- Zope - Zope lists

<dtml-sendmail> and SSL/FastCGI
by Asad Habib 09 Mar '05

09 Mar '05

Is there a way to make <dtml-sendmail> work with SSL/FastCGI? If not, does anyone know of any alternatives? Any help would be appreciated. Thanks. - Asad

3 3

acquisition
by Arenz, Ralph 09 Mar '05

09 Mar '05

Hi, After upgrading from Zope-2.6.4 to Zope-2.7.3 i get the following error when i try to add an object from the add-list in zmi: Unauthorized: You are not allowed to access '<property-name>' in this context (Also, an error occurred while attempting to render the standard error message.) The property belongs to the container-object, where i try to add the new instance, and is called via "dtml-var" in the constructor-method, which is a dmtlmethod, of the ZClass. When i try to access that property in the constructor-method with this().<property> or restrictedTraverse('<property>') it works fine. Same behaviour with Zope-2.7.4. At the moment i'am running out of ideas. I changed some permissions but that doesn't work. At the moment i'am not shure if that behaviour is a bug or a feature? Any ideas? regards ralph

3 2

RE: [Zope] acquisition
by Arenz, Ralph 09 Mar '05

09 Mar '05

-----Ursprüngliche Nachricht----- Von: Jonathan Hobbs [mailto:toolkit@magma.ca] Gesendet: Mittwoch, 9. März 2005 13:43 An: Arenz, Ralph; zope(a)zope.org Betreff: Re: [Zope] acquisition From: "Arenz, Ralph" <Ralph.Arenz(a)friatec.de> > After upgrading from Zope-2.6.4 to Zope-2.7.3 i get the following error > when i try to add an object from the add-list in zmi: > > Unauthorized: You are not allowed to access '<property-name>' in this > context > (Also, an error occurred while attempting to render the standard error > message.) > > The property belongs to the container-object, where i try to add the new > instance, and is called > via "dtml-var" in the constructor-method, which is a dmtlmethod, of the > ZClass. > When i try to access that property in the constructor-method with > this().<property> > or restrictedTraverse('<property>') it works fine. > Same behaviour with Zope-2.7.4. At the moment i'am running out of ideas. I > changed some > permissions but that doesn't work. At the moment i'am not shure if that > behaviour > is a bug or a feature? <You need to make sure that the security setting for the 'container-object' <matches the proxy setting of the dtml method that is adding/modifying the <property field. <eg. if you have a folder, set the security setting for 'Manage Properties' <to 'Authenticated' (for example) < then set the proxy role for the dtml method that will add/modify <properties to 'Authenticated' <Note: you can also set security when a user logs in (google for more on <this or read the zope book) I won't add or modify that property, i only wan't to display it in the constructor-method with "dmtl-var". Notice that everything works fine under Zope-2.6.4! ralph Jonathan

1 0

RE: [Zope] ZSQL result passing
by Arenz, Ralph 09 Mar '05

09 Mar '05

Try <dtml-call "REQUEST.set('members',my_zsql_members_call())"> => members will hold the recordsets. ..but, why don't you call the zsql-method within the python-script like members=context.my_zsql_members_call() ? ralph -----Ursprüngliche Nachricht----- Von: zope-bounces(a)zope.org [mailto:zope-bounces@zope.org]Im Auftrag von burley(a)zonnet.nl Gesendet: Mittwoch, 9. März 2005 13:27 An: zope(a)zope.org Betreff: [Zope] ZSQL result passing In a DTML method I'd like to pass the result from an ZSQL method to aPython script. I've tried the following (which doesn't work but explainsmy idea): Having a ZSQL my_zsql_members_call simply defined as: SELECT * FROM members; I'd hoped that in: <dtml-let members=my_zsql_members_call> <dtml-in my_zsql_iterator_call prefix="seq"> <dtml-var my_python_call(item=seq_item,members=members)> </dtml-in> </dtml-let> the my_zsql_members_call would return a *list* of multiple rows (or kind ofsequence object) of members information data to be used thereafter in the <dtml-in> iteration. Obviously, this is not the case. Technically, my problem can simply be restated as follows: how do I retrieve a multiple row ZSQL result and bind it to a single variable so that it can be passed to and iterated upon in a Python script? Thanks. -- _____________________________________________________________________ Versatel ADSL Gratis. De voordelen van gratis internet met de snelheid van ADSL. Zonder abonnementskosten en zonder vast contract. Je betaalt alleen voor de tijd online. Nu zonder aansluitkosten en met gratis modem. Bestel snel op www.versatel.nl. _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

Read a file
by john blair 09 Mar '05

09 Mar '05

Hi I want to read the contents of a file.I have a form where user uploads doc files.I want to give preview of that file after user uploads the file.What I am thinking is I will read the contents of that file and store it in another file with content-type text/html so that it can be displayed in the browser.But I have no idea how to read the contents of a file stored in zodb .Can someone help? __________________________________ Celebrate Yahoo!'s 10th Birthday! Yahoo! Netrospective: 100 Moments of the Web http://birthday.yahoo.com/netrospective/

2 1

stuck with parameters
by prabuddha ray 09 Mar '05

09 Mar '05

Thanks fo rthe support but by the time i read the soln. by AJ i tried to rebuild the whole page in a dtml document . earlier i was trying page template. Now in the DTML-IN tag used to fill the data in my 2nd combobox in my form i'm using a ZSQL method with one param districtname. this value i've to get from the submit of the same form upon selecting from 1st combobox ' districtname'. the dtml-in tag i used goes like this: <dtml-in getDistrictUser (districtname=REQUEST.form.districtname)> <dtml-var username> </dtml-in> error on saving changes: document template parse error, invalid attribute name getDistrictUser(districtname for tag "<dtml-in...." both the parameter name n the first combobox name is "districtname" . i made them similar thinking it wud take the request variable automatically. plz help me out sir.

1 0

RE: [Zope] HUGE Threads showing in Debug Information
by Jean-Francois.Doyon＠CCRS.NRCan.gc.ca 08 Mar '05

08 Mar '05

Perfectly normal ... The request object currently being handled by a given thread is dumped to the screen, allowing you to debug which thread is doing what ... J.F. -----Original Message----- From: zope-bounces(a)zope.org [mailto:zope-bounces@zope.org]On Behalf Of Allen Schmidt Sent: March 8, 2005 4:25 PM To: zope(a)zope.org Subject: [Zope] HUGE Threads showing in Debug Information On the Debug Information screen in Control Panel, we occasionally get huge gobs of text that looks like the entire REQUEST/RESPONSE objects showing up. I am assuming this is being seen as the page header and this is being registered in squid and is exceeding the request_header_max_size. I can increase this but would like to know where our process if breaking down to expose this mess. Thanks _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

2 1

Zope config : cache-size and Zeo
by Pascal Peregrina 08 Mar '05

08 Mar '05

Hi, I would like to know if, for a Zeo Storage, increasing the <zodb_db></zodb_db> cache-size param value (per connection target number of cached objects) is useful, specially if I already have a high cache-size param value in the <zeoclient></zeoclient> subsection (global Zeo objects target cache size in bytes). Thanks. Pascal ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

4 3

RE: [Zope] Re: Blocking Sibling inheritance
by Jay Zeemer 08 Mar '05

08 Mar '05

Cliff The only issue with this is there are still global items that exist one level up that I want to appear in those folders (\site\item needs to appear in \site\cust1\item and \site\cust2\item). The issue can still happen where you can get an object to appear for \site\cust1\cust2\item (since item needs to be accessable to both cust1 and cust2), and item will pick up the look and feel from cust2.. I would also prefer that if you went to \site\cust1\cust2 you get a 404 type message, but that is secondary to the not showing anything for the cust2 object unless its called from \site\. I understand this is pretty much the exact opposite of the way this product is designed to function. Jay -----Original Message----- From: Cliff Ford [mailto:Cliff.Ford@ed.ac.uk] Sent: Thursday, March 03, 2005 11:35 AM To: Jay Zeemer Cc: zope(a)zope.org Subject: Re: [Zope] Re: Blocking Sibling inheritance Something to ponder: What if each customer folder had its own local role, such as manager1 for customer1, manager2 for customer 2, etc, and the local role was the only role granted access in its own folder. That would be easy to set up and has to beat adding an "object to every customer folder that represents every other customer". Cliff Jay Zeemer wrote: > Greg, > You just described my problem to the letter. This is the issue that is > impacting me currently. The only way we have successfully blocked this is > to add an object to every customer folder that represents every other > customer. We have been trying to make a folder-ish object with > Acquisition.Implicit but so far have had no success. Besides adding a > customer# object for every customer to every customer can anyone tell me how > I can block this from happening?? > > Jay > > -----Original Message----- > From: Greg Fischer [mailto:retheoff@gmail.com] > Sent: Thursday, March 03, 2005 3:36 AM > To: zope(a)zope.org > Subject: Re: [Zope] Re: Blocking Sibling inheritance > > > Security issue? I think you are partially right about it not being a > security issue because Zope does what it is supposed to do and look > where it should. > > Here is a security issue relating to this acquisition: (IMHO) > > I have folder 1: /site/dev/customer1/folder/page > And folder 1: /site/dev/customer2/folder1/folder2/page > > Eash customer level folder has acl_users with different/separate > accounts. The security at the customer level folder is set to not > acquire and no anonymous access. Now here is the problem I see, you > type in your URL: > someplace.com/site/dev/customer1/folder/page > > You are asked to authenticate. Then you change your url after > authentication to: > somplace.com/site/dev/customer1/folder/customer2/folder1/folder1/page > > And you get right in with no authentication! That should not be allowable. > > I understand that this would require someone to know the folder > structures, but really, in a more simplistic example, all you would > need to know is the other client folder name, and you would have > access. > > So what can we do about this? If you dont have acl-users account in a > folder you access, you should NOT be able to see the contents. Right? > > This may be a new subject, I dont mean to stray off topic. > > > On Thu, 3 Mar 2005 01:20:32 -0700, kosh <kosh(a)aesaeion.com> wrote: > >>On Thursday 03 March 2005 1:06 am, Dario Lopez-Kästen wrote: >> >>>Tres Seaver wrote: >>> >>>>-----BEGIN PGP SIGNED MESSAGE----- >>>>Hash: SHA1 >>>> >>>>Jay Zeemer wrote: >>>>| Greetings all, >>>>| I am in the process of examining Zope for some possible > > applications. > >>>>| Currently I am having an issue with Zope being a bit to smart. I > > have > >>>>| a directory \Dir1\ and under it I have 2 subdirectories \Dir1\SubA\ > > and > >>>>| \Dir1\SubB\. The problem I am having is I can go to > > \Dir1\SubA\SubB\ > >>>>| and gain access to things that are in \Dir1\SubB\, I need to be able > > to > >>>>| block sibling level inheritance. Is this possible in Zope?? Or are >>>>| there any other ways to block this with out creating a SubB object > > in > >>>>\Dir1\SubA\ ?? >>>> >>>>The "sibling inheritance" you are describing is Zope's "acquisition". >>>>Folders derive from Acquisition.Implicit, which means they are willing >>>>to acquire any "non-private" name from their parents. >>>> >>>>To prevent this behavior, place SubA with a Folder-like object which >>>>derives instead from Acquisition.Explicit. >>> >>>I'd need this too. Would I be making a correct assumption when stating >>>that no such folderish product, such as a "aq-blocking Folder", exists >>>yet, but it has to be written (ie by me or anyonelse needing this >>>functionality)? >>> >>>Thanks. >>> >> >>I don't know of something like this existing and even more I don't know > > why > >>you would really want it. Eventually you will understand how and why >>acquisition works and then you would have a fair bit of work to do to > > change > >>the stuff back. Zope is not publishing any object that the person viewing > > the > >>site would not normally have access to so it is not security issue. >> >>What you probably need to do is read the zope book and read about how >>acquisition works. You can use it to make apps a lot faster and save > > yourself > >>a lot of work by learning how to use it. Acquisition is a major reason > > that I > >>use zope in the first place and have been using it for about 4 years now. >>_______________________________________________ >>Zope maillist - Zope(a)zope.org >>http://mail.zope.org/mailman/listinfo/zope >>** No cross posts or HTML encoding! ** >>(Related lists - >> http://mail.zope.org/mailman/listinfo/zope-announce >> http://mail.zope.org/mailman/listinfo/zope-dev ) >> > > > _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

3 4

How to know if a Zeo connection is read-only ?
by Pascal Peregrina 08 Mar '05

08 Mar '05

Hi, Another product developpment problem ;) I've got 2 kind of Zope instances : 1/ "RO Zopes": - / is a local FileStorage - /somefolder is a ZeoStorage mounted read-only 2/ "RW Zopes": - / is a local FileStorage - /somefolder is a ZeoStorage mounted read-write I would like to know, inside a Zope product, how I can know if I am in a RO or RW Zope instance. Thanks for your help. Pascal ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

3 2