- Zope - Zope lists

Script Security
by Jason Leach 15 Sep '04

15 Sep '04

hi, Is it possible to have a script that can not be called by users: http://www.foo.com/myscript but can be called by other scripts? J.

2 1

taking ownership requires HTTP_REFERER; and more
by Fred Yankowski 15 Sep '04

15 Sep '04

OK, here's a quick note about what I learned today. Perhaps this will help some googler some day. The root problem I set out to fix was that I could not create a new issue via a ZWiki issue tracker when logged in as a regular Member; it would always result in Insufficient Privileges. This even though I could create new wiki pages in the same wiki instance/folder. I eventually figured out on another Zope/Plone instance that granting the 'ZWiki: Add pages' permission to Owner allows the createNextIssue() method called from the issuetrackerdtml DTML method to run. But that didn't work on the problematic instance, apparently because that DTML method was owned by 'admin', the Zope superuser. And *that* happened because the Plone site was imported by someone (not me -- honest) logged in as admin who chose to take ownership during the import. So I logged in to the ZMI as a non-admin Manager user and tried to take ownership of the portal_skins folder (and all content below it). That resulted in Insufficient Privileges too. The error_log entry had this: Unauthorized: manage_takeOwnership was called from an invalid context That method requires the HTTP_REFERER value from the request to do its work. (Why? Is that really to be trusted?) I typically access sites via a proxy (junkbuster) that removes the HTTP_REFERER header and so I was hosed. After bypassing that proxy I was able to take ownership of portal_skins from the non-admin Manager account. And with that done I was finally able to create a ZWiki issue-tracker item when logged in as a regular Member. Q.E.D. -- Fred Yankowski fred(a)ontosys.com tel: +1.630.879.1312 OntoSys, Inc PGP keyID: 7B449345 www.ontosys.com 38W242 Deerpath Rd, Batavia, IL 60510-9461, USA

2 1

plone instances
by Carlos Ananías Del Águila 15 Sep '04

15 Sep '04

Hi. I'm a zope newbie. I'm currently developing a website to generate plone sites aimed at educational purposes of the university where i'm studying. I'd like to know how could i create different plone instances from a simple page allocated in the zope server (it acts as a websites generator). It consist of a form that ask for the basic information to create the plone instance : id, title and description. Is it possible to add more fields to that form in order to accurate the plone instance configuration (i.e., a list of products that the teacher can choose to install). Can anybody give a clue?... Thanks in advance from a zope/plone newbie... carlos ______________________________________________ Renovamos el Correo Yahoo!: ¡100 MB GRATIS! Nuevos servicios, más seguridad http://correo.yahoo.es

2 1

Session set/read in same request
by Dan Fairs 15 Sep '04

15 Sep '04

Hi, I'm trying to set and then read a session variable on the same request. Basically, I have a script which sets a session variable when called, and then redirects back to a content item. That item's __bobo_traverse__ then looks for this variable. Trouble is, the variable I'm setting doesn't seem to be present when I check it. My 'setter' script looks like this: if response == '1': context.REQUEST.SESSION['secure_acknowledge'] = 1 context.REQUEST.RESPONSE.redirect(site.absolute_url()) The relevant lines in the site __bobo_traverse__ are: response = self.REQUEST.RESPONSE if not self.REQUEST.SESSION.has_key('secure_acknowledge'): zLOG.LOG(__name__, 0, "no ack") cr = self.portal_url.getPortalObject()[CONTENT_ROOT_NAME] response.redirect(cr.absolute_url() + '/secure_site_notice?came_from=%s' % self.UID()) else: zLOG.LOG(__name__, 0, "ack") ... I always end up with 'no ack' in my log. If I dump the contents of the SESSION just after the variable is set, then I can see it - but it's gone by the time I actually want to process it! What am I doing wrong? Cheers, Dan

3 5

Keyword index
by Garito 15 Sep '04

15 Sep '04

Hi all Yesterday I asked for Keyword index bug but anyone want/could help/point me the problem was: There are a bug in keyword index search that make OR searches instead of AND Dieter Maurer did answer the question recommending to install managable index (a Dieter's product) but I try to install it and I could see that have a "not so usefull" (sorry Dieter I don't try to criticise your work) dependency with another product from Dieter called OFolder In Dieter's web page (http://www.dieter.handshake.de/pyprojects/zope/) you could read: 2.4 OFolder A tiny layer above |Folder| providing ordering control. Download <http://www.dieter.handshake.de/pyprojects/zope/OFolder.tgz> 4 kb TGZ archive. Then I think OFolder is changeable by the default ordered folder in Zope Could you help to solve the Keyword Index or change Keyword Index for another product? I need an index like ManagableIndex but without any dependency Thanks!!!

1 0

Question about objects versioning
by Pascal Peregrina 15 Sep '04

15 Sep '04

Hi, I would like to show a list of changes to an object by user. For the content data itself, no problem. I read how the Undo tab works and from there it was easy to get Date/User/Action data. But what about object properties ? Is there any way to show something like : "this user changed/added/deleted that specific property id" ? It looks like I can only show : "this user changed/added/deleted properties" Thanks for your help. Pascal ________________________________________________________________________ This e-mail has been scanned for all viruses by Star. The service is powered by MessageLabs. For more information on a proactive anti-virus service working around the clock, around the globe, visit: http://www.star.net.uk ________________________________________________________________________

2 1

Using calendars
by John Poltorak 15 Sep '04

15 Sep '04

Can anyone recommend a good reference for getting up to speed with calendars? -- John

1 0

Re: [Zope] passing parameter problem
by Alexis Roda 15 Sep '04

15 Sep '04

Laura McCord wrote: > It seems like I have done this hundreds of times and it worked. Can some > point out what I am doing wrong? > > <div tal:define="actStatus result/Active_Inactive; > colorStat python:here.statChk(actStatus)"> That seems correct to me. actStatus can be None? > I also tried this: > > <div tal:define="colorStat python:here.statChk('${actStatus}')"> IIRC you should user statChk(string('${actStatus}')) or statChk(path('actStatus')) HTH -- //// (@ @) ----------------------------oOO----(_)----OOo-------------------------- <> Ojo por ojo y el mundo acabara ciego /\ Alexis Roda - Universitat Rovira i Virgili - Reus, Tarragona (Spain) -----------------------------------------------------------------------

1 0

Sort keyword index
by Garito 14 Sep '04

14 Sep '04

Hi all How can I sort the results of a ZCatalog? I try these: return catalog({'meta_type': 'type1', 'multiplesvalues': 'value1'}, sort_on='multiplesvalues') These raise me these error: Traceback (innermost last): Module ZPublisher.Publish, line 100, in publish Module ZPublisher.mapply, line 88, in mapply Module ZPublisher.Publish, line 40, in call_object Module Shared.DC.Scripts.Bindings, line 306, in __call__ Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec Module Products.PythonScripts.PythonScript, line 318, in _exec Module None, line 1, in Test - <PythonScript at /MyProduct/MyProduct/Test> - Line 1 Module Products.ZCatalog.ZCatalog, line 634, in searchResults Module Products.ZCatalog.Catalog, line 755, in searchResults Module Products.ZCatalog.Catalog, line 559, in search Module Products.ZCatalog.Catalog, line 577, in sortResults AttributeError: documentToKeyMap Note that multiplesvalues is a keyword index and I need all objects that have value1 into multiplesvalues then sort by multiplesvalues Another question: Imagine the other example with 2 objects with a multiplesvalues like: Object1 multiplesvalues value3 value4 value5 Object2 multiplesvalues value1 value2 value3 value6 There are any sort mode to order by multiplesvalues that brings the sorted list like: Object2, Object1 (like these because Object2 has value1 - like the smallest value- and Object1 has value3 - like the smallest value? I hope I explain me clear, if not sorry!! :) Thanks!

3 6

hasattr
by Garito 14 Sep '04

14 Sep '04

Hi all I've created a Python Script like class with Catalogawarness and PropertyManager as super classes too My problems begins when I try to know if these objects has some properties. If I try these: hasattr(object.aq_explicit, 'someproperty') the function returns false but when I go to ZMI to object's properties form I could see the property someproperty Can you help me? Thank a lot!!!

3 3