- Zope - Zope lists

Getting all exceptions into log file
by Jon Prettyman 18 Mar '00

18 Mar '00

Is there a way to get all exceptions errors that are shown to a user also sent to the STUPID log? -Jon

1 0

SQLSESSION problem
by Graham Chiu 18 Mar '00

18 Mar '00

I've just started to try this out ... I set the variable thus... <dtml-call "SESSION.set('muserid',LOGIN)"> but later on when I try and use this session variable ... <INPUT maxLength="30" name="LOGIN" size="30" TYPE="TEXT" value=" <dtml-if "SESSION.has_key('muserid')"> <dtml-var "SESSION['muserid']"> </dtml-if>" /> It dies with ... Error Type: NameError Error Value: upper with the following traceback File D:\zope2\lib\python\DocumentTemplate\DT_Util.py, line 335, in eval (Object: SESSION['muserid']) (Info: SESSION) File <string>, line 0, in ? File D:\zope2\lib\python\DocumentTemplate\DT_Util.py, line 161, in careful_getitem File d:\zope2\lib\python\Products\SQLSession\SQLSession.py, line 99, in __getitem__ File d:\zope2\lib\python\Products\SQLSession\SQLSession.py, line 389, in sqlattr (Object: NoBrains) NameError: (see above) ------- Regards, Graham Chiu gchiu<at>compkarori.co.nz http://www.compkarori.com/dynamo - The Homebuilt Dynamo http://www.compkarori.com/dbase - The dBase bulletin

1 0

SQL Server ODBC Error
by Guy Davis 18 Mar '00

18 Mar '00

I am having some trouble getting Zope to work with a MS SQL Server database. I can set the ODBC connection on the server and then add ZODBC connection to a folder matching that connection. I can browse the new connection and see the tables, but when I try to test any simple SQL I get the following error: ValueError unpacked sequence of wrong size Any clues? Thanks. -- Guy Davis mailto:davis@arc.ab.ca (403) 210-5334 Alberta Research Council

3 2

setting the client namespace for a DTML Method
by gyst＠nfg.nl 18 Mar '00

18 Mar '00

[ This message never made it to the list somehow, reposting now... ] X-From-Line: nobody Thu Mar 16 12:09:02 2000 X-Face: QmL':f1ZwaRtW?E^9)c*r4r[',ky+1<e`?s,[rt'*s@6awNjJQ?,s8ArMu7TD"pJW(KI!I% BY-c##<^KlGL@'#YWptcmBOP0\1\y/$(OO*3-V~>8?<2\;7#Dwh,9ut}(dpQCo}ydCZZ~,? X-Attribution: gyst Mime-Version: 1.0 (generated by tm-edit 7.108) Content-Type: text/plain; charset=US-ASCII Message-ID: <87n1nz894w.fsf(a)wiz.wiz> X-Mailer: Gnus v5.5/XEmacs 20.4 - "Emerald" Lines: 56 Xref: wiz.wiz sent-mail:4525 X-Gnus-Article-Number: 4525 Thu Mar 16 12:09:02 2000 When Zen borders on Kamikaze..... DTML Document --> product method --> DTML method I've been banging my head against this for 4 days in a row now. I want to call a DTML method, via a product method, from a DTML document, but I don't succeed in setting the client namespace for the DTML method to the original DTML Document's namespace. I'd appreciate any help! I have a DTML document. It has a valid aq_parent. From this DTML document, I'm calling a product method, passing the DTML documents's aq_parent as an argument: <dtml-var "NFGnavCore.aqqy(aq_parent)"> This method has access to the aq_parent object all right, tested OK. Next, the DTML method is called from the product python method and the original aq_parent object is given as the new acquisition context: def aqqy(self, context=None): """ some test method""" retval= "Hi! I'm the aqqy method, called with context.id <b>%s</b>" % context.id return retval + self.aqqy_helper(client=context) The DTML method 'aqqy_helper' is called all right, but has no access to the context object passed in. Any attempt to access objects that should be in the acquired namespace, for example: My aq_parent id= <dtml-var "aq_parent.id"> results in an error message: You are not authorized to access aq_parent. Which, if I'm not mistaken, is caused by the validate routine called from OFS/DTMLMethod.py as documented in 'oldvalidate()': if inst is parent: raise 'Unauthorized', ( 'You are not authorized to access <em>%s</em>.' % name) So what am I doing wrong, and what is the right way to call DTML methods from product methods? :*CU# -- *** Guido A.J. Stevens *** mailto:gyst@nfg.nl *** *** Net Facilities Group *** tel:+31.43.3618933 *** *** http://www.nfg.nl *** fax:+31.43.3560502 *** By 2003, most industrial countries wil log and analyze the movements of every citizen. [Pearson, ISBN 0-02-862089-5, p.62]

1 0

hmmm - newly upgraded to 2.1.5 from source
by Dr. Ross Lazarus 18 Mar '00

18 Mar '00

sunos 5.6 source distribution upgraded with 2.1.x to 2.1.5 and recompiled, fastcgi -> apache... I just noticed this on the console that I started my newly upgraded 2.1.5 zope from zope on sin~/zope215/lib/python>Unhandled exception in thread: Traceback (innermost last): File "/usr/local/zope/zope215/ZServer/PubCore/ZServerPublisher.py", line 97, i n __init__ response._finish() File "/usr/local/zope/zope215/ZServer/FCGIServer.py", line 699, in _finish 'log_request')) File "/usr/local/zope/zope215/ZServer/FCGIServer.py", line 564, in push if send: self.initiate_send() File "/usr/local/zope/zope215/ZServer/medusa/asynchat.py", line 206, in initia te_send self.refill_buffer() File "/usr/local/zope/zope215/ZServer/medusa/asynchat.py", line 190, in refill _buffer self.producer_fifo.pop() File "/usr/local/zope/zope215/ZServer/medusa/asynchat.py", line 264, in pop del self.list[0] IndexError: list assignment index out of range anyone ? I'll drop it in the collector. -- Dr Ross Lazarus Associate Professor and Sub-Dean for Information Technology Faculty of Medicine, Room 126A, A27, University of Sydney, Camperdown, NSW 2006, Australia Tel: (+61 2) 93514429 Mobile: +61414872482 Fax: (+61 2) 93516646 Email: rossl(a)med.usyd.edu.au

1 0

FYI: Trip to Colorado
by Paul Everitt 18 Mar '00

18 Mar '00

Howdy folks. Sorry for the late announcement, but I've just confirmed a trip to the Colorado Linux Info Quest: http://www.thecliq.org/ I'll be doing a demo and a BOF. If anybody in the area would like to chat, please drop by! --Paul

2 1

security
by sam 18 Mar '00

18 Mar '00

Besides the AUTHORIZED_USER field in the http header what else does zope use to identify an http packet from a browser ?. I am just wondering can I not masquerade as a user by setting the http header using httplib or some such utility ?. I have not seen any session ids in the REQUEST variable which is supposed to contain all the variables in the browser request thanks sathya -- ########################## necessity is the mother of invention ##########################

3 3

Cron with Zope
by Luis Cortes 18 Mar '00

18 Mar '00

Hello, I remember a really good email on how to use CRON with Zope. If someone could repost this and/or send me you howto, I sure would appreciate it. Thanks in advance, Luis.

2 1

Re: [Zope] security question
by Tres Seaver 17 Mar '00

17 Mar '00

"Brad Crittenden" <bac(a)ivc.com> wrote: > > hello: > > for my zope, the root directory is protected so that anonymous users have no > permissions. in addition to root, two other users are defined and given the > role 'internal'. one of the users has a username/password. the other > allows access based upon IP range. this works as intended. > > i now want to give anonymous users permission to access > /subfolder/index_html. this dtml method accesses a database and uses > LocalFS. > > my first attempt to realize this was to assign the appropriate permissions > to Anonymous for index_html. when this failed, i went to the /subfolder > security and modified permissions there that seemed relevant. i tried many > combinations until finally giving up and granting all available permissions > to Anonymous at the /subfolder and /subfolder/index_html levels. so now, > all permissions are checked for 'acquire' and for 'Anonymous'. > > even this does not work! users attempting to access > http://myzope/subfolder/index_html are greeted with an authentication > dialog. > > so, despite the fact that security seems to be a pretty simple concept i > seem to be missing something fundamental. > > any insight would be appreciated. Chris Withers <chrisw(a)nipltd.com> replied: > > > so, despite the fact that security seems to be a pretty simple concept i > > seem to be missing something fundamental. > > Security is never a simple concept, especially in system as complex as Zope. > > Some decent documentation would help ;-) The key to figuring this behavior out is understanding how ZPublisher maps a URL: * Split the URI path into a sequence of names * From the root, traverse each named object in order (allowing it to intercept the traversal, if it wants). Traversal requires at least minimal permissions on the traversed-through object. * During traversal, allow the acquisition machinery to operate * If the last item traversed to is callable, call it; otherwise, render it. This works somewhat like permissions on a Unix directory: you have to have the executable bit set in order to traverse the directory, and the read bit set in order to list it. Hope this helps! Tres. -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

1 0

Security question
by Daniel.Weber＠SEMATECH.Org 17 Mar '00

17 Mar '00

As far as authorization goes, I've noticed that I get prompted for a user-name/password only once during a session. After you've been validated, it appears zope does not prompt you again for that browser session. The reason I'm concerned is that if I have to do maintenance on someone else's web browser, how do I ensure that after I leave a person cannot use the back button or history list to gain manager access to the site? Do I have to exit the browser when I'm done?

4 3