- Zope - Zope lists

Upgrading Python and Zope
by John Poltorak 05 Nov '04

05 Nov '04

I'm intending to upgrade Zope from 2.6.2b3 to 2.7.3 but thought I might as well take the opportunity to upgrade Python from 2.2.2 to 2.3.4. Is there anything I need to watch out for? I notice that in the process of installing the latest Python it has installed in /usr/local/lib/python2.3 whereas 2.2.2 was installed in /usr/lib/python2.2, so whilst I have installed the latest Python, I haven't actually upgraded it. Should I reinstall it in /usr/lib? And how do I ensure that Zope is picking up the later version? -- John

3 2

Re: [Zope] Upgrading Python and Zope
by John Poltorak 05 Nov '04

05 Nov '04

On Fri, Nov 05, 2004 at 01:41:14PM -0600, J Cameron Cooper wrote: > John Poltorak wrote: > > I'm intending to upgrade Zope from 2.6.2b3 to 2.7.3 but thought I might as > > well take the opportunity to upgrade Python from 2.2.2 to 2.3.4. Is there > > anything I need to watch out for? I notice that in the process of > > installing the latest Python it has installed in /usr/local/lib/python2.3 > > whereas 2.2.2 was installed in /usr/lib/python2.2, so whilst I have > > installed the latest Python, I haven't actually upgraded it. Should I > > reinstall it in /usr/lib? And how do I ensure that Zope is picking up the > > later version? > > When you install Zope 2.7 (which has a different install mechanism from > 2.6) it will detect the proper Python. It is not improper to have > multiple Pythons installed. In fact, it is a good thing if you have > software that depends on multiple versions. Just for my own peace of mind, how does Zope know which is the 'proper' Python? And how can I tell that it has picked the one I want it to during installation? > --jcc > > -- > "When you're going through hell, keep going." > Winston Churchill -- John

2 1

2.7.3 -> 2.8 Problems
by Rakotomandimby Mihamina 05 Nov '04

05 Nov '04

Hello, I'm running Zope on my personnal websites about 200~500 uniques visits/day (according to FSCounter) I try to help the developpement by using the very latest version each time i can. I'm running Debian Testing on an x86 : I compiled with gcc version 3.3.4 Python 2.3.4 Now i'm passing from 2.7.3 to 2.8 alpha1 . The site is a Plone one (Plone 2.0.4) And there is a VHM to the plone site. www.rktmb.org/site_principal (site_principal is the ID of the plone site) I get this error when requesting the site www.rktmb.org [...] Module ZPublisher.Publish, line 187, in publish_module_standard * Module Products.PlacelessTranslationService.PatchStringIO, line 51, in new_publish * Module ZPublisher.Publish, line 144, in publish * Module Zope.App.startup, line 205, in zpublisher_exception_hook * Module ZPublisher.Publish, line 113, in publish * Module ZPublisher.mapply, line 88, in mapply * Module ZPublisher.Publish, line 40, in call_object * Module Products.CMFCore.PortalContent, line 116, in __call__ * Module Shared.DC.Scripts.Bindings, line 306, in __call__ * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec * Module Products.CMFCore.FSPageTemplate, line 191, in _exec * Module Products.CMFCore.FSPageTemplate, line 124, in pt_render * Module Products.PageTemplates.PageTemplate, line 96, in pt_render <FSPageTemplate at /site_principal/document_view used for /site_principal/index_html> TypeError: unbound method pt_getContext() must be called with ZopePageTemplate instance as first argument (got nothing instead) (Also, an error occurred while attempting to render the standard error message.) -- ASPO Infogérance http://aspo.rktmb.org/activites/infogerance Unofficial FAQ fcolc http://faq.fcolc.eu.org/ LUG sur Orléans et alentours. Tél : 02 38 76 43 65 (France)

2 2

Hiding ZMI Pages
by Thomas Rampelberg 05 Nov '04

05 Nov '04

Is there a way to keep users from being able to see any of the management pages? For example, return a 404 error if someone tries to go to http://zopesite/manage or http://zopesite/object/manage. In a similar vein, how would you go about keeping users from executing python scripts or external methods by just typing in the path to that object (http://zopesite/pythonscript) yet still let the pages that use those methods to access them?

5 4

Date/Time formatting problem
by Philip Kilner 05 Nov '04

05 Nov '04

Hi List, I'm getting: - "The time -276134400.000000 is beyond the range of this Python implementation." When I use: - <span tal:replace="python: RawDateTime.strftime('%d/%m/%Y')">Date</span> My range of dates is from around 1924 to 2026. The data is from SQL Server, and I'm using the egenix mxODBC DA. Can anyone point me in the right direction to sort this out, please? I'm a bit stumped because the range of dates is quite modest... -- Regards, PhilK Email: phil(a)xfr.co.uk / Voicemail & Facsimile: 07092 070518 "Work as if you lived in the early days of a better nation." - Alasdair Gray

2 2

Re: [Zope] Hiding ZMI Pages
by Thomas Rampelberg 05 Nov '04

05 Nov '04

> On Thu, 4 Nov 2004 16:43:19 -0700, Thomas Rampelberg > <pyronicide(a)gmail.com> wrote: > > > Is there a way to keep users from being able to see any of the > > management pages? For example, return a 404 error if someone tries to > > go to http://zopesite/manage or http://zopesite/object/manage. > > This would also apply to yourself wanting to access the ZMI, > are you sure you want to do this? Idealy, I'd like to be able to produce 404 errors for everyone trying to access manage from an external ip. Would it be possible to edit the code for the manage page and insert some ZPT / DTML to redirect for external ips? > > Unless they can authenticate they will not see the ZMI ... they'd need to > login as a user with the "Manager" role. > (or be granted this access through a script using a manager proxy role > executing arbitary code because it trusted a form field passed to it by a > user *g*...) I am using LDAPUserFolder to give users an Authenticated role (not Manager), and if you type 'manage' after any URL (http://zopesite/object/manage) there is a management pane shown for them. With the right security settings, they are unable to do anything other than see the tree structure in the directory (the user folder and such) but for asthetic issues, I was wondering if there was a way to completely disable this. > > > > In a similar vein, how would you go about keeping users from executing > > python scripts or external methods by just typing in the path to that > > object (http://zopesite/pythonscript) yet still let the pages that use > > those methods to access them? > > Protect them via the "Security" TAB (in ZMI) then only users with the > required priviledges can render, inspect and/or modify the so restrained > Z-Object. I understand what you are saying, but I'm not sure exactly how to implement this. I have tried restricting privileges on the external methods that I am using, but when I give the method enough permissions to be able to be called from a page on my site, anyone who has authenticated (base authenticated role) is able to then execute that method from a URL. I might be missing something in the paradigm here ....

2 1

Application Design and Photos
by Gregor Melhorn 04 Nov '04

04 Nov '04

Hello Zope users! Maybe you can help me with the following scenario: I'm developing a community site in zope. I don't use CMF or Plone, since I wouldn't be using much of the functionality anyway and therefore would only slow down the site with it. All user data is stored in MySQL. exUserFolder is used for authentication. Registered users should be able to upload photos to my site. These photos may be viewed by other registered users, but no anonymous users (no anonymous access to photos allowed). Now, how do I do this best? Is there any "best practice" on how to give each user a personal gallery? Creating a single folder for every user, and putting images in there for every category? Or should I put all in one big folder, maybe assigning matching photos to users via a table in the database with user-filename columns? There may be around 30 000 users and 200 000 photos. I thought of using the "Photo Folder" product, maybe setting its properties to "external filesystem", so the ZopeDB doesn't get too large. Anybody has experience on that one? Is it possible to use the external filesystem and still prevent anonymous access? Any help would be appreciated! Gregor

4 3

Connected users
by John Poltorak 04 Nov '04

04 Nov '04

Is there any way to tell from within Zope whether there are any users connected at any time? -- John

4 3

manage_addFile method
by Asad Habib 04 Nov '04

04 Nov '04

Hello. Is there a way to pass a variable for the id argument to manage_addFile? I want the user to be able to choose the id for a file that they wish to upload instead of hard-coding it in as a string literal. I have tried the following code which is inside a Python script: fileName = REQUEST.form['publicationsFile'] context.manage_addFile(id=fileName, file=fileName, title=' ', precondition=' ', content_type='application/pdf') The error I get is as follows: Error Type: Bad Request Error Value: The id "<ZPublisher.HTTPRequest.FileUpload instance at 0x46a0170>" contains characters illegal in URLs. However, if I use a string literal, everything works fine. The following yields no errors but doesn't serve my purpose: fileName = REQUEST.form['publicationsFile'] context.manage_addFile(id='fileName', file=fileName, title=' ', precondition=' ', content_type='application/pdf') Also, if anyone knows of another method that could achieve the same purpose, please let me know. Any help would be greatly appreciated. Thanks. - Asad

4 3

ZopeXMLMethods and Pyana in 2.7.3
by Kees de Brabander 04 Nov '04

04 Nov '04

Hi I'm using ZopeXMLMethods (1-0-0) and Pyana (0.9.1), operating system: different versions of Windows. Somewhere between Zope 2.7.0 and 2.7.3 something appears to be broken. When I try to add a XSLT Method, being logged in as administrator, I am forced to authenticate again, which fails of course with an Unauthorized error. Happens both on windows XP and Windows98SE. Traceback below. Any clue? tia Cornelis J. de Brabander Traceback (innermost last): a.. Module ZPublisher.Publish, line 175, in publish_module_standard b.. Module ZPublisher.Publish, line 132, in publish c.. Module Zope.App.startup, line 204, in zpublisher_exception_hook d.. Module ZPublisher.Publish, line 101, in publish e.. Module ZPublisher.mapply, line 88, in mapply f.. Module ZPublisher.Publish, line 39, in call_object g.. Module Shared.DC.Scripts.Bindings, line 306, in __call__ h.. Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec i.. Module Products.PageTemplates.PageTemplateFile, line 106, in _exec j.. Module Products.PageTemplates.PageTemplate, line 96, in pt_render <PageTemplateFile at /cursus01/kwigi/create> k.. Module TAL.TALInterpreter, line 190, in __call__ l.. Module TAL.TALInterpreter, line 234, in interpret m.. Module TAL.TALInterpreter, line 611, in do_loop_tal n.. Module Products.PageTemplates.TALES, line 206, in setRepeat o.. Module Products.PageTemplates.TALES, line 221, in evaluate URL: create Line 70, Column 6 Expression: standard:'here/availableProcessors' Names: {'container': <__FactoryDispatcher__ instance at 01EC0CB0>, 'context': <__FactoryDispatcher__ instance at 01EC0CB0>, 'default': <Products.PageTemplates.TALES.Default instance at 0x01E91EE0>, 'here': <__FactoryDispatcher__ instance at 01EC0CB0>, 'loop': <SafeMapping instance at 01EC0C60>, 'modules': <Products.PageTemplates.ZRPythonExpr._SecureModuleImporter instance at 0x01E89AF8>, 'nothing': None, 'options': {'args': ()}, 'repeat': <SafeMapping instance at 01EC0C60>, 'request': <HTTPRequest, URL=http://localhost:8080/cursus01/kwigi/manage_addProduct/ZopeXMLMethods/cr eate>, 'root': <Application instance at 023B21D0>, 'template': <PageTemplateFile at /cursus01/kwigi/create>, 'traverse_subpath': [], 'user': admin}p.. Module Products.PageTemplates.Expressions, line 201, in __call__ q.. Module Products.PageTemplates.Expressions, line 189, in _eval r.. Module Products.PageTemplates.Expressions, line 145, in _eval __traceback_info__: here s.. Module Products.PageTemplates.Expressions, line 340, in restrictedTraverse __traceback_info__: {'path': ['availableProcessors'], 'TraversalRequestNameStack': []} Unauthorized: You are not allowed to access 'availableProcessors' in this context (Also, an error occurred while attempting to render the standard error message.)

2 3