- Zope - Zope lists

GUF and security
by Lucas Vogel 28 Feb '00

28 Feb '00

Could someone point me out to some good documentation to explain security in Zope for me? I am trying to set up the GUF through my database, but I find I am having a hard time figuring out proxy logins and the like and would like to read up and have a good understanding of the Zope model before I start outsourcing it to my db. Thanks -- Lucas Vogel lucas7(a)home.com ICQ: 44697169

3 2

Trouble with Generic User Folder
by Michiel Toneman 28 Feb '00

28 Feb '00

Hi, I've been trying to get something sensible done with GenericUserFolder, but keep on running into this problem: ----------- 2000-02-22T16:15:19 ERROR(200) GUF http://newserver:8080/test_access/acl_users/userAuthenticate raised an exception (('Unauthorized', 'You are not authorized to access <em>SQL_get_password</em>.', <traceback object at 85ec318>)) ----------- SQL_get_password is a ZSQL method like: --------------------------- SELECT password as real_password FROM users_tmp WHERE name=<dtml-sqlvar username type=string> --------------------------- with as Argument "username" I've given all possible permissions to the SQL method, but no dice :( Any suggestions? Greetings, Michiel -- >From a Sun Microsystems bug report (#4102680): "Workaround: don't pound on the mouse like a wild monkey."

3 3

structured text with <dtml> tags?
by Alex Burton 28 Feb '00

28 Feb '00

Hello List, I'm still discovering Zope and I'm having fun with structured text. I'm wondering if there's a way to evaluate <dtml> tags in the structured text before (or after) rendering the structured text to HTML. Right now i'm using <dtml-var my_text fmt=structured-text>, which includes the DTML in the HTML without touching it. Thanks! Alex.

6 8

External Methods tricky point
by Brian Takashi Hooper 28 Feb '00

28 Feb '00

Hi everyone, I just thought that I would pass along this tidbit for anyone that might be interested - we just finished figuring out a problem that was causing massive slowdown on our Zope site, as a result of ZODB lock contention... here's what to look out for: I had written an External Method something like: import re def foo(my_re=re.compile(r' ... ')): ... where I had a default argument that used the re module. For reasons that I don't yet understand, every time this External Method was called it registered an attribute change, and was rewritten to the ODB, causing every page view to require a write access. I solved the problem by rewriting my EM to use ts_regex instead - however, it would be nice to know what might have been causing this to happen... Any ideas? --Brian

1 0

Re: [Zope] Fourth request for help - Win2K+Zope
by Tres Seaver 28 Feb '00

28 Feb '00

Michael Simcich <msimcich(a)accesstools.com> wrote > <snip> > > I know what most everyone here would recommend I switch to, Linux for OS and > Zope for writing applications. That at least is not obscured. And the > reasons are transparent too, Linux works well if you know it, and Zope is > unlike any other tool we have available. I was interested in evaluating Zope > first, before learning Linux, but perhaps I don't have that choice. For simple feature evaluation, try a Win98 or NT box, and stick to using ZServer as a service -- Zope works beautifully in those configurations (modulo some Win95/8 weirdness on startup if you don't have DNS handy). > Oh... I just saw that you wrote "but without any customers that want/need > this, it will not happen unless someone can pinpoint with some accuracy how > exactly it fails on 2K". I didn't get that before - you are talking about > DC's paying customers. It's certainly a fair division, but I hadn't quite > plugged it in as this much of a factor in how Zope is > extended/fixed/understood. I should have, it makes sense, I just didn't get > it in this way before. Your real problem is that Win2K is uncharted territory for almost everyone on this list: "Hic sunt draconis" is the first response for most. That said, I routinely move folders and products between Zopes running on both Linux and NT, precisely to avoid depending on platform idiosyncracies. > > > Have you considered that the problem is not Zope at > > all, but perhaps some sort of conflict with your existing setup or some > > other parameter? > > Of course I have, and of course I have no idea what to look for. What I was > hoping for was a pointer or two, Zope is a black box to me. No errors are > produced, as I said, so any failure between it and W2K is unrecorded. I > don't really care if it's Zope or python or Win2K or my rig that has a > "problem" if indeed there is either a real problem or just a mismatched > switch or two, I just want to know how to accommodate "it". The classic Windows troubleshooting procedure goes something like: * Install Windows on a bare box, using the VGA driver (video drivers are _notorious_ for causing pseudo-random bugs in apparently unrelated applications). Snapshot the registry to a text file. * Install only the software which you are trying to install, and test (if it breaks here, your next best bet on the system side is the network card driver). Snapshot the registry to another text file. * Add the other components of the system one a time, testing after each and snapshotting the registry to a new text file. When the app in question breaks, diff the two most recen registry snapshots, and look at the DLL's installed by the most recently-installed app. > > I'm coming from the MS world. There if a problem arises, as they do in > abundance, everyone involved with the products more or less has a stake in > resolving problems. In a way, they all share the baseline weaknesses of the > Windows realm and MS's products. My brick wall is their brick wall, to some > extent. Here, my brick wall is... mine. Don't misread DC -- they _do_ have an interest in supporting Zope on Win2K; what they don't have is the ability to troubleshoot your configuration in the absence of more specific data than you provide, especially given reports from other Win2K users that it "works for them" there. Somebody (Martijn Pieters, I think?) gave you pointers for stepping into the Zope startup process using the Python debugger: if you can, doing that and reporting the full context at the place things go haywire is the surest way to get resolution (short of buying a support contract, that is -- but then, the first thing DC would do is to perform the exact same troubleshooting). And to answer the subtext: I have been working with Microsoft platforms professionally for the last 10 years, and I have gotten significant help from Microsoft exactly _once_ in the dozens of support calls I made, some on behalf of Fortune 100 companies (I don't consider "try reinstalling Windows and see if that helps" to be "significant help"). I see far better support here daily, from both DC and the Zope community, than I ever expect to see from the Redmond juggernaut. > > Anyways, thanks for clearing up some of these things for me. With any luck > I'll be able to spend some time with a working copy of Zope sometime in the > near future and my questions will be more resolvable. -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

2 1

Zope and FastCGI
by Bill Anderson 27 Feb '00

27 Feb '00

I've been trying to get Zope to work with roxen and FastCGI. No luck. I was wondering if anyone else has tried this. Anyone succeed? TIA, Bill -- In flying I have learned that carelessness and overconfidence are usually far more dangerous than deliberately accepted risks. -- Wilbur Wright in a letter to his father, September 1900

1 0

Re: [Zope] Building tables from a db in dtml...
by Tres Seaver 27 Feb '00

27 Feb '00

"Cornelis J. de Brabander" <brabander(a)fsw.leidenuniv.nl> > Subject: Re: > > -----Oorspronkelijk bericht----- > Van: Martijn Pieters <mj(a)digicool.com> > Aan: jiva(a)devware.com <jiva(a)devware.com>; zope(a)zope.org <zope(a)zope.org> > Datum: zondag 27 februari 2000 10:57 > Onderwerp: Re: [Zope] Building tables from a db in dtml... > > [snip] > > >(untested): > > > > <table><tr> > > <dtml-in db_query> > > <dtml-if "_['count-value'] % 4 == 0"></tr><tr></dtml-if> > > <td><dtml-var value></td> > > </dtml-in> > > </tr></table> > > > >Now, I could be wrong and count-value is 1 based in stead of 0 based. In > >fact, I believe it is, it would make sense anyway. Then you'd adjust the > >logic slightly, something like (_['count-value'] - 1) % 4. > > > > Count-xxx does not change during the sequence, it simply gives the number of > non-missing xxx-values in the sequence. Furthermore, refering to the > response of Jim Sanford, the solution can do without integer or sting > conversions: > > (tested!!!) > > <TABLE> > <dtml-in objectValues> > <TR><TD><dtml-var sequence-number></TD> > <TD> > <dtml-if "_['sequence-number']!=0 and _['sequence-number']%2==0">even > <dtml-else> odd > </dtml-if> > </TD></TR> > </dtml-in> > </TABLE> Check out (for this purpose, anyway) sequence-odd and sequence-even in the DTML reference. To answer the original poster:: <dtml-if "_[ 'sequence-index' ] % 4 == 0"> </tr><tr> </dtml-if> should do fine. And to emulate Cato, Agnosciti invalidi delendi est ("Invalid identifiers must be destroyed"). I _hate_ the "sequence-foo" pseudo-identifiers in DTML, worse than any other feature of Zope. The only rational way to spell the above is:: <dtml-if "sequence_index % 4 == 0"> </tr><tr> </dtml-if> but that won't work (without enclosing it in a <dtml-let> which aliases 'sequence-index' as 'sequence_index'. -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

1 0

Acquisition of properties?
by J C Lawrence 27 Feb '00

27 Feb '00

Given the following folder tree: / XXX YYY Where XXX and YYY both contain property sheets with properties defined, the "YYY" folder contains a "discuss" DTML method, and the "XXX" folder is a PortalFolder and contains a "test" DTML Method that reads something like: <dtml-var standard_html_header> <dtml-with YYY> <dtml-var "discuss()"> </dtml-with> <dtml-var standard_html_footer> Why, when viewing "WWW/test", can't the "discuss" method find the properties defined on YYY? I thought I understood acquisition... -- J C Lawrence Home: claw(a)kanga.nu ----------(*) Other: coder(a)kanga.nu --=| A man is as sane as he is dangerous to his environment |=--

2 1

standard_error_message behavior
by Stephen Pitts 27 Feb '00

27 Feb '00

Why is standard_error_message called only sometimes? I've overridden standard_error_message on my site to print "Mysterious Error has Occurrred" and email me. It works when I call one of my DTML methods that requires parameters without parameters, i.e. http://www.centralchurchyouth.org:8100/search? invokes standard_error_message OK because the keywords parameter is not specified However, on a simple notFoundError, standard_error_message isn't invoked, i.e. http;//www.centralchurchyouth.org:8100/page_that_does_not_exist shows a standard Zope error screen. Is this supposed to be this way? If not, how can I make my standard_error_message be used in all situations? -- Stephen Pitts smpitts(a)midsouth.rr.com

1 0

Re: [Zope] DESPERATION: ZCatalog search madness
by Hung Jung Lu 27 Feb '00

27 Feb '00

Hi again, I have confirmed your cases. And frankly I think it's a bug inside ZCatalog, but nothing to worry about. I think they are letting the sort feature out of ZCatalog now. So, instead of using sort_on inside the Catalog call, you simply use the sort feature of the <dtml-in ...> tag. So, instead of: <dtml-in "publicationCatalog(Authors='Kivshar',sort_on='Journal')"> <dtml-in "publicationCatalog(Authors='Kivshar',sort_on='Year')"> do this: <dtml-in "publicationCatalog(Authors='Kivshar')" sort=Journal> <dtml-in "publicationCatalog(Authors='Kivshar')" sort=Year> You'll now be a happy camper. regards, Hung Jung ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1