- Zope - Zope lists

Re: [Re: [Zope] Dictionary properties within Zope.]
by happyrhino＠usa.net 29 Aug '99

29 Aug '99

>> I can add properties which can be lines, strings, numbers. >> But hasn't anyone found the need to add dictionaries ? >> In almost every website I've created, the global configuration >> files are full of dictionary variables. >> For example, for navigation menus we might have >> navigation = {"Title 1" : URL1, "Title2" : URL2, etc} >> from which it's then simple to generate the HTML for the navigation. >> And there are many other instances where dictionaries save the day. > >The problem with this approach is, that you need at least three parts: >title, url, and sort key. Yes, that's what I usually have. But I use them over and over again so it's worth it. The dictionary might be = { "geo" : "Geological Reports", "his" : "Historical Manuscripts", etc } and then I have a list ["geo", "his".... ] which defines the list order since the dictionary.keys() can not be used. URL's are always based upon these keys so it's pretty much automatic :) >Actually, this can be done much nicer in ZOPE with the Navigation >Product. Maybe but I then call these dictionary keys in SQL statements. They're ingrained into the website. >> This would have been something very useful to put in the root >> folder properties as a form of "site configuration". >Well, this is not actually the ZOPE Zen, as it is absolutly non object >oriented. What if you delete some object? Or rename it? ... True. It would be best if these were generated on-the-fly but >> The only references to dictionaries seem to be with respect to the >> REQUEST.cookies and REQUEST.form and DTML doesn't seem to have the >> mechanisms for dealing with dictionary properties on folders. >Well, you can always set them in DTML methods yourself ;) >But navigation surely is the wrong usage for dictionaries ;) Actually, navigation is done via lists. The dictionaries provide titles or urls for the navigation :) Subtle difference. Anyway, I think I've found a way to do it. Not very elegant though = Create a 'lines' property called 'dico' eg. bio:Biohazard chem:Chemical Then in the DTML document use <dtml-in dico> <dtml-var "_.string.split(sequence-item,':')[0]"> <dtml-var "_.string.split(sequence-item,':')[1]"> </dtml-in> except I can't pass sequence-item to the Python expression :( By the way, is that really the way to use Python string services ? I tried <dtml-var expr="split()"> or <dtml-var "split()"> as per two different versions of documentation and it didn't work. Henry ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

2 1

RE: [Zope] <code> tag?
by Martijn Pieters 29 Aug '99

29 Aug '99

At 18:58 29-8-99 , Andreas Kostyrka wrote: >On Sun, 29 Aug 1999, Alexander Staubo wrote: > > > It only works when explicitly requesting a document by its name. So: > > > > http://www.mtg.co.at/PrincipiaSearchSource > > > > won't work, whereas: > > > > http://www.mtg.co.at/index_html/PrincipiaSearchSource > > > > will get you the DTML source. >Confirmed. That's what one calls a security misfeature? Depends on wether you mind that the whole DTML source code of your application is laying for the grab. When a similar 'feature' was found in Microsoft IIS it was dubbed a security breach, but then again, ASPs more often contain security sensitive information. I don't like it, for one. Being able to view a sites source code might reveal shortcomings in it that can be used to gain further access to your site. It might be that Zope has vulnerabilities as yet undiscovered. When thinking in terms of security, expect the worst. Okay, how about the source of your Z SQL Methods: Add getFindContent to the URL of a ZSQL Method, and you get the source, and this cannot be restrictable. If Zope wants to claim that it is secure, you should be able to protect your site's source code. -- Martijn Pieters, Web Developer | Antraciet http://www.antraciet.nl | T: +31 35 7502100 F: +31 35 7502111 | mj(a)antraciet.nl http://www.antraciet.nl/~mj | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 ---------------------------------------------

1 0

Re: [Zope] <code> tag?
by Martijn Pieters 29 Aug '99

29 Aug '99

At 09:04 29-8-99 , Andreas Kostyrka wrote: >On Sun, 29 Aug 1999, Martijn Pieters wrote: > > > At 02:03 29-8-99 , Mike Winter wrote: > > >Hi, just a quick question: how do you get Zope to display DTML without > > >evaluating it? > > > > There are two methods, one of which is (to me) a very serious security > > breach: document_src (for which you need the View management screens > > permission), and PrincipiaSearchSource, for which you do not need any > > permissions at all. At any Zope2 site, I can add /PrincipiaSearchSource to > > the URL and see the source of that DTML Method/Document. >Well, I've tried this with www.mtg.co.at (Z2.0b1), and I get this: http://www.mtg.co.at/index_html/PrincipiaSearchSource <html><head></head>  <H1> Willkommen auf dem Webserver der Fa. MTG</H1> <P>Wir stellen unseren Webserver gerade auf <A HREF="http://www.zope.org/">Zope</A>, dem führenden <A HREF="http://www.opensource.org/">Opensource (engl. link)</A> Webapplikationsserver um. </P> <P> Deshalb können Sie momentan nicht alle Inhalte sehen. Was bereits vorhanden ist, können Sie links sehen. </P> <P>We changing our website at the moment. This site is basically intended for a German speaking audience, so don't wonder if you don't find to much material in English. </P> <P>  It only works on DTML Methods and Documents, not on Folders. -- Martijn Pieters, Web Developer | Antraciet http://www.antraciet.nl | T: +31 35 7502100 F: +31 35 7502111 | mj(a)antraciet.nl http://www.antraciet.nl/~mj | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 ---------------------------------------------

1 0

Re: [Re: [Zope] Re: [Re: [Zope] can dtml methods take arguments ?]]
by happyrhino＠usa.net 29 Aug '99

29 Aug '99

Heiko Stoermer <heiko(a)mig.net> wrote: > >> >> The name "method" suggests that DTML methods should be able >> >> to take arguments much like ZSQL methods can. But for the >> >> life of me I can't find where these are added. >> > >> >Well, just use them ;) >> >> Sorry Andreas, I'm feeling a bit stupid here. You say to just >> use them so I've been trying variations without any luck. >> > > If he says "just use them" he means that a DTML method can automatically > see all the variables that are available in the calling document. Aaah, NOW I get it. Yowzers, I'm starting to see the power of them and look at it in an entirely different light. This also changes the way that I've been programming things. (I'm sure this will happen a dozen more times too as Zope starts to sink in). > And thus, > by simply using the names, you get what you need. Great. This worked. I simply added the property 'mywidth' to the DTML document and set its value to 500. This DTML document contained a DTML method which could then use the value of mywidth. And by testing for the non-existence of the property, I could set a default value. So that answered both of my questions. Thank you very much !! > What might confuse you is the term "parameters". It's not what you'd > expect > when thinking of "formal parameters" such as 'f(int i, float g)' or > similar > in C. > Just think of it as global variables that are visible in your method. Yes, this namespace is a lot larger than I realised. > Now, enough of philosophy: to see how you can influence these variables > available to your method just see the DTML-Guide, looking out for the > section about the "let" statement or scanning it for the term > "REQUEST.set". Actually, I didn't need either of those using the method I described earlier. But you're right. I hadn't thought of using the REQUEST object for passing variables between different objects, although I'm sure I could abuse this too. > In this case the documentation contains everything you need > (I've not been all that lucky while working with zope...) . You're right. The documentation DOES contain it all. I've just been a bit overwhelmed and have to admit that I misinterpreted some of the documentation. (That said, the Zope team have to be highly commended on the documentation, especially as it must be difficult to keep up with the technical developments.) Henry. ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

1 0

RE: [Zope] Re: still confused newbie
by Alexander Staubo 29 Aug '99

29 Aug '99

That doesn't sound right. Try this:: <dtml-call "test.manage_changeProperties({'msg': 'blablabla'})"> -- Alexander Staubo http://www.mop.no/~alex/ "`Ford, you're turning into a penguin. Stop it.'" --Douglas Adams, _The Hitchhiker's Guide to the Galaxy_ > -----Original Message----- > From: lethal(a)innocent.com [mailto:lethal@innocent.com] > Sent: 29. august 1999 17:38 > To: zope(a)zope.org > Subject: [Zope] Re: still confused newbie > > > well, i was close to assume that it could be like that (i > guess, i even > tried it accidentally). > > nevertheless, if i change the line respecting your suggestion, all i > get is "blablabla" in the property "msg" of the *folder* called > "newbie". > > i agree with you that it sounds bloody logical and that it *should* > work like that. but the "msg" property in the dtml-document "test" > still remains the original value. > > what else could i do wrong???` > > tobi > > > letha-(a)innocent.com wrote: > original article:http://www.egroups.com/group/zope/?start=10898 > > lethal(a)innocent.com wrote: > > > > > <dtml-with test> > > > <dtml-call "manage_changeProperties ({'test.msg': 'blablabla'})"> > > > </dtml-with> > > > > This is *almost* right. It attempts to change a property of 'test' > named 'test.msg'. Since 'test' has no such property, this fails > silently. You want: > > > > <dtml-with test> > > <dtml-call "manage_changeProperties ({'msg': 'blablabla'})"> > > </dtml-with> > > > > > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://www.zope.org/mailman/listinfo/zope > > > > (To receive general Zope announcements, see: > > http://www.zope.org/mailman/listinfo/zope-announce > > > > For developer-specific issues, zope-dev(a)zope.org - > > http://www.zope.org/mailman/listinfo/zope-dev ) > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (To receive general Zope announcements, see: > http://www.zope.org/mailman/listinfo/zope-announce > > For developer-specific issues, zope-dev(a)zope.org - > http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0

Re: [Re: [Zope] can dtml methods take arguments ?]
by happyrhino＠usa.net 29 Aug '99

29 Aug '99

Andreas Kostyrka <andreas(a)mtg.co.at> wrote: On 29 Aug 1999 happyrhino(a)usa.net wrote: >> The name "method" suggests that DTML methods should be able >> to take arguments much like ZSQL methods can. But for the >> life of me I can't find where these are added. > >Well, just use them ;) Sorry Andreas, I'm feeling a bit stupid here. You say to just use them so I've been trying variations without any luck. Consider a DTML method "dtmNavigation" which contains the following = <dtml-with "CommonElements"> <TABLE WIDTH=<dtml-var mywidth>> <TR>  So, I'd like to be able to call it with varying values of 'mywidth'. I've tried to call dtmNavigation with arguments from a DTML document like this = <dtml-var "dtmNavigation(mywidth=120)"> But that produces a very strange result. I then get the following error = Error Type: NameError Error Value: CommonElements How on earth did that crop up ? And how could the DTML method be written so that if no arguments were passed, a default value is used just like standard python functions and methods. ie. def functionname( arg1=defaultvalue1, arg2=defaultvalue2) Or have I totally misunderstood what you meant ? Henry By the way, was there any decision taken on a syntax change from <dtml-tag > to <z-tag > or <dt-tag > because I have to agree that the mere presence of the 'dtml' in the tag makes it much harder to read than the Cold Fusion syntax. ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

3 2

RE: [Zope] <code> tag?
by Alexander Staubo 29 Aug '99

29 Aug '99

It only works when explicitly requesting a document by its name. So: http://www.mtg.co.at/PrincipiaSearchSource won't work, whereas: http://www.mtg.co.at/index_html/PrincipiaSearchSource will get you the DTML source. -- Alexander Staubo http://www.mop.no/~alex/ "`Ford, you're turning into a penguin. Stop it.'" --Douglas Adams, _The Hitchhiker's Guide to the Galaxy_ > -----Original Message----- > From: Andreas Kostyrka [mailto:andreas@mtg.co.at] > Sent: 29. august 1999 09:05 > To: Martijn Pieters > Cc: Mike Winter; zope(a)zope.org > Subject: Re: [Zope] <code> tag? > > > On Sun, 29 Aug 1999, Martijn Pieters wrote: > > > At 02:03 29-8-99 , Mike Winter wrote: > > >Hi, just a quick question: how do you get Zope to display > DTML without > > >evaluating it? > > > > There are two methods, one of which is (to me) a very > serious security > > breach: document_src (for which you need the View > management screens > > permission), and PrincipiaSearchSource, for which you do > not need any > > permissions at all. At any Zope2 site, I can add > /PrincipiaSearchSource to > > the URL and see the source of that DTML Method/Document. > Well, I've tried this with www.mtg.co.at (Z2.0b1), and I get this: > > Zope Error > > Zope has encountered an error while publishing > this resource. > > Resource not found > > Sorry, the requested Zope resource does not exist. > > Check the URL and try again. > > > > Troubleshooting Suggestions > > The URL may be incorrect. > The parameters passed to this resource may be > incorrect. > A resource that this resource relies on may be > encountering an error. > > For more detailed information about the error, > please refer > to the HTML source for this page. > > If the error persists please contact the site maintainer. > Thank you for your patience. > > > Traceback (innermost last): > File > /home/zope/Zope-2.0.0b1-src/lib/python/ZPublisher/Publish.py, line > 297, in publish_module > File > /home/zope/Zope-2.0.0b1-src/lib/python/ZPublisher/Publish.py, line > 175, in publish > File > /home/zope/Zope-2.0.0b1-src/lib/python/ZPublisher/BaseRequest.py, > line 289, in traverse > File /home/zope/Zope-2.0.0b1-src/lib/python/OFS/Application.py, line > 260, in __bobo_traverse__ > (Object: ApplicationDefaultPermissions) > File > /home/zope/Zope-2.0.0b1-src/lib/python/ZPublisher/HTTPResponse.py, > line 499, in notFoundError > NotFound: (see above) > > > > > > I just discovered this, and will report it to the Collector. > > > > -- > > Martijn Pieters, Web Developer > > | Antraciet http://www.antraciet.nl > > | T: +31 35 7502100 F: +31 35 7502111 > > | mj(a)antraciet.nl http://www.antraciet.nl/~mj > > | PGP: > http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 > > --------------------------------------------- > > > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://www.zope.org/mailman/listinfo/zope > > > > (To receive general Zope announcements, see: > > http://www.zope.org/mailman/listinfo/zope-announce > > > > For developer-specific issues, zope-dev(a)zope.org - > > http://www.zope.org/mailman/listinfo/zope-dev ) > > > > -- > Andreas Kostyrka | andreas(a)mtg.co.at > phone: +43/1/7070750 | phone: +43/676/4091256 > MTG Handelsges.m.b.H. | fax: +43/1/7065299 > Raiffeisenstr. 16/9 | 2320 Zwoelfaxing > AUSTRIA > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (To receive general Zope announcements, see: > http://www.zope.org/mailman/listinfo/zope-announce > > For developer-specific issues, zope-dev(a)zope.org - > http://www.zope.org/mailman/listinfo/zope-dev ) >

2 1

still confused newbie
by lethal＠innocent.com 29 Aug '99

29 Aug '99

hi there, i am still messing around with the most simple thing i can imagine to do with zope: writing and reading properties into and from different objects. so here's my scenario: 1. a folder called "newbie" with a property called "msg" 2. a dtml-document called "test" with a property called "msg" 3. a dtml-method called "write" thanks to kevin dangoor's help i now know how to write a property, generally: <dtml-call "manage_changeProperties ({'msg': 'blablabla'})"> imagine this in 3., the method will write "blablabla" into the property "msg" of the "newbie"-folder. that works. same is with reading the folder's property. no problem. but what if i want to assign the value to the "msg"-property of the document "test" (2.)? kevin suggested: <dtml-with test> <dtml-call "manage_changeProperties ({'test.msg': 'blablabla'})"> </dtml-with> unfortunately, when i replace the code in 3. with this piece, it does not work. resp. i do not get any error, however the property remains untouched. i am pretty confused about this and would appreciate general help about how to set and get properties of an object's parent, sibling and child objects. or someone please might explain to me that my approach is a completely wrong one to the techniques of requesting and updating the zope database (although i think it would be a comfortable one)... best regards, tobi

2 2

Passing ZMySQL database connections to external methods. Possible ?
by happyrhino＠usa.net 29 Aug '99

29 Aug '99

Before looking at Zope, I had already invested a lot of time in CGI scripts and so I've converted them all to external methods (replacing print's with StringIO objects and returning StringIO.getvalue()). But the only benefit of using Zope then seems to be that I'll have PCGI instead of CGI. It would be good if I could also benefit from the persistent database connections. So, is it also possible to pass a Zope Database Connection object to an external method ? For example, I am using the ZMySQL database connection. It would be super to pass that to an external method and still use the identical syntax as the native Python MySQLmodule. (eg. ZMySQL.query(), ZMySQL.fetchrows() in place of DBH.query(), DBH.fetchrows().) In fact, that would be like gaining all the advantages of Zope but with little rewriting of code ! Is it possible ? However, I don't think these results would be cached like ZQL methods, would they ? Even so, it would still be a quick start until I have time to rewrite all of my scripts as ZSQL methods. Sorry for all of the questions. There's a lot to learn. TIA, Henry ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

2 1

can dtml methods take arguments ?
by happyrhino＠usa.net 29 Aug '99

29 Aug '99

The name "method" suggests that DTML methods should be able to take arguments much like ZSQL methods can. But for the life of me I can't find where these are added. I must be short-sighted because dynamic DTML methods (such as home grown context-sensitive navigation menus) would require the ability to pass values to them. In fact, from where I'm looking right now, it seems that DTML methods and DTML documents are actually identical in functionality and the difference lies solely in how one uses them. (ie. it's a question of semantics) TIA, Henry ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

2 1