- Zope - Zope lists

No permission to manage file
by Loren Stafford 30 Aug '99

30 Aug '99

In Zope 1.10.3, I've created a role "admin" that has the same permissions as "manager". I give "admin" role to the Administrators of subsections of our Intranet site. Some folders contain file objects that are (incidently) Acrobat files. Administrators have found when they are at the /manage screen for a folder, when they click on the link to the /manage-main method for a file object (e.g. http://intranet/Operations/DocControl/OPS-001.pdf/manage_main) they are presented with the authentication screen again, and authentication alway fails. (I've also experimented with files that do not have the .pdf extension, with the same results.) The Administrators can add files to the folder, but they cannot edit them. Looking at the security panel for the objects in question, I can see no reason for authentication to fail. All permissions are inherited from the folder, and the user (Administrator) has all permission that a "manager" has. Can anyone think of a reason for this behaviour? -- Thanks -- Loren Stafford

1 0

Startup script for Zope 2.x on RedHat Linux 6.0
by Suder Steen SFS 30 Aug '99

30 Aug '99

Hi, I'm looking for a script to start my Zope system on a RH6 system. The "start" script is nice, but it doesn't detach from the console. Does anyone have an example, a working script or suggestions? Best regards, Steen Suder Zope newbie

4 3

Re: [Zope] Notation question
by Christopher Petrilli 30 Aug '99

30 Aug '99

> I'm just starting to play with Zope, and having a great time. The > list community seems to be very friendly and helpful. Welcome :-) > Everybody in this list seems to use things like '<dtml-var foo>' in > their posted examples. Is this actual usable syntax, or is it > shorthand for the harder to type '' syntax? If the > latter, is there a definitive glossary for the correspondence? The <dtml-*> is the new syntax that we introduced for a bunch of boring reasons... it's turned into the prefer syntax, and we've decided to move all our manuals to that syntax, since it turns out to be much easier for most people to read (it also turns out to be much easier to teach to editors). You can just transliterate the whole thing :-) Chris -- | Christopher Petrilli Python Powered Digital Creations, Inc. | petrilli(a)digicool.com http://www.digicool.com

1 0

selectively showing standard_html_header in DTML methods
by happyrhino＠usa.net 30 Aug '99

30 Aug '99

Is there any way to check whether a DTML method is being called within a DTML document as opposed to being called directly from the URL ? I wish to display the standard_html_header within the DTML method in the latter case. Thanks, Henry ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

1 0

Re: [Zope] Notation question
by Kevin Dangoor 30 Aug '99

30 Aug '99

The <dtml-xxx> syntax is new in Zope 2.0, and is turning into the preferred syntax. (They are exactly the same commands, they just have "dtml" in front, instead of "!--#") Kevin -----Original Message----- From: Doug McNaught <doug(a)mcnaught.org> To: zope(a)zope.org <zope(a)zope.org> Date: Monday, August 30, 1999 2:46 PM Subject: [Zope] Notation question >I'm just starting to play with Zope, and having a great time. The >list community seems to be very friendly and helpful. > >Everybody in this list seems to use things like '<dtml-var foo>' in >their posted examples. Is this actual usable syntax, or is it >shorthand for the harder to type '' syntax? If the >latter, is there a definitive glossary for the correspondence? > >TIA, >Doug >-- >Doug McNaught doug(a)mcnaught.org http://www.mcnaught.org/~doug > >_______________________________________________ >Zope maillist - Zope(a)zope.org >http://www.zope.org/mailman/listinfo/zope > >(To receive general Zope announcements, see: >http://www.zope.org/mailman/listinfo/zope-announce > >For developer-specific issues, zope-dev(a)zope.org - >http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0

Notation question
by Doug McNaught 30 Aug '99

30 Aug '99

I'm just starting to play with Zope, and having a great time. The list community seems to be very friendly and helpful. Everybody in this list seems to use things like '<dtml-var foo>' in their posted examples. Is this actual usable syntax, or is it shorthand for the harder to type '' syntax? If the latter, is there a definitive glossary for the correspondence? TIA, Doug -- Doug McNaught doug(a)mcnaught.org http://www.mcnaught.org/~doug

1 0

Jon Udell talks Zope
by Kevin Dangoor 30 Aug '99

30 Aug '99

Saw this on Scripting News http://www.byte.com/column/threads/BYT19990824S0013

1 0

Security question w/ PCGI
by Thaxter, Jason M. 30 Aug '99

30 Aug '99

I suppose this concerns Apache more than Zope, but it might be a little cleaner to put the PCGI wrapper into its own sub-directory... Has anyone given thought to security questions arising from using Zope.cgi? I had to add <Directory "/path/to/Zope2"> Options ExecCGI </Directory> This makes me wonder if there might be some way to trick apache into trying to execute any of the other files in this directory (to my knowledge, not possible). The rewrite rule should prevent this, though I'm not entirely comfortable with this, since it depends on zope being up and running. Having only *.cgi files is nice, although a trojan file could be introduced if the administrator is a little careless (since zope's install leaves it to the user to correct permissions). But if you use -DSECURITY_HOLE_PASS_AUTHENTICATION instead of the rewrite rule, you have to move things around... My $0.02: it might make sense to move Zope.cgi to a subdir by default, if only to lessen the likelihood of security holes appearing...

1 0

IP Registering in a Poll: Attribute Error
by Avus 30 Aug '99

30 Aug '99

Hi, I'm trying to implement registering on IP addresses for the Poll product (from the Product API tutorial), but Zope won't let me :-( As a REQUEST object is passed to the vote() method in Poll.py, I can get the remote IP via remote_ip=REQUEST['REMOTE_ADDR'] #and print it e.g. like if REQUEST is not None: return MessageDialog( title='Vote Accepted', message='Yep. Your vote has been accepted, '+remote_ip, action =action, ) However, I couldn't store the IP addresses in a list. If I try to use a list like self.voted_ips=[] (like the self.votes={} dictionary already there) doing a self.voted_ips.appent(remote_ip) Zope will complain when I commit a vote: --8<-- Sorry, an error occurred. Traceback (innermost last): File lib/python/ZPublisher/Publish.py, line 877, in publish_module File lib/python/ZPublisher/Publish.py, line 590, in publish (Info: /test/testpoll/testpoll/vote) File /usr/home/me/zope/lib/python/Products/Poll/Poll.py, line 104, in vote (Object: RoleManager) AttributeError: voted_ips -->8-- Do I have to set special permissions somewhere? I'm working with Zope 1.10.3. Thanks Avus ____________________________________________________________________ Get your own FREE, personal Netscape WebMail account today at http://webmail.netscape.com.

1 0

newbie: Stupid question
by IvO 30 Aug '99

30 Aug '99

I have installed Zope on my Linux Box, and I am struggling with Zope publishing. On the document "A Technical Introduction to Object Publishing" there is the Hello.py example. Could someone tell me how to publish this module with Zope? The documents says "simply place this module on a Web Server with the apropriate Zope support files and it becomes a fully functional application". I beg your pardon but I have no idea how to do this, nor it is explained in the referred document or any other (at least in a way that I can understand -- you can call me stuoid if you like--) how are are those aprppriate files generated/writeen or its format. thanx in advance, Saludos, IvO

3 4