- Zope - Zope lists

firewall and passive ftp
by Michael.Kaplan＠t-online.de 07 Mar '05

07 Mar '05

Hi, I have a problem using Zope-ftp with our firewall. With passive ftp one cannot know wich ports are being used for communication. Port 8021 is open and works. Ftp on the local machine works as well (passive and active). Opening all high ports on the firewall is not an option. Is it possible to specify (for example in zope.conf) which ports are allowed for passive ftp (like PassivePortRange 30000 40000 for other ftp servers), so that we can reconfigure the firewall for these ports? If not, are there any other ways of solving this? Thanks in advance for all help! Michael

3 2

RE: [Zope] Nested PersistentMappings and security
by Pascal Peregrina 07 Mar '05

07 Mar '05

I am missing something... (sorry) : to create : tree={'a':{'b':1,'c':2},'d':4} How would I do using OOBTrees ? Is this right ? tree2=OOBTree() tree2.update({'b':1,'c':2}) tree=OOBTree() tree.update({'a':tree2,'d':4}) The problem is that when in a ZPT I access tree (being an attribute of some of my objects), I get Security problems to access tree2. Pascal -----Message d'origine----- De : zope-bounces(a)zope.org [mailto:zope-bounces@zope.org]De la part de Jens Vagelpohl Envoyé : lundi 7 mars 2005 13:40 À : 'zope(a)zope.org' List Mailing Objet : Re: [Zope] Nested PersistentMappings and security On Mar 7, 2005, at 13:31, Pascal Peregrina wrote: > I just realized it as I was typing :) > > It's just that I have never used BTrees, while I have been using > PersisentMapping for a while. No fear, they act mostly like mappings themselves ;) Take a look at <zope>/lib/python/BTrees/Interfaces.py to see what you can and cannot do. jens _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

2 1

Re: [Zope] Read a file
by john blair 07 Mar '05

07 Mar '05

<span tal:replace="structure python:context.txtfileid"/> Along with the file contents it also shows lots of garbage becaue the file is a doc file.Also the formatting gets lost :( --- Puttaraju <praju(a)zeomega.com> wrote: > Try this > > <span tal:replace="structure > python:context.txtfileid"/> > > john blair wrote: > > >Hi > >I have files stored in zope.I want before user > >download that file a preview of the file to be > >shown.So what I was thinking of is read the > contents > >of the file and store it in another file with > >content-tye text/html.The problem is I dont know > how > >to read the file stored in zodb.Any help? > > > > > > > > > >__________________________________ > >Celebrate Yahoo!'s 10th Birthday! > >Yahoo! Netrospective: 100 Moments of the Web > >http://birthday.yahoo.com/netrospective/ > >_______________________________________________ > >Zope maillist - Zope(a)zope.org > >http://mail.zope.org/mailman/listinfo/zope > >** No cross posts or HTML encoding! ** > >(Related lists - > > > http://mail.zope.org/mailman/listinfo/zope-announce > > http://mail.zope.org/mailman/listinfo/zope-dev ) > > > > > > __________________________________ Celebrate Yahoo!'s 10th Birthday! Yahoo! Netrospective: 100 Moments of the Web http://birthday.yahoo.com/netrospective/

2 1

Form action with Python script and arguments
by Henk Jansen 07 Mar '05

07 Mar '05

I have two problems when I want for pass <FORM ...> information into a Python Script: 1) Besides passing the FORM data, I also need to pass an extra argument into the Python script that was passed (as <URL>?arg=argval) by the URL. A thing like: <FORM action=my_py_script(arg=<dtml-var argval>) doesn't work. Neither does: <FORM action="my_py_script(arg=<dtml-var argval>") What's the proper syntax for passing extra arguments to a Python script in a FORM action? 2) How do I access the FORM data in a Python script? I've tried "import cgi" but a call to cgi.FieldStorage() was met by a message that I wasn't authorized to make this call ... Thanks, --Henk

2 1

RE: [Zope] Nested PersistentMappings and security
by Pascal Peregrina 07 Mar '05

07 Mar '05

I just realized it as I was typing :) It's just that I have never used BTrees, while I have been using PersisentMapping for a while. I will have a try. Thanks. Pascal -----Message d'origine----- De : zope-bounces(a)zope.org [mailto:zope-bounces@zope.org]De la part de Jens Vagelpohl Envoyé : lundi 7 mars 2005 13:03 À : 'zope(a)zope.org' Objet : Re: [Zope] Nested PersistentMappings and security On Mar 7, 2005, at 12:47, Pascal Peregrina wrote: > > + is there a better type of object to use instead of nesting > PersistentMappings ? If I don't misunderstand this completely you're basically trying to emulate a tree by nesting mappings. You should be using a "real" tree instead, maybe a BTrees.OOBTree? jens _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

2 1

Nested PersistentMappings and security
by Pascal Peregrina 07 Mar '05

07 Mar '05

Hi, Here is my problem : I have a Zope object that defines a PersistentMapping attribute. The PersistentMapping can also have PersistentMapping values for some keys. I mean : MyObject MyObject.containers is a PersistentMapping And MyObject.containers[somekey] can also be a PersistentMapping In a management ZPT of MyObject, I try to loop on the MyObject.containers keys to display key/value pairs. I get : ... Module Products.PageTemplates.ZRPythonExpr, line 47, in __call__ __traceback_info__: container_data['description'] Module Python expression "container_data['description']", line 1, in <expression> Module AccessControl.ZopeGuards, line 71, in guarded_getitem Unauthorized: You are not allowed to access 'description' in this context (container_data is the value - a PersistentMapping - of one of the MyObject.containers keys) My questions are : + how can I remove Security checking on all MyObject.containers values ? + is there a better type of object to use instead of nesting PersistentMappings ? Thanks. Pascal ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

2 1

Re: [Zope] firewall and passive ftp
by Sascha Ottolski 07 Mar '05

07 Mar '05

Am Samstag, 5. März 2005 04:43 schrieben Sie: > Hi Sascha. What are you doing to get webdav to work over ssh. I have > apache proxy in front of zope to give ssl but am interested in webdav > over ssh as well. I have recently found a SFTP server product for zope > called SFTPGateway but have been successful in getting it operating yet. you need to connect to your backends directly, I think. at least thats what we do. define a tunnel to your backend server, like $ cat .ssh/config Host host.name.com LocalForward 18021 localhost:8021 LocalForward 18080 localhost:8080 LocalForward 18088 localhost:8088 then ssh to host.name.com, and point your webdav-client to localhost:18088; you can easily test the above setup if you point your browser to http://localhost:18080/ BTW, if your apache is "only" doing the ssl-proxy job, you might want to look into something leaner like pound (http://apsis.ch/pound) which in my opinion is much easier to maintain, and gives you a load-balancer as a bonus. Good luck, Sascha

1 0

Getting Zope from CVS? SVN?
by Jean Jordaan 07 Mar '05

07 Mar '05

Hi all So, err, what's the relation between Zope CVS and SVN these days? http://www.zope.org/DevHome/CVS/FrontPage just says "Some Zope related development is now hosted in Subversion." But it looks like I can check Zope out from either. I'm sure there's a doc somewhere spelling it all out :] -- Jean Jordaan http://www.upfrontsystems.co.za

3 3

Read a file
by john blair 07 Mar '05

07 Mar '05

Hi I have files stored in zope.I want before user download that file a preview of the file to be shown.So what I was thinking of is read the contents of the file and store it in another file with content-tye text/html.The problem is I dont know how to read the file stored in zodb.Any help? __________________________________ Celebrate Yahoo!'s 10th Birthday! Yahoo! Netrospective: 100 Moments of the Web http://birthday.yahoo.com/netrospective/

1 0

Restricting access to zope site
by John Poltorak 06 Mar '05

06 Mar '05

Is there any way of restricting access to a particular zope site to an internal network? I'm referring to one zope site rather than all sites within a zope instance. -- John

2 1