother of invention ##########################

2 2

Re: [Zope] Sybase: How generate id keys? (surrogate keys)
by Hung Jung Lu 22 Mar '00

22 Mar '00

bill anderson <bil-(a)libc.org> wrote: >IOW, would a random, unique id work for you? Yes, it'll be fine. >http://www.zope.org/Members/Bill/Documentation/AutoGenID Thanks. That is the current work-around that I am using... (Key derived from a time-stamp with millisecond precision.) There is one observation and two problems: (1) ZopeTime is not as good as the getdate() function from Sybase, if you are running multiple Zope webservers (for load-balancing.) That is, it's better to rely on one unique source of timer. (2) There is a slight chance of two processes getting the same key, if they happen to occur within one millisecond of each other. The probability is small, but unfortunately I have to address even this minuscule probability. :( (3) If the server's time is re-adjusted for any reason, it's possible that some keys are regenerated. I agree that the millisecond-precision key is really good for non-critical applications. But because of the nature of our project, we need to address even the slightest chance of error. :( I think I will adapt the Sybase's recommended stored procedure to Zope, by using DTML and ZSQL methods. It's kind of nasty for something as simple as a surrogate key generation, but it seems more secure. thanks again, Hung Jung ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Casting to a list
by Ken Kinder 22 Mar '00

22 Mar '00

Another question (soon I'll start answering more on this list :) - I have a set of checkboxes with the same name that I iterate through using dtml-in. However, when only one checkbox is checked, dtml-in complains that a string cannot be used as input, it expects a sequence. My initial thought was to do this: <dtml-if "type(var) == type('')"> ... (do not iterate) <dtml-else> <dtml-in var> ... </dtml-in> </dtml-if> How can I either cast a string to a list w/o messing up an existing list, or gain access to Python functions such as type() from a dtml-if statement? -- Ken Kinder 303.381.7631

1 0

[ZGotW] Issue #7 (Closed)
by Zope Guru of the Week 22 Mar '00

22 Mar '00

The current issue of "Zope Guru of the Week" has closed: =================================================================== Issue #7 -- To ZClass or not to ZClass? =================================================================== Status: Closed Zen Level: Chela (4/8) Keywords: ZClasses Submitted by: Tres Seaver tseaver(a)palladion.com ------------------------------------------------------------------- When building a Product using ZClasses, I often want to create a "root" ZClass, which the manager will create in a normal folder, and which will then expose the Product's other ZClasses in its Add list. The DTML methods for the root are thus defined within this root ZClass. The Product ends up looking like:: Control Panel +- FooProduct + FooItem_add_permission +-FooRoot +- FooItem +- FooItem_add +- FooItem_addForm +- FooItem_factory .... +- index_html +- some_root_method_dtml + FooRoot_add + FooRoot_addForm + FooRoot_Factory + FooRoot_add_permission * What are the drawbacks to this approach? * Suggest alternatives. ------------------------------------------------------------------- Reviewed by: Tres Seaver tseaver(a)palladion.com ------------------------------------------------------------------- Hmmm, I don't seem to be doing so well on picking topics. Here is what I had in mind: * This site is an instance of the "ZGotW product":http://www.zope.org/Members/tseaver/ZGotW, which has a "main" factory, ZGotWRoot_factory, in its root folder. * This factory does *not* create an instance of a "folderish" ZClass, but rather, creates a normal Folder and populates it from a set of default DTML objects, along with a ZCatalog. * Individual issues of ZGotW are created within this folder as instances of the ZClass, ZGotWIssue, using the code in those "cloned" DTML objects. My rationale for adopting this approach, rather than creating a "folderish" ZClass, was to allow each instance of the "root" to be independently customized; the "common" behavior of a ZGotW site is included in a set of utility methods, which can be tweaked to enforce different policies, or change the look-and-feel of a particular site. The downside to this choice is duplication of code: should I find a bug in the original, default code, I have to then fix it in each instance as well as the Product. Comments, anyone? -------------------------------------------------------------------

3 2

RE: [Zope] PHP vs Zope
by Alessandro Bottoni 22 Mar '00

22 Mar '00

Python is quite slanted toward this kind of applications: 1) very clear sintax (many webmasters are not particularly fond of C and Perl, like me...) 2) strong support for string management and a very good regular expressions module 3) wide choice of modules for interfacing with web servers, mail servers, database, etc... 4) ready-to-use modules for HMTL, Mail messages and XML manipulation 5) tons of good documentation, examples and a very active community 6) hard-rock core system and reliable modules 7) indipendence from the platform (Python runs almost everywhere. I'm re-compiling it for my Z80-based microwave oven...;-) Despite this, I think that the real reason why they decided to use python was the terror to commit a mortal sin (like touching a Perl interpreter) and the desire to live immersed in the light of the true Faith. I would have done the same... ---------------------------------------------------------------- Alessandro Bottoni (Alessandro.Bottoni(a)Think3.com) Web Programmer @ Think3 inc. (www.think3.com) I do not speak for think3 and they return the favour > -----Original Message----- > From: Nikolai Vladychevski [SMTP:niko@netspace.com.mx] > Sent: Wednesday, March 22, 2000 4:21 PM > To: Eric W. Sink > Cc: zope(a)zope.org > Subject: Re: [Zope] PHP vs Zope > > Very intersting stuff ... I think I will need finaly to try Zope my self > to see how it is. But I have one more question, why they decided to base > Zope on Python and not other language? > >

2 1

Re: [Zope] Weird ZSQL Method thing...
by Tres Seaver 22 Mar '00

22 Mar '00

Rik Hoekstra <rik.hoekstra(a)inghist.nl> wrote: > > Jonothan Farr wrote: > > > > > Um, more or less (apart from the quotes). The ZSQL Methods use namespace > > > different from than normal DTML documents/methods (though I don't > > > exactly know how). Therefore you have to call them explicitly with an > > > argument. > > > > Sometimes you do, sometimes you don't. I know that sometimes I can acquire > > ZSQL method parameters from the request. Sometimes I have to provide them > > explicitly. > > I haven't been able to figure out what the rules are, either. If anyone out > > there could explain this behavior I'm sure lots of us would be grateful. > > > > Hm, I _think_ I recall (but I can't test this right now) that the ZSQL > method will only accept values that are given explicitly in its > arguments and in that case it will also acquire them. That would make > sense from a security point of view. > Or perhaps it was a bit more complicated - I have to investigate this I think the best analogy is to think of ZSQLMethods, ExternalMethods, and PythonMethods like "normal" functions in C: they receive information via arguments, and acquisition is always done via one of the explicitly-passed arguments. DTMLMethods/Documents are in some ways more like C macros: they grab information from the surrounding DTML context, without having to be told what they can "see". The analogy breaks down at the "call site": Zope looks at the explicit parameter lists and tries hard to match arguments to any parameters which are not explicitly passed by the caller: normally, it does this by looking them up in the REQUEST object, *not* in the current DTML namespace. Therefore, whenever calling a non-DTML method (External/Python/ZSQL/...): * poke all interesting values into the REQUEST object before calling:: <dtml-comment> calling 'foo( bar, baz )' </dtml-comment> <dtml-call "REQUEST.update( { 'bar' : 42, 'baz' : 3.1415926 } )"> <dtml-var foo> This version has the advantage of avoiding the "expression" syntax of DTML, but does require polluting the REQUEST namespace (may be an actual advantage if multiple methods use the same values). * pass the values explicitly, using positional arguments:: <dtml-comment> calling 'foo( bar, baz )' </dtml-comment> <dtml-var "foo( 42, 3.1415926 )"> This version looks most "natural" to a programmer, but is fragile WRT changes in the parameter list (changing the order of parameters on the method silently breaks this call). * pass the values explicitly, using keyword arguments for clarity:: <dtml-comment> calling 'foo( bar, baz )' </dtml-comment> <dtml-var "foo( bar=42, baz=3.1415926 )"> This version, which I prefer for any method taking more than one argument, says explicitly what it is doing, and therefore eases maintenance. Tres. -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

1 0

RE: [Zope] Upload files in Zope and store elsewhere
by Daniel.Weber＠SEMATECH.Org 22 Mar '00

22 Mar '00

I messed around with this a little bit before giving up, though I'd like it to work.... The problem (as I see it), is that 1) you have to get to the data and 2) you have to format the data properly so that the database stores it properly. What I've gleaned is that the binary data will contain characters that confuse whatever DA you're using (I use the ODBC adapter). This means you'll probably have to replace these 'confusing' characters with their 'safe' counterparts. For the person who got it to work, it was the 0x08 character. I believe other DB's will choke elsewhere. I never could figure out which characters needed replacing and with what, so I wrote an external method to save the file and just wrote the filename/location/upload info into the database. This wasn't as nice as I wanted (I had security concerns putting anyone's files on the hard drive), but it will probably work (I get sidetracked once I got the file saved and haven't finished that project). Let me know if you get it solved (I'm using ODBC to a cheap acess database). > -----Original Message----- > From: Marius Kjeldahl [mailto:marius@funcom.com] > Sent: Wednesday, March 22, 2000 5:44 AM > To: zope(a)zope.org > Subject: [Zope] Upload files in Zope and store elsewhere > > > After some helpful advice, I have been successful in uploading files > (images) to Zope. Now I am trying to stuff the uploaded images in a > MySQL database, but am not able to access the image data. > > If I try to stuff the image data "raw" into the database by > declaring a > image:string parameter to the ZSQL Method and <dtml-sqlvar image> in > the ZSQL code I get a string like "<ZPublisher.HTTPRequest.FileUpload > instance at 87956214>". > > Another approach I have tried was <dtml-var image fmt=sql-quote>, but > this complains about the image being an instance and not a string. > > Another approach has been to access the actual "raw" image data using > image.data in various combinations, but I have not gotten this to work > anywhere (contrary to what it seems other people have managed to do), > see this > http://www.egroups.com/group/zope/26227.html? posting. Looking through Image.py I see quote a few methods for accessing the image as a "web" object through the use of URL. Internally, Image.py uses the data attribute extensively, but I have not been able to access this from within DTML (and I guess this has to do with data not being listed in either the properties or permission sections of Image.py). My final try will probably be to resort to using an External method to get access to the "full" Image.py object (including data), but I was hoping to avoid this. Has anybody done this (uploading in Zope and storing the data outside of Zope) successfully? If so, please give me a hint.. Thanks, Marius Kjeldahl _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Zope Weekly News
by Mike Pelletier 22 Mar '00

22 Mar '00

G'day, Zope Weekly News is a digest of some of the useful and interesting events which have occurred on the various Zope mailing lists and the Zope.org site. It is published each Wednesday before Noon. Any opinions contained in the Zope Weekly News are those of the chronicler exclusively. Announcements * Two new Zope revisions were released this week. 2.1.5 filled in security holes which affected sites which allow untrusted users to create DTML documents. Ironically, a bug-fix which was included in 2.1.5 broke code which depended on the bug. This was fixed in the second release, 2.1.6. http://www.zope.org/Products/Zope/2.1.5/Zope_215_release http://www.zope.org/Products/Zope/2.1.6/Zope_216_release * Thanks to Eduardo Fernandez Corrales, the Zope Weekly News is now available in Spanish! He is publishing translations at Zope Hispano, a portal for Spanish-speaking Zope developers and users. http://zope.sistelnet.es * Healtheon | WebMD is hiring in Atlanta, GA Healtheon | WebMD is looking for Software Engineers with experience in Python and/or Zope to work in our Global News Center located in Midtown Atlanta, GA. You must be willing to relocate. http://www.zope.org/Members/kbirch-webmd/hiring-notice New Products * The Portal Toolkit has been packaged into a snapshot release for use by those who do not have access to CVS. The PTK is targeted at community-oriented portals, but is also appropriate for any site which wants to give members a personalised view of content. The snapshot release is 0.7.1. http://www.zope.org/Products/PTK Updates * Software Product: load_site.py with additional features, by Itamar Shtull-Trauring Itamar has updated his powered-up 'load_site.py' again. The present release is 1.3.1. This update adds a GUI, built with wxPython. 'load_site' is a utility for dumping content from a file system into the ZODB. http://www.zope.org/Members/itamar/load_site * Software Product: ZopeEDIT, by "jimbag" The latest release of this product, 0.0.5, adds limited RPC support which is used to create and delete folders. ZopeEDIT is a tool which enables any text editor to edit content on a live Zope server. It does not need to run on the same machine as the Zope server. http://www.zope.org/Members/jimbag/ZopeEDIT/ * Software Product: LocalFS, by Jonothan Farr Version 0.1.6, the Ides of March release, fixes several bugs, is more robust about determining file types, and creates XMLDocuments and StructuredDocuments automatically, where appropriate. LocalFS is a product which allows Zope to serve files out of a local filesystem. http://lists.zope.org/pipermail/zope-announce/2000-March/000130.html * Software Product: SiteAccess, by Evan Simpson Evan has release version 1.0.1 of SiteAccess. This version fixes a bug which interfered with FTP access to Zope. The SiteAccess product allows Zope to serve different content depending on the hostname the site was accessed by. http://www.zope.org/Members/4am/SiteAccess Zope.org items * How-To: VersionFTPServer, by "htrd" This How-To describes modifications to Zope which allow you to work within a Version through FTP. Versions allow you to stage changes to a Zope site by effectively forking the database. Changes that you make in a Version are not publicly visible until you ask them to be. http://www.zope.org/Members/htrd/howto/VersionFTPServer * How-To: How To: Use GenericUserFolder with an SQL database Version 1.1, by "hippy" This How-To shows how to customise GenericUserFolder(GUF) to use an SQL database as its repository for usernames, passwords, roles and anything else you want to store about a user. The update adds information from Dennis Baker to help get things going with MySQL. http://www.zope.org/Members/hippy/GUF_SQL_crypt_1_1 -- Mike Pelletier.

1 0

SiteAccess 1.0.1 is up
by Evan Simpson 22 Mar '00

22 Mar '00

Version 1.0.1 of SiteAccess is at http://www.zope.org/Members/4am/SiteAccess It should work with all Zope 2.x versions, and fixes a bug which interfered with FTP access to Zope. Cheers, Evan @ digicool & 4-am

2 1