Always trust content from Microsoft!
Hi,
This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01 Service Pack 1) and when I go to my Zope site I can no longer see the management pages. The right frames are displayed and the navigation tree, but instead of the management screen for a folder I get the view contents.
Any Ideas?
-----Original Message----- From: zope-request@zope.org [SMTP:zope-request@zope.org] Sent: Tuesday, March 20, 2001 3:05 AM To: zope@zope.org Subject: Zope digest, Vol 1 #1262 - 46 msgs
Send Zope mailing list submissions to zope@zope.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.zope.org/mailman/listinfo/zope or, via email, send a message with subject or body 'help' to zope-request@zope.org
You can reach the person managing the list at zope-admin@zope.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Zope digest..."
Today's Topics:
1. Re: Zope security management (Bill Welch) 2. Re: newbie zope question -- stuck in quick-start page (Chris McDonough) 3. Can't get 2.3.1b2 sparc to run (Daniel Rusch) 4. Strange ZCatalog behaviour (Ingo Wilmer) 5. Re: dtml-sendmail and envelop sender [Q] (Bruno Mattarollo) 6. Re: Zope security management (Bernd Worsch) 7. Can one protect dtml from being rendered? (Bernd Worsch) 8. RE:ZCatalog update question (Darin Lee) 9. Re: Can't get 2.3.1b2 sparc to run (Chris McDonough) 10. Re: Zope security management (Phil Harris) 11. Re: why does manage_addDocument give me a method? (Dieter Maurer) 12. Re: freebsd error (Dieter Maurer) 13. Re: ZClass direct variable access (Dieter Maurer) 14. Re: <dtml-sendmail> (Dieter Maurer) 15. Re: dtml-sendmail and envelop sender [Q] (Dieter Maurer) 16. MS Explorer no longer shows the management interface. (Echlin, Michael) 17. Re: MS Explorer no longer shows the management interface. (Phil Harris) 18. Re: MS Explorer no longer shows the management interface. (Andy McKay) 19. RE: MS Explorer no longer shows the management interface. (Echlin, Michael) 20. (no subject) (Cees de Groot) 21. R: [Zope-Annce] Localized DateTime classes (svedovelli) 22. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli) 23. Zope vs. other app servers. Any comparison available? (Satheesh Babu) 24. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli) 25. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli) 26. Re: MS Explorer no longer shows the management interface. (Chris McDonough) 27. AW: [Zope] RE:ZCatalog update question (Marc Fischer) 28. DeprecationWarning (Norman Khine) 29. Re: DeprecationWarning (Phil Harris) 30. Re: Re: [Zope-Annce] Localized DateTime classes (Tino Wildenhain) 31. Re: ANNOUNCE: ZopeMake 1.0 (Tino Wildenhain) 32. Re: Can one protect dtml from being rendered? (Chris Muldrow) 33. avoiding nested DTMLs (Timothy Wilson) 34. Getting Errors trying to map permissions in Zope 2.3.0 for win32 (Anton A. Zotov) 35. Re: avoiding nested DTMLs (Casey Duncan) 36. Re: Zope security management (John Morton) 37. Re: avoiding nested DTMLs (Timothy Wilson) 38. Re(2): [Zope] Zope hosting (David McCuskey) 39. More ZClass oddities (John Morton) 40. RE: Installation Probs (Brian Lloyd) 41. ZMySQL Database connection trouble (ghaley@mail.venaca.com) 42. some confusion on ftp security. (Patrick) 43. newbie (Dennis Pabalan) 44. Re: avoiding nested DTMLs (Luciano Ramalho) 45. Large File Support ?! (Andrei Cenja) 46. Re: <dtml-sendmail> (Petr Knapek)
--__--__--
Message: 1 Date: Mon, 19 Mar 2001 12:07:05 -0500 (EST) From: Bill Welch <bill@carbonecho.com> To: <zope@zope.org> Subject: Re: [Zope] Zope security management
To achieve genuine security, you have to do something about the 'password in the clear' problem.
part 1) With basic auth (the zope default), the user's name and password are sent in the clear with every request.
part 2) With form based login (login manager, zmc), the user's name and password are sent in the clear when the login form is submitted.
Solution: Have to go with form based login that uses ssl to send user's name and password. Unfortunately, in my experience, ssl support for zope is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for your work so far) and hard to integrate, when this is really a core requirement.
I think this is something that DC has to handle.
Bill.
On Mon, 19 Mar 2001, Bernd Worsch wrote:
It's some time ago, the issue of denying roles showed up.
I'd really wish to see this implemented, so has this problem made it into the collector? (The feature index seems broken to me at the moment)
Thanks to John for pointing out what i thought :) Bernd
On Thu, Mar 01, 2001 at 10:00:13AM +0000, Chris Withers wrote:
"John R. Daily" wrote:
That is precisely what is wrong with the model. To achieve
manageable
and genuine security, I want to acquire _all_ permissions and specifically deny those roles to which the inherited permissions may not be correct.
I'd agree with this, but I don't know how important it is.
I'd suggest chucking it in the colelctor asa Featuer Request.
cheers,
Chris
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--
-----Bernd Worsch-----------bernd.worsch@frontsite.de--------
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 2 From: "Chris McDonough" <chrism@digicool.com> To: "Phil Harris" <phil.harris@zope.co.uk>, "Sundar Narasimhan" <sundar@ascent.com> Cc: <cduncan@kaivo.com>, <zope@zope.org> Subject: Re: [Zope] newbie zope question -- stuck in quick-start page Date: Mon, 19 Mar 2001 12:37:41 -0500
OK, I updated the QuickStart page with an informative message. Thanks...!
----- Original Message ----- From: "Phil Harris" <phil.harris@zope.co.uk> To: "Chris McDonough" <chrism@digicool.com>; "Sundar Narasimhan" <sundar@ascent.com> Cc: <cduncan@kaivo.com>; <zope@zope.org> Sent: Monday, March 19, 2001 11:57 AM Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
I've seen similar problems on W2K with IE5, 5.01, 5.5 (but not 5.51).
Phil
----- Original Message ----- From: "Chris McDonough" <chrism@digicool.com> To: "Chris McDonough" <chrism@digicool.com>; "Sundar Narasimhan" <sundar@ascent.com> Cc: <phil.harris@zope.co.uk>; <cduncan@kaivo.com>; <zope@zope.org> Sent: Monday, March 19, 2001 5:23 PM Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
What exact versions of IE does this actually happen under? Anybody know?
----- Original Message ----- From: "Chris McDonough" <chrism@digicool.com> To: "Sundar Narasimhan" <sundar@ascent.com> Cc: <phil.harris@zope.co.uk>; <cduncan@kaivo.com>; <zope@zope.org> Sent: Monday, March 19, 2001 12:21 PM Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
Understood. Here's a small suggestion -- I'd do it myself if I knew how. I'd put in a short paragraph (or at least a link to this problem's description) somewhere in the beginner's guide/install documents. Most people will install zope, fire up their browsers, and when they connect be baffled (as I was) when they don't see anything like those management tabs come up. If I'd seen a brief mention to "check your browser version".. it would have saved me a bunch of time.
Actually, I'll go in and change the quickstart page myself, this is a good idea, I dont know why I didn't think of it...
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 3 Date: Mon, 19 Mar 2001 11:13:45 -0600 From: Daniel Rusch <drusch@globalcrossing.com> To: zope@zope.org Subject: [Zope] Can't get 2.3.1b2 sparc to run
All,
Any body have any ideas why I can't get 2.3.1b2 sparc to run. I download the tar ball, unzipped it, ran install, untar'd some products and ran start I get a bunch of error messages like below for each core product?
------ 2001-03-19T17:06:23 ERROR(200) Zope Couldn't install OFSP Traceback (innermost last): File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/Application.py, line 627, in install_products (Object: ApplicationDefaultPermissions) (Info: OFSP) File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/OFSP/__init__.py, line 189, in initialize File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py, line 365, in registerHelp File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py, line 298, in registerHelpTopic File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/ObjectManager.py, line 300, in _setObject (Object: Traversable) File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py, line 152, in manage_afterAdd (Object: HelpTopicBase) File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py, line 165, in index_object (Object: HelpTopicBase) File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/ZCatalog .py, line 424, in catalog_object (Object: Traversable) File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/Catalog. py, line 442, in catalogObject File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/SearchIndex/UnTextIndex.py , line 335, in index_object SystemError: error return without exception set
--__--__--
Message: 4 Date: Mon, 19 Mar 2001 18:10:37 +0100 From: Ingo Wilmer <wilmer@zeitspringer.de> Organization: die zeitspringer To: zope <zope@zope.org> Subject: [Zope] Strange ZCatalog behaviour
Hi Zopistas
I experience Problems using ZCatalog, See following example: <dtml-in "Catalog(meta_type=3D'ZClass_seite_press',region=3Dzregion)"> where zregion is one string and region is a list indexd as text when i change this to =20 <dtml-in "Catalog(meta_type=3D'ZClass_seite_press',region in zregion)"> where zregion itself is a list, containing 3 or more strings that=20 should match on some instances of ZClass_seite_presse i can't even get this into zope, because i recive this error
non-keyword arg after keyword arg , for tag <dtml-in "Catalog(meta_type=3D'ZClass_seite_presse',region in zregion)">
so, how would i get the goal, searching in ZCatalog with my list as mentioned=20 in the Howtos.
Thanks in advance to anybody out there.
--=20 ingo wilmer gesch=E4ftsf=FChrung
tel +49 251 98704-22 | j=FCdefelder str. 37 | http://www.zeitspringer.de=20 fax +49 251 98704-11 | 48143 m=FCnster |
--__--__--
Message: 5 From: "Bruno Mattarollo" <bruno@dynamic.greenpeace.org> To: "Stefan H. Holek" <stefan@epy.co.at>, <zope@zope.org> Subject: Re: [Zope] dtml-sendmail and envelop sender [Q] Date: Mon, 19 Mar 2001 18:21:13 +0100
Thank you Stefan,
I was just writing an external method that would do what you recommen= d. Great! Thanks to everybody!!! It works as expected!
Cheers!
/B ----- Original Message ----- From: "Stefan H. Holek" <stefan@epy.co.at> To: <zope@zope.org> Cc: "Bruno Mattarollo" <bruno@dynamic.greenpeace.org> Sent: Monday, March 19, 2001 5:58 PM Subject: Re: [Zope] dtml-sendmail and envelop sender [Q]
--On Montag, 19. M=E4rz 2001 17:10 +0100 Frank Tegtmeyer <frank.tegtmeyer@cia-mediahaus.de> wrote:
So according to the spec I should use "Sender: <dtml-var OurBounceProcessingAccount>" in our DTML-Method that uses dtml-sendmail, no?
To handle autoresponders etc. that's ok. It doesn't handle delivery failures. You HAVE TO set the envelope sender accordingly (I think for Postfix it's the -f switch like for sendmail). To do that you have to generate a new method - possibly as external Python method.
After we all agreed that "Errors-To:" is bad ;) your external method could look like this:
import os
sendcommand =3D '/usr/sbin/sendmail -t -oi -f%s' mailtemplate =3D 'From: %s\nTo: %s\nSubject: %s\n%s\n'
def sendMail( bounceto, mailfrom, mailto, subject, body ): p =3D os.popen( sendcommand % (bounceto), 'w', 1 ) p.write( mailtemplate % (mailfrom, mailto, subject, body) ) p.close()
HTH, Stefan
-- Things work better when plugged in.
--__--__--
Message: 6 Date: Mon, 19 Mar 2001 18:54:21 +0100 From: Bernd Worsch <bernd.worsch@frontsite.de> To: zope@zope.org Subject: Re: [Zope] Zope security management Reply-To: Bernd Worsch <bernd.worsch@frontsite.de>
On Mon, Mar 19, 2001 at 12:07:05PM -0500, Bill Welch wrote:
To achieve genuine security, you have to do something about the 'password in the clear' problem.
part 1) With basic auth (the zope default), the user's name and password are sent in the clear with every request.
part 2) With form based login (login manager, zmc), the user's name and password are sent in the clear when the login form is submitted.
Solution: Have to go with form based login that uses ssl to send user's name and password. Unfortunately, in my experience, ssl support for zope is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for your work so far) and hard to integrate, when this is really a core requirement.
I think this is something that DC has to handle.
Bill.
Well your quite right, but this is another problem with zope security and more or less independent of zope security management features.
BTW isn't it normally recommended to shield z-server by apache doing for the ssl stuff? If so, then there at least is some workaround possible.
The kind of complicated and unusal management of security in zope on the other hand applies even, when only doing intranet stuff without any connection to the outside. As pointed out before the problem isn't that one can't realize the security policy he/she wishes but that it is quite painful at times.
Suppose the following object/folder hierarchy:
A containing AA and AB. AA containing AAA and AAB, AB containing ABA and ABB.
A AA AAA AAB AB ABA ABB
Suppose there is a role R which grants access to some objects. All the users have role R everywhere except in AAA and ABA. As far as i know there is no way to realize this security policy using role R alone.
What you can do, is click through the security tabs in AAA and ABA so that role R isn't known in AAA and ABA blocking access to them. Then you define the role S in AAA and ABA, by checking the same boxes as you had in role R. Now you can give some of your users the local role S in AAA and ABA.
So, it works but it isn't really funny. But maybe i'm mistaken and there is an elegant solution for this kind of policy?
best regards Bernd
--
-----Bernd Worsch-----------bernd.worsch@frontsite.de--------
--__--__--
Message: 7 Date: Mon, 19 Mar 2001 19:08:14 +0100 From: Bernd Worsch <bernd.worsch@frontsite.de> To: zope@zope.org Subject: [Zope] Can one protect dtml from being rendered? Reply-To: Bernd Worsch <bernd.worsch@frontsite.de>
Hi there!
My final question for today: When i generate a new document A and take the document content from some kind of template B, is there a way to get some dtml in the document rendered and some inserted directly?
Suppose SomeVar holds 'SomeText' and AnotherVar holds 'AnotherText'.
How do i protect AnotherVar so that
<!-- begin B --> <dtml-var SomeVar> <dtml-var AnotherVar> <!-- end B -->
becomes
<!-- begin A --> SomeText <dtml-var AnotherVar> <!-- end A -->
after insertion?
Thanks Bernd
--
-----Bernd Worsch-----------bernd.worsch@frontsite.de--------
--__--__--
Message: 8 Date: Mon, 19 Mar 2001 13:09:43 -0500 From: "Darin Lee" <LEEDM@state.mi.us> To: <zope@zope.org> Subject: [Zope] RE:ZCatalog update question
Gari,
You must call <dtml-call reindex_object> in any of your methods that = operate on data (constructor, edit functions etc.) in order for the object = to be automatically updated in the ZCatalog. Simply inheriting ZCatalog as = a base class is not enough.
Also, make sure when you are defining your base classes to include = ZCatalogAware FIRST.
Good luck, -Darin
--__--__--
Message: 9 From: "Chris McDonough" <chrism@digicool.com> To: "Daniel Rusch" <drusch@globalcrossing.com>, <zope@zope.org> Subject: Re: [Zope] Can't get 2.3.1b2 sparc to run Date: Mon, 19 Mar 2001 14:58:10 -0500
Daniel,
This looks like a splitter.c problem on Solaris. The same error doesn't occur on Linux... give me a little bit of time and I'll try to track it down.
----- Original Message ----- From: "Daniel Rusch" <drusch@globalcrossing.com> To: <zope@zope.org> Sent: Monday, March 19, 2001 12:13 PM Subject: [Zope] Can't get 2.3.1b2 sparc to run
All,
Any body have any ideas why I can't get 2.3.1b2 sparc to run. I download the tar ball, unzipped it, ran install, untar'd some products and ran start I get a bunch of error messages like below for each core product?
------ 2001-03-19T17:06:23 ERROR(200) Zope Couldn't install OFSP Traceback (innermost last): File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/Application.py, line 627, in install_products (Object: ApplicationDefaultPermissions) (Info: OFSP) File
/home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/OFSP/__init__.py,
line 189, in initialize File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py, line 365, in registerHelp File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py, line 298, in registerHelpTopic File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/ObjectManager.py, line 300, in _setObject (Object: Traversable) File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py, line 152, in manage_afterAdd (Object: HelpTopicBase) File /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py, line 165, in index_object (Object: HelpTopicBase) File
/home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/ZCatalog .p y,
line 424, in catalog_object (Object: Traversable) File
/home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/Catalog. py ,
line 442, in catalogObject File
/home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/SearchIndex/UnTextIndex.py ,
line 335, in index_object SystemError: error return without exception set
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 10 From: "Phil Harris" <phil.harris@zope.co.uk> To: "Bill Welch" <bill@carbonecho.com>, <zope@zope.org> Subject: Re: [Zope] Zope security management Date: Mon, 19 Mar 2001 19:37:11 -0000
Bill,
There is another answer to part 2, use javascript to create an md5 hash of the user,somesecret,password.
This can be sent instead of the password and then validated on the server side, since the username and md5 hash is all that is sent across the wire, it should be a lot more secure than plain text.
I have a library for javascript md5 if anyone is interested (which,btw, I 'stole' from the PHPlib ;) ).
Phil phil.harris@zope.co.uk
----- Original Message ----- From: "Bill Welch" <bill@carbonecho.com> To: <zope@zope.org> Sent: Monday, March 19, 2001 5:07 PM Subject: Re: [Zope] Zope security management
To achieve genuine security, you have to do something about the 'password in the clear' problem.
part 1) With basic auth (the zope default), the user's name and password are sent in the clear with every request.
part 2) With form based login (login manager, zmc), the user's name and password are sent in the clear when the login form is submitted.
Solution: Have to go with form based login that uses ssl to send user's name and password. Unfortunately, in my experience, ssl support for zope is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for your work so far) and hard to integrate, when this is really a core requirement.
I think this is something that DC has to handle.
Bill.
On Mon, 19 Mar 2001, Bernd Worsch wrote:
It's some time ago, the issue of denying roles showed up.
I'd really wish to see this implemented, so has this problem made it into the collector? (The feature index seems broken to me at the moment)
Thanks to John for pointing out what i thought :) Bernd
On Thu, Mar 01, 2001 at 10:00:13AM +0000, Chris Withers wrote:
"John R. Daily" wrote:
That is precisely what is wrong with the model. To achieve
manageable
and genuine security, I want to acquire _all_ permissions and specifically deny those roles to which the inherited permissions may not be correct.
I'd agree with this, but I don't know how important it is.
I'd suggest chucking it in the colelctor asa Featuer Request.
cheers,
Chris
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--
-----Bernd Worsch-----------bernd.worsch@frontsite.de--------
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 11 From: Dieter Maurer <dieter@handshake.de> Date: Mon, 19 Mar 2001 20:57:22 +0100 (CET) To: Bernd Worsch <bernd.worsch@frontsite.de> Cc: zope@zope.org Subject: Re: [Zope] why does manage_addDocument give me a method?
Bernd Worsch writes:
Another thing that seems strange to me:
When calling
<dtml-with SomeFolder> <dtml-call expr="manage_addDocument('SomeDocument','')"> </dtml-with>
i get a dtml-method called SomeDocument instead of a dtml-document!!
Is this behaviour ok? If yes how can i get documents? See "OFS.Document".... It is depraceted.
Dieter
--__--__--
Message: 12 From: Dieter Maurer <dieter@handshake.de> Date: Mon, 19 Mar 2001 20:49:43 +0100 (CET) To: Chris Humphries <chumphries@siliconinc.net> Cc: zope@zope.org Subject: Re: [Zope] freebsd error
Chris Humphries writes:
i have python 1.5.2 (threads), freebsd, and zope installed (tryeed differenmt versions, so i know this is not an version issue). ... ImportError: /usr/local/www/Zope-2.0.0b5/lib/python/ExtensionClass.so: Undefined symbol "PyMethod_Type" I have seen this on the mailing list (--> searchable archives, Google). The poster, apparently, found a solution....
Dieter
--__--__--
Message: 13 From: Dieter Maurer <dieter@handshake.de> Date: Mon, 19 Mar 2001 20:54:40 +0100 (CET) To: Phill Hugo <phill@fortune-cookie.com> Cc: zope@zope.org Subject: Re: [Zope] ZClass direct variable access
Phill Hugo writes:
Is there a way to access property sheet variables from a zclass method without knowing which property sheet it is contained within. If you only want to read them:
they are exposed as attributes of the Z Instance, i.e. you can use "getattr" to access them (as your property is an expression). For constant access, you could use the attribute access syntax.
I do not know a way to change properties without the specification on the property sheet.
Dieter
--__--__--
Message: 14 From: Dieter Maurer <dieter@handshake.de> Date: Mon, 19 Mar 2001 20:52:21 +0100 (CET) To: Petr Knapek <knapek@knapek.pvt.net> Cc: zope@zope.org Subject: Re: [Zope] <dtml-sendmail>
Petr Knapek writes:
I have a list of user e-mail addresses which is created dynamically. I would like to use <dtml-sendmail> tag to send an e-mail at all addresses in my dynamical list but do not know what the syntax of mailto attribute in sendmail tag shoul be.=20=20 Do not use the "mailto" attribute, use the "To:" header in the send mail, similar to:
<dtml-sendmail mailhost=...> To: <dtml-var expr="_.string.join(address_list,',')"> ....
ATTENTION: This is indented only for readability. In your DTML code, "To:" must start in the first column!
Dieter
--__--__--
Message: 15 From: Dieter Maurer <dieter@handshake.de> Date: Mon, 19 Mar 2001 19:59:30 +0100 (CET) To: frank.tegtmeyer@cia-mediahaus.de (Frank Tegtmeyer) Cc: Dieter Maurer <dieter@handshake.de>, zope@zope.org Subject: Re: [Zope] dtml-sendmail and envelop sender [Q]
Frank Tegtmeyer writes:
The Internet mail message specification (RFC 822) defined a header to control error reports.
That's wrong. Errors go to the envelope sender. There are many, many bad gateways that do it wrong but there number still doesn't make it right. Quoted from RFC822:
: 4.4.4. AUTOMATIC USE OF FROM / SENDER / REPLY-TO : : For systems which automatically generate address lists for : replies to messages, the following recommendations are made: : : o The "Sender" field mailbox should be sent notices of : any problems in transport or delivery of the original : messages. If there is no "Sender" field, then the : "From" field mailbox should be used. :
Dieter
--__--__--
Message: 16 From: "Echlin, Michael" <echlinm@aecl.ca> To: "'zope@zope.org'" <zope@zope.org> Date: Mon, 19 Mar 2001 15:16:41 -0500 Subject: [Zope] MS Explorer no longer shows the management interface.
Hi,
This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01 Service Pack 1) and when I go to my Zope site I can no longer see the management pages. The right frames are displayed and the navigation tree, but instead of the management screen for a folder I get the view contents.
Any Ideas?
Mike Echlin CP/SA/CM AECL Control and Operations Technology echlinm@aecl.ca
--__--__--
Message: 17 From: "Phil Harris" <phil.harris@zope.co.uk> To: "Echlin, Michael" <echlinm@aecl.ca>, <zope@zope.org> Subject: Re: [Zope] MS Explorer no longer shows the management interface. Date: Mon, 19 Mar 2001 20:23:20 -0000
Michael,
see today's thread,
[Zope] newbie zope question -- stuck in quick-start page
and all will be revealed.
Phil phil.harris@zope.co.uk
----- Original Message ----- From: "Echlin, Michael" <echlinm@aecl.ca> To: <zope@zope.org> Sent: Monday, March 19, 2001 8:16 PM Subject: [Zope] MS Explorer no longer shows the management interface.
Hi,
This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01 Service Pack 1) and when I go to my Zope site I can no longer see the management pages. The right frames are displayed and the navigation tree, but instead of the management screen for a folder I get the view contents.
Any Ideas?
Mike Echlin CP/SA/CM AECL Control and Operations Technology echlinm@aecl.ca
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 18 From: "Andy McKay" <andym@ActiveState.com> To: "Echlin, Michael" <echlinm@aecl.ca>, <zope@zope.org> Subject: Re: [Zope] MS Explorer no longer shows the management interface. Date: Mon, 19 Mar 2001 12:29:20 -0800
IE 5.01 doesnt render Zope Management Interface correctly, upgrade IE 5.5. -- Andy McKay.
----- Original Message ----- From: "Echlin, Michael" <echlinm@aecl.ca> To: <zope@zope.org> Sent: Monday, March 19, 2001 12:16 PM Subject: [Zope] MS Explorer no longer shows the management interface.
Hi,
This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01 Service Pack 1) and when I go to my Zope site I can no longer see the management pages. The right frames are displayed and the navigation tree, but instead of the management screen for a folder I get the view contents.
Any Ideas?
Mike Echlin CP/SA/CM AECL Control and Operations Technology echlinm@aecl.ca
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 19 From: "Echlin, Michael" <echlinm@aecl.ca> To: 'Phil Harris' <phil.harris@zope.co.uk>, "Echlin, Michael" <echlinm@aecl.ca>, zope@zope.org Subject: RE: [Zope] MS Explorer no longer shows the management interface. Date: Mon, 19 Mar 2001 15:36:03 -0500
The weird part of all this that it worked just fine until I put in the security patch. When MS puts out a new security patch will they break the IE connection to ZOPE again?
Our shop is stuck, by official decree, to using IE but they haven't found a way to force us not to use Netscape on the Linux servers yet. (Possibly because we haven't told them we are using Linux?)
Thanks, I will have to upgrade to 5.5 and warn my Zope managers about this problem.
Mike.
-----Original Message----- From: Phil Harris [mailto:phil.harris@zope.co.uk] Sent: March 19, 2001 3:23 PM To: Echlin, Michael; zope@zope.org Subject: Re: [Zope] MS Explorer no longer shows the management interface.
Michael,
see today's thread,
[Zope] newbie zope question -- stuck in quick-start page
and all will be revealed.
Phil phil.harris@zope.co.uk
----- Original Message ----- From: "Echlin, Michael" <echlinm@aecl.ca> To: <zope@zope.org> Sent: Monday, March 19, 2001 8:16 PM Subject: [Zope] MS Explorer no longer shows the management interface.
Hi,
This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01 Service Pack 1) and when I go to my Zope site I can no longer see the management pages. The right frames are displayed and the navigation tree, but instead of the management screen for a folder I get the view contents.
Any Ideas?
Mike Echlin CP/SA/CM AECL Control and Operations Technology echlinm@aecl.ca
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 20 To: Federico Di Gregorio <fog@mixadlive.com> cc: zope@zope.org From: cg@cdegroot.com (Cees de Groot) Reply-To: cg@cdegroot.com Date: Mon, 19 Mar 2001 21:37:00 +0100 Subject: [Zope] (no subject)
fog@mixadlive.com said:
if you want to use the per-cursor commit extension of psycopg, you need to call the .commit() method on the *cursor*. calling it on the connection will commit on all the cursors derived from the connection.
I know (I wrote ODBC drivers for a living, among others a PostgreSQL one :-)). I sorta expected the Z SQL Connection to do the "right thing", but it forwards the TM messages to the connection, not to individual cursors.
mmm... i think that zope instantiate a connection for every thread. in the psycopg case, every zope thread gets one connection and one cursor.
Let's hope so, although I haven't been able to discern the code that does that bit of magic. Is there a document somewhere that describes what Zope does,
thread-wise, when handling requests?
Anyway, I plunged into my code and FYI, this is how I'm now dealing with it:
- select statements grab and release a cursor; - update statements grab a cursor, wrap them in a TM subclass and register the result with the transaction manager. The cursor is also registered in a thread map, so that subsequent update statements in the same thread/transaction reuse the cursor. When the Zope TM calls finish()/abort(), the cursor is committed and released (and removed from the thread map). - session access (updating the "last accessed" timestamp on mostly every request) is done through a special global cursor, which does a commit every 10 or so updates keeping disk write load for this non-critical piece of information low.
The end result is acceptably low connection usage and correct transaction scoping.
Now I only have to find that (*&@#$ deadlock somewhere in my code ;-).
-- Cees de Groot http://www.cdegroot.com <cg@cdegroot.com> GnuPG 1024D/E0989E8B 0016 F679 F38D 5946 4ECD 1986 F303 937F E098 9E8B -- Cees de Groot http://www.cdegroot.com <cg@cdegroot.com> GnuPG 1024D/E0989E8B 0016 F679 F38D 5946 4ECD 1986 F303 937F E098 9E8B
--__--__--
Message: 21 From: "svedovelli" <spinwing@inwind.it> To: "Oleg Broytmann" <phd@mail2.phd.pp.ru> Cc: <zope@zope.org> Date: Mon, 19 Mar 2001 21:35:56 +0100 Subject: [Zope] R: [Zope-Annce] Localized DateTime classes
Hello Oleg
well, yes, but what if you are running a german installation and want to provide, say, dutch localization? This is my very first try, also to see if people are interested. I am trying now to design a more flexible way to do this, using a ZClass to determine the desired translation.
I will post soon when I will have a proper solution
Keep in touch Ciao! Stefano
-----Messaggio originale----- Da: Oleg Broytmann [mailto:phd@phd.pp.ru] Inviato: lunedi 19 marzo 2001 10.38 A: svedovelli Cc: Zope Mailing List Oggetto: Re: [Zope-Annce] Localized DateTime classes
Hi!
Nice...
On Sun, 18 Mar 2001, svedovelli wrote:
French, but I plan in future to create a more sophisticated version which will try to guess in which country the system is running in order to return the proper translation.
...but why guess? Just use locale settings!
Oleg. ---- Oleg Broytmann http://www.zope.org/Members/phd/ phd@phd.pp.ru Programmers don't die, they just GOSUB without RETURN.
--__--__--
Message: 22 From: "svedovelli" <spinwing@inwind.it> To: "Oleg Broytmann" <phd@mail2.phd.pp.ru>, "Tino Wildenhain" <tino@wildenhain.de> Cc: "Zope Mailing List" <zope@zope.org> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes Date: Mon, 19 Mar 2001 21:36:05 +0100
Well, we can think about it in a second time....maybe we can find a solution as well.
Stefano
-----Messaggio originale----- Da: Oleg Broytmann [mailto:phd@phd.pp.ru] Inviato: lunedi 19 marzo 2001 15.12 A: Tino Wildenhain Cc: svedovelli; Zope Mailing List Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
On Sun, 18 Mar 2001, Tino Wildenhain wrote:
the point IMHO is, the locales setting applies to the server system, where it is serving pages for a client system and its settings. E.g. I would not expect russian date in a italian document...
But of course! And because of this I would do entire site in one langauge and one locale. The problem with Zope is that it's multithreaded, and can't switch locales on the fly :(
Oleg. ---- Oleg Broytmann http://www.zope.org/Members/phd/ phd@phd.pp.ru Programmers don't die, they just GOSUB without RETURN.
--__--__--
Message: 23 Reply-To: <sbabu@tnc.org> From: "Satheesh Babu" <sbabu@tnc.org> To: <zope@zope.org> Date: Mon, 19 Mar 2001 15:37:09 -0500 Subject: [Zope] Zope vs. other app servers. Any comparison available?
Hi,
We use Zope a lot. However, there are some schools of thought that since MacroMedia has bought Allaire, it is going to be *the* web app development platform (personally, I think you can't compare Cold Fusion to Zope). So, are there any web sites that compare Zope vs. ASP, PHP, Cold Fusion, Java app servers?
If this is "suite" friendly, better! Even other wise, if you've any pointers to existing documents, that would be of great help.
TIA
V. Satheesh Babu sbabu@tnc.org
--__--__--
Message: 24 From: "svedovelli" <spinwing@inwind.it> To: "Tino Wildenhain" <tino@wildenhain.de>, "Oleg Broytmann" <phd@mail2.phd.pp.ru> Cc: "Zope Mailing List" <zope@zope.org> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes Date: Mon, 19 Mar 2001 21:36:04 +0100
Exactly... this is why this is a very first try, and I am relying also on the comunity to see the impact of the modified class. The idea is to expand it so that the class is able to take the localized names from a ZClass rather than determine the proper language from the system
Ciao! Stefano
-----Messaggio originale----- Da: Tino Wildenhain [mailto:tino@wildenhain.de] Inviato: domenica 18 marzo 2001 16.30 A: Oleg Broytmann Cc: svedovelli; Zope Mailing List Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
Hi Oleg, svedovelli,
the point IMHO is, the locales setting applies to the server system, where it is serving pages for a client system and its settings. E.g. I would not expect russian date in a italian document...
Regards Tino
Oleg Broytmann wrote:
Hi!
Nice...
On Sun, 18 Mar 2001, svedovelli wrote:
French, but I plan in future to create a more sophisticated version
which
will try to guess in which country the system is running in order to return the proper translation.
...but why guess? Just use locale settings!
Oleg. ---- Oleg Broytmann http://www.zope.org/Members/phd/ phd@phd.pp.ru Programmers don't die, they just GOSUB without RETURN.
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 25 From: "svedovelli" <spinwing@inwind.it> To: "Hannu Krosing" <hannu@tm.ee>, "Oleg Broytmann" <phd@mail2.phd.pp.ru> Cc: "Zope Mailing List" <zope@zope.org> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes Date: Mon, 19 Mar 2001 21:36:01 +0100
This is one of the possible problems I am facing. The basic idea that I would like to implement is: if the whole site is in a specific language, then the designer should be able to provide the DateTime with the proper translation. I am planning to use a ZClass to achieve this.
Ciao! Stefano
-----Messaggio originale----- Da: hannu@m72.tm.ee [mailto:hannu@m72.tm.ee]Per conto di Hannu Krosing Inviato: lunedi 19 marzo 2001 10.47 A: Oleg Broytmann Cc: svedovelli; Zope Mailing List Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
Oleg Broytmann wrote:
Hi!
Nice...
On Sun, 18 Mar 2001, svedovelli wrote:
French, but I plan in future to create a more sophisticated version
which
will try to guess in which country the system is running in order to return the proper translation.
...but why guess? Just use locale settings!
How do you get locale settings from HTTP client ?
------------------- Hannu
--__--__--
Message: 26 From: "Chris McDonough" <chrism@digicool.com> To: "Echlin, Michael" <echlinm@aecl.ca>, "'Phil Harris'" <phil.harris@zope.co.uk>, <zope@zope.org> Subject: Re: [Zope] MS Explorer no longer shows the management interface. Date: Mon, 19 Mar 2001 16:07:07 -0500
Their security patch breaks the way basic auth works. I imagine it was intentional until all their users started to scream... and then they backed off in IE 5.5.
----- Original Message ----- From: "Echlin, Michael" <echlinm@aecl.ca> To: "'Phil Harris'" <phil.harris@zope.co.uk>; "Echlin, Michael" <echlinm@aecl.ca>; <zope@zope.org> Sent: Monday, March 19, 2001 3:36 PM Subject: RE: [Zope] MS Explorer no longer shows the management interface.
The weird part of all this that it worked just fine until I put in the security patch. When MS puts out a new security patch will they break the IE connection to ZOPE again?
Our shop is stuck, by official decree, to using IE but they haven't found a way to force us not to use Netscape on the Linux servers yet. (Possibly because we haven't told them we are using Linux?)
Thanks, I will have to upgrade to 5.5 and warn my Zope managers about this problem.
Mike.
-----Original Message----- From: Phil Harris [mailto:phil.harris@zope.co.uk] Sent: March 19, 2001 3:23 PM To: Echlin, Michael; zope@zope.org Subject: Re: [Zope] MS Explorer no longer shows the management interface.
Michael,
see today's thread,
[Zope] newbie zope question -- stuck in quick-start page
and all will be revealed.
Phil phil.harris@zope.co.uk
----- Original Message ----- From: "Echlin, Michael" <echlinm@aecl.ca> To: <zope@zope.org> Sent: Monday, March 19, 2001 8:16 PM Subject: [Zope] MS Explorer no longer shows the management interface.
Hi,
This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01 Service Pack 1) and when I go to my Zope site I can no longer see the management pages. The right frames are displayed and the navigation tree, but instead of the management screen for a folder I get the view contents.
Any Ideas?
Mike Echlin CP/SA/CM AECL Control and Operations Technology echlinm@aecl.ca
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 27 From: "Marc Fischer" <marcbpc@gmx.de> To: "Darin Lee" <LEEDM@state.mi.us>, <zope@zope.org> Subject: AW: [Zope] RE:ZCatalog update question Date: Mon, 19 Mar 2001 21:58:05 +0100
Thank you :-)
That's it ... I used the following syntax:
<dtml-call "this().reindex_object()">
in every method I create or edit an instance.
Marc
-----Ursprungliche Nachricht----- Von: zope-admin@zope.org [mailto:zope-admin@zope.org]Im Auftrag von Darin Lee Gesendet: Montag, 19. Marz 2001 19:10 An: zope@zope.org Betreff: [Zope] RE:ZCatalog update question
Gari,
You must call <dtml-call reindex_object> in any of your methods that operate on data (constructor, edit functions etc.) in order for the object to be automatically updated in the ZCatalog. Simply inheriting ZCatalog as a base class is not enough.
Also, make sure when you are defining your base classes to include ZCatalogAware FIRST.
Good luck, -Darin
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 28 From: "Norman Khine" <khine@btinternet.com> To: "Zope" <zope@zope.org> Date: Mon, 19 Mar 2001 21:24:17 -0000 Subject: [Zope] DeprecationWarning
I just like to say that I have configured Zope to run under FreeBSD 4.3 with Python 2.1b1
Zope Version Zope 2.3.1b2 (source release, python 1.5.2, linux2) Python Version 2.1b1 (#1, Mar 15 2001, 23:29:56) [GCC 2.95.2 19991024 (release)] System Platform freebsd4 Process Id 189 (143436800) Running For 2 min 58 sec
Although when I get the following errors when starting the server:
/usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: thee import regex /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub module is) DeprecationWarning) /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: the regex me import regex /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub module is) DeprecationWarning)
Any ideas
Thanks
Norman
--__--__--
Message: 29 From: "Phil Harris" <phil.harris@zope.co.uk> To: "Norman Khine" <khine@btinternet.com>, "Zope" <zope@zope.org> Subject: Re: [Zope] DeprecationWarning Date: Mon, 19 Mar 2001 21:18:30 -0000
You should read the Python docs about deprecated features.
Basically the feature which is being warned about will be removeed in a later version, this is just a warning to developers that this is the case.
----- Original Message ----- From: "Norman Khine" <khine@btinternet.com> To: "Zope" <zope@zope.org> Sent: Monday, March 19, 2001 9:24 PM Subject: [Zope] DeprecationWarning
I just like to say that I have configured Zope to run under FreeBSD 4.3 with Python 2.1b1
Zope Version Zope 2.3.1b2 (source release, python 1.5.2, linux2) Python Version 2.1b1 (#1, Mar 15 2001, 23:29:56) [GCC 2.95.2 19991024 (release)] System Platform freebsd4 Process Id 189 (143436800) Running For 2 min 58 sec
Although when I get the following errors when starting the server:
/usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: thee import regex /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub module is) DeprecationWarning) /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: the regex me import regex /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub module is) DeprecationWarning)
Any ideas
Thanks
Norman
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 30 Date: Sun, 18 Mar 2001 21:25:40 +0100 From: Tino Wildenhain <tino@wildenhain.de> To: Oleg Broytmann <phd@mail2.phd.pp.ru> Cc: svedovelli <spinwing@inwind.it>, Zope Mailing List <zope@zope.org> Subject: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
Hi Oleg,
Oleg Broytmann wrote:
On Sun, 18 Mar 2001, Tino Wildenhain wrote:
the point IMHO is, the locales setting applies to the server system, where it is serving pages for a client system and its settings. E.g. I would not expect russian date in a italian document...
But of course! And because of this I would do entire site in one langauge and one locale. The problem with Zope is that it's
multithreaded,
and can't switch locales on the fly :(
sure it can :) We "only" need to replace all the locale aware methods with language-negotiation aware methods. Additionally there is a need for local override of this, meaning if one wants to mix variuos languages in one page, it should be possible to give an extra attribute to an equivalent of the <dtml-var> tag or something like that.
I'll make a proposal later this week as time allows
Regards Tino
--__--__--
Message: 31 Date: Sun, 18 Mar 2001 21:29:50 +0100 From: Tino Wildenhain <tino@wildenhain.de> To: "Farrell, Troy" <troy.farrell@wilcom.com> Cc: 'Chris Withers' <chrisw@nipltd.com>, p.bizzarri@icube.it, zope@zope.org Subject: Re: [Zope] ANNOUNCE: ZopeMake 1.0
Hi Troy,
"Farrell, Troy" wrote:
Yes. ZopeMake uses ZClient to allow commandline scripting of imports
and
exports, but cannot import .zexp files that are not on the file system. I've been thinking about 2 of Zope's "problems" (security features) lately and I've almost hit some solutions. <Ask DC to turn a deaf ear> I wonder (I haven't looked) how difficult it would be to patch zope so it can import .zexp files that are already in ZODB, so that I can manage_addFile a .zexp file and then manage_importObjectFromZODB. I was thinking about using LocalFS for this, but I don't think LFS is deployed far and wide enough for this. Then again, if we get a solution for this, more people might use LocalFS. I might try to write the code if it sounds doable. It might be nice.
Its more easy to link /var to /import on filesystem :)
Regards Tino
--__--__--
Message: 32 Date: Mon, 19 Mar 2001 18:21:27 -0500 Subject: Re: [Zope] Can one protect dtml from being rendered? From: Chris Muldrow <muldrow@mac.com> To: Bernd Worsch <bernd.worsch@frontsite.de>, <zope@zope.org>
<dtml-var document_src> will return the unrendered source of a DTML Document. I'm not sure if that's what you're looking for. (Since the tags inside the unrendered source are still within <> tags, they wont show in a browser. If you wanted them readable, you'd have to escape the html, I guess) Hope this helps. Chris Muldrow
From: Bernd Worsch <bernd.worsch@frontsite.de> Reply-To: Bernd Worsch <bernd.worsch@frontsite.de> Date: Mon, 19 Mar 2001 19:08:14 +0100 To: zope@zope.org Subject: [Zope] Can one protect dtml from being rendered?
Hi there!
My final question for today: When i generate a new document A and take the document content from some kind of template B, is there a way to get some dtml in the document rendered and some inserted directly?
Suppose SomeVar holds 'SomeText' and AnotherVar holds 'AnotherText'.
How do i protect AnotherVar so that
<!-- begin B --> <dtml-var SomeVar> <dtml-var AnotherVar> <!-- end B -->
becomes
<!-- begin A --> SomeText <dtml-var AnotherVar> <!-- end A -->
after insertion?
Thanks Bernd
--
-----Bernd Worsch-----------bernd.worsch@frontsite.de--------
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
--__--__--
Message: 33 Date: Mon, 19 Mar 2001 17:47:25 -0600 (CST) From: Timothy Wilson <wilson@visi.com> To: Zope listserv <zope@zope.org> Subject: [Zope] avoiding nested DTMLs
Hi everyone,
I'm trying to figure out how to do something here while avoiding nested dtml tags. Here's what I've got:
I have a TinyTable containing two fields: "name" and "status". I have a DTML Document in the same folder as the TinyTable for each "name" in the TinyTable. I want to display that DTML Document based on the value of "status" in the TinyTable.
Here's some code: <dtml-in testTable> <dtml-if "status <> ''"> <p><<< insert DTML Document here >>></p> </dtml-if> </dtml-in>
So in the code above I want to insert <dtml-var spam_html> (which is a DTML Document in the current folder), for example, if the TinyTable contains a line that looks like:
"spam_html", "X"
I hope I'm making myself clear. Anyone have any ideas?
-Tim
-- Tim Wilson | Visit Sibley online: | Check out: Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/ W. St. Paul, MN | | http://slashdot.org/ wilson@visi.com | <dtml-var pithy_quote> | http://linux.com/
--__--__--
Message: 34 From: "Anton A. Zotov" <futurb@nh.km.ua> To: <zope@zope.org> Date: Tue, 20 Mar 2001 02:06:45 +0200 Organization: Xception Subject: [Zope] Getting Errors trying to map permissions in Zope 2.3.0 for win32
This is a multi-part message in MIME format.
------=_NextPart_000_000B_01C0B0E2.6A500360 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit
I'm getting permanent errors trying to map permissions in Zope product created by myself. I seem to do everything right. Could anybody tell me how to avoid the problem ? Please see Zope trace page attached. Thx in advance, Anton.
------=_NextPart_000_000B_01C0B0E2.6A500360 Content-Type: text/html; name="manage_setPermissionMapping[1].html" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="manage_setPermissionMapping[1].html"
<html><head><title>This is top level admin's management interface = class</title></head><body bgcolor=3D"#FFFFFF">
<table border=3D"0" width=3D"100%"> <tr valign=3D"TOP">
<td width=3D"10%" align=3D"center"> <img src=3D"http://localhost:8080/p_/ZButton" alt=3D"Zope"> </td>
<td width=3D"90%"> <h2>Zope Error</h2> <p>Zope has encountered an error while publishing this resource.</p> =20 <p> <strong>Error Type: TypeError</strong><br> <strong>Error Value: too many arguments; expected 2, got = 3</strong><br>=20 </p> =20 <hr noshade> =20 <p>Troubleshooting Suggestions</p>
<ul> <li>The URL may be incorrect.</li> <li>The parameters passed to this resource may be incorrect.</li> <li>A resource that this resource relies on may be encountering an = error.</li> </ul>
<p>For more detailed information about the error, please refer to the HTML source for this page. </p>
<p>If the error persists please contact the site maintainer. Thank you for your patience. </p> </td></tr> </table>
<p><a href=3D"http://www.zope.org/Credits" target=3D"_top"><img = src=3D"http://localhost:8080/p_/ZopeButton" width=3D"115" height=3D"50" = border=3D"0" alt=3D"Powered by Zope" /></a></p></body></html>
<PRE> Traceback (innermost last): File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 222, = in publish_module File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 187, = in publish File C:\Workshop\xception\lib\python\Zope\__init__.py, line 221, in = zpublisher_exception_hook (Object: Admin) File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 171, = in publish File C:\Workshop\xception\lib\python\ZPublisher\mapply.py, line 160, = in mapply (Object: manage_setPermissionMapping) File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 112, = in call_object (Object: manage_setPermissionMapping) File = C:\Workshop\xception\lib\python\AccessControl\PermissionMapping.py, line = 150, in manage_setPermissionMapping (Object: Admin) TypeError: (see above)
</PRE> ------=_NextPart_000_000B_01C0B0E2.6A500360--
--__--__--
Message: 35 Date: Mon, 19 Mar 2001 17:14:55 -0700 From: Casey Duncan <cduncan@kaivo.com> Organization: Kaivo, Inc. (www.kaivo.com) To: Timothy Wilson <wilson@visi.com> CC: Zope listserv <zope@zope.org> Subject: Re: [Zope] avoiding nested DTMLs
Timothy Wilson wrote:
Hi everyone,
I'm trying to figure out how to do something here while avoiding nested
dtml
tags. Here's what I've got:
I have a TinyTable containing two fields: "name" and "status". I have a DTML Document in the same folder as the TinyTable for each "name" in the TinyTable. I want to display that DTML Document based on the value of "status" in the TinyTable.
Here's some code: <dtml-in testTable> <dtml-if "status <> ''"> <p><<< insert DTML Document here >>></p> </dtml-if> </dtml-in>
So in the code above I want to insert <dtml-var spam_html> (which is a DTML Document in the current folder), for example, if the TinyTable contains a line that looks like:
"spam_html", "X"
I hope I'm making myself clear. Anyone have any ideas?
-Tim
Possibly this (untested):
<dtml-in testTable> <dtml-if status> <p><dtml-var expr="_[status]"></p> </dtml-if> </dtml-in>
I don't see any way to safely avoid nesting the dtml-if tag, if status might be empty. This is not anything I would consider a problem though.
-- | Casey Duncan | Kaivo, Inc. | cduncan@kaivo.com `------------------>
--__--__--
Message: 36 Date: Tue, 20 Mar 2001 12:25:16 +1200 (NZST) From: John Morton <jwm@plain.co.nz> Subject: Re: [Zope] Zope security management To: Phil Harris <phil.harris@zope.co.uk>, zope@zope.org Reply-To: John Morton <jwm@plain.co.nz>
On Mon, 19 Mar 2001 19:37:11 -0000 Phil Harris <phil.harris@zope.co.uk> wro= te:
Bill, =20 There is another answer to part 2, use javascript to create an md5 hash o= f the user,somesecret,password. =20 This can be sent instead of the password and then validated on the server side, since the username and md5 hash is all that is sent across the wire= , it should be a lot more secure than plain text. =20 I have a library for javascript md5 if anyone is interested (which,btw, I 'stole' from the PHPlib ;) ).
This method, as described, will not protect you from traffic sniffing at all. Where the attacker was sniffing for username and password combinations being submitted to the login page, they now sniff for an MD5 sum that will do the same job. Once in, the attack probably won't have too many problems changing the password to something they know.=20
What it comes down to, is that any regular form based (initial) authentication scheme will involve sending authenication data using a known, and necessarily publicly accessable formulation (the login form) to a known and public URL that will decide whether to authenticate the user or not. As a result, an attacker can trivially find out what an authenication token should look like, and extract them at their leisure.
You could probably transform the simple passive sniffing attack to a more complex man-in-the-middle attack by including a unique id for each login form hit and only accepting authentication tokens with a given id once. An attacker would need to intercept the authentication token and use it instead of the user in order to gain access. Coupled with short timeouts on the live ids, and a policy that users can only be logged in once, and you'll have tighter security than a plaintext password system - but it's still nowhere near as good as using SSL so that authentication tokens cannot be distinguished from any other traffic in the stream.
John
--__--__--
Message: 37 Date: Mon, 19 Mar 2001 18:26:11 -0600 (CST) From: Timothy Wilson <wilson@visi.com> To: Casey Duncan <cduncan@kaivo.com> Cc: Zope listserv <zope@zope.org> Subject: Re: [Zope] avoiding nested DTMLs
On Mon, 19 Mar 2001, Casey Duncan wrote:
Possibly this (untested):
<dtml-in testTable> <dtml-if status> <p><dtml-var expr="_[status]"></p> </dtml-if> </dtml-in>
I don't see any way to safely avoid nesting the dtml-if tag, if status might be empty. This is not anything I would consider a problem though.
Cool. That worked. I need to read up on that _[] stuff. Thanks.
-Tim
-- Tim Wilson | Visit Sibley online: | Check out: Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/ W. St. Paul, MN | | http://slashdot.org/ wilson@visi.com | <dtml-var pithy_quote> | http://linux.com/
--__--__--
Message: 38 From: David McCuskey <david.mccuskey@bigfoot.com> To: Zope Mailing List <zope@zope.org>, Chris Muldrow <muldrow@mac.com>, Lee Marzke <lmarzke@kns.com> Subject: Re(2): [Zope] Zope hosting Date: Mon, 19 Mar 2001 16:33:29 -0800
On 03/19/01, Kit enlightened me with:
Not at all too good to be true. I use Hurrah for one of my sites. They are fast, prompt, helpful, and knowledgeable about Zope. I think they are the best deal running in Zope hosting at this time. -- Kit O'Connell Zope Administrator
i second that.
the 100Mb and 3Gb of bandwidth makes the deal very attractive. you have full rights over your own zope instance and can install any package you want. plus you get all of the regular UNIX access, etc.
the only gripe i have is that i can't FTP to my zope instance for editing.
david
-----Original Message----- From: Lee Marzke [mailto:lmarzke@kns.com] Sent: Friday, March 16, 2001 6:43 PM To: zope@zope.org Subject: Re: [Zope] Zope hosting
Anyone have experience with http://www.hurrah.com/ ?
The advertise a virtual Zope account with PostgreSQL or MySQL for $25/mo. Sounds to good to be true.
Lee
On 16-Mar-01 Jake Berglund wrote:
Hello,
You can find a list of lots of zope hosting providers here:
-- David McCuskey david.mccuskey@bigfoot.com
--__--__--
Message: 39 Date: Tue, 20 Mar 2001 13:36:28 +1200 (NZST) From: John Morton <jwm@plain.co.nz> To: zope <zope@zope.org> Reply-To: John Morton <jwm@plain.co.nz> Subject: [Zope] More ZClass oddities
I'm experiencing a few problems with some ZClasses and catalogs under 2.2.5 - they look like bugs, but they could be a result of a clue shortage on my part.=20
The first one relates to a ZClass that uses Object manager as a base class. When instances are created, a ZCatalog is automatically added (cusiously, I don't need to specify that ZCatalogs can be subobjects for this to occur). As I'm in the development stages, I let Z Seach Interfaces be subobjects of my ZClass but when it comes to adding a serach interface instance, the automatically created catalog isn't listed as a searchable object - and nor is any other catalog I add.
The second problem relates to ZClasses created as a subobject of another ZClass. This means that those items can only be created inside an instance of the parent class (the desired effect), but it also seems to mean that those object types don't show up in the type list of the 'Find Items To Catalog' tab in the catalog in the same folder.=20
So... Bugs? Or is there something I don't know?
John
--__--__--
Message: 40 From: "Brian Lloyd" <brian@digicool.com> To: <luke@seeTO.com>, <zope@zope.org> Cc: <brian@digicool.com> Subject: RE: [Zope] Installation Probs Date: Mon, 19 Mar 2001 22:07:14 -0500
Actually, that's what happens on my Windows Zope as well. Can you try another machine?
I had that happen when I was trying the 2.3.0 betas. The Win32 Zope installation creates some Registry entries. One of the entries points at the location of the service code. If you uninstall Zope it does not remove those entries from the registry. If you later install another version of Zope in a different directory, Zope will fail silently trying to start the service.
how to fix? edit the registry and remove the offending references. Install Zope again, and all will be sweetness and light.
Bleah. The problem is that ZService.py does its own registry fiddling that is not known to the WISE installer, so it can't clean it up correctly (PythonService.exe also does some fiddling, but I don't think that affects this).
I've done some investigating and I've found a way to make WISE invoke ZService.py remove (to clean up) on uninstall. This will be included in 2.3.1 b3. Note that for those who do not have Zope running as a service, it currently shows a quick error message in a dos box at uninstall time (though the error doesn't hurt anything). Tomorrow I'll take a look at the ZService.py and see if there is a way to shut that up.
Brian Lloyd brian@digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com
--__--__--
Message: 41 Date: Mon, 19 Mar 2001 23:51:33 -0500 (EST) From: <ghaley@mail.venaca.com> To: zope@zope.org Subject: [Zope] ZMySQL Database connection trouble
hi,
I am trying to add a ZMySQL database connection. Everything seems to go ok, but when I try to view the Products Management, it shows the ZMySQL as a broken product, when I view it, there is an error that says:
ImportError: /usr/lib/python1.5/site-package/MySQLmodule.so: undefined symbol: uncompress
If I try to go the the /opt/zope/lib ,etc. directory and start the db.py connection directly, python db.py, i get the same error.
If someone could provide some direction on how to recompile the .so file so that it can handle the uncompress problem, I would be most grateful.
btw, i've read the various howtos on the zope.org site, and i didn't find this particular problem there.
I am running MySQL 3.23, the most recent release of zope, on linux 2.2 running slackware 7.0
Many thanks.
ciao! greg.
Gregory Haley DBA/Web Programmer Venaca, LLC
--__--__--
Message: 42 Date: Tue, 20 Mar 2001 09:34:39 +0300 (EAT) From: Patrick <patrick@eahd.or.ug> To: <zope@zope.org> Subject: [Zope] some confusion on ftp security.
I was just wondering if there is a separate config file for the Medusa FTP server because it alows anonymous logins even when I have used the zope management interface to create a user say fgh who has the rights that would usually be given to the anonymous group. I even defined a matching group fgh and removed all rights from the anonymous group. The advantage is that the user can not see list or download any files but I was just suggesting that the user does not get a login prompt at all in the first place incase this user manages to find some way of exploiting the system.... (or have I missed something)
Thanks. Patrick
--__--__--
Message: 43 From: Dennis Pabalan <demic.pabalan@q-linux.com> To: zope@zope.org Date: Tue, 20 Mar 2001 14:27:33 +0800 Subject: [Zope] newbie
Hi there guys!!
I am a newbie and I just finished a zope tutorial " elvis"? I want to place it as a webpage (i want others to see it) how will I transfer the files? and in what directory? I also want to add admin users to my management page :)
Sorry for that newbie question :)
--
"think like a beginner, not an expert"
.--. Demic Pabalan mobile://+63.917.345.1692 ( () ) Q Linux Solutions, Inc. office://+63.2.894.3592/ `--\\ A Philippine Open Source Solutions Co. http://www.q-linux.com/
--__--__--
Message: 44 Date: Tue, 20 Mar 2001 04:07:29 -0300 From: Luciano Ramalho <luciano@hiper.com.br> To: Timothy Wilson <wilson@visi.com> CC: Casey Duncan <cduncan@kaivo.com>, Zope listserv <zope@zope.org> Subject: Re: [Zope] avoiding nested DTMLs
Timothy Wilson wrote:
Cool. That worked. I need to read up on that _[] stuff. Thanks.
Knowing Python really helps in decrypting _['x'].
First of all, _ is just a valid, albeit weird, variable name in Python. _ does not have any special powers in Python (as $_ has in Perl).
The syntax y['x'] means: fetch item 'x' from dictionary y. y is not a real dictionary, but rather an object that behaves mostly like a dicionary. So _['x'] just means, fetch item 'x' from the namespace. In a dicionary, whatever goes inside the [] is called a "key". Now, what happens if I write y[x] and not y['x']? That is an indirection, is is discussed a few paragraphs below.
Now, although _ would be just a regular variable name in Python, in DTML expressions it always refers to the namespace object which, like I said, is not really an object but just pretends to be one. The symbol for the namespace object could be 'namespace', 'super_dict', or '_ground'. But it was called '_'. Zopistas I've met pronounce _ as "under" or "namespace", depending on how formal they are.
Like a dicionary, _ has a has_key method, which you call like this: "_.has_key('x')". Unlike a regular dictionary, it gives you access to dozens of Python functions such as int "_.int(x)", and whole modules such as string, DateTime and random: "_.random.randint(x,y)". On the other hand, _ does not have some usual dicionary methods, like keys() or items(), which are useful to retrieve the entire contents of a dictionary.
WHAT _['x'] REALLY DOES
The strangest thing about _ is that when you access something in it, like _['x'], it doesn't just fetch the x object for you. Whenever _ retrives an object, it checks whether the object is callable (most things are callable objects in Zope). If the object is callable, _ calls or invokes it, which means the object is executed as code, and then what you get is not the object, but the result of executing it, whis is normally a string containing HTML. This is the same behaviour of the dtml-var "name" attribute. So:
(1) <dtml-var name="x">
gives the same result as
(2) <dtml-var expr="_['x']">
but is not the same as
(3) <dtml-var expr="x">.
For instance, if x is a DTML Method, (1) and (2) execute, or render it, replacing DTML tags within x by their results, and returning plain HTML. Then if you want to access some z attribute of x, you get the dreadful "String object has no attribute z", which tells you that x is no longer a rich object like a folder or a document, but is now a flat string containing the HTML resulting from rendering the x object.
With syntax (3) you just fetch it, which depending on context would display the unrendered DTML code.
If you need to indirectly fetch an object without executing it, you have to use another of _'s methods, getitem. The expression "_.getitem('x')" returns a reference to the object called x, without invoking it.
INDIRECTION
Notice difference between:
(2) <dtml-var expr="_['x']">
(4) <dtml-var expr="_[x]">
These mean COMPLETELY DIFFERENT things. In (2) you want to get the object called 'x' from the namespace dictionary. The key you are using is the string 'x'.
In (4), you are getting the object whose name is stored in variable x. The key, in this case, is whatever is referred by the variable x. If x refers to the string 'ni', then _[x] means _['ni'], that is, fetch the object called 'ni'.
That is why _[x] is called an indirection: in our example you are not fetching 'ni' directly, but indirectly through the x variable. The next time _[x] is evaluated, x may refer to 'sikander', and then _[x] may yield a totally different result.
The same rationale goes for
(5) <dtml-var expr="_.getitem('x')">
(6) <dtml-var expr="_.getitem(x)">
The result of (5) is the same as
(3) <dtml-var expr="x">
so you would never use (5) in real code.
But (6) is useful to fetch an object indirectly without executing it.
AN INTERESTING EXPERIMENT
Try this: within a folder, create two methods with ids 'method1' and 'method2'. Leave 'method2' with its default content, but replace the content of 'method1' with this, then View it.
<dtml-var standard_html_header>
<dtml-var name="method2"> <hr> <dtml-var expr="method2"> <hr> <dtml-var expr="_['method2']"> <hr> <dtml-var expr="_.getitem('method2')">
<dtml-var standard_html_footer>
If my explanations were any good, you should understand what is going on now.
The whole _ issue is why, whenever I teach Zope, I include at least one hour of "instrumental Python". And while playing with the Python interpreter, I always make the students create and do lots of operations with a dictionary called _.
-- Best regards,
Luciano
--__--__--
Message: 45 From: "Andrei Cenja" <cnj@finsiel.ro> To: <zope@zope.org> Date: Tue, 20 Mar 2001 10:29:57 +0200 Subject: [Zope] Large File Support ?!
OK, I'm sorry if this question is gonna prompt bursts of laughter, but here it goes :-)
If I intend to store many files (and large ones, too) into Zope (on RHL7, BTW) - something close to a few GBs, it would mean that Zope's database will get to be one several-gigs-large file. Someone warned me of possible problems if using very large files under linux. The question is: was he right ? How does Zope cope with that ?
Thanks !
Andrei Cenja, Bucharest, Romania.
--__--__--
Message: 46 To: Dieter Maurer <dieter@handshake.de> Cc: zope@zope.org Subject: Re: [Zope] <dtml-sendmail> From: Petr Knapek <knapek@knapek.pvt.net> Date: 20 Mar 2001 10:01:23 +0100
On Mon, 19 Mar 2001 20:52:21 +0100 (CET), Dieter Maurer <dieter@h= andshake.de> said:
Hi,
DM> Petr Knapek writes: >> I have a list of user e-mail addresses which is created >> dynamically. I would like to use <dtml-sendmail> tag to send an >> e-mail at all addresses in my dynamical list but do not know what >> the syntax of mailto attribute in sendmail tag shoul be.=3D20=3D= 20 DM> Do not use the "mailto" attribute, use the "To:" header in the DM> send mail, similar to:
DM> <dtml-sendmail mailhost=3D...> To: <dtml-var DM> expr=3D"_.string.join(address_list,',')"> ....
I think this should be better: <dtml-var expr=3D"_.string.join(address_list, ',\n ')"> ....
DM> ATTENTION: This is indented only for readability. In your DTML DM> code, "To:" must start in the first column!
I have resolved my problem just few minutes after sending e-mail. Again, thank you very much for help, ideas etc.
DM> Dieter
Petr
--=20 Petr Kn=E1pek NEXTRA Czech Republic, s.r.o., Hlinky 114, 603 00 Brno, Czech Republic e-mail: mailto:petr.knapek@nextra.cz tel:+420-5-43 554 150 FAX:+420-5-43 554 214
--__--__--
_______________________________________________ Zope maillist - Zope@zope.org
End of Zope Digest