- Zope - Zope lists

DiskBased products and security
by Haim Ashkenazi 13 Jun '05

13 Jun '05

Hi I'm following the example of "The Zope Bible" on how to create disk based products. after adding the imports, 'InitializeClass(class)' statement and the 'security = ClassSecurityInfo()' statement he recommends two other statements: 1. __roles__ = () - I didn't understand exactly why but with this statement I can't access the product either from the ZMI or directly from the web. 2. security.setDefaultAccess("deny") - I think I understand why we changed that, but it's causing a lot of problems. If I add 'delareProtected' for all my methods, I can access certain pages , but with some pages (maybe ones that's calling methods form base classes or acquisition like 'title_or_id') I still get errors ("Unauthorized: You are not allowed to access 'title_or_id' in this context"). trying to solve this I started adding 'declareProtected' for every method I got error for. I gave up after 3 methods, but it seem to help. so, I was wondering if something was changed in the security model since 2.5 (the version that the book is about) until 2.7, and is there a place where it's documented (the zope developer guide is versioned 2.4)? also, If I'll make sure that every method I have in my module is also declared as protected, or public, is there a problem with living the default access as any? thanx -- Haim

2 3

ACTUAL_URL vs. VIRTUAL_URL
by Bert Vanderbauwhede 13 Jun '05

13 Jun '05

Hi, What's the difference between ACTUAL_URL and VIRTUAL_URL in the REQUEST object? Bert...

3 3

Problem with manage_FTP...
by Thierry FLORAC 13 Jun '05

13 Jun '05

Hi, I'm actually building with Zope (2.7.6) , through the development of a custom product, a small file server, available through FTP, HTTP or WebDAV with access controlled by an LDAP server (with LDAPUserFolder). Everything works fine with every protocol concerning access rights. The only thing that I don't manage to do is, in FTP or WebDAV, to restrict a user view (a directory listing) to the only files that he can effectively download (for these files, they can be effectively downloaded, but they are actually seen in the list !). I've tried to play with "manage_FTPlist" and "manage_FTPstat" methods, both on my folderish product and on my custom folder items (by returning exceptions or returning None values), but didn't manage until now to get a good result (the list is often completely empty when access is forbidden even for a single file !). Any help would be welcome !! Thanks, Thierry

2 1

Product architecture question (long)
by Nikko Wolf 13 Jun '05

13 Jun '05

I've been using Zope (w/Plone) for some time now and am still trying to understand how best to architect the solution for my site. I'm presuming I need to create a Product for the new types of objects/files I want, but even on that topic I'm not completely convinced. My objectives and constraints are: - The primary purpose for the site's existence is to manage some content files (text/ml) and allow a workflow process on those. The workflow will likely change and hopefully will have minimal programming changes when it does. - Users will have one of several roles: Author, Reviewer (of which there are currently two types), and Editor. - I do not want ANY access by unauthorized users. Obviously they must be able to reach a login page, and get instructions on how to request an account, password reset, etc. - Here's the complication -- each file will have potentially multiple versions in process at once. Each version of a file may have a different state, and I'd like to have a history of all changes to each version as they go through the workflow. - Once a file/version is submitted for review, any of the reviewers may work on it, it is not necessary that one role preceded the other, but it is required that a user in each role approve the file. - The workflow is subject to change (the real one that the humans use), so this could precipitate changes to the Zope workflow: - The users' roles may change (easy), - There might be another type of Reviewer created that gets grafted into the review process, - There might be other steps ("states") added to the workflow, and corresponding changes to the process. - We need to have good automated backup solution for the content (as in mirroring the content on another host). - And, of course, I'm under pretty extreme time pressure. =============== So my questions are: 0) Is DCWorkflow and a new Product [document type(s)] the way to go? 1) Is there a product that does something similar that I could use or adapt? 2) Barring that, is there a product that would be a good starting point? 3) Is there something that manages a file history (like CVS, etc.) that can be easily used within Zope? 4) How does one secure a Zope+Plone site? I'm running on FC3, Zope 2.7.6-final, Plone 2.0.5, Python 2.3.4 Thanks in advance! Nikko

5 9

zope backward compatibility policy?
by gabor 13 Jun '05

13 Jun '05

hi, what's the backward compatibility policy of zope? i'm asking because while upgrading from 2.6.4 to 2.7.2 we had some problems. simple ones (like the 'lines' property type seems to have changed from list to tuple), but still problems. i checked the changelogs, and this change does not seem to be mentioned. i thought that if someone is not in the changelog, then is supposed to be unchanged. or not? p.s: i am still a beginner in the zope world, so maybe i am completely wrong :) gabor

3 4

RE: [Zope] Zope 2.8.0 monkey patch issue
by Pascal Peregrina 13 Jun '05

13 Jun '05

Thanks, that works ! Pascal -----Message d'origine----- De : zope-bounces(a)zope.org [mailto:zope-bounces@zope.org]De la part de Bernd Dorn Envoyé : lundi 13 juin 2005 12:26 À : 'zope(a)zope.org' Objet : Re: [Zope] Zope 2.8.0 monkey patch issue Pascal Peregrina wrote: > Hi, > > I am trying to migrate from Zope 2.7.6 to 2.8.0 > > In some product I did, I need to monkey patch some OFS and CMF classes (I do > this in product init). > > I get this error whenever I try to do > <someclass>.__dict__[<someclassattributename>]=<newvalue> : > TypeError: object does not support item assignment 'got the same problem use: setattr(<someclass>,<someclassattributename>,<newvalue>) must be something about the new implementation of extensionclass > > This was working fine in Zope 2.7.x > > Any idea what could have changed that would imply this ? > > Thanks for your answers. > > Pascal > > > ********************************************************************** > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote also confirms that this email message has been swept by > MIMEsweeper for the presence of computer viruses. > > www.mimesweeper.com > ********************************************************************** > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

Zope 2.8.0 monkey patch issue
by Pascal Peregrina 13 Jun '05

13 Jun '05

Hi, I am trying to migrate from Zope 2.7.6 to 2.8.0 In some product I did, I need to monkey patch some OFS and CMF classes (I do this in product init). I get this error whenever I try to do <someclass>.__dict__[<someclassattributename>]=<newvalue> : TypeError: object does not support item assignment This was working fine in Zope 2.7.x Any idea what could have changed that would imply this ? Thanks for your answers. Pascal ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

3 2

Problem Installing Zope 2.7.0
by rni users 13 Jun '05

13 Jun '05

Hello Members, i m installing zope2.7.0 on red hat linux advance server 3.0....n m trying 2 create a new zope instance..but the problem is that there is no /bin directory created in my zope_home folder( which is zope-2.7.0) though all other doc ,import,lib, skel,Zserver,utilites,import, test.py,setup,py,sbin etc....have been created is sbin similar to bin?? m unable to execute the command......../bin/mkzopeinstance.py it says no such file or directory from where shld i run /mkzopeinstance.py??? m completely new to zope... kindly help Thankyou _________________________________________________________________ Sajnaave or Dhoom machaale? http://server1.msn.co.in/sp05/iifa/ Make your favourite song win!

2 1

Re: datetime bug
by Dennis Allison 12 Jun '05

12 Jun '05

Thanks Lupa. I have tracked it down and created a patch which fixes the problem in general. Seems the ISO 8601 implementation had some warts. We are testing the patch now. When I am sure it's OK I'll submit it to the Collector with an "URGENT" tag. I'll also send you a copy. I suspect that the daylight savings time behavior is unrelated to this problem and is likely to be a bad entry in a table. Thanks for you helpful response. BTW if you want an alpha copy of the patch, let me know and I'll send it to you. The more testing the better. The patched version has the following semantics dates and times with no timezone tag resolve to the timezone of the host machine (Zope standard behavior) dates and times with a trailing Z are guaranteed to be GMT dates and times with a trailing offset have the offset as their time zone. It is illegal to combine a 'Z' and an offset. (Hacked in the code for 2.7 beta) I think this matches the spec at http://www.w3.org/TR/NOTE-datetime On Sun, 12 Jun 2005, +lupa+ wrote: > Hi Dennis, > I'm responding directly to you as I'm not on the zope list. I see the > same error on Zope 2.7.6 and with 2.3.5 python, not 2.4.x. I've narrowed > the behavior down a bit more and it seems that > > > dd = '%d-%02d-%02d' % (y,m,d,) > > D = DateTime(dd) > > converts to local time, while > > > ee = '%d/%d/%d' % (m, d, y) > > E = DateTime(ee) > > converts to Mean time. I'm not absolutely sure of that, but in a quick > look, I can see that the difference between D and E changes from -5 hours > to -3 when Daylight Savings Time change comes around... which seems a bit > weird in itself. I wrote and maintain CalendarX for Plone, so this > behavior concerns me greatly and I'll be looking into it more very soon. > > +lupa+ > Lupa Zurven, CalendarX.org > > > > > > > > At 12:00 PM 6/12/2005 -0400, you wrote: > >From: Dennis Allison <allison(a)shasta.stanford.edu> > >Precedence: list > >Subject: [Zope] Datetime bug in Zope-2.7.6? > >Date: Sat, 11 Jun 2005 16:54:03 -0700 (PDT) > >To: zope(a)zope.org > >Message-ID: <Pine.LNX.4.44.0506111632260.3493-100000(a)shasta.stanford.edu> > >Content-Type: TEXT/PLAIN; charset=US-ASCII > >MIME-Version: 1.0 > >Message: 5 > > > > > >Zope 2.7.6 > >Python 2.4.1 (and yes, I know I am jumping the gun a bit) > > > >The problem appears to be in the parse component -- > > > >Consider a test script: > > > >for y in range(1995,2005): > > for d in (1, 3, 13, 25,): > > for m in (1,4,5,6,): > > dd = '%d-%02d-%02d' % (y,m,d,) > > ee = '%d/%d/%d' % (m, d, y) > > D = DateTime(dd) > > E = DateTime(ee) > > print dd, D.strftime('%Y-%m-%d') > > print ee, E.strftime('%Y-%m-%d') > >return printed > > > >In all cases, each of the dates shoudl be the same. As can be seen, > >for dates sourced from a string of the form > > > >1995-04-25 > > > >the resulatant date is off by one day > > > >1995-04-24 > > > >The problem is not seen with Zope 2.6.4 running with > >Python 2.3.5. > > > >A quick diff shows tht there are many changes between 2.6 and 2.7. > >Anyone else seen this problem? > > > >------------------------------------ > >Partial Results: > > > >1995-04-25 1995-04-24 > >4/25/1995 1995-04-25 > > > >1995-05-25 1995-05-24 > >5/25/1995 1995-05-25 > > > >1995-06-25 1995-06-24 > >6/25/1995 1995-06-25 > > > >-- > >Dennis Allison * Computer Systems Laboratory * Gates 227 > > * Stanford University * Stanford CA 94305 > > * (650) 723-9213 * (650) 723-0033 fax > > * allison(a)shasta.stanford.edu > > * allison(a)sumeru.stanford.edu > -- Dennis Allison * Computer Systems Laboratory * Gates 227 * Stanford University * Stanford CA 94305 * (650) 723-9213 * (650) 723-0033 fax * allison(a)shasta.stanford.edu * allison(a)sumeru.stanford.edu

1 0

Assiging Owner Roles to subfolders
by Dan E 12 Jun '05

12 Jun '05

Ok - newbie here, This may be a basic question but I can't figure it out. I have series of folders that I want different groups to be able to modify the contents of (including the sub-folders). I thought the easy way to do this is to create the folder and then share the contents of the folder with the group of interest. But for some reason, it doesn't automatically share all the subfolders with the user. Any ideas on how to do this would be appreciated. thanks in advance, Dan

1 0