- Zope - Zope lists

RE: [Zope] Has anyone tried to make Zope invisible using IIS
by Brian Lloyd 29 Apr '99

29 Apr '99

> Sounds like a reasonable solution, but out of interest, how does zope > determine its base address anyway? Is it based on one of the > environment > variables passed in to the zope cgi? If so, is the problem > that when using a > isapi filter on iis, this variable does not reflect the > change? That could be the case - I spend all of about an hour writing that filter dll, so there could very well be a more complete way of doing it :) > If so, if I > could fix that variable I suppose that would be a more > general solution and > I could use both relative address and the URLn variables. Hopefully. > In any case, shouldn't there be a more flexible way of > telling zope what its > address really is? Well, the way this is determined is pretty standard - the problem really is a lack of options on the part of the server, IMHO. As far as I know, IIS is really the _only_ web server where this couldn't be fixed totally through server configuration :) That is not to say that other options wouldn't be considered - if you have any suggestions for an alternate way of controlling the perceived URL, let me know and I will put them in the Collector as a feature request to make sure this issue is revisited. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

RE: [Zope] What am I doing wrong?
by Michel Pelletier 29 Apr '99

29 Apr '99

> -----Original Message----- > From: Tom Deprez [mailto:Tom.Deprez@uz.kuleuven.ac.be] > Sent: Thursday, April 29, 1999 7:33 AM > To: zope(a)zope.org > Subject: [Zope] What am I doing wrong? > > > Help! > > If I press submit, I always get an error. I tried several things for > checking the age... but none works! I guess it's again a > silly problem. But > I can't find it. Help! Thanks. > <snip code> The error? -Michel > > Tom. > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0

RE: [Zope] examples
by Shaw, Howard 29 Apr '99

29 Apr '99

> ---------- > From: Tom Deprez[SMTP:Tom.Deprez@uz.kuleuven.ac.be] > Sent: Thursday, April 29, 1999 6:37 AM > To: Zope(a)zope.org > Subject: Re: [Zope] examples > > >Yup, I'm afraid so. For non default combinations (i.e., for wich > there is > >no predefined fmt string), you have to do a call for each element you > extract. > > Suggestion for next releases? Isn't it possible to incorporate this? A > sort > of string parser that analyses the fmt parameter? > > Other Suggestion : When changing the ID of an object. All documents to > which you refer to the old-id have to be edited. What about somewhere > an > update button, when pressing on it. It iterates through your objects > and > changes the old-id to the new one. > Sounds like an idea, except how do you deal with acquisition? It is so easy to have the same  refer to different objects via acquisition, and if you changed the reference  everywhere, it would break those which refer to a higher level acquisition. This is particularly twisted since you can construct URLs, such as adding the sql dir in as we have recently seen on the list, to effectively change what is meant by an acquired variable. I rather doubt that it would be very possible for some algorithmic code to guess when you meant to refer to this specific object, and when you meant to refer to this pattern of acquisition. After all, what if you are renaming the object so that you can revoke the acquisitive override without losing the functionality of the object? A SAR would break the acquisitive behavior you were trying to cause! Its sounds like a nice idea, but I see too many potential problems due to Acquisition. > Tom. > > > >Just as an aside: PrincipiaTime has been renamed to ZopeTime. > >Principia was the old name of the management interface, before it was > >merged with Bobo into Zope. > > > >-- > >Martijn Pieters, Web Developer > >| Antraciet http://www.antraciet.nl > >| Tel: +31-35-6254545 Fax: +31-35-6254555 > >| mailto:mj@antraciet.nl http://www.antraciet.nl/~mj > >| PGP: > http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 > >------------------------------------------ > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

1 0

RE: [Zope] security model with regards to aquisition
by Jay, Dylan 29 Apr '99

29 Apr '99

> -----Original Message----- > From: Jim Fulton [mailto:jim@digicool.com] > Sent: Thursday, 29 April 1999 00:11 > To: Jay, Dylan > Cc: 'zope(a)zope.org' > Subject: Re: [Zope] security model with regards to aquisition > > > > > "Jay, Dylan" wrote: > > > > I have a folder that has restricted access. In a parent > folder I have a DTML > > method that accesses a property of the folder. A browser > that has not been > > autheticated for viewing the folder can still view use the > aquired method in > > the folder, ie they type > > > > http://server.com/RestrictedFolder/parentMethod and it works!!! > > > > This seems counter intuitive to me. > > Me too. Note that this has nothing to do with acquisition. > A Public method of the folder could also access a property > of the folder. > > > Either you have access to a folder or > > you do not. > > Well, there are many types of access. But I think it should > be possible > to disacble access to a folder's properties through the > "Access contents information" permission. > > > Why is this the case and should it be? In any case how do I make > > sure users can not do the above unless authenticated? > > This is a bug in the validation logic. The current rules > allow access to objects that don't have __roles__ attributes > and that are not acquired. The reason is that it is assumed that > you have to have access to the container to get the object, but this > is not always true. > > I will fix this today and check the fix in, so it will be available > via the public CVS. The fix will also be in the next release. > The fix will add a check for parent roles even if an object is > not acquired. > > A possible work around is to use an expression and name the folder > when you access properties to force access to the folder to > be checked: > >  This work around doesn't seem to work in my case. I want to actually redirect to another address which seems to always work no matter whether the the folder is allowed to be accessed or not. Here is the method I'm using

2 1

examples
by Tom Deprez 29 Apr '99

29 Apr '99

Great, it's going well. Other q'n :  How can I ask to write the date down as e.g. 29 Apr 1999? I tried fmt="day, aMonth, year" but it doesn't work... Do I've to call  3 times for getting this result? Tom.

2 2

RE: [Zope] Has anyone tried to make Zope invisible using IIS
by Jay, Dylan 28 Apr '99

28 Apr '99

> -----Original Message----- > From: Brian Lloyd [mailto:Brian@digicool.com] > Sent: Wednesday, 28 April 1999 23:29 > To: 'Jay, Dylan' > Cc: 'zope(a)zope.org' > Subject: RE: [Zope] Has anyone tried to make Zope invisible using IIS > > > > > As much as I hate to suggest it, you may be forced to hack the > > > code in lib/python/ZPublisher/HTTPRequest.py that determines > > > what the BASE variable should be... or switch to using a more > > > > What are the implications of doing this? Can I just hard code > > in my vitual > > address and everything should work fine? > > If it were _me_, I'd do the following, to avoid having to > hack the distributed Zope code (which will be a pain when > you later want to upgrade to a new version): > > 1) In your _top_ level Folder, define a property called > base_url, with a value that reflects your alias to > the top level zope folder. > > 2) In places where you need hyperlinks, instead of using > BASE0, use a construct like: > > <a href="/foo/bar/etc">a link</a> > > This way, you dont have to hack the code, the links should > look right and if your base_url changes, you only need to > change one property to fix the entire site. The drawback, > of course, is that you won't be able to use relative urls > in your hrefs (because the browser would prepend the contents > of the base tag), but this is usually not a big problem in > practice. Sounds like a reasonable solution, but out of interest, how does zope determine its base address anyway? Is it based on one of the environment variables passed in to the zope cgi? If so, is the problem that when using a isapi filter on iis, this variable does not reflect the change? If so, if I could fix that variable I suppose that would be a more general solution and I could use both relative address and the URLn variables. In any case, shouldn't there be a more flexible way of telling zope what its address really is?

1 0

Re: [Zope] ZServer ftp problem, when not running as root
by Amos Latteier 28 Apr '99

28 Apr '99

At 02:11 PM 4/28/99 +0200, Christian wrote: >Hello zopies, > >It seems that if zope/zserver is not running as root, the ftp >functionality is not working. Can you be more specific? Does it work correctly when run as root? If ZServer works differently depending on the uid it is run as there is a good chance that the problem is with the ownership of the var directory and its contents. The uid that the server is run as must have write permissions on the var directory and all files in the var directory. >This means, that uploaded files all have >length 0 or 144 bytes, depending on the version of zope. Is this the only problem you are experiencing, or are there other problems? >This also appears in the current (4/28) public cvs code. >Is there a permission problem and has anyone discovered a similiar >drawback? I haven't heard of this kind of problem before, so I'd love a complete bug report. With enough information I may be able to help you solve this problem. Could you please file a report in the Collector and include information about what platform you are using, what version of Zope, what version of ZServer you are using, and how you have configured ZServer. It would also be useful to have an detailed list of what goes wrong, and under what circumstances. Thanks a lot! -Amos P.S. The Collector is at http://www.zope.org/Collector/

1 0

RE: [Zope] how to use a 'rendered' document with MailHost???
by Michel Pelletier 28 Apr '99

28 Apr '99

>-----Original Message----- >From: Gilles lavaux [mailto:gilles.lavaux@esrin.esa.it] >Sent: Wednesday, April 28, 1999 12:42 PM >To: Zope(a)zope.org >Subject: [Zope] how to use a 'rendered' document with MailHost??? >Hello, >I want to use the MailHost tag to mail a full DTML document. >It works well, but I receive the html code. >How can I tell MailHost that the mail contain an html document and not a plain text >document??  Content-Type: text/html <html> blah </html>  Should do it. It is very important that the Content-Type line be right below the start of the sendmail tag, and there *must* be a blank line after it. Also, while were on the subject, the mail you sent to the list was formatted in HTML. This is usualy a mail list faux pas (at least it is on this list). It is much easier for us to answer questions formatted in plain text. The chances of you getting an answer are much higher if you send plain text, that way we don't have to unformat your message into plain text and then hand quote it. It is also easier (for me at least) to use other mailers in conjunction with my usual one; all mailers handle plain text the normal way, but they all handle HTML in their specific way, which drives me nuts. ;) -Michel >Gilles

1 0

how to use a 'rendered' document with MailHost???
by Gilles lavaux 28 Apr '99

28 Apr '99

Hello, I want to use the MailHost tag to mail a full DTML document. It works well, but I receive the html code. How can I tell MailHost that the mail contain an html document and not a plain text document?? Gilles

1 0

ASP vs Zope
by Tom Deprez 28 Apr '99

28 Apr '99

Goodmorning all, Yesterday evening I had a course of ASP. I saw some small demo's to give a quick impression of what you can do with ASP. I guess this should also be a great idea for Zope. I'm going to give it a try, but maybe somebody can help me to go in the correct direction. First, these q'n : Can ASP be used with Zope. i.e. I suppose Zope can work together with IIS? They said that CGI gives to much problems (for every connection a new one is started etc) I guess that's why Zope uses a Persistant CGI (if not using ZServer or HTTPServer)? Or Is directly working with HTTPServer so that the connection keeps on, during the logon of a user? What I find of ASP is that it is quiet easy to understand to get started with some objects. But thats perhaps my background is Microsoft. But, is it needed? Let's give it a try. See how these things can be done with Zope : Demo 1: A page displays the time & date and shows a sentence from fontheight 1 to 7. The printing of the sentence is done iterative : I believe <% for iFontSize= 1 to 7 .... %> Demo 2: A form askes the name and age, + humour (checkbox). The form checks the entered values and complaints if something is wrong : Checks if age is a number. Then checks age is > 0 and <120 If wrong data is entered, the previous values are still available in the form. i.e. The user only has to change the wrong value and doesn't has to reënter the complete form. Demo 3: users are added into a database. Then users can click on urls, so that only the humoures are shown/ the non-humoures and all persons are shown. (Everything is written in one .asp file) Demo 4: Security. Done with a session object. A name is asked. When the name is in the database a picture is shown. When the name isn't in the database. The person isn't allowed to view the picture. If somebody has some scripts available of the above. Please let me know (and if I can use them). Thanks, Tom.

2 1