[Zope] RE: MS Explorer no longer shows the management interface.
Ryan Ware
RWare@INTERPLASTIC.com
Tue, 20 Mar 2001 06:26:29 -0600
Always trust content from Microsoft!
> Hi,
>
> This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> Service Pack 1) and when I go to my Zope site I can no longer see the
> management pages. The right frames are displayed and the navigation tree,
> but instead of the management screen for a folder I get the view contents.
>
> Any Ideas?
>
> -----Original Message-----
> From: zope-request@zope.org [SMTP:zope-request@zope.org]
> Sent: Tuesday, March 20, 2001 3:05 AM
> To: zope@zope.org
> Subject: Zope digest, Vol 1 #1262 - 46 msgs
>
> Send Zope mailing list submissions to
> zope@zope.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.zope.org/mailman/listinfo/zope
> or, via email, send a message with subject or body 'help' to
> zope-request@zope.org
>
> You can reach the person managing the list at
> zope-admin@zope.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Zope digest..."
>
>
> Today's Topics:
>
> 1. Re: Zope security management (Bill Welch)
> 2. Re: newbie zope question -- stuck in quick-start page (Chris
> McDonough)
> 3. Can't get 2.3.1b2 sparc to run (Daniel Rusch)
> 4. Strange ZCatalog behaviour (Ingo Wilmer)
> 5. Re: dtml-sendmail and envelop sender [Q] (Bruno Mattarollo)
> 6. Re: Zope security management (Bernd Worsch)
> 7. Can one protect dtml from being rendered? (Bernd Worsch)
> 8. RE:ZCatalog update question (Darin Lee)
> 9. Re: Can't get 2.3.1b2 sparc to run (Chris McDonough)
> 10. Re: Zope security management (Phil Harris)
> 11. Re: why does manage_addDocument give me a method? (Dieter Maurer)
> 12. Re: freebsd error (Dieter Maurer)
> 13. Re: ZClass direct variable access (Dieter Maurer)
> 14. Re: <dtml-sendmail> (Dieter Maurer)
> 15. Re: dtml-sendmail and envelop sender [Q] (Dieter Maurer)
> 16. MS Explorer no longer shows the management interface. (Echlin,
> Michael)
> 17. Re: MS Explorer no longer shows the management interface. (Phil
> Harris)
> 18. Re: MS Explorer no longer shows the management interface. (Andy
> McKay)
> 19. RE: MS Explorer no longer shows the management interface. (Echlin,
> Michael)
> 20. (no subject) (Cees de Groot)
> 21. R: [Zope-Annce] Localized DateTime classes (svedovelli)
> 22. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli)
> 23. Zope vs. other app servers. Any comparison available? (Satheesh
> Babu)
> 24. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli)
> 25. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli)
> 26. Re: MS Explorer no longer shows the management interface. (Chris
> McDonough)
> 27. AW: [Zope] RE:ZCatalog update question (Marc Fischer)
> 28. DeprecationWarning (Norman Khine)
> 29. Re: DeprecationWarning (Phil Harris)
> 30. Re: Re: [Zope-Annce] Localized DateTime classes (Tino Wildenhain)
> 31. Re: ANNOUNCE: ZopeMake 1.0 (Tino Wildenhain)
> 32. Re: Can one protect dtml from being rendered? (Chris Muldrow)
> 33. avoiding nested DTMLs (Timothy Wilson)
> 34. Getting Errors trying to map permissions in Zope 2.3.0 for win32
> (Anton A. Zotov)
> 35. Re: avoiding nested DTMLs (Casey Duncan)
> 36. Re: Zope security management (John Morton)
> 37. Re: avoiding nested DTMLs (Timothy Wilson)
> 38. Re(2): [Zope] Zope hosting (David McCuskey)
> 39. More ZClass oddities (John Morton)
> 40. RE: Installation Probs (Brian Lloyd)
> 41. ZMySQL Database connection trouble (ghaley@mail.venaca.com)
> 42. some confusion on ftp security. (Patrick)
> 43. newbie (Dennis Pabalan)
> 44. Re: avoiding nested DTMLs (Luciano Ramalho)
> 45. Large File Support ?! (Andrei Cenja)
> 46. Re: <dtml-sendmail> (Petr Knapek)
>
> --__--__--
>
> Message: 1
> Date: Mon, 19 Mar 2001 12:07:05 -0500 (EST)
> From: Bill Welch <bill@carbonecho.com>
> To: <zope@zope.org>
> Subject: Re: [Zope] Zope security management
>
> To achieve genuine security, you have to do something about the 'password
> in the clear' problem.
>
> part 1) With basic auth (the zope default), the user's name and password
> are sent in the clear with every request.
>
> part 2) With form based login (login manager, zmc), the user's name and
> password are sent in the clear when the login form is submitted.
>
> Solution: Have to go with form based login that uses ssl to send user's
> name and password. Unfortunately, in my experience, ssl support for zope
> is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for
> your work so far) and hard to integrate, when this is really a core
> requirement.
>
> I think this is something that DC has to handle.
>
> Bill.
>
> On Mon, 19 Mar 2001, Bernd Worsch wrote:
>
> > It's some time ago, the issue of denying roles showed up.
> >
> > I'd really wish to see this implemented, so has this problem
> > made it into the collector? (The feature index seems broken
> > to me at the moment)
> >
> > Thanks to John for pointing out what i thought :)
> > Bernd
> >
> > On Thu, Mar 01, 2001 at 10:00:13AM +0000, Chris Withers wrote:
> > > "John R. Daily" wrote:
> > > >
> > > > That is precisely what is wrong with the model. To achieve
> manageable
> > > > and genuine security, I want to acquire _all_ permissions and
> > > > specifically deny those roles to which the inherited permissions may
> > > > not be correct.
> > >
> > > I'd agree with this, but I don't know how important it is.
> > >
> > > I'd suggest chucking it in the colelctor asa Featuer Request.
> > >
> > > cheers,
> > >
> > > Chris
> > >
> > > _______________________________________________
> > > Zope maillist - Zope@zope.org
> > > http://lists.zope.org/mailman/listinfo/zope
> > > ** No cross posts or HTML encoding! **
> > > (Related lists -
> > > http://lists.zope.org/mailman/listinfo/zope-announce
> > > http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> > --
> >
> > -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
> >
> >
> >
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
> >
>
>
>
> --__--__--
>
> Message: 2
> From: "Chris McDonough" <chrism@digicool.com>
> To: "Phil Harris" <phil.harris@zope.co.uk>,
> "Sundar Narasimhan" <sundar@ascent.com>
> Cc: <cduncan@kaivo.com>, <zope@zope.org>
> Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
> Date: Mon, 19 Mar 2001 12:37:41 -0500
>
> OK, I updated the QuickStart page with an informative message. Thanks...!
>
> ----- Original Message -----
> From: "Phil Harris" <phil.harris@zope.co.uk>
> To: "Chris McDonough" <chrism@digicool.com>; "Sundar Narasimhan"
> <sundar@ascent.com>
> Cc: <cduncan@kaivo.com>; <zope@zope.org>
> Sent: Monday, March 19, 2001 11:57 AM
> Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
>
>
> > I've seen similar problems on W2K with IE5, 5.01, 5.5 (but not 5.51).
> >
> > Phil
> >
> > ----- Original Message -----
> > From: "Chris McDonough" <chrism@digicool.com>
> > To: "Chris McDonough" <chrism@digicool.com>; "Sundar Narasimhan"
> > <sundar@ascent.com>
> > Cc: <phil.harris@zope.co.uk>; <cduncan@kaivo.com>; <zope@zope.org>
> > Sent: Monday, March 19, 2001 5:23 PM
> > Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
> >
> >
> > > What exact versions of IE does this actually happen under? Anybody
> know?
> > >
> > > ----- Original Message -----
> > > From: "Chris McDonough" <chrism@digicool.com>
> > > To: "Sundar Narasimhan" <sundar@ascent.com>
> > > Cc: <phil.harris@zope.co.uk>; <cduncan@kaivo.com>; <zope@zope.org>
> > > Sent: Monday, March 19, 2001 12:21 PM
> > > Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
> > >
> > >
> > > > > Understood. Here's a small suggestion -- I'd do it myself if I
> knew
> > > > > how. I'd put in a short paragraph (or at least a link to this
> > > > > problem's description) somewhere in the beginner's guide/install
> > > > > documents. Most people will install zope, fire up their browsers,
> and
> > > > > when they connect be baffled (as I was) when they don't see
> anything
> > > > > like those management tabs come up. If I'd seen a brief mention to
> > > > > "check your browser version".. it would have saved me a bunch of
> time.
> > > >
> > > > Actually, I'll go in and change the quickstart page myself, this is
> a
> > good
> > > > idea, I dont know why I didn't think of it...
> > > >
> > > >
> > > > _______________________________________________
> > > > Zope maillist - Zope@zope.org
> > > > http://lists.zope.org/mailman/listinfo/zope
> > > > ** No cross posts or HTML encoding! **
> > > > (Related lists -
> > > > http://lists.zope.org/mailman/listinfo/zope-announce
> > > > http://lists.zope.org/mailman/listinfo/zope-dev )
> > > >
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
> >
>
>
>
> --__--__--
>
> Message: 3
> Date: Mon, 19 Mar 2001 11:13:45 -0600
> From: Daniel Rusch <drusch@globalcrossing.com>
> To: zope@zope.org
> Subject: [Zope] Can't get 2.3.1b2 sparc to run
>
> All,
>
> Any body have any ideas why I can't get 2.3.1b2 sparc to run. I download
> the tar ball, unzipped it, ran install, untar'd some products and ran
> start I get a bunch of error messages like below for each core product?
>
> ------
> 2001-03-19T17:06:23 ERROR(200) Zope Couldn't install OFSP
> Traceback (innermost last):
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/Application.py, line
> 627, in install_products
> (Object: ApplicationDefaultPermissions)
> (Info: OFSP)
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/OFSP/__init__.py,
> line 189, in initialize
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py,
> line 365, in registerHelp
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py,
> line 298, in registerHelpTopic
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/ObjectManager.py,
> line 300, in _setObject
> (Object: Traversable)
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py,
> line 152, in manage_afterAdd
> (Object: HelpTopicBase)
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py,
> line 165, in index_object
> (Object: HelpTopicBase)
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/ZCatalog
> .py,
> line 424, in catalog_object
> (Object: Traversable)
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/Catalog.
> py,
> line 442, in catalogObject
> File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/SearchIndex/UnTextIndex.py
> ,
> line 335, in index_object
> SystemError: error return without exception set
>
>
> --__--__--
>
> Message: 4
> Date: Mon, 19 Mar 2001 18:10:37 +0100
> From: Ingo Wilmer <wilmer@zeitspringer.de>
> Organization: die zeitspringer
> To: zope <zope@zope.org>
> Subject: [Zope] Strange ZCatalog behaviour
>
> Hi Zopistas
>
> I experience Problems using ZCatalog,
> See following example:
> <dtml-in "Catalog(meta_type=3D'ZClass_seite_press',region=3Dzregion)">
> where zregion is one string and region is a list indexd as text
> when i change this to =20
> <dtml-in "Catalog(meta_type=3D'ZClass_seite_press',region in zregion)">
> where zregion itself is a list, containing 3 or more strings that=20
> should match on some instances of ZClass_seite_presse i can't
> even get this into zope, because i recive this error
>
> non-keyword arg after keyword arg
> , for tag <dtml-in "Catalog(meta_type=3D'ZClass_seite_presse',region in
> zregion)">
>
> so, how would i get the goal, searching in ZCatalog with my list as
> mentioned=20
> in the Howtos.
>
> Thanks in advance to anybody out there.
>
> --=20
> ingo wilmer
> gesch=E4ftsf=FChrung
>
> tel +49 251 98704-22 | j=FCdefelder str. 37 |
> http://www.zeitspringer.de=20
> fax +49 251 98704-11 | 48143 m=FCnster |
>
>
> --__--__--
>
> Message: 5
> From: "Bruno Mattarollo" <bruno@dynamic.greenpeace.org>
> To: "Stefan H. Holek" <stefan@epy.co.at>, <zope@zope.org>
> Subject: Re: [Zope] dtml-sendmail and envelop sender [Q]
> Date: Mon, 19 Mar 2001 18:21:13 +0100
>
> Thank you Stefan,
>
> I was just writing an external method that would do what you recommen=
> d.
> Great! Thanks to everybody!!! It works as expected!
>
> Cheers!
>
> /B
> ----- Original Message -----
> From: "Stefan H. Holek" <stefan@epy.co.at>
> To: <zope@zope.org>
> Cc: "Bruno Mattarollo" <bruno@dynamic.greenpeace.org>
> Sent: Monday, March 19, 2001 5:58 PM
> Subject: Re: [Zope] dtml-sendmail and envelop sender [Q]
>
>
> --On Montag, 19. M=E4rz 2001 17:10 +0100 Frank Tegtmeyer
> <frank.tegtmeyer@cia-mediahaus.de> wrote:
>
> >> So according to the spec I should use "Sender: <dtml-var
> >> OurBounceProcessingAccount>" in our DTML-Method that uses
> >> dtml-sendmail, no?
> >
> > To handle autoresponders etc. that's ok. It doesn't handle delivery
> > failures. You HAVE TO set the envelope sender accordingly (I think for
> > Postfix it's the -f switch like for sendmail). To do that you have to
> > generate a new method - possibly as external Python method.
>
> After we all agreed that "Errors-To:" is bad ;)
> your external method could look like this:
>
> import os
>
> sendcommand =3D '/usr/sbin/sendmail -t -oi -f%s'
> mailtemplate =3D 'From: %s\nTo: %s\nSubject: %s\n%s\n'
>
> def sendMail( bounceto, mailfrom, mailto, subject, body ):
> p =3D os.popen( sendcommand % (bounceto), 'w', 1 )
> p.write( mailtemplate % (mailfrom, mailto, subject, body) )
> p.close()
>
>
> HTH,
> Stefan
>
> --
> Things work better when plugged in.
>
>
>
>
>
> --__--__--
>
> Message: 6
> Date: Mon, 19 Mar 2001 18:54:21 +0100
> From: Bernd Worsch <bernd.worsch@frontsite.de>
> To: zope@zope.org
> Subject: Re: [Zope] Zope security management
> Reply-To: Bernd Worsch <bernd.worsch@frontsite.de>
>
> On Mon, Mar 19, 2001 at 12:07:05PM -0500, Bill Welch wrote:
> > To achieve genuine security, you have to do something about the
> 'password
> > in the clear' problem.
> >
> > part 1) With basic auth (the zope default), the user's name and
> password
> > are sent in the clear with every request.
> >
> > part 2) With form based login (login manager, zmc), the user's name and
> > password are sent in the clear when the login form is submitted.
> >
> > Solution: Have to go with form based login that uses ssl to send user's
> > name and password. Unfortunately, in my experience, ssl support for zope
> > is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for
> > your work so far) and hard to integrate, when this is really a core
> > requirement.
> >
> > I think this is something that DC has to handle.
> >
> > Bill.
> >
>
> Well your quite right, but this is another problem with zope security
> and more or less independent of zope security management features.
>
> BTW isn't it normally recommended to shield z-server by apache doing
> for the ssl stuff? If so, then there at least is some workaround possible.
>
> The kind of complicated and unusal management of security in zope on
> the other hand applies even, when only doing intranet stuff without
> any connection to the outside. As pointed out before the problem isn't
> that one can't realize the security policy he/she wishes but that it is
> quite painful at times.
>
> Suppose the following object/folder hierarchy:
>
> A containing AA and AB. AA containing AAA and AAB, AB containing ABA and
> ABB.
>
> A
> AA
> AAA
> AAB
> AB
> ABA
> ABB
>
> Suppose there is a role R which grants access to some objects. All the
> users
> have role R everywhere except in AAA and ABA. As far as i know there is
> no
> way to realize this security policy using role R alone.
>
> What you can do, is click through the security tabs in AAA and ABA so
> that
> role R isn't known in AAA and ABA blocking access to them. Then you
> define
> the role S in AAA and ABA, by checking the same boxes as you had in role
> R.
> Now you can give some of your users the local role S in AAA and ABA.
>
> So, it works but it isn't really funny. But maybe i'm mistaken and there
> is
> an elegant solution for this kind of policy?
>
> best regards
> Bernd
>
> --
>
> -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
>
>
>
>
>
>
> --__--__--
>
> Message: 7
> Date: Mon, 19 Mar 2001 19:08:14 +0100
> From: Bernd Worsch <bernd.worsch@frontsite.de>
> To: zope@zope.org
> Subject: [Zope] Can one protect dtml from being rendered?
> Reply-To: Bernd Worsch <bernd.worsch@frontsite.de>
>
> Hi there!
>
> My final question for today: When i generate a new document A and
> take the document content from some kind of template B, is there
> a way to get some dtml in the document rendered and some inserted
> directly?
>
> Suppose SomeVar holds 'SomeText' and AnotherVar holds 'AnotherText'.
>
> How do i protect AnotherVar so that
>
> <!-- begin B -->
> <dtml-var SomeVar>
> <dtml-var AnotherVar>
> <!-- end B -->
>
> becomes
>
> <!-- begin A -->
> SomeText
> <dtml-var AnotherVar>
> <!-- end A -->
>
> after insertion?
>
> Thanks
> Bernd
>
> --
>
> -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
>
>
>
>
>
>
> --__--__--
>
> Message: 8
> Date: Mon, 19 Mar 2001 13:09:43 -0500
> From: "Darin Lee" <LEEDM@state.mi.us>
> To: <zope@zope.org>
> Subject: [Zope] RE:ZCatalog update question
>
> Gari,
>
> You must call <dtml-call reindex_object> in any of your methods that =
> operate on data (constructor, edit functions etc.) in order for the object
> =
> to be automatically updated in the ZCatalog. Simply inheriting ZCatalog as
> =
> a base class is not enough.
>
> Also, make sure when you are defining your base classes to include =
> ZCatalogAware FIRST.
>
> Good luck,
> -Darin
>
>
>
> --__--__--
>
> Message: 9
> From: "Chris McDonough" <chrism@digicool.com>
> To: "Daniel Rusch" <drusch@globalcrossing.com>, <zope@zope.org>
> Subject: Re: [Zope] Can't get 2.3.1b2 sparc to run
> Date: Mon, 19 Mar 2001 14:58:10 -0500
>
> Daniel,
>
> This looks like a splitter.c problem on Solaris. The same error doesn't
> occur on Linux... give me a little bit of time and I'll try to track it
> down.
>
> ----- Original Message -----
> From: "Daniel Rusch" <drusch@globalcrossing.com>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 12:13 PM
> Subject: [Zope] Can't get 2.3.1b2 sparc to run
>
>
> > All,
> >
> > Any body have any ideas why I can't get 2.3.1b2 sparc to run. I download
> > the tar ball, unzipped it, ran install, untar'd some products and ran
> > start I get a bunch of error messages like below for each core product?
> >
> > ------
> > 2001-03-19T17:06:23 ERROR(200) Zope Couldn't install OFSP
> > Traceback (innermost last):
> > File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/Application.py, line
> > 627, in install_products
> > (Object: ApplicationDefaultPermissions)
> > (Info: OFSP)
> > File
> >
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/OFSP/__init__.py,
> > line 189, in initialize
> > File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py,
> > line 365, in registerHelp
> > File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py,
> > line 298, in registerHelpTopic
> > File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/ObjectManager.py,
> > line 300, in _setObject
> > (Object: Traversable)
> > File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py,
> > line 152, in manage_afterAdd
> > (Object: HelpTopicBase)
> > File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py,
> > line 165, in index_object
> > (Object: HelpTopicBase)
> > File
> >
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/ZCatalog
> .p
> y,
> > line 424, in catalog_object
> > (Object: Traversable)
> > File
> >
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/Catalog.
> py
> ,
> > line 442, in catalogObject
> > File
> >
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/SearchIndex/UnTextIndex.py
> ,
> > line 335, in index_object
> > SystemError: error return without exception set
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
> >
>
>
>
> --__--__--
>
> Message: 10
> From: "Phil Harris" <phil.harris@zope.co.uk>
> To: "Bill Welch" <bill@carbonecho.com>, <zope@zope.org>
> Subject: Re: [Zope] Zope security management
> Date: Mon, 19 Mar 2001 19:37:11 -0000
>
> Bill,
>
> There is another answer to part 2, use javascript to create an md5 hash of
> the user,somesecret,password.
>
> This can be sent instead of the password and then validated on the server
> side, since the username and md5 hash is all that is sent across the wire,
> it should be a lot more secure than plain text.
>
> I have a library for javascript md5 if anyone is interested (which,btw, I
> 'stole' from the PHPlib ;) ).
>
> Phil
> phil.harris@zope.co.uk
>
>
> ----- Original Message -----
> From: "Bill Welch" <bill@carbonecho.com>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 5:07 PM
> Subject: Re: [Zope] Zope security management
>
>
> > To achieve genuine security, you have to do something about the
> 'password
> > in the clear' problem.
> >
> > part 1) With basic auth (the zope default), the user's name and
> password
> > are sent in the clear with every request.
> >
> > part 2) With form based login (login manager, zmc), the user's name and
> > password are sent in the clear when the login form is submitted.
> >
> > Solution: Have to go with form based login that uses ssl to send user's
> > name and password. Unfortunately, in my experience, ssl support for zope
> > is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for
> > your work so far) and hard to integrate, when this is really a core
> > requirement.
> >
> > I think this is something that DC has to handle.
> >
> > Bill.
> >
> > On Mon, 19 Mar 2001, Bernd Worsch wrote:
> >
> > > It's some time ago, the issue of denying roles showed up.
> > >
> > > I'd really wish to see this implemented, so has this problem
> > > made it into the collector? (The feature index seems broken
> > > to me at the moment)
> > >
> > > Thanks to John for pointing out what i thought :)
> > > Bernd
> > >
> > > On Thu, Mar 01, 2001 at 10:00:13AM +0000, Chris Withers wrote:
> > > > "John R. Daily" wrote:
> > > > >
> > > > > That is precisely what is wrong with the model. To achieve
> manageable
> > > > > and genuine security, I want to acquire _all_ permissions and
> > > > > specifically deny those roles to which the inherited permissions
> may
> > > > > not be correct.
> > > >
> > > > I'd agree with this, but I don't know how important it is.
> > > >
> > > > I'd suggest chucking it in the colelctor asa Featuer Request.
> > > >
> > > > cheers,
> > > >
> > > > Chris
> > > >
> > > > _______________________________________________
> > > > Zope maillist - Zope@zope.org
> > > > http://lists.zope.org/mailman/listinfo/zope
> > > > ** No cross posts or HTML encoding! **
> > > > (Related lists -
> > > > http://lists.zope.org/mailman/listinfo/zope-announce
> > > > http://lists.zope.org/mailman/listinfo/zope-dev )
> > >
> > > --
> > >
> > > -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
> > >
> > >
> > >
> > >
> > >
> > > _______________________________________________
> > > Zope maillist - Zope@zope.org
> > > http://lists.zope.org/mailman/listinfo/zope
> > > ** No cross posts or HTML encoding! **
> > > (Related lists -
> > > http://lists.zope.org/mailman/listinfo/zope-announce
> > > http://lists.zope.org/mailman/listinfo/zope-dev )
> > >
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
>
>
>
> --__--__--
>
> Message: 11
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 20:57:22 +0100 (CET)
> To: Bernd Worsch <bernd.worsch@frontsite.de>
> Cc: zope@zope.org
> Subject: Re: [Zope] why does manage_addDocument give me a method?
>
> Bernd Worsch writes:
> > Another thing that seems strange to me:
> >
> > When calling
> >
> > <dtml-with SomeFolder>
> > <dtml-call expr="manage_addDocument('SomeDocument','')">
> > </dtml-with>
> >
> > i get a dtml-method called SomeDocument instead of a dtml-document!!
> >
> > Is this behaviour ok? If yes how can i get documents?
> See "OFS.Document".... It is depraceted.
>
>
>
> Dieter
>
>
> --__--__--
>
> Message: 12
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 20:49:43 +0100 (CET)
> To: Chris Humphries <chumphries@siliconinc.net>
> Cc: zope@zope.org
> Subject: Re: [Zope] freebsd error
>
> Chris Humphries writes:
> > i have python 1.5.2 (threads), freebsd, and zope installed (tryeed
> > differenmt versions, so i know this is not an version issue).
> > ...
> > ImportError:
> /usr/local/www/Zope-2.0.0b5/lib/python/ExtensionClass.so:
> > Undefined symbol "PyMethod_Type"
> I have seen this on the mailing list (--> searchable archives, Google).
> The poster, apparently, found a solution....
>
>
>
> Dieter
>
>
> --__--__--
>
> Message: 13
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 20:54:40 +0100 (CET)
> To: Phill Hugo <phill@fortune-cookie.com>
> Cc: zope@zope.org
> Subject: Re: [Zope] ZClass direct variable access
>
> Phill Hugo writes:
> > Is there a way to access property sheet variables from a zclass method
> > without knowing which property sheet it is contained within.
> If you only want to read them:
>
> they are exposed as attributes of the Z Instance, i.e.
> you can use "getattr" to access them (as your property is
> an expression). For constant access, you could use
> the attribute access syntax.
>
> I do not know a way to change properties without the specification
> on the property sheet.
>
>
> Dieter
>
>
> --__--__--
>
> Message: 14
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 20:52:21 +0100 (CET)
> To: Petr Knapek <knapek@knapek.pvt.net>
> Cc: zope@zope.org
> Subject: Re: [Zope] <dtml-sendmail>
>
> Petr Knapek writes:
> > I have a list of user e-mail addresses which is created dynamically. I
> > would like to use <dtml-sendmail> tag to send an e-mail at all
> addresses
> > in my dynamical list but do not know what the syntax of mailto
> attribute
> > in sendmail tag shoul be.=20=20
> Do not use the "mailto" attribute, use the
> "To:" header in the send mail, similar to:
>
> <dtml-sendmail mailhost=...>
> To: <dtml-var expr="_.string.join(address_list,',')">
> ....
>
> ATTENTION: This is indented only for readability. In your
> DTML code, "To:" must start in the first column!
>
>
>
> Dieter
>
>
> --__--__--
>
> Message: 15
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 19:59:30 +0100 (CET)
> To: frank.tegtmeyer@cia-mediahaus.de (Frank Tegtmeyer)
> Cc: Dieter Maurer <dieter@handshake.de>, zope@zope.org
> Subject: Re: [Zope] dtml-sendmail and envelop sender [Q]
>
> Frank Tegtmeyer writes:
> > > The Internet mail message specification (RFC 822) defined
> > > a header to control error reports.
> >
> > That's wrong. Errors go to the envelope sender. There are
> > many, many bad gateways that do it wrong but there number still
> > doesn't make it right.
> Quoted from RFC822:
>
> : 4.4.4. AUTOMATIC USE OF FROM / SENDER / REPLY-TO
> :
> : For systems which automatically generate address lists for
> : replies to messages, the following recommendations are made:
> :
> : o The "Sender" field mailbox should be sent notices of
> : any problems in transport or delivery of the original
> : messages. If there is no "Sender" field, then the
> : "From" field mailbox should be used.
> :
>
> Dieter
>
>
> --__--__--
>
> Message: 16
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: "'zope@zope.org'" <zope@zope.org>
> Date: Mon, 19 Mar 2001 15:16:41 -0500
> Subject: [Zope] MS Explorer no longer shows the management interface.
>
> Hi,
>
> This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> Service Pack 1) and when I go to my Zope site I can no longer see the
> management pages. The right frames are displayed and the navigation tree,
> but instead of the management screen for a folder I get the view contents.
>
> Any Ideas?
>
> Mike Echlin CP/SA/CM
> AECL Control and Operations Technology
> echlinm@aecl.ca
>
>
>
>
> --__--__--
>
> Message: 17
> From: "Phil Harris" <phil.harris@zope.co.uk>
> To: "Echlin, Michael" <echlinm@aecl.ca>, <zope@zope.org>
> Subject: Re: [Zope] MS Explorer no longer shows the management interface.
> Date: Mon, 19 Mar 2001 20:23:20 -0000
>
> Michael,
>
> see today's thread,
>
> [Zope] newbie zope question -- stuck in quick-start page
>
> and all will be revealed.
>
> Phil
> phil.harris@zope.co.uk
>
> ----- Original Message -----
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 8:16 PM
> Subject: [Zope] MS Explorer no longer shows the management interface.
>
>
> > Hi,
> >
> > This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> > Service Pack 1) and when I go to my Zope site I can no longer see the
> > management pages. The right frames are displayed and the navigation
> tree,
> > but instead of the management screen for a folder I get the view
> contents.
> >
> > Any Ideas?
> >
> > Mike Echlin CP/SA/CM
> > AECL Control and Operations Technology
> > echlinm@aecl.ca
> >
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
>
>
>
> --__--__--
>
> Message: 18
> From: "Andy McKay" <andym@ActiveState.com>
> To: "Echlin, Michael" <echlinm@aecl.ca>, <zope@zope.org>
> Subject: Re: [Zope] MS Explorer no longer shows the management interface.
> Date: Mon, 19 Mar 2001 12:29:20 -0800
>
> IE 5.01 doesnt render Zope Management Interface correctly, upgrade IE 5.5.
> --
> Andy McKay.
>
>
> ----- Original Message -----
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 12:16 PM
> Subject: [Zope] MS Explorer no longer shows the management interface.
>
>
> > Hi,
> >
> > This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> > Service Pack 1) and when I go to my Zope site I can no longer see the
> > management pages. The right frames are displayed and the navigation
> tree,
> > but instead of the management screen for a folder I get the view
> contents.
> >
> > Any Ideas?
> >
> > Mike Echlin CP/SA/CM
> > AECL Control and Operations Technology
> > echlinm@aecl.ca
> >
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
> >
>
>
>
> --__--__--
>
> Message: 19
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: 'Phil Harris' <phil.harris@zope.co.uk>,
> "Echlin, Michael" <echlinm@aecl.ca>, zope@zope.org
> Subject: RE: [Zope] MS Explorer no longer shows the management interface.
> Date: Mon, 19 Mar 2001 15:36:03 -0500
>
> The weird part of all this that it worked just fine until I put in the
> security patch.
> When MS puts out a new security patch will they break the IE connection to
> ZOPE again?
>
> Our shop is stuck, by official decree, to using IE but they haven't found
> a
> way to force us not to use Netscape on the Linux servers yet. (Possibly
> because we haven't told them we are using Linux?)
>
> Thanks, I will have to upgrade to 5.5 and warn my Zope managers about this
> problem.
>
> Mike.
>
> -----Original Message-----
> From: Phil Harris [mailto:phil.harris@zope.co.uk]
> Sent: March 19, 2001 3:23 PM
> To: Echlin, Michael; zope@zope.org
> Subject: Re: [Zope] MS Explorer no longer shows the management
> interface.
>
>
> Michael,
>
> see today's thread,
>
> [Zope] newbie zope question -- stuck in quick-start page
>
> and all will be revealed.
>
> Phil
> phil.harris@zope.co.uk
>
> ----- Original Message -----
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 8:16 PM
> Subject: [Zope] MS Explorer no longer shows the management interface.
>
>
> > Hi,
> >
> > This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> > Service Pack 1) and when I go to my Zope site I can no longer see the
> > management pages. The right frames are displayed and the navigation
> tree,
> > but instead of the management screen for a folder I get the view
> contents.
> >
> > Any Ideas?
> >
> > Mike Echlin CP/SA/CM
> > AECL Control and Operations Technology
> > echlinm@aecl.ca
> >
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
>
>
> --__--__--
>
> Message: 20
> To: Federico Di Gregorio <fog@mixadlive.com>
> cc: zope@zope.org
> From: cg@cdegroot.com (Cees de Groot)
> Reply-To: cg@cdegroot.com
> Date: Mon, 19 Mar 2001 21:37:00 +0100
> Subject: [Zope] (no subject)
>
> fog@mixadlive.com said:
> > if you want to use the per-cursor commit extension of psycopg, you
> > need to call the .commit() method on the *cursor*. calling it on the
> > connection will commit on all the cursors derived from the connection.
> >
>
> I know (I wrote ODBC drivers for a living, among others a PostgreSQL one
> :-)).
> I sorta expected the Z SQL Connection to do the "right thing", but it
> forwards
> the TM messages to the connection, not to individual cursors.
>
> > mmm... i think that zope instantiate a connection for every thread. in
> > the psycopg case, every zope thread gets one connection and one
> > cursor.
>
> Let's hope so, although I haven't been able to discern the code that does
> that
> bit of magic. Is there a document somewhere that describes what Zope does,
>
> thread-wise, when handling requests?
>
> Anyway, I plunged into my code and FYI, this is how I'm now dealing with
> it:
>
> - select statements grab and release a cursor;
> - update statements grab a cursor, wrap them in a TM subclass and register
> the
> result with the transaction manager. The cursor is also registered in a
> thread
> map, so that subsequent update statements in the same thread/transaction
> reuse
> the cursor. When the Zope TM calls finish()/abort(), the cursor is
> committed
> and released (and removed from the thread map).
> - session access (updating the "last accessed" timestamp on mostly every
> request) is done through a special global cursor, which does a commit
> every 10
> or so updates keeping disk write load for this non-critical piece of
> information low.
>
> The end result is acceptably low connection usage and correct transaction
> scoping.
>
> Now I only have to find that (*&@#$ deadlock somewhere in my code ;-).
>
>
> --
> Cees de Groot http://www.cdegroot.com <cg@cdegroot.com>
> GnuPG 1024D/E0989E8B 0016 F679 F38D 5946 4ECD 1986 F303 937F E098 9E8B
> --
> Cees de Groot http://www.cdegroot.com <cg@cdegroot.com>
> GnuPG 1024D/E0989E8B 0016 F679 F38D 5946 4ECD 1986 F303 937F E098 9E8B
>
>
>
>
> --__--__--
>
> Message: 21
> From: "svedovelli" <spinwing@inwind.it>
> To: "Oleg Broytmann" <phd@mail2.phd.pp.ru>
> Cc: <zope@zope.org>
> Date: Mon, 19 Mar 2001 21:35:56 +0100
> Subject: [Zope] R: [Zope-Annce] Localized DateTime classes
>
> Hello Oleg
>
> well, yes, but what if you are running a german installation and want to
> provide, say, dutch localization? This is my very first try, also to see
> if
> people are interested. I am trying now to design a more flexible way to do
> this, using a ZClass to determine the desired translation.
>
> I will post soon when I will have a proper solution
>
> Keep in touch
> Ciao!
> Stefano
>
>
>
> -----Messaggio originale-----
> Da: Oleg Broytmann [mailto:phd@phd.pp.ru]
> Inviato: lunedi 19 marzo 2001 10.38
> A: svedovelli
> Cc: Zope Mailing List
> Oggetto: Re: [Zope-Annce] Localized DateTime classes
>
>
> Hi!
>
> Nice...
>
> On Sun, 18 Mar 2001, svedovelli wrote:
> > French, but I plan in future to create a more sophisticated version
> which
> > will try to guess in which country the system is running in order to
> return
> > the proper translation.
>
> ...but why guess? Just use locale settings!
>
> Oleg.
> ----
> Oleg Broytmann http://www.zope.org/Members/phd/ phd@phd.pp.ru
> Programmers don't die, they just GOSUB without RETURN.
>
>
>
>
> --__--__--
>
> Message: 22
> From: "svedovelli" <spinwing@inwind.it>
> To: "Oleg Broytmann" <phd@mail2.phd.pp.ru>,
> "Tino Wildenhain" <tino@wildenhain.de>
> Cc: "Zope Mailing List" <zope@zope.org>
> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes
> Date: Mon, 19 Mar 2001 21:36:05 +0100
>
> Well, we can think about it in a second time....maybe we can find a
> solution
> as well.
>
> Stefano
>
> -----Messaggio originale-----
> Da: Oleg Broytmann [mailto:phd@phd.pp.ru]
> Inviato: lunedi 19 marzo 2001 15.12
> A: Tino Wildenhain
> Cc: svedovelli; Zope Mailing List
> Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
>
>
> On Sun, 18 Mar 2001, Tino Wildenhain wrote:
> > the point IMHO is, the locales setting applies to the server system,
> > where it is serving pages for a client system and its settings.
> > E.g. I would not expect russian date in a italian document...
>
> But of course! And because of this I would do entire site in one
> langauge and one locale. The problem with Zope is that it's multithreaded,
> and can't switch locales on the fly :(
>
> Oleg.
> ----
> Oleg Broytmann http://www.zope.org/Members/phd/ phd@phd.pp.ru
> Programmers don't die, they just GOSUB without RETURN.
>
>
>
>
> --__--__--
>
> Message: 23
> Reply-To: <sbabu@tnc.org>
> From: "Satheesh Babu" <sbabu@tnc.org>
> To: <zope@zope.org>
> Date: Mon, 19 Mar 2001 15:37:09 -0500
> Subject: [Zope] Zope vs. other app servers. Any comparison available?
>
> Hi,
>
> We use Zope a lot. However, there are some schools of thought that since
> MacroMedia has bought Allaire, it is going to be *the* web app development
> platform (personally, I think you can't compare Cold Fusion to Zope). So,
> are there any web sites that compare Zope vs. ASP, PHP, Cold Fusion, Java
> app servers?
>
> If this is "suite" friendly, better! Even other wise, if you've any
> pointers
> to existing documents, that would be of great help.
>
> TIA
>
> V. Satheesh Babu
> sbabu@tnc.org
>
>
>
>
> --__--__--
>
> Message: 24
> From: "svedovelli" <spinwing@inwind.it>
> To: "Tino Wildenhain" <tino@wildenhain.de>,
> "Oleg Broytmann" <phd@mail2.phd.pp.ru>
> Cc: "Zope Mailing List" <zope@zope.org>
> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes
> Date: Mon, 19 Mar 2001 21:36:04 +0100
>
> Exactly... this is why this is a very first try, and I am relying also on
> the comunity to see the impact of the modified class. The idea is to
> expand
> it so that the class is able to take the localized names from a ZClass
> rather than determine the proper language from the system
>
> Ciao!
> Stefano
>
> -----Messaggio originale-----
> Da: Tino Wildenhain [mailto:tino@wildenhain.de]
> Inviato: domenica 18 marzo 2001 16.30
> A: Oleg Broytmann
> Cc: svedovelli; Zope Mailing List
> Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
>
>
> Hi Oleg, svedovelli,
>
> the point IMHO is, the locales setting applies to the server system,
> where it is serving pages for a client system and its settings.
> E.g. I would not expect russian date in a italian document...
>
> Regards
> Tino
>
> Oleg Broytmann wrote:
> >
> > Hi!
> >
> > Nice...
> >
> > On Sun, 18 Mar 2001, svedovelli wrote:
> > > French, but I plan in future to create a more sophisticated version
> which
> > > will try to guess in which country the system is running in order to
> return
> > > the proper translation.
> >
> > ...but why guess? Just use locale settings!
> >
> > Oleg.
> > ----
> > Oleg Broytmann http://www.zope.org/Members/phd/
> phd@phd.pp.ru
> > Programmers don't die, they just GOSUB without RETURN.
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
>
>
>
> --__--__--
>
> Message: 25
> From: "svedovelli" <spinwing@inwind.it>
> To: "Hannu Krosing" <hannu@tm.ee>,
> "Oleg Broytmann" <phd@mail2.phd.pp.ru>
> Cc: "Zope Mailing List" <zope@zope.org>
> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes
> Date: Mon, 19 Mar 2001 21:36:01 +0100
>
> This is one of the possible problems I am facing. The basic idea that I
> would like to implement is: if the whole site is in a specific language,
> then the designer should be able to provide the DateTime with the proper
> translation. I am planning to use a ZClass to achieve this.
>
> Ciao!
> Stefano
>
> -----Messaggio originale-----
> Da: hannu@m72.tm.ee [mailto:hannu@m72.tm.ee]Per conto di Hannu Krosing
> Inviato: lunedi 19 marzo 2001 10.47
> A: Oleg Broytmann
> Cc: svedovelli; Zope Mailing List
> Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
>
>
> Oleg Broytmann wrote:
> >
> > Hi!
> >
> > Nice...
> >
> > On Sun, 18 Mar 2001, svedovelli wrote:
> > > French, but I plan in future to create a more sophisticated version
> which
> > > will try to guess in which country the system is running in order to
> return
> > > the proper translation.
> >
> > ...but why guess? Just use locale settings!
>
> How do you get locale settings from HTTP client ?
>
> -------------------
> Hannu
>
>
>
> --__--__--
>
> Message: 26
> From: "Chris McDonough" <chrism@digicool.com>
> To: "Echlin, Michael" <echlinm@aecl.ca>,
> "'Phil Harris'" <phil.harris@zope.co.uk>, <zope@zope.org>
> Subject: Re: [Zope] MS Explorer no longer shows the management interface.
> Date: Mon, 19 Mar 2001 16:07:07 -0500
>
> Their security patch breaks the way basic auth works. I imagine it was
> intentional until all their users started to scream... and then they
> backed
> off in IE 5.5.
>
> ----- Original Message -----
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: "'Phil Harris'" <phil.harris@zope.co.uk>; "Echlin, Michael"
> <echlinm@aecl.ca>; <zope@zope.org>
> Sent: Monday, March 19, 2001 3:36 PM
> Subject: RE: [Zope] MS Explorer no longer shows the management interface.
>
>
> > The weird part of all this that it worked just fine until I put in the
> > security patch.
> > When MS puts out a new security patch will they break the IE connection
> to
> > ZOPE again?
> >
> > Our shop is stuck, by official decree, to using IE but they haven't
> found
> a
> > way to force us not to use Netscape on the Linux servers yet. (Possibly
> > because we haven't told them we are using Linux?)
> >
> > Thanks, I will have to upgrade to 5.5 and warn my Zope managers about
> this
> > problem.
> >
> > Mike.
> >
> > -----Original Message-----
> > From: Phil Harris [mailto:phil.harris@zope.co.uk]
> > Sent: March 19, 2001 3:23 PM
> > To: Echlin, Michael; zope@zope.org
> > Subject: Re: [Zope] MS Explorer no longer shows the management
> > interface.
> >
> >
> > Michael,
> >
> > see today's thread,
> >
> > [Zope] newbie zope question -- stuck in quick-start page
> >
> > and all will be revealed.
> >
> > Phil
> > phil.harris@zope.co.uk
> >
> > ----- Original Message -----
> > From: "Echlin, Michael" <echlinm@aecl.ca>
> > To: <zope@zope.org>
> > Sent: Monday, March 19, 2001 8:16 PM
> > Subject: [Zope] MS Explorer no longer shows the management interface.
> >
> >
> > > Hi,
> > >
> > > This morning I installed a few upgrades to MS 98 (Internet Explorer
> 5.01
> > > Service Pack 1) and when I go to my Zope site I can no longer see the
> > > management pages. The right frames are displayed and the navigation
> tree,
> > > but instead of the management screen for a folder I get the view
> contents.
> > >
> > > Any Ideas?
> > >
> > > Mike Echlin CP/SA/CM
> > > AECL Control and Operations Technology
> > > echlinm@aecl.ca
> > >
> > >
> > >
> > > _______________________________________________
> > > Zope maillist - Zope@zope.org
> > > http://lists.zope.org/mailman/listinfo/zope
> > > ** No cross posts or HTML encoding! **
> > > (Related lists -
> > > http://lists.zope.org/mailman/listinfo/zope-announce
> > > http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
> >
>
>
>
> --__--__--
>
> Message: 27
> From: "Marc Fischer" <marcbpc@gmx.de>
> To: "Darin Lee" <LEEDM@state.mi.us>,
> <zope@zope.org>
> Subject: AW: [Zope] RE:ZCatalog update question
> Date: Mon, 19 Mar 2001 21:58:05 +0100
>
> Thank you :-)
>
> That's it ...
> I used the following syntax:
>
> <dtml-call "this().reindex_object()">
>
> in every method I create or edit an instance.
>
> Marc
>
>
> > -----Ursprungliche Nachricht-----
> > Von: zope-admin@zope.org [mailto:zope-admin@zope.org]Im Auftrag von
> > Darin Lee
> > Gesendet: Montag, 19. Marz 2001 19:10
> > An: zope@zope.org
> > Betreff: [Zope] RE:ZCatalog update question
> >
> >
> > Gari,
> >
> > You must call <dtml-call reindex_object> in any of your methods
> > that operate on data (constructor, edit functions etc.) in order
> > for the object to be automatically updated in the ZCatalog.
> > Simply inheriting ZCatalog as a base class is not enough.
> >
> > Also, make sure when you are defining your base classes to
> > include ZCatalogAware FIRST.
> >
> > Good luck,
> > -Darin
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
> >
>
>
> --__--__--
>
> Message: 28
> From: "Norman Khine" <khine@btinternet.com>
> To: "Zope" <zope@zope.org>
> Date: Mon, 19 Mar 2001 21:24:17 -0000
> Subject: [Zope] DeprecationWarning
>
> I just like to say that I have configured Zope to run under FreeBSD 4.3
> with
> Python 2.1b1
>
> Zope Version Zope 2.3.1b2 (source release, python 1.5.2, linux2)
> Python Version 2.1b1 (#1, Mar 15 2001, 23:29:56) [GCC 2.95.2 19991024
> (release)]
> System Platform freebsd4
> Process Id 189 (143436800)
> Running For 2 min 58 sec
>
> Although when I get the following errors when starting the server:
>
> /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: thee
> import regex
> /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub
> module
> is)
> DeprecationWarning)
> /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: the
> regex me
> import regex
> /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub
> module
> is)
> DeprecationWarning)
>
> Any ideas
>
> Thanks
>
> Norman
>
>
>
>
> --__--__--
>
> Message: 29
> From: "Phil Harris" <phil.harris@zope.co.uk>
> To: "Norman Khine" <khine@btinternet.com>, "Zope" <zope@zope.org>
> Subject: Re: [Zope] DeprecationWarning
> Date: Mon, 19 Mar 2001 21:18:30 -0000
>
> You should read the Python docs about deprecated features.
>
> Basically the feature which is being warned about will be removeed in a
> later version, this is just a warning to developers that this is the case.
>
>
> ----- Original Message -----
> From: "Norman Khine" <khine@btinternet.com>
> To: "Zope" <zope@zope.org>
> Sent: Monday, March 19, 2001 9:24 PM
> Subject: [Zope] DeprecationWarning
>
>
> > I just like to say that I have configured Zope to run under FreeBSD 4.3
> with
> > Python 2.1b1
> >
> > Zope Version Zope 2.3.1b2 (source release, python 1.5.2, linux2)
> > Python Version 2.1b1 (#1, Mar 15 2001, 23:29:56) [GCC 2.95.2 19991024
> > (release)]
> > System Platform freebsd4
> > Process Id 189 (143436800)
> > Running For 2 min 58 sec
> >
> > Although when I get the following errors when starting the server:
> >
> > /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: thee
> > import regex
> > /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub
> module
> > is)
> > DeprecationWarning)
> > /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: the
> > regex me
> > import regex
> > /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub
> module
> > is)
> > DeprecationWarning)
> >
> > Any ideas
> >
> > Thanks
> >
> > Norman
> >
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
>
>
>
> --__--__--
>
> Message: 30
> Date: Sun, 18 Mar 2001 21:25:40 +0100
> From: Tino Wildenhain <tino@wildenhain.de>
> To: Oleg Broytmann <phd@mail2.phd.pp.ru>
> Cc: svedovelli <spinwing@inwind.it>,
> Zope Mailing List <zope@zope.org>
> Subject: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
>
> Hi Oleg,
>
> Oleg Broytmann wrote:
> >
> > On Sun, 18 Mar 2001, Tino Wildenhain wrote:
> > > the point IMHO is, the locales setting applies to the server system,
> > > where it is serving pages for a client system and its settings.
> > > E.g. I would not expect russian date in a italian document...
> >
> > But of course! And because of this I would do entire site in one
> > langauge and one locale. The problem with Zope is that it's
> multithreaded,
> > and can't switch locales on the fly :(
> >
> sure it can :) We "only" need to replace all the locale aware methods
> with language-negotiation aware methods. Additionally there is a need
> for local override of this, meaning if one wants to mix variuos
> languages
> in one page, it should be possible to give an extra attribute to an
> equivalent of the <dtml-var> tag or something like that.
>
> I'll make a proposal later this week as time allows
>
> Regards
> Tino
>
>
> --__--__--
>
> Message: 31
> Date: Sun, 18 Mar 2001 21:29:50 +0100
> From: Tino Wildenhain <tino@wildenhain.de>
> To: "Farrell, Troy" <troy.farrell@wilcom.com>
> Cc: 'Chris Withers' <chrisw@nipltd.com>, p.bizzarri@icube.it,
> zope@zope.org
> Subject: Re: [Zope] ANNOUNCE: ZopeMake 1.0
>
> Hi Troy,
>
> "Farrell, Troy" wrote:
> >
> > Yes. ZopeMake uses ZClient to allow commandline scripting of imports
> and
> > exports, but cannot import .zexp files that are not on the file system.
> > I've been thinking about 2 of Zope's "problems" (security features)
> lately
> > and I've almost hit some solutions.
> > <Ask DC to turn a deaf ear>
> > I wonder (I haven't looked) how difficult it would be to patch zope so
> it
> > can import .zexp files that are already in ZODB, so that I can
> > manage_addFile a .zexp file and then manage_importObjectFromZODB. I was
> > thinking about using LocalFS for this, but I don't think LFS is deployed
> far
> > and wide enough for this. Then again, if we get a solution for this,
> more
> > people might use LocalFS. I might try to write the code if it sounds
> > doable. It might be nice.
>
> Its more easy to link /var to /import on filesystem :)
>
> Regards
> Tino
>
>
> --__--__--
>
> Message: 32
> Date: Mon, 19 Mar 2001 18:21:27 -0500
> Subject: Re: [Zope] Can one protect dtml from being rendered?
> From: Chris Muldrow <muldrow@mac.com>
> To: Bernd Worsch <bernd.worsch@frontsite.de>, <zope@zope.org>
>
> <dtml-var document_src> will return the unrendered source of a DTML
> Document. I'm not sure if that's what you're looking for. (Since the tags
> inside the unrendered source are still within <> tags, they wont show in a
> browser. If you wanted them readable, you'd have to escape the html, I
> guess)
> Hope this helps.
> Chris Muldrow
>
> > From: Bernd Worsch <bernd.worsch@frontsite.de>
> > Reply-To: Bernd Worsch <bernd.worsch@frontsite.de>
> > Date: Mon, 19 Mar 2001 19:08:14 +0100
> > To: zope@zope.org
> > Subject: [Zope] Can one protect dtml from being rendered?
> >
> > Hi there!
> >
> > My final question for today: When i generate a new document A and
> > take the document content from some kind of template B, is there
> > a way to get some dtml in the document rendered and some inserted
> > directly?
> >
> > Suppose SomeVar holds 'SomeText' and AnotherVar holds 'AnotherText'.
> >
> > How do i protect AnotherVar so that
> >
> > <!-- begin B -->
> > <dtml-var SomeVar>
> > <dtml-var AnotherVar>
> > <!-- end B -->
> >
> > becomes
> >
> > <!-- begin A -->
> > SomeText
> > <dtml-var AnotherVar>
> > <!-- end A -->
> >
> > after insertion?
> >
> > Thanks
> > Bernd
> >
> > --
> >
> > -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
> >
> >
> >
> >
> >
> > _______________________________________________
> > Zope maillist - Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > ** No cross posts or HTML encoding! **
> > (Related lists -
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
>
>
>
> --__--__--
>
> Message: 33
> Date: Mon, 19 Mar 2001 17:47:25 -0600 (CST)
> From: Timothy Wilson <wilson@visi.com>
> To: Zope listserv <zope@zope.org>
> Subject: [Zope] avoiding nested DTMLs
>
> Hi everyone,
>
> I'm trying to figure out how to do something here while avoiding nested
> dtml
> tags. Here's what I've got:
>
> I have a TinyTable containing two fields: "name" and "status". I have a
> DTML
> Document in the same folder as the TinyTable for each "name" in the
> TinyTable. I want to display that DTML Document based on the value of
> "status" in the TinyTable.
>
> Here's some code:
> <dtml-in testTable>
> <dtml-if "status <> ''">
> <p><<< insert DTML Document here >>></p>
> </dtml-if>
> </dtml-in>
>
> So in the code above I want to insert <dtml-var spam_html> (which is a
> DTML
> Document in the current folder), for example, if the TinyTable contains a
> line that looks like:
>
> "spam_html", "X"
>
> I hope I'm making myself clear. Anyone have any ideas?
>
> -Tim
>
> --
> Tim Wilson | Visit Sibley online: | Check out:
> Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/
> W. St. Paul, MN | | http://slashdot.org/
> wilson@visi.com | <dtml-var pithy_quote> | http://linux.com/
>
>
>
> --__--__--
>
> Message: 34
> From: "Anton A. Zotov" <futurb@nh.km.ua>
> To: <zope@zope.org>
> Date: Tue, 20 Mar 2001 02:06:45 +0200
> Organization: Xception
> Subject: [Zope] Getting Errors trying to map permissions in Zope 2.3.0 for
> win32
>
> This is a multi-part message in MIME format.
>
> ------=_NextPart_000_000B_01C0B0E2.6A500360
> Content-Type: text/plain;
> charset="koi8-r"
> Content-Transfer-Encoding: 7bit
>
> I'm getting permanent errors trying to map permissions in Zope product
> created by myself.
> I seem to do everything right. Could anybody tell me how to avoid the
> problem ?
> Please see Zope trace page attached.
> Thx in advance,
> Anton.
>
>
> ------=_NextPart_000_000B_01C0B0E2.6A500360
> Content-Type: text/html;
> name="manage_setPermissionMapping[1].html"
> Content-Transfer-Encoding: quoted-printable
> Content-Disposition: attachment;
> filename="manage_setPermissionMapping[1].html"
>
> <html><head><title>This is top level admin's management interface =
> class</title></head><body bgcolor=3D"#FFFFFF">
>
>
> <table border=3D"0" width=3D"100%">
> <tr valign=3D"TOP">
>
> <td width=3D"10%" align=3D"center">
> <img src=3D"http://localhost:8080/p_/ZButton" alt=3D"Zope">
> </td>
>
> <td width=3D"90%">
> <h2>Zope Error</h2>
> <p>Zope has encountered an error while publishing this resource.</p>
> =20
> <p>
> <strong>Error Type: TypeError</strong><br>
> <strong>Error Value: too many arguments; expected 2, got =
> 3</strong><br>=20
> </p>
> =20
> <hr noshade>
> =20
> <p>Troubleshooting Suggestions</p>
>
> <ul>
> <li>The URL may be incorrect.</li>
> <li>The parameters passed to this resource may be incorrect.</li>
> <li>A resource that this resource relies on may be encountering an =
> error.</li>
> </ul>
>
> <p>For more detailed information about the error, please
> refer to the HTML source for this page.
> </p>
>
> <p>If the error persists please contact the site maintainer.
> Thank you for your patience.
> </p>
> </td></tr>
> </table>
>
>
> <p><a href=3D"http://www.zope.org/Credits" target=3D"_top"><img =
> src=3D"http://localhost:8080/p_/ZopeButton" width=3D"115" height=3D"50" =
> border=3D"0" alt=3D"Powered by Zope" /></a></p></body></html>
>
> <PRE>
> Traceback (innermost last):
> File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 222, =
> in publish_module
> File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 187, =
> in publish
> File C:\Workshop\xception\lib\python\Zope\__init__.py, line 221, in =
> zpublisher_exception_hook
> (Object: Admin)
> File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 171, =
> in publish
> File C:\Workshop\xception\lib\python\ZPublisher\mapply.py, line 160, =
> in mapply
> (Object: manage_setPermissionMapping)
> File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 112, =
> in call_object
> (Object: manage_setPermissionMapping)
> File =
> C:\Workshop\xception\lib\python\AccessControl\PermissionMapping.py, line =
> 150, in manage_setPermissionMapping
> (Object: Admin)
> TypeError: (see above)
>
> </PRE>
> ------=_NextPart_000_000B_01C0B0E2.6A500360--
>
>
>
> --__--__--
>
> Message: 35
> Date: Mon, 19 Mar 2001 17:14:55 -0700
> From: Casey Duncan <cduncan@kaivo.com>
> Organization: Kaivo, Inc. (www.kaivo.com)
> To: Timothy Wilson <wilson@visi.com>
> CC: Zope listserv <zope@zope.org>
> Subject: Re: [Zope] avoiding nested DTMLs
>
> Timothy Wilson wrote:
> >
> > Hi everyone,
> >
> > I'm trying to figure out how to do something here while avoiding nested
> dtml
> > tags. Here's what I've got:
> >
> > I have a TinyTable containing two fields: "name" and "status". I have a
> DTML
> > Document in the same folder as the TinyTable for each "name" in the
> > TinyTable. I want to display that DTML Document based on the value of
> > "status" in the TinyTable.
> >
> > Here's some code:
> > <dtml-in testTable>
> > <dtml-if "status <> ''">
> > <p><<< insert DTML Document here >>></p>
> > </dtml-if>
> > </dtml-in>
> >
> > So in the code above I want to insert <dtml-var spam_html> (which is a
> DTML
> > Document in the current folder), for example, if the TinyTable contains
> a
> > line that looks like:
> >
> > "spam_html", "X"
> >
> > I hope I'm making myself clear. Anyone have any ideas?
> >
> > -Tim
> >
>
> Possibly this (untested):
>
> <dtml-in testTable>
> <dtml-if status>
> <p><dtml-var expr="_[status]"></p>
> </dtml-if>
> </dtml-in>
>
> I don't see any way to safely avoid nesting the dtml-if tag, if status
> might be empty. This is not anything I would consider a problem though.
>
> --
> | Casey Duncan
> | Kaivo, Inc.
> | cduncan@kaivo.com
> `------------------>
>
>
> --__--__--
>
> Message: 36
> Date: Tue, 20 Mar 2001 12:25:16 +1200 (NZST)
> From: John Morton <jwm@plain.co.nz>
> Subject: Re: [Zope] Zope security management
> To: Phil Harris <phil.harris@zope.co.uk>, zope@zope.org
> Reply-To: John Morton <jwm@plain.co.nz>
>
> On Mon, 19 Mar 2001 19:37:11 -0000 Phil Harris <phil.harris@zope.co.uk>
> wro=
> te:
>
> > Bill,
> >=20
> > There is another answer to part 2, use javascript to create an md5 hash
> o=
> f
> > the user,somesecret,password.
> >=20
> > This can be sent instead of the password and then validated on the
> server
> > side, since the username and md5 hash is all that is sent across the
> wire=
> ,
> > it should be a lot more secure than plain text.
> >=20
> > I have a library for javascript md5 if anyone is interested (which,btw,
> I
> > 'stole' from the PHPlib ;) ).
>
> This method, as described, will not protect you from traffic sniffing at
> all. Where the attacker was sniffing for username and password
> combinations being submitted to the login page, they now sniff for an MD5
> sum that will do the same job. Once in, the attack probably won't have too
> many problems changing the password to something they know.=20
>
> What it comes down to, is that any regular form based (initial)
> authentication scheme will involve sending authenication data using a
> known, and necessarily publicly accessable formulation (the login form) to
> a known and public URL that will decide whether to authenticate the user
> or not. As a result, an attacker can trivially find out what an
> authenication token should look like, and extract them at their leisure.
>
> You could probably transform the simple passive sniffing attack to a more
> complex man-in-the-middle attack by including a unique id for each login
> form hit and only accepting authentication tokens with a given id once. An
> attacker would need to intercept the authentication token and use it
> instead of the user in order to gain access. Coupled with short timeouts
> on the live ids, and a policy that users can only be logged in once, and
> you'll have tighter security than a plaintext password system - but it's
> still nowhere near as good as using SSL so that authentication tokens
> cannot be distinguished from any other traffic in the stream.
>
> John
>
>
>
>
>
>
>
>
>
>
> --__--__--
>
> Message: 37
> Date: Mon, 19 Mar 2001 18:26:11 -0600 (CST)
> From: Timothy Wilson <wilson@visi.com>
> To: Casey Duncan <cduncan@kaivo.com>
> Cc: Zope listserv <zope@zope.org>
> Subject: Re: [Zope] avoiding nested DTMLs
>
> On Mon, 19 Mar 2001, Casey Duncan wrote:
>
> > Possibly this (untested):
> >
> > <dtml-in testTable>
> > <dtml-if status>
> > <p><dtml-var expr="_[status]"></p>
> > </dtml-if>
> > </dtml-in>
> >
> > I don't see any way to safely avoid nesting the dtml-if tag, if status
> > might be empty. This is not anything I would consider a problem though.
>
> Cool. That worked. I need to read up on that _[] stuff. Thanks.
>
> -Tim
>
> --
> Tim Wilson | Visit Sibley online: | Check out:
> Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/
> W. St. Paul, MN | | http://slashdot.org/
> wilson@visi.com | <dtml-var pithy_quote> | http://linux.com/
>
>
>
> --__--__--
>
> Message: 38
> From: David McCuskey <david.mccuskey@bigfoot.com>
> To: Zope Mailing List <zope@zope.org>, Chris Muldrow <muldrow@mac.com>,
> Lee
> Marzke <lmarzke@kns.com>
> Subject: Re(2): [Zope] Zope hosting
> Date: Mon, 19 Mar 2001 16:33:29 -0800
>
> On 03/19/01, Kit enlightened me with:
>
> >Not at all too good to be true. I use Hurrah for one of my sites. They
> are
> >fast, prompt, helpful, and knowledgeable about Zope. I think they are the
> >best deal running in Zope hosting at this time.
> >--
> >Kit O'Connell
> >Zope Administrator
>
> i second that.
>
> the 100Mb and 3Gb of bandwidth makes the deal very attractive. you have
> full rights over your own zope instance and can install any package you
> want. plus you get all of the regular UNIX access, etc.
>
> the only gripe i have is that i can't FTP to my zope instance for editing.
>
> david
>
>
>
> >-----Original Message-----
> >From: Lee Marzke [mailto:lmarzke@kns.com]
> >Sent: Friday, March 16, 2001 6:43 PM
> >To: zope@zope.org
> >Subject: Re: [Zope] Zope hosting
> >
> >
> >Anyone have experience with
> > http://www.hurrah.com/ ?
> >
> >The advertise a virtual Zope account with PostgreSQL or MySQL
> >for $25/mo. Sounds to good to be true.
> >
> >Lee
> >
> >
> >On 16-Mar-01 Jake Berglund wrote:
> >> Hello,
> >>
> >> You can find a list of lots of zope hosting providers here:
> >>
> >> http://www.zope.org/Resources/ZSP
> >>
> >
>
> --
> David McCuskey
> david.mccuskey@bigfoot.com
>
>
>
> --__--__--
>
> Message: 39
> Date: Tue, 20 Mar 2001 13:36:28 +1200 (NZST)
> From: John Morton <jwm@plain.co.nz>
> To: zope <zope@zope.org>
> Reply-To: John Morton <jwm@plain.co.nz>
> Subject: [Zope] More ZClass oddities
>
> I'm experiencing a few problems with some ZClasses and catalogs under
> 2.2.5 - they look like bugs, but they could be a result of a clue shortage
> on my part.=20
>
> The first one relates to a ZClass that uses Object manager as a base
> class. When instances are created, a ZCatalog is automatically added
> (cusiously, I don't need to specify that ZCatalogs can be subobjects for
> this to occur). As I'm in the development stages, I let Z Seach Interfaces
> be subobjects of my ZClass but when it comes to adding a serach interface
> instance, the automatically created catalog isn't listed as a searchable
> object - and nor is any other catalog I add.
>
> The second problem relates to ZClasses created as a subobject of another
> ZClass. This means that those items can only be created inside an instance
> of the parent class (the desired effect), but it also seems to mean that
> those object types don't show up in the type list of the 'Find Items To
> Catalog' tab in the catalog in the same folder.=20
>
> So... Bugs? Or is there something I don't know?
>
> John
>
>
>
> --__--__--
>
> Message: 40
> From: "Brian Lloyd" <brian@digicool.com>
> To: <luke@seeTO.com>, <zope@zope.org>
> Cc: <brian@digicool.com>
> Subject: RE: [Zope] Installation Probs
> Date: Mon, 19 Mar 2001 22:07:14 -0500
>
> > > Actually, that's what happens on my Windows Zope as well.
> > > Can you try another machine?
> >
> > I had that happen when I was trying the 2.3.0 betas.
> > The Win32 Zope installation creates some Registry entries.
> > One of the entries points at the location of the service code.
> > If you uninstall Zope it does not remove those entries from the
> registry.
> > If you later install another version of Zope in a different
> > directory, Zope will fail silently trying to start the service.
> >
> > how to fix?
> > edit the registry and remove the offending references.
> > Install Zope again, and all will be sweetness and light.
>
> Bleah. The problem is that ZService.py does its own
> registry fiddling that is not known to the WISE installer,
> so it can't clean it up correctly (PythonService.exe also
> does some fiddling, but I don't think that affects this).
>
> I've done some investigating and I've found a way to make
> WISE invoke ZService.py remove (to clean up) on uninstall.
> This will be included in 2.3.1 b3. Note that for those who
> do not have Zope running as a service, it currently shows
> a quick error message in a dos box at uninstall time (though
> the error doesn't hurt anything). Tomorrow I'll take a look
> at the ZService.py and see if there is a way to shut that
> up.
>
>
> Brian Lloyd brian@digicool.com
> Software Engineer 540.371.6909
> Digital Creations http://www.digicool.com
>
>
>
>
>
> --__--__--
>
> Message: 41
> Date: Mon, 19 Mar 2001 23:51:33 -0500 (EST)
> From: <ghaley@mail.venaca.com>
> To: zope@zope.org
> Subject: [Zope] ZMySQL Database connection trouble
>
> hi,
>
> I am trying to add a ZMySQL database connection. Everything seems to go
> ok, but when I try to view the Products Management, it shows the ZMySQL as
> a broken product, when I view it, there is an error that says:
>
> ImportError: /usr/lib/python1.5/site-package/MySQLmodule.so: undefined
> symbol: uncompress
>
> If I try to go the the /opt/zope/lib ,etc. directory and start the db.py
> connection directly, python db.py, i get the same error.
>
> If someone could provide some direction on how to recompile the .so file
> so that it can handle the uncompress problem, I would be most grateful.
>
> btw, i've read the various howtos on the zope.org site, and i didn't find
> this particular problem there.
>
> I am running MySQL 3.23, the most recent release of zope, on linux 2.2
> running slackware 7.0
>
> Many thanks.
>
> ciao!
> greg.
>
> Gregory Haley
> DBA/Web Programmer
> Venaca, LLC
>
>
>
> --__--__--
>
> Message: 42
> Date: Tue, 20 Mar 2001 09:34:39 +0300 (EAT)
> From: Patrick <patrick@eahd.or.ug>
> To: <zope@zope.org>
> Subject: [Zope] some confusion on ftp security.
>
> I was just wondering if there is a separate config file for the Medusa FTP
> server because it alows anonymous logins even when I have used the zope
> management interface to create a user say fgh who has the rights that
> would usually be given to the anonymous group. I even defined a matching
> group fgh and removed all rights from the anonymous group.
> The advantage is that the user can not see list or download any
> files but I was just suggesting that the user does not get a login prompt
> at all in the first place incase this user manages to find some way of
> exploiting the system.... (or have I missed something)
>
>
> Thanks.
> Patrick
>
>
>
> --__--__--
>
> Message: 43
> From: Dennis Pabalan <demic.pabalan@q-linux.com>
> To: zope@zope.org
> Date: Tue, 20 Mar 2001 14:27:33 +0800
> Subject: [Zope] newbie
>
> Hi there guys!!
>
> I am a newbie and I just finished a zope tutorial " elvis"? I want to
> place it
> as a webpage (i want others to see it) how will I transfer the files? and
> in
> what directory?
> I also want to add admin users to my management page :)
>
> Sorry for that newbie question :)
>
>
> --
>
> "think like a beginner, not an expert"
>
> .--. Demic Pabalan mobile://+63.917.345.1692
> ( () ) Q Linux Solutions, Inc. office://+63.2.894.3592/
> `--\\ A Philippine Open Source Solutions Co. http://www.q-linux.com/
>
>
> --__--__--
>
> Message: 44
> Date: Tue, 20 Mar 2001 04:07:29 -0300
> From: Luciano Ramalho <luciano@hiper.com.br>
> To: Timothy Wilson <wilson@visi.com>
> CC: Casey Duncan <cduncan@kaivo.com>, Zope listserv <zope@zope.org>
> Subject: Re: [Zope] avoiding nested DTMLs
>
> Timothy Wilson wrote:
> > Cool. That worked. I need to read up on that _[] stuff. Thanks.
>
> Knowing Python really helps in decrypting _['x'].
>
> First of all, _ is just a valid, albeit weird, variable name in Python.
> _ does not have any special powers in Python (as $_ has in Perl).
>
> The syntax y['x'] means: fetch item 'x' from dictionary y. y is not a
> real dictionary, but rather an object that behaves mostly like a
> dicionary. So _['x'] just means, fetch item 'x' from the namespace. In a
> dicionary, whatever goes inside the [] is called a "key". Now, what
> happens if I write y[x] and not y['x']? That is an indirection, is is
> discussed a few paragraphs below.
>
> Now, although _ would be just a regular variable name in Python, in DTML
> expressions it always refers to the namespace object which, like I said,
> is not really an object but just pretends to be one. The symbol for the
> namespace object could be 'namespace', 'super_dict', or '_ground'. But
> it was called '_'. Zopistas I've met pronounce _ as "under" or
> "namespace", depending on how formal they are.
>
> Like a dicionary, _ has a has_key method, which you call like this:
> "_.has_key('x')". Unlike a regular dictionary, it gives you access to
> dozens of Python functions such as int "_.int(x)", and whole modules
> such as string, DateTime and random: "_.random.randint(x,y)". On the
> other hand, _ does not have some usual dicionary methods, like keys() or
> items(), which are useful to retrieve the entire contents of a
> dictionary.
>
> WHAT _['x'] REALLY DOES
>
> The strangest thing about _ is that when you access something in it,
> like _['x'], it doesn't just fetch the x object for you. Whenever _
> retrives an object, it checks whether the object is callable (most
> things are callable objects in Zope). If the object is callable, _ calls
> or invokes it, which means the object is executed as code, and then what
> you get is not the object, but the result of executing it, whis is
> normally a string containing HTML. This is the same behaviour of the
> dtml-var "name" attribute. So:
>
> (1) <dtml-var name="x">
>
> gives the same result as
>
> (2) <dtml-var expr="_['x']">
>
> but is not the same as
>
> (3) <dtml-var expr="x">.
>
> For instance, if x is a DTML Method, (1) and (2) execute, or render it,
> replacing DTML tags within x by their results, and returning plain HTML.
> Then if you want to access some z attribute of x, you get the dreadful
> "String object has no attribute z", which tells you that x is no longer
> a rich object like a folder or a document, but is now a flat string
> containing the HTML resulting from rendering the x object.
>
> With syntax (3) you just fetch it, which depending on context would
> display the unrendered DTML code.
>
> If you need to indirectly fetch an object without executing it, you have
> to use another of _'s methods, getitem. The expression "_.getitem('x')"
> returns a reference to the object called x, without invoking it.
>
> INDIRECTION
>
> Notice difference between:
>
> (2) <dtml-var expr="_['x']">
>
> (4) <dtml-var expr="_[x]">
>
> These mean COMPLETELY DIFFERENT things. In (2) you want to get the
> object called 'x' from the namespace dictionary. The key you are using
> is the string 'x'.
>
> In (4), you are getting the object whose name is stored in variable x.
> The key, in this case, is whatever is referred by the variable x. If x
> refers to the string 'ni', then _[x] means _['ni'], that is, fetch the
> object called 'ni'.
>
> That is why _[x] is called an indirection: in our example you are not
> fetching 'ni' directly, but indirectly through the x variable. The next
> time _[x] is evaluated, x may refer to 'sikander', and then _[x] may
> yield a totally different result.
>
> The same rationale goes for
>
> (5) <dtml-var expr="_.getitem('x')">
>
> (6) <dtml-var expr="_.getitem(x)">
>
> The result of (5) is the same as
>
> (3) <dtml-var expr="x">
>
> so you would never use (5) in real code.
>
> But (6) is useful to fetch an object indirectly without executing it.
>
>
> AN INTERESTING EXPERIMENT
>
> Try this: within a folder, create two methods with ids 'method1' and
> 'method2'. Leave 'method2' with its default content, but replace the
> content of 'method1' with this, then View it.
>
> <dtml-var standard_html_header>
>
> <dtml-var name="method2">
> <hr>
> <dtml-var expr="method2">
> <hr>
> <dtml-var expr="_['method2']">
> <hr>
> <dtml-var expr="_.getitem('method2')">
>
> <dtml-var standard_html_footer>
>
> If my explanations were any good, you should understand what is going on
> now.
>
> The whole _ issue is why, whenever I teach Zope, I include at least one
> hour of "instrumental Python".
> And while playing with the Python interpreter, I always make the
> students create and do lots of operations with a dictionary called _.
>
>
> --
> Best regards,
>
> Luciano
>
>
> --__--__--
>
> Message: 45
> From: "Andrei Cenja" <cnj@finsiel.ro>
> To: <zope@zope.org>
> Date: Tue, 20 Mar 2001 10:29:57 +0200
> Subject: [Zope] Large File Support ?!
>
> OK, I'm sorry if this question is gonna prompt bursts of laughter, but
> here
> it goes :-)
>
> If I intend to store many files (and large ones, too) into Zope (on RHL7,
> BTW) - something close to a few GBs, it would mean that Zope's database
> will
> get to be one several-gigs-large file. Someone warned me of possible
> problems if using very large files under linux. The question is: was he
> right ? How does Zope cope with that ?
>
> Thanks !
>
> Andrei Cenja, Bucharest, Romania.
>
>
>
> --__--__--
>
> Message: 46
> To: Dieter Maurer <dieter@handshake.de>
> Cc: zope@zope.org
> Subject: Re: [Zope] <dtml-sendmail>
> From: Petr Knapek <knapek@knapek.pvt.net>
> Date: 20 Mar 2001 10:01:23 +0100
>
> >>>>> On Mon, 19 Mar 2001 20:52:21 +0100 (CET), Dieter Maurer <dieter@h=
> andshake.de> said:
>
> Hi,
>
> DM> Petr Knapek writes:
> >> I have a list of user e-mail addresses which is created
> >> dynamically. I would like to use <dtml-sendmail> tag to send an
> >> e-mail at all addresses in my dynamical list but do not know what
> >> the syntax of mailto attribute in sendmail tag shoul be.=3D20=3D=
> 20
> DM> Do not use the "mailto" attribute, use the "To:" header in the
> DM> send mail, similar to:
>
> DM> <dtml-sendmail mailhost=3D...> To: <dtml-var
> DM> expr=3D"_.string.join(address_list,',')"> ....
>
> I think this should be better:
> <dtml-var expr=3D"_.string.join(address_list, ',\n ')"> ....
>
> DM> ATTENTION: This is indented only for readability. In your DTML
> DM> code, "To:" must start in the first column!
>
> I have resolved my problem just few minutes after sending e-mail.
> Again, thank you very much for help, ideas etc.
>
> DM> Dieter
>
> Petr
>
> --=20
> Petr Kn=E1pek
> NEXTRA Czech Republic, s.r.o., Hlinky 114, 603 00 Brno, Czech Republic
> e-mail: mailto:petr.knapek@nextra.cz
> tel:+420-5-43 554 150
> FAX:+420-5-43 554 214
>
>
>
> --__--__--
>
> _______________________________________________
> Zope maillist - Zope@zope.org
>
>
>
> End of Zope Digest