- Zope - Zope lists

Can a parent folder access objects in child folder?
by Lucas Vogel 23 Feb '00

23 Feb '00

If so, what would be the syntax for that? Thanks -- Lucas Vogel lucas7(a)home.com ICQ: 44697169

2 1

Re: [Zope] Bug in object security?
by Tres Seaver 23 Feb '00

23 Feb '00

"James W. Howe" <jwh(a)allencreek.com> wrote: > > I've encountered a strange behavior with the Zope security mechanism which > strikes me as a bug. Here is what I've done: > > 1. Create a folder in root named 'AccessTest' > 2. Create a user folder in AccessTest > 3. Define a role for AccessTest called 'Publisher' > 4. Create a user in the acl_users directory and grant the user 'Publisher' > access > 5. From the AccessTest security tab, disable 'Access contents information' > for anyone except the manager. > 6. From the AccessTest security tab, enable 'View management screens' for > Manager and Publisher. > > From a fresh browser (no previous authentication), attempt to access the > management interface for AccessTest (i.e. > http://foo.com:8080/AccessTest/manage) Log in as the 'Publisher' > user. The screen displaying the contents of the AccessFolder will be > displayed. However, this is where I think a mistake has been made. > > In ObjectManager, the 'View management screens' has been associated with > manage_main and manage_menu. Similarly, ObjectManager defines the 'Access > contents information' for the methods objectIds, objectValues and > objectItems. When I disable 'Access contents information' for my Publisher > role, it would seem that users with this role should not be able to access > these methods. However, the manage_main dtml code which defines the > contents view of the management interface makes use of these methods. When > the manage_main dtml is rendered, why doesn't Zope prompt for > authentication when manage_main attempts to access objectItems, for example? > > I'm sure there is a very reasonable explanation, but it strikes me as odd. The likeliest explanation for this feature is that manage_main has a "proxy role" which permits it to have access beyond that of the user who called it. Like the setuid/setgid bits on an executable file in a Unix filesystem, proxy roles allow for controlled access to features; also like those bits, proxy roles could potentially open security holes, if an untrusted user is able to modify the text of the method which has them. Tres. -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

2 1

Zope ZODB console error message interpretation
by Dr. Ross Lazarus 23 Feb '00

23 Feb '00

I'm getting the following messages appearing with some regularity now that I'm running zope 2.1.4 using the -D switch ------ 2000-02-23T09:08:03 ERROR(200) ZODB Couldn't load state for '\000\000\000\000\000\000\036M' ------ 2000-02-23T09:08:03 ERROR(200) ZODB Couldn't load state for '\000\000\000\000\000\0006K' ------ 2000-02-23T09:08:23 ERROR(200) ZODB Couldn't load state for '\000\000\000\000\000\000\036M' ------ 2000-02-23T09:08:23 ERROR(200) ZODB Couldn't load state for '\000\000\000\000\000\0006K' Packed database - no change. Messages appear when zope is asked to do something after a period of inactivity - presumably something's been flushed from the cache and is causing problems when reloaded. Any suggestions as to how to locate and remove the offending objects ?

2 1

RE: [Zope] object icons
by Martijn Pieters 23 Feb '00

23 Feb '00

From: Loren Stafford [mailto:lstaffor@dynalogic.com] > > As usual, I blabbered on before I knew what I was talking about. > > I played some more with this (because I have the same problem > in my product) > and found that the "Product Icons" section at > http://www.zope.org/Members/Zen/howto/ProductAPITutorial does > indeed work as > documented: > > > > Here's our poll's misc_ definition: > > misc_={ > 'poll': > ImageFile('poll.gif',globals()), > } > > > It only defines one thing--the poll's > icon. For your > Product's icons you should use 'ImageFile's. > > Objects defined in a Product's misc_ > mapping are made > available through the web at /misc_//. > > To allow Zope to find this icon you > need to specify > its URL in your Product's class. So here's how we indicate our poll's > icon: > > class Poll: > ... > icon='misc_/Poll/poll' > ... > > You just have to realize that icon="misc_/<ProductID>/<misc_key>". The Misc object is a special object for storing things like the actual data for product icons. Using context.registerClass automates the process of storing an icon in the misc_ structure (containing Misc objects), and having your class.icon URL attribute pointing at the URL for that icon. Doing so makes it easier for your product to have an icon, and you don't have to worry about setting the icon attribute correctly. Just leave out the icon attribute of you class, and pass in the (relative) path to your icon. See, for example, lib/python/Products/ZCatalog/__init__.py. You will only want to mess with the icon attribute when you want to dynamically change the icon of your class. You'd have to store the icons manually in the misc_ structure, like Loren described, and manually set your icon attribute to URLs to those icons. -- Martijn Pieters, Software Engineer | Digital Creations http://www.digicool.com | Creators of Zope http://www.zope.org | mailto:mj@digicool.com ICQ: 4532236 | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 -------------------------------------------

1 0

Re: [Zope] aquisition and refining
by J C Lawrence 23 Feb '00

23 Feb '00

On Tue, 22 Feb 2000 21:47:17 -0500 Alex Burton <burton(a)w3cast.com> wrote: > Aquisition is groovy, but is it possible to refine aquired > properties instead of redefining them from scratch? Yes, You can use PARENT[x] to grab the appropriate "higher version". > (Creating a standard_html_header in s subfolder and using > > <dtml-var standard_html_header> does not produce expected > result, that is grabbing the upper-level's definition of > standard_html_header). Something along the line of: <dtml-var "PARENTS[-1}.standard_html-header> should work -- J C Lawrence Home: claw(a)kanga.nu ----------(*) Other: coder(a)kanga.nu --=| A man is as sane as he is dangerous to his environment |=--

1 0

Re: [Zope] bug/defect tracking w/CVS
by J C Lawrence 23 Feb '00

23 Feb '00

It turned out to be a weird corruption problem. If I tried to call my ZSQL methods from an external method, they complained that they were unable to access the DB connection. I could delete and recreate all the objects involved to only recreate the same results. Finally I created a new folder with a new connection object and new external method (no editing involved) and copied over the ZSQL methods -- only to have it work perfectly. <roll eyes> For those interested I have the new working, and the old non-working folders preserved. If DC wants a copy of the Data.fs, please just ask. Right now I need to figure out how to read cookies. I know how to set them, just not how to tell I've got one. On Tue, 22 Feb 2000 21:19:39 -0500 Ray Thompson <rayd(a)90068.com> wrote: > well, we'd love to see this working in zope, so let me know the > extent of the problem. I don't know if I can fix it, or get it > fixed, asyet -- but I'll try. > r > J C Lawrence wrote: >> On Mon, 21 Feb 2000 13:46:42 -0500 Ray Thompson <rayd(a)90068.com> >> wrote: >> >>> Anyone heard of or used a bug/defect tracking system which >>> would allow people to report defects via a website and >>> developers to comment on them. I have an idea there is one >>> which integrates with cvs, but I'm having trouble tracking it >>> down. >> >> You can find several listed in the Library at Kanga.Nu under: >> >> http://www.kanga.nu/library.php3?viewCat=139 >> >> and: >> >> http://www.kanga.nu/library.php3?redirect=969 >> >> Yeah, I know I'm using PHP. I've got most of a (better) Zope >> version ready if I could just get external methods and ZSQL >> methods talking to each other properly (the ZSQL method loses the >> DB connector _and_ doesn't get the right arguments passed to it). -- J C Lawrence Home: claw(a)kanga.nu ----------(*) Other: coder(a)kanga.nu --=| A man is as sane as he is dangerous to his environment |=--

1 0

Using apache w/ZServer question
by Lucas Vogel 23 Feb '00

23 Feb '00

I am trying to use Apache and ZServer as per the document located on: http://www.zope.org/Members/anser/apache_zserver and am having some problems. In the document it says to put the ProxyPass directives within the main Directory context. I assume that he's referring to the DocumentRoot; yet whenever I put the Proxy* directives anywhere I get an error when I try to restart apache, saying that they can't be in there. So I take them out and leave them by themselves. Apache restarts, but when I try to go to the path I get a 'Document contains no data' message. This tells me(unless I am mistaken) that I have apache configured correctly, but I don't have zope configured to supplement that. I created a directory called 'zope' in Zope, thinking it was looking for that directory(I set the proxy to go into a hostname.com/zope configuration). Same message. I put the SiteAccess object and set it like the directions, but then I get an internal apache error. Could someone please tell me what I am doing wrong? Also, does Zope actually create files from the created objects and put them anywhere? Thanks -- Lucas Vogel lucas7(a)home.com ICQ: 44697169

2 1

aquisition and refining
by Alex Burton 23 Feb '00

23 Feb '00

Me again (last one for tonight!) Aquisition is groovy, but is it possible to refine aquired properties instead of redefining them from scratch? (Creating a standard_html_header in s subfolder and using <dtml-var standard_html_header> does not produce expected result, that is grabbing the upper-level's definition of standard_html_header). Is there a DTML tag such as <dtml-refine> which, when stated at a given level, would indicate where to insert sublevel redefinition of the DTML method? Maybe i'm thinking too much of OO inheritance... Alex

2 1

Re: [Zope] object icons
by Loren Stafford 23 Feb '00

23 Feb '00

Oops. What I said below doesn't even work in my installation. I guess I can't help much. I also tried the stuff in the "Product Icons" section at http://www.zope.org/Members/Zen/howto/ProductAPITutorial and it doesn't quite work as documented anymore. But the icon= statement in the Class definition does seem to take some kind of URL. -- Loren From: Loren Stafford <lstaffor(a)dynalogic.com> > I'm not sure; but I inherited some code that works like this: > > # Set the icon for the MyClass, because it doesn't act > # like a regular object, so I can't use registerClass > misc_ = { 'MyClassIcon': ImageFile('www/MyIcon.gif', globals()) } > > Apparently, in this case, the ID is constructed as <MyClassID>+'Icon'; > because there is no corresponding icon=... statement anywhere. But, I can't > find the Zope code that does this; so, I might be deceived. > > -- HTH > -- Loren, also struggling to write a product > > ----- Original Message ----- > From: Terry Kerr <terry(a)adroitnet.com.au> > To: <zope(a)zope.org> > Sent: February 22, 2000 04:29 PM > Subject: [Zope] object icons > > > > Hi, > > > > How can I assign icons to objects within my product. I am only > > registering one container class in the __init__.py of the product, but > > want other objects within the product to have icons even tho they are > > only explicitly created and added by the product itself. > > > > setting an icon='blah.gif' in the class doesn't work. I am having > > trouble working out what setting this attribute is actually doing. > > > >

2 1

Re: [Zope] object icons
by Loren Stafford 23 Feb '00

23 Feb '00

As usual, I blabbered on before I knew what I was talking about. I played some more with this (because I have the same problem in my product) and found that the "Product Icons" section at http://www.zope.org/Members/Zen/howto/ProductAPITutorial does indeed work as documented: Here's our poll's misc_ definition: misc_={ 'poll': ImageFile('poll.gif',globals()), } It only defines one thing--the poll's icon. For your Product's icons you should use 'ImageFile's. Objects defined in a Product's misc_ mapping are made available through the web at /misc_//. To allow Zope to find this icon you need to specify its URL in your Product's class. So here's how we indicate our poll's icon: class Poll: ... icon='misc_/Poll/poll' ... You just have to realize that icon="misc_/<ProductID>/<misc_key>". -- HTH -- Loren From: Loren Stafford <lstaffor(a)dynalogic.com> > Oops. What I said below doesn't even work in my installation. I guess I > can't help much. > > I also tried the stuff in the "Product Icons" section at > http://www.zope.org/Members/Zen/howto/ProductAPITutorial and it doesn't > quite work as documented anymore. But the icon= statement in the Class > definition does seem to take some kind of URL. > > -- Loren > > From: Loren Stafford <lstaffor(a)dynalogic.com> > > > > I'm not sure; but I inherited some code that works like this: > > > > # Set the icon for the MyClass, because it doesn't act > > # like a regular object, so I can't use registerClass > > misc_ = { 'MyClassIcon': ImageFile('www/MyIcon.gif', globals()) } > > > > Apparently, in this case, the ID is constructed as <MyClassID>+'Icon'; > > because there is no corresponding icon=... statement anywhere. But, I > can't > > find the Zope code that does this; so, I might be deceived. > > > > -- HTH > > -- Loren, also struggling to write a product > > > > ----- Original Message ----- > > From: Terry Kerr <terry(a)adroitnet.com.au> > > To: <zope(a)zope.org> > > Sent: February 22, 2000 04:29 PM > > Subject: [Zope] object icons > > > > > > > Hi, > > > > > > How can I assign icons to objects within my product. I am only > > > registering one container class in the __init__.py of the product, but > > > want other objects within the product to have icons even tho they are > > > only explicitly created and added by the product itself. > > > > > > setting an icon='blah.gif' in the class doesn't work. I am having > > > trouble working out what setting this attribute is actually doing. > > > > > > > >

1 0