[Zope] RE: MS Explorer no longer shows the management interface.

Ryan Ware RWare@INTERPLASTIC.com
Tue, 20 Mar 2001 06:26:29 -0600


Always trust content from Microsoft!


> Hi,
>
> This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> Service Pack 1) and when I go to my Zope site I can no longer see the
> management pages. The right frames are displayed and the navigation tree,
> but instead of the management screen for a folder I get the view contents.
>
> Any Ideas?
>

> -----Original Message-----
> From:	zope-request@zope.org [SMTP:zope-request@zope.org]
> Sent:	Tuesday, March 20, 2001 3:05 AM
> To:	zope@zope.org
> Subject:	Zope digest, Vol 1 #1262 - 46 msgs
> 
> Send Zope mailing list submissions to
> 	zope@zope.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://lists.zope.org/mailman/listinfo/zope
> or, via email, send a message with subject or body 'help' to
> 	zope-request@zope.org
> 
> You can reach the person managing the list at
> 	zope-admin@zope.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Zope digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: Zope security management (Bill Welch)
>    2. Re: newbie zope question -- stuck in quick-start page (Chris
> McDonough)
>    3. Can't get 2.3.1b2 sparc to run (Daniel Rusch)
>    4. Strange ZCatalog behaviour (Ingo Wilmer)
>    5. Re: dtml-sendmail and envelop sender [Q] (Bruno Mattarollo)
>    6. Re: Zope security management (Bernd Worsch)
>    7. Can one protect dtml from being rendered? (Bernd Worsch)
>    8. RE:ZCatalog update question (Darin Lee)
>    9. Re: Can't get 2.3.1b2 sparc to run (Chris McDonough)
>   10. Re: Zope security management (Phil Harris)
>   11. Re: why does manage_addDocument give me a method? (Dieter Maurer)
>   12. Re: freebsd error (Dieter Maurer)
>   13. Re: ZClass direct variable access (Dieter Maurer)
>   14. Re: <dtml-sendmail> (Dieter Maurer)
>   15. Re: dtml-sendmail and envelop sender [Q] (Dieter Maurer)
>   16. MS Explorer no longer shows the management interface. (Echlin,
> Michael)
>   17. Re: MS Explorer no longer shows the management interface. (Phil
> Harris)
>   18. Re: MS Explorer no longer shows the management interface. (Andy
> McKay)
>   19. RE: MS Explorer no longer shows the management interface. (Echlin,
> Michael)
>   20. (no subject) (Cees de Groot)
>   21. R: [Zope-Annce] Localized DateTime classes (svedovelli)
>   22. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli)
>   23. Zope vs. other app servers. Any comparison available? (Satheesh
> Babu)
>   24. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli)
>   25. R: [Zope] Re: [Zope-Annce] Localized DateTime classes (svedovelli)
>   26. Re: MS Explorer no longer shows the management interface. (Chris
> McDonough)
>   27. AW: [Zope] RE:ZCatalog update question (Marc Fischer)
>   28. DeprecationWarning (Norman Khine)
>   29. Re: DeprecationWarning (Phil Harris)
>   30. Re: Re: [Zope-Annce] Localized DateTime classes (Tino Wildenhain)
>   31. Re: ANNOUNCE: ZopeMake 1.0 (Tino Wildenhain)
>   32. Re: Can one protect dtml from being rendered? (Chris Muldrow)
>   33. avoiding nested DTMLs (Timothy Wilson)
>   34. Getting Errors trying to map permissions in Zope 2.3.0 for win32
> (Anton A. Zotov)
>   35. Re: avoiding nested DTMLs (Casey Duncan)
>   36. Re: Zope security management (John Morton)
>   37. Re: avoiding nested DTMLs (Timothy Wilson)
>   38. Re(2): [Zope] Zope hosting (David McCuskey)
>   39. More ZClass oddities (John Morton)
>   40. RE: Installation Probs (Brian Lloyd)
>   41. ZMySQL Database connection trouble (ghaley@mail.venaca.com)
>   42. some confusion on ftp security. (Patrick)
>   43. newbie (Dennis Pabalan)
>   44. Re: avoiding nested DTMLs (Luciano Ramalho)
>   45. Large File Support ?! (Andrei Cenja)
>   46. Re: <dtml-sendmail> (Petr Knapek)
> 
> --__--__--
> 
> Message: 1
> Date: Mon, 19 Mar 2001 12:07:05 -0500 (EST)
> From: Bill Welch <bill@carbonecho.com>
> To: <zope@zope.org>
> Subject: Re: [Zope] Zope security management
> 
> To achieve genuine security, you have to do something about the 'password
> in the clear' problem.
> 
> part 1)  With basic auth (the zope default), the user's name and password
> are sent in the clear with every request.
> 
> part 2) With form based login (login manager, zmc), the user's name and
> password are sent in the clear when the login form is submitted.
> 
> Solution: Have to go with form based login that uses ssl to send user's
> name and password. Unfortunately, in my experience, ssl support for zope
> is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for
> your work so far) and hard to integrate, when this is really a core
> requirement.
> 
> I think this is something that DC has to handle.
> 
> Bill.
> 
> On Mon, 19 Mar 2001, Bernd Worsch wrote:
> 
> > It's some time ago, the issue of denying roles showed up.
> >
> > I'd really wish to see this implemented, so has this problem
> > made it into the collector? (The feature index seems broken
> > to me at the moment)
> >
> > Thanks to John for pointing out what i thought :)
> > Bernd
> >
> > On Thu, Mar 01, 2001 at 10:00:13AM +0000, Chris Withers wrote:
> > > "John R. Daily" wrote:
> > > >
> > > > That is precisely what is wrong with the model. To achieve
> manageable
> > > > and genuine security, I want to acquire _all_ permissions and
> > > > specifically deny those roles to which the inherited permissions may
> > > > not be correct.
> > >
> > > I'd agree with this, but I don't know how important it is.
> > >
> > > I'd suggest chucking it in the colelctor asa Featuer Request.
> > >
> > > cheers,
> > >
> > > Chris
> > >
> > > _______________________________________________
> > > Zope maillist  -  Zope@zope.org
> > > http://lists.zope.org/mailman/listinfo/zope
> > > **   No cross posts or HTML encoding!  **
> > > (Related lists -
> > >  http://lists.zope.org/mailman/listinfo/zope-announce
> > >  http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> > --
> >
> > -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
> >
> >
> >
> >
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> 
> 
> 
> --__--__--
> 
> Message: 2
> From: "Chris McDonough" <chrism@digicool.com>
> To: "Phil Harris" <phil.harris@zope.co.uk>,
> 	"Sundar Narasimhan" <sundar@ascent.com>
> Cc: <cduncan@kaivo.com>, <zope@zope.org>
> Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
> Date: Mon, 19 Mar 2001 12:37:41 -0500
> 
> OK, I updated the QuickStart page with an informative message.  Thanks...!
> 
> ----- Original Message -----
> From: "Phil Harris" <phil.harris@zope.co.uk>
> To: "Chris McDonough" <chrism@digicool.com>; "Sundar Narasimhan"
> <sundar@ascent.com>
> Cc: <cduncan@kaivo.com>; <zope@zope.org>
> Sent: Monday, March 19, 2001 11:57 AM
> Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
> 
> 
> > I've seen similar problems on W2K with IE5, 5.01, 5.5 (but not 5.51).
> >
> > Phil
> >
> > ----- Original Message -----
> > From: "Chris McDonough" <chrism@digicool.com>
> > To: "Chris McDonough" <chrism@digicool.com>; "Sundar Narasimhan"
> > <sundar@ascent.com>
> > Cc: <phil.harris@zope.co.uk>; <cduncan@kaivo.com>; <zope@zope.org>
> > Sent: Monday, March 19, 2001 5:23 PM
> > Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
> >
> >
> > > What exact versions of IE does this actually happen under?  Anybody
> know?
> > >
> > > ----- Original Message -----
> > > From: "Chris McDonough" <chrism@digicool.com>
> > > To: "Sundar Narasimhan" <sundar@ascent.com>
> > > Cc: <phil.harris@zope.co.uk>; <cduncan@kaivo.com>; <zope@zope.org>
> > > Sent: Monday, March 19, 2001 12:21 PM
> > > Subject: Re: [Zope] newbie zope question -- stuck in quick-start page
> > >
> > >
> > > > > Understood. Here's a small suggestion -- I'd do it myself if I
> knew
> > > > > how. I'd put in a short paragraph (or at least a link to this
> > > > > problem's description) somewhere in the beginner's guide/install
> > > > > documents. Most people will install zope, fire up their browsers,
> and
> > > > > when they connect be baffled (as I was) when they don't see
> anything
> > > > > like those management tabs come up. If I'd seen a brief mention to
> > > > > "check your browser version".. it would have saved me a bunch of
> time.
> > > >
> > > > Actually, I'll go in and change the quickstart page myself, this is
> a
> > good
> > > > idea, I dont know why I didn't think of it...
> > > >
> > > >
> > > > _______________________________________________
> > > > Zope maillist  -  Zope@zope.org
> > > > http://lists.zope.org/mailman/listinfo/zope
> > > > **   No cross posts or HTML encoding!  **
> > > > (Related lists -
> > > >  http://lists.zope.org/mailman/listinfo/zope-announce
> > > >  http://lists.zope.org/mailman/listinfo/zope-dev )
> > > >
> >
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> 
> 
> 
> --__--__--
> 
> Message: 3
> Date: Mon, 19 Mar 2001 11:13:45 -0600
> From: Daniel Rusch <drusch@globalcrossing.com>
> To: zope@zope.org
> Subject: [Zope] Can't get 2.3.1b2 sparc to run
> 
> All,
> 
> Any body have any ideas why I can't get 2.3.1b2 sparc to run. I download
> the tar ball, unzipped it, ran install, untar'd some products and ran
> start I get a bunch of error messages like below for each core product?
> 
> ------
> 2001-03-19T17:06:23 ERROR(200) Zope Couldn't install OFSP
> Traceback (innermost last):
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/Application.py, line
> 627, in install_products
>     (Object: ApplicationDefaultPermissions)
>     (Info: OFSP)
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/OFSP/__init__.py,
> line 189, in initialize
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py,
> line 365, in registerHelp
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py,
> line 298, in registerHelpTopic
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/ObjectManager.py,
> line 300, in _setObject
>     (Object: Traversable)
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py,
> line 152, in manage_afterAdd
>     (Object: HelpTopicBase)
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py,
> line 165, in index_object
>     (Object: HelpTopicBase)
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/ZCatalog
> .py,
> line 424, in catalog_object
>     (Object: Traversable)
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/Catalog.
> py,
> line 442, in catalogObject
>   File
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/SearchIndex/UnTextIndex.py
> ,
> line 335, in index_object
> SystemError: error return without exception set
> 
> 
> --__--__--
> 
> Message: 4
> Date: Mon, 19 Mar 2001 18:10:37 +0100
> From: Ingo Wilmer <wilmer@zeitspringer.de>
> Organization: die zeitspringer
> To: zope <zope@zope.org>
> Subject: [Zope] Strange ZCatalog behaviour
> 
> Hi Zopistas
> 
> I experience Problems using ZCatalog,
> See following example:
> <dtml-in "Catalog(meta_type=3D'ZClass_seite_press',region=3Dzregion)">
> where zregion is one string and region is a list indexd as text
> when i change this to    =20
> <dtml-in "Catalog(meta_type=3D'ZClass_seite_press',region in zregion)">
> where zregion itself is a list, containing 3 or more strings that=20
> should match on some instances of ZClass_seite_presse i can't
> even get this into zope, because i recive this error
> 
> non-keyword arg after keyword arg
> , for tag <dtml-in "Catalog(meta_type=3D'ZClass_seite_presse',region in
> zregion)">
> 
> so, how would i get the goal, searching in ZCatalog with my list as
> mentioned=20
> in the Howtos.
> 
> Thanks in advance to anybody out there.
> 
> --=20
> ingo wilmer
> gesch=E4ftsf=FChrung
> 
> tel +49 251 98704-22 | j=FCdefelder str. 37 |
> http://www.zeitspringer.de=20
> fax +49 251 98704-11 | 48143 m=FCnster	  |
> 
> 
> --__--__--
> 
> Message: 5
> From: "Bruno Mattarollo" <bruno@dynamic.greenpeace.org>
> To: "Stefan H. Holek" <stefan@epy.co.at>, <zope@zope.org>
> Subject: Re: [Zope] dtml-sendmail and envelop sender [Q]
> Date: Mon, 19 Mar 2001 18:21:13 +0100
> 
> Thank you Stefan,
> 
>     I was just writing an external method that would do what you recommen=
> d.
> Great! Thanks to everybody!!! It works as expected!
> 
> Cheers!
> 
> /B
> ----- Original Message -----
> From: "Stefan H. Holek" <stefan@epy.co.at>
> To: <zope@zope.org>
> Cc: "Bruno Mattarollo" <bruno@dynamic.greenpeace.org>
> Sent: Monday, March 19, 2001 5:58 PM
> Subject: Re: [Zope] dtml-sendmail and envelop sender [Q]
> 
> 
> --On Montag, 19. M=E4rz 2001 17:10 +0100 Frank Tegtmeyer
> <frank.tegtmeyer@cia-mediahaus.de> wrote:
> 
> >> So according to the spec I should use "Sender: <dtml-var
> >> OurBounceProcessingAccount>" in our DTML-Method that uses
> >> dtml-sendmail, no?
> >
> > To handle autoresponders etc. that's ok. It doesn't handle delivery
> > failures. You HAVE TO set the envelope sender accordingly (I think for
> > Postfix it's the -f switch like for sendmail). To do that you have to
> > generate a new method - possibly as external Python method.
> 
> After we all agreed that "Errors-To:" is bad ;)
> your external method could look like this:
> 
> import os
> 
> sendcommand  =3D '/usr/sbin/sendmail -t -oi -f%s'
> mailtemplate =3D 'From: %s\nTo: %s\nSubject: %s\n%s\n'
> 
> def sendMail( bounceto, mailfrom, mailto, subject, body ):
>   p =3D os.popen( sendcommand % (bounceto), 'w', 1 )
>   p.write( mailtemplate % (mailfrom, mailto, subject, body) )
>   p.close()
> 
> 
> HTH,
> Stefan
> 
> --
> Things work better when plugged in.
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 6
> Date: Mon, 19 Mar 2001 18:54:21 +0100
> From: Bernd Worsch <bernd.worsch@frontsite.de>
> To: zope@zope.org
> Subject: Re: [Zope] Zope security management
> Reply-To: Bernd Worsch <bernd.worsch@frontsite.de>
> 
> On Mon, Mar 19, 2001 at 12:07:05PM -0500, Bill Welch wrote:
> > To achieve genuine security, you have to do something about the
> 'password
> > in the clear' problem.
> > 
> > part 1)  With basic auth (the zope default), the user's name and
> password
> > are sent in the clear with every request.
> > 
> > part 2) With form based login (login manager, zmc), the user's name and
> > password are sent in the clear when the login form is submitted.
> > 
> > Solution: Have to go with form based login that uses ssl to send user's
> > name and password. Unfortunately, in my experience, ssl support for zope
> > is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for
> > your work so far) and hard to integrate, when this is really a core
> > requirement.
> > 
> > I think this is something that DC has to handle.
> > 
> > Bill.
> > 
> 
> Well your quite right, but this is another problem with zope security
> and more or less independent of zope security management features.
> 
> BTW isn't it normally recommended to shield z-server by apache doing
> for the ssl stuff? If so, then there at least is some workaround possible.
> 
> The kind of complicated and unusal management of security in zope on
> the other hand applies even, when only doing intranet stuff without
> any connection to the outside. As pointed out before the problem isn't
> that one can't realize the security policy he/she wishes but that it is
> quite painful at times.
> 
> Suppose the following object/folder hierarchy:
> 
>   A containing AA and AB. AA containing AAA and AAB, AB containing ABA and
> ABB.
>   
>   A 
>    AA
>     AAA
>     AAB
>    AB
>     ABA
>     ABB
> 
>   Suppose there is a role R which grants access to some objects. All the
> users
>   have role R everywhere except in AAA and ABA. As far as i know there is
> no
>   way to realize this security policy using role R alone.
> 
>   What you can do, is click through the security tabs in AAA and ABA so
> that
>   role R isn't known in AAA and ABA blocking access to them. Then you
> define
>   the role S in AAA and ABA, by checking the same boxes as you had in role
> R.
>   Now you can give some of your users the local role S in AAA and ABA.
> 
> So, it works but it isn't really funny. But maybe i'm mistaken and there
> is
> an elegant solution for this kind of policy?  
> 
> best regards 
> Bernd   
> 
> -- 
> 
> -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
> 
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 7
> Date: Mon, 19 Mar 2001 19:08:14 +0100
> From: Bernd Worsch <bernd.worsch@frontsite.de>
> To: zope@zope.org
> Subject: [Zope] Can one protect dtml from being rendered?
> Reply-To: Bernd Worsch <bernd.worsch@frontsite.de>
> 
> Hi there!
> 
> My final question for today: When i generate a new document A and
> take the document content from some kind of template B, is there
> a way to get some dtml in the document rendered and some inserted
> directly?
> 
> Suppose SomeVar holds 'SomeText' and AnotherVar holds 'AnotherText'.
>         
> How do i protect AnotherVar so that
> 
> <!-- begin B -->
>   <dtml-var SomeVar>
>   <dtml-var AnotherVar> 
> <!-- end B -->
> 
> becomes
> 
> <!-- begin A -->
>   SomeText
>   <dtml-var AnotherVar>
> <!-- end A -->
> 
> after insertion?
> 
> Thanks 
> Bernd
> 
> -- 
> 
> -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
> 
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 8
> Date: Mon, 19 Mar 2001 13:09:43 -0500
> From: "Darin Lee" <LEEDM@state.mi.us>
> To: <zope@zope.org>
> Subject: [Zope] RE:ZCatalog update question
> 
> Gari,
> 
> You must call <dtml-call reindex_object> in any of your methods that =
> operate on data (constructor, edit functions etc.) in order for the object
> =
> to be automatically updated in the ZCatalog. Simply inheriting ZCatalog as
> =
> a base class is not enough.
> 
> Also, make sure when you are defining your base classes to include =
> ZCatalogAware FIRST.
> 
> Good luck,
> -Darin
> 
> 
> 
> --__--__--
> 
> Message: 9
> From: "Chris McDonough" <chrism@digicool.com>
> To: "Daniel Rusch" <drusch@globalcrossing.com>, <zope@zope.org>
> Subject: Re: [Zope] Can't get 2.3.1b2 sparc to run
> Date: Mon, 19 Mar 2001 14:58:10 -0500
> 
> Daniel,
> 
> This looks like a splitter.c problem on Solaris.  The same error doesn't
> occur on Linux... give me a little bit of time and I'll try to track it
> down.
> 
> ----- Original Message -----
> From: "Daniel Rusch" <drusch@globalcrossing.com>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 12:13 PM
> Subject: [Zope] Can't get 2.3.1b2 sparc to run
> 
> 
> > All,
> >
> > Any body have any ideas why I can't get 2.3.1b2 sparc to run. I download
> > the tar ball, unzipped it, ran install, untar'd some products and ran
> > start I get a bunch of error messages like below for each core product?
> >
> > ------
> > 2001-03-19T17:06:23 ERROR(200) Zope Couldn't install OFSP
> > Traceback (innermost last):
> >   File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/Application.py, line
> > 627, in install_products
> >     (Object: ApplicationDefaultPermissions)
> >     (Info: OFSP)
> >   File
> >
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/OFSP/__init__.py,
> > line 189, in initialize
> >   File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py,
> > line 365, in registerHelp
> >   File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/App/ProductContext.py,
> > line 298, in registerHelpTopic
> >   File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/OFS/ObjectManager.py,
> > line 300, in _setObject
> >     (Object: Traversable)
> >   File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py,
> > line 152, in manage_afterAdd
> >     (Object: HelpTopicBase)
> >   File
> > /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/HelpSys/HelpTopic.py,
> > line 165, in index_object
> >     (Object: HelpTopicBase)
> >   File
> >
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/ZCatalog
> .p
> y,
> > line 424, in catalog_object
> >     (Object: Traversable)
> >   File
> >
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/Products/ZCatalog/Catalog.
> py
> ,
> > line 442, in catalogObject
> >   File
> >
> /home/Zope-2.3.1b2-solaris-2.6-sparc/lib/python/SearchIndex/UnTextIndex.py
> ,
> > line 335, in index_object
> > SystemError: error return without exception set
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> 
> 
> 
> --__--__--
> 
> Message: 10
> From: "Phil Harris" <phil.harris@zope.co.uk>
> To: "Bill Welch" <bill@carbonecho.com>, <zope@zope.org>
> Subject: Re: [Zope] Zope security management
> Date: Mon, 19 Mar 2001 19:37:11 -0000
> 
> Bill,
> 
> There is another answer to part 2, use javascript to create an md5 hash of
> the user,somesecret,password.
> 
> This can be sent instead of the password and then validated on the server
> side, since the username and md5 hash is all that is sent across the wire,
> it should be a lot more secure than plain text.
> 
> I have a library for javascript md5 if anyone is interested (which,btw, I
> 'stole' from the PHPlib ;) ).
> 
> Phil
> phil.harris@zope.co.uk
> 
> 
> ----- Original Message -----
> From: "Bill Welch" <bill@carbonecho.com>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 5:07 PM
> Subject: Re: [Zope] Zope security management
> 
> 
> > To achieve genuine security, you have to do something about the
> 'password
> > in the clear' problem.
> >
> > part 1)  With basic auth (the zope default), the user's name and
> password
> > are sent in the clear with every request.
> >
> > part 2) With form based login (login manager, zmc), the user's name and
> > password are sent in the clear when the login form is submitted.
> >
> > Solution: Have to go with form based login that uses ssl to send user's
> > name and password. Unfortunately, in my experience, ssl support for zope
> > is only thrid party (no offense to Mr. Siong or Mr. Bickers, thanks for
> > your work so far) and hard to integrate, when this is really a core
> > requirement.
> >
> > I think this is something that DC has to handle.
> >
> > Bill.
> >
> > On Mon, 19 Mar 2001, Bernd Worsch wrote:
> >
> > > It's some time ago, the issue of denying roles showed up.
> > >
> > > I'd really wish to see this implemented, so has this problem
> > > made it into the collector? (The feature index seems broken
> > > to me at the moment)
> > >
> > > Thanks to John for pointing out what i thought :)
> > > Bernd
> > >
> > > On Thu, Mar 01, 2001 at 10:00:13AM +0000, Chris Withers wrote:
> > > > "John R. Daily" wrote:
> > > > >
> > > > > That is precisely what is wrong with the model. To achieve
> manageable
> > > > > and genuine security, I want to acquire _all_ permissions and
> > > > > specifically deny those roles to which the inherited permissions
> may
> > > > > not be correct.
> > > >
> > > > I'd agree with this, but I don't know how important it is.
> > > >
> > > > I'd suggest chucking it in the colelctor asa Featuer Request.
> > > >
> > > > cheers,
> > > >
> > > > Chris
> > > >
> > > > _______________________________________________
> > > > Zope maillist  -  Zope@zope.org
> > > > http://lists.zope.org/mailman/listinfo/zope
> > > > **   No cross posts or HTML encoding!  **
> > > > (Related lists -
> > > >  http://lists.zope.org/mailman/listinfo/zope-announce
> > > >  http://lists.zope.org/mailman/listinfo/zope-dev )
> > >
> > > --
> > >
> > > -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
> > >
> > >
> > >
> > >
> > >
> > > _______________________________________________
> > > Zope maillist  -  Zope@zope.org
> > > http://lists.zope.org/mailman/listinfo/zope
> > > **   No cross posts or HTML encoding!  **
> > > (Related lists -
> > >  http://lists.zope.org/mailman/listinfo/zope-announce
> > >  http://lists.zope.org/mailman/listinfo/zope-dev )
> > >
> >
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> 
> 
> --__--__--
> 
> Message: 11
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 20:57:22 +0100 (CET)
> To: Bernd Worsch <bernd.worsch@frontsite.de>
> Cc: zope@zope.org
> Subject: Re: [Zope] why does manage_addDocument give me a method?
> 
> Bernd Worsch writes:
>  > Another thing that seems strange to me:
>  > 
>  > When calling
>  > 
>  >   <dtml-with SomeFolder>
>  >     <dtml-call expr="manage_addDocument('SomeDocument','')">
>  >   </dtml-with>
>  > 
>  > i get a dtml-method called SomeDocument instead of a dtml-document!!
>  > 
>  > Is this behaviour ok? If yes how can i get documents? 
> See "OFS.Document".... It is depraceted.
> 
> 
> 
> Dieter
> 
> 
> --__--__--
> 
> Message: 12
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 20:49:43 +0100 (CET)
> To: Chris Humphries <chumphries@siliconinc.net>
> Cc: zope@zope.org
> Subject: Re: [Zope] freebsd error
> 
> Chris Humphries writes:
>  > i have python 1.5.2 (threads), freebsd, and zope installed (tryeed
>  > differenmt versions, so i know this is not an version issue).
>  > ...
>  >     ImportError:
> /usr/local/www/Zope-2.0.0b5/lib/python/ExtensionClass.so:
>  > Undefined symbol "PyMethod_Type"
> I have seen this on the mailing list (--> searchable archives, Google).
> The poster, apparently, found a solution....
> 
> 
> 
> Dieter
> 
> 
> --__--__--
> 
> Message: 13
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 20:54:40 +0100 (CET)
> To: Phill Hugo <phill@fortune-cookie.com>
> Cc: zope@zope.org
> Subject: Re: [Zope] ZClass direct variable access
> 
> Phill Hugo writes:
>  > Is there a way to access property sheet variables from a zclass method
>  > without knowing which property sheet it is contained within.
> If you only want to read them:
> 
>   they are exposed as attributes of the Z Instance, i.e.
>   you can use "getattr" to access them (as your property is
>   an expression). For constant access, you could use
>   the attribute access syntax.
> 
> I do not know a way to change properties without the specification
> on the property sheet.
> 
> 
> Dieter
> 
> 
> --__--__--
> 
> Message: 14
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 20:52:21 +0100 (CET)
> To: Petr Knapek <knapek@knapek.pvt.net>
> Cc: zope@zope.org
> Subject: Re: [Zope] <dtml-sendmail>
> 
> Petr Knapek writes:
>  > I have a list of user e-mail addresses which is created dynamically.  I
>  > would like to use <dtml-sendmail> tag to send an e-mail at all
> addresses
>  > in my dynamical list but do not know what the syntax of mailto
> attribute
>  > in sendmail tag shoul be.=20=20
> Do not use the "mailto" attribute, use the
> "To:" header in the send mail, similar to:
> 
>       <dtml-sendmail mailhost=...>
>       To: <dtml-var expr="_.string.join(address_list,',')">
>       ....
> 
> ATTENTION: This is indented only for readability. In your
>   DTML code, "To:" must start in the first column!
> 
> 
> 
> Dieter
> 
> 
> --__--__--
> 
> Message: 15
> From: Dieter Maurer <dieter@handshake.de>
> Date: Mon, 19 Mar 2001 19:59:30 +0100 (CET)
> To: frank.tegtmeyer@cia-mediahaus.de (Frank Tegtmeyer)
> Cc: Dieter Maurer <dieter@handshake.de>, zope@zope.org
> Subject: Re: [Zope] dtml-sendmail and envelop sender [Q]
> 
> Frank Tegtmeyer writes:
>  > > The Internet mail message specification (RFC 822) defined
>  > > a header to control error reports.
>  > 
>  > That's wrong. Errors go to the envelope sender. There are
>  > many, many bad gateways that do it wrong but there number still
>  > doesn't make it right.
> Quoted from RFC822:
> 
>  :      4.4.4.  AUTOMATIC USE OF FROM / SENDER / REPLY-TO
>  : 
>  :         For systems which automatically  generate  address  lists  for
>  :         replies to messages, the following recommendations are made:
>  : 
>  :             o   The "Sender" field mailbox should be sent  notices  of
>  :                 any  problems in transport or delivery of the original
>  :                 messages.  If there is no  "Sender"  field,  then  the
>  :                 "From" field mailbox should be used.
>  : 
> 
> Dieter
> 
> 
> --__--__--
> 
> Message: 16
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: "'zope@zope.org'" <zope@zope.org>
> Date: Mon, 19 Mar 2001 15:16:41 -0500
> Subject: [Zope] MS Explorer no longer shows the management interface.
> 
> Hi,
> 
> This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> Service Pack 1) and when I go to my Zope site I can no longer see the
> management pages. The right frames are displayed and the navigation tree,
> but instead of the management screen for a folder I get the view contents.
> 
> Any Ideas?
> 
> Mike Echlin CP/SA/CM
> AECL Control and Operations Technology 
> echlinm@aecl.ca
> 
> 
> 
> 
> --__--__--
> 
> Message: 17
> From: "Phil Harris" <phil.harris@zope.co.uk>
> To: "Echlin, Michael" <echlinm@aecl.ca>, <zope@zope.org>
> Subject: Re: [Zope] MS Explorer no longer shows the management interface.
> Date: Mon, 19 Mar 2001 20:23:20 -0000
> 
> Michael,
> 
> see today's thread,
> 
> [Zope] newbie zope question -- stuck in quick-start page
> 
> and all will be revealed.
> 
> Phil
> phil.harris@zope.co.uk
> 
> ----- Original Message -----
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 8:16 PM
> Subject: [Zope] MS Explorer no longer shows the management interface.
> 
> 
> > Hi,
> >
> > This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> > Service Pack 1) and when I go to my Zope site I can no longer see the
> > management pages. The right frames are displayed and the navigation
> tree,
> > but instead of the management screen for a folder I get the view
> contents.
> >
> > Any Ideas?
> >
> > Mike Echlin CP/SA/CM
> > AECL Control and Operations Technology
> > echlinm@aecl.ca
> >
> >
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> 
> 
> --__--__--
> 
> Message: 18
> From: "Andy McKay" <andym@ActiveState.com>
> To: "Echlin, Michael" <echlinm@aecl.ca>, <zope@zope.org>
> Subject: Re: [Zope] MS Explorer no longer shows the management interface.
> Date: Mon, 19 Mar 2001 12:29:20 -0800
> 
> IE 5.01 doesnt render Zope Management Interface correctly, upgrade IE 5.5.
> --
>   Andy McKay.
> 
> 
> ----- Original Message -----
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 12:16 PM
> Subject: [Zope] MS Explorer no longer shows the management interface.
> 
> 
> > Hi,
> >
> > This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> > Service Pack 1) and when I go to my Zope site I can no longer see the
> > management pages. The right frames are displayed and the navigation
> tree,
> > but instead of the management screen for a folder I get the view
> contents.
> >
> > Any Ideas?
> >
> > Mike Echlin CP/SA/CM
> > AECL Control and Operations Technology
> > echlinm@aecl.ca
> >
> >
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> 
> 
> 
> --__--__--
> 
> Message: 19
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: 'Phil Harris' <phil.harris@zope.co.uk>,
> 	"Echlin, Michael" <echlinm@aecl.ca>, zope@zope.org
> Subject: RE: [Zope] MS Explorer no longer shows the management interface.
> Date: Mon, 19 Mar 2001 15:36:03 -0500
> 
> The weird part of all this that it worked just fine until I put in the
> security patch. 
> When MS puts out a new security patch will they break the IE connection to
> ZOPE again?
> 
> Our shop is stuck, by official decree, to using IE but they haven't found
> a
> way to force us not to use Netscape on the Linux servers yet. (Possibly
> because we haven't told them we are using Linux?)
> 
> Thanks, I will have to upgrade to 5.5 and warn my Zope managers about this
> problem.
> 
> Mike.
> 
> -----Original Message-----
> From: Phil Harris [mailto:phil.harris@zope.co.uk]
> Sent: March 19, 2001 3:23 PM
> To: Echlin, Michael; zope@zope.org
> Subject: Re: [Zope] MS Explorer no longer shows the management
> interface.
> 
> 
> Michael,
> 
> see today's thread,
> 
> [Zope] newbie zope question -- stuck in quick-start page
> 
> and all will be revealed.
> 
> Phil
> phil.harris@zope.co.uk
> 
> ----- Original Message -----
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: <zope@zope.org>
> Sent: Monday, March 19, 2001 8:16 PM
> Subject: [Zope] MS Explorer no longer shows the management interface.
> 
> 
> > Hi,
> >
> > This morning I installed a few upgrades to MS 98 (Internet Explorer 5.01
> > Service Pack 1) and when I go to my Zope site I can no longer see the
> > management pages. The right frames are displayed and the navigation
> tree,
> > but instead of the management screen for a folder I get the view
> contents.
> >
> > Any Ideas?
> >
> > Mike Echlin CP/SA/CM
> > AECL Control and Operations Technology
> > echlinm@aecl.ca
> >
> >
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> 
> --__--__--
> 
> Message: 20
> To: Federico Di Gregorio <fog@mixadlive.com>
> cc: zope@zope.org
> From: cg@cdegroot.com (Cees de Groot)
> Reply-To: cg@cdegroot.com
> Date: Mon, 19 Mar 2001 21:37:00 +0100
> Subject: [Zope] (no subject)
> 
> fog@mixadlive.com said:
> > if you want to use the per-cursor commit extension of psycopg, you
> > need to call the .commit() method on the *cursor*. calling it on the
> > connection will commit on all the cursors derived from the connection.
> >  
> 
> I know (I wrote ODBC drivers for a living, among others a PostgreSQL one
> :-)). 
> I sorta expected the Z SQL Connection to do the "right thing", but it
> forwards 
> the TM messages to the connection, not to individual cursors.
> 
> > mmm... i think that zope instantiate a connection for every thread. in
> > the psycopg case, every zope thread gets one connection and one
> > cursor.
> 
> Let's hope so, although I haven't been able to discern the code that does
> that 
> bit of magic. Is there a document somewhere that describes what Zope does,
> 
> thread-wise, when handling requests?
> 
> Anyway, I plunged into my code and FYI, this is how I'm now dealing with
> it:
> 
> - select statements grab and release a cursor;
> - update statements grab a cursor, wrap them in a TM subclass and register
> the 
> result with the transaction manager. The cursor is also registered in a
> thread 
> map, so that subsequent update statements in the same thread/transaction
> reuse 
> the cursor. When the Zope TM calls finish()/abort(), the cursor is
> committed 
> and released (and removed from the thread map).
> - session access (updating the "last accessed" timestamp on mostly every 
> request) is done through a special global cursor, which does a commit
> every 10 
> or so updates keeping disk write load for this non-critical piece of 
> information low.
> 
> The end result is acceptably low connection usage and correct transaction 
> scoping.
> 
> Now I only have to find that (*&@#$ deadlock somewhere in my code ;-).
> 
> 
> -- 
> Cees de Groot               http://www.cdegroot.com     <cg@cdegroot.com>
> GnuPG 1024D/E0989E8B 0016 F679 F38D 5946 4ECD  1986 F303 937F E098 9E8B
> -- 
> Cees de Groot               http://www.cdegroot.com     <cg@cdegroot.com>
> GnuPG 1024D/E0989E8B 0016 F679 F38D 5946 4ECD  1986 F303 937F E098 9E8B
> 
> 
> 
> 
> --__--__--
> 
> Message: 21
> From: "svedovelli" <spinwing@inwind.it>
> To: "Oleg Broytmann" <phd@mail2.phd.pp.ru>
> Cc: <zope@zope.org>
> Date: Mon, 19 Mar 2001 21:35:56 +0100
> Subject: [Zope] R: [Zope-Annce] Localized DateTime classes
> 
> Hello Oleg
> 
> well, yes, but what if you are running a german installation and want to
> provide, say, dutch localization? This is my very first try, also to see
> if
> people are interested. I am trying now to design a more flexible way to do
> this, using a ZClass to determine the desired translation.
> 
> I will post soon when I will have a proper solution
> 
> Keep in touch
> Ciao!
> Stefano
> 
> 
> 
> -----Messaggio originale-----
> Da: Oleg Broytmann [mailto:phd@phd.pp.ru]
> Inviato: lunedi 19 marzo 2001 10.38
> A: svedovelli
> Cc: Zope Mailing List
> Oggetto: Re: [Zope-Annce] Localized DateTime classes
> 
> 
> Hi!
> 
>    Nice...
> 
> On Sun, 18 Mar 2001, svedovelli wrote:
> > French, but I plan in future to create a more sophisticated version
> which
> > will try to guess in which country the system is running in order to
> return
> > the proper translation.
> 
>    ...but why guess? Just use locale settings!
> 
> Oleg.
> ----
>      Oleg Broytmann     http://www.zope.org/Members/phd/     phd@phd.pp.ru
>            Programmers don't die, they just GOSUB without RETURN.
> 
> 
> 
> 
> --__--__--
> 
> Message: 22
> From: "svedovelli" <spinwing@inwind.it>
> To: "Oleg Broytmann" <phd@mail2.phd.pp.ru>,
> 	"Tino Wildenhain" <tino@wildenhain.de>
> Cc: "Zope Mailing List" <zope@zope.org>
> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes
> Date: Mon, 19 Mar 2001 21:36:05 +0100
> 
> Well, we can think about it in a second time....maybe we can find a
> solution
> as well.
> 
> Stefano
> 
> -----Messaggio originale-----
> Da: Oleg Broytmann [mailto:phd@phd.pp.ru]
> Inviato: lunedi 19 marzo 2001 15.12
> A: Tino Wildenhain
> Cc: svedovelli; Zope Mailing List
> Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
> 
> 
> On Sun, 18 Mar 2001, Tino Wildenhain wrote:
> > the point IMHO is, the locales setting applies to the server system,
> > where it is serving pages for a client system and its settings.
> > E.g. I would not expect russian date in a italian document...
> 
>    But of course! And because of this I would do entire site in one
> langauge and one locale. The problem with Zope is that it's multithreaded,
> and can't switch locales on the fly :(
> 
> Oleg.
> ----
>      Oleg Broytmann     http://www.zope.org/Members/phd/     phd@phd.pp.ru
>            Programmers don't die, they just GOSUB without RETURN.
> 
> 
> 
> 
> --__--__--
> 
> Message: 23
> Reply-To: <sbabu@tnc.org>
> From: "Satheesh Babu" <sbabu@tnc.org>
> To: <zope@zope.org>
> Date: Mon, 19 Mar 2001 15:37:09 -0500
> Subject: [Zope] Zope vs. other app servers. Any comparison available?
> 
> Hi,
> 
> We use Zope a lot. However, there are some schools of thought that since
> MacroMedia has bought Allaire, it is going to be *the* web app development
> platform (personally, I think you can't compare Cold Fusion to Zope). So,
> are there any web sites that compare Zope vs. ASP, PHP, Cold Fusion, Java
> app servers?
> 
> If this is "suite" friendly, better! Even other wise, if you've any
> pointers
> to existing documents, that would be of great help.
> 
> TIA
> 
> V. Satheesh Babu
> sbabu@tnc.org
> 
> 
> 
> 
> --__--__--
> 
> Message: 24
> From: "svedovelli" <spinwing@inwind.it>
> To: "Tino Wildenhain" <tino@wildenhain.de>,
> 	"Oleg Broytmann" <phd@mail2.phd.pp.ru>
> Cc: "Zope Mailing List" <zope@zope.org>
> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes
> Date: Mon, 19 Mar 2001 21:36:04 +0100
> 
> Exactly... this is why this is a very first try, and I am relying also on
> the comunity to see the impact of the modified class. The idea is to
> expand
> it so that the class is able to take the localized names from a ZClass
> rather than determine the proper language from the system
> 
> Ciao!
> Stefano
> 
> -----Messaggio originale-----
> Da: Tino Wildenhain [mailto:tino@wildenhain.de]
> Inviato: domenica 18 marzo 2001 16.30
> A: Oleg Broytmann
> Cc: svedovelli; Zope Mailing List
> Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
> 
> 
> Hi Oleg, svedovelli,
> 
> the point IMHO is, the locales setting applies to the server system,
> where it is serving pages for a client system and its settings.
> E.g. I would not expect russian date in a italian document...
> 
> Regards
> Tino
> 
> Oleg Broytmann wrote:
> >
> > Hi!
> >
> >    Nice...
> >
> > On Sun, 18 Mar 2001, svedovelli wrote:
> > > French, but I plan in future to create a more sophisticated version
> which
> > > will try to guess in which country the system is running in order to
> return
> > > the proper translation.
> >
> >    ...but why guess? Just use locale settings!
> >
> > Oleg.
> > ----
> >      Oleg Broytmann     http://www.zope.org/Members/phd/
> phd@phd.pp.ru
> >            Programmers don't die, they just GOSUB without RETURN.
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> 
> 
> --__--__--
> 
> Message: 25
> From: "svedovelli" <spinwing@inwind.it>
> To: "Hannu Krosing" <hannu@tm.ee>,
> 	"Oleg Broytmann" <phd@mail2.phd.pp.ru>
> Cc: "Zope Mailing List" <zope@zope.org>
> Subject: R: [Zope] Re: [Zope-Annce] Localized DateTime classes
> Date: Mon, 19 Mar 2001 21:36:01 +0100
> 
> This is one of the possible problems I am facing. The basic idea that I
> would like to implement is: if the whole site is in a specific language,
> then the designer should be able to provide the DateTime with the proper
> translation. I am planning to use a ZClass to achieve this.
> 
> Ciao!
> Stefano
> 
> -----Messaggio originale-----
> Da: hannu@m72.tm.ee [mailto:hannu@m72.tm.ee]Per conto di Hannu Krosing
> Inviato: lunedi 19 marzo 2001 10.47
> A: Oleg Broytmann
> Cc: svedovelli; Zope Mailing List
> Oggetto: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
> 
> 
> Oleg Broytmann wrote:
> >
> > Hi!
> >
> >    Nice...
> >
> > On Sun, 18 Mar 2001, svedovelli wrote:
> > > French, but I plan in future to create a more sophisticated version
> which
> > > will try to guess in which country the system is running in order to
> return
> > > the proper translation.
> >
> >    ...but why guess? Just use locale settings!
> 
> How do you get locale settings from HTTP client ?
> 
> -------------------
> Hannu
> 
> 
> 
> --__--__--
> 
> Message: 26
> From: "Chris McDonough" <chrism@digicool.com>
> To: "Echlin, Michael" <echlinm@aecl.ca>,
> 	"'Phil Harris'" <phil.harris@zope.co.uk>, <zope@zope.org>
> Subject: Re: [Zope] MS Explorer no longer shows the management interface.
> Date: Mon, 19 Mar 2001 16:07:07 -0500
> 
> Their security patch breaks the way basic auth works.  I imagine it was
> intentional until all their users started to scream... and then they
> backed
> off in IE 5.5.
> 
> ----- Original Message -----
> From: "Echlin, Michael" <echlinm@aecl.ca>
> To: "'Phil Harris'" <phil.harris@zope.co.uk>; "Echlin, Michael"
> <echlinm@aecl.ca>; <zope@zope.org>
> Sent: Monday, March 19, 2001 3:36 PM
> Subject: RE: [Zope] MS Explorer no longer shows the management interface.
> 
> 
> > The weird part of all this that it worked just fine until I put in the
> > security patch.
> > When MS puts out a new security patch will they break the IE connection
> to
> > ZOPE again?
> >
> > Our shop is stuck, by official decree, to using IE but they haven't
> found
> a
> > way to force us not to use Netscape on the Linux servers yet. (Possibly
> > because we haven't told them we are using Linux?)
> >
> > Thanks, I will have to upgrade to 5.5 and warn my Zope managers about
> this
> > problem.
> >
> > Mike.
> >
> > -----Original Message-----
> > From: Phil Harris [mailto:phil.harris@zope.co.uk]
> > Sent: March 19, 2001 3:23 PM
> > To: Echlin, Michael; zope@zope.org
> > Subject: Re: [Zope] MS Explorer no longer shows the management
> > interface.
> >
> >
> > Michael,
> >
> > see today's thread,
> >
> > [Zope] newbie zope question -- stuck in quick-start page
> >
> > and all will be revealed.
> >
> > Phil
> > phil.harris@zope.co.uk
> >
> > ----- Original Message -----
> > From: "Echlin, Michael" <echlinm@aecl.ca>
> > To: <zope@zope.org>
> > Sent: Monday, March 19, 2001 8:16 PM
> > Subject: [Zope] MS Explorer no longer shows the management interface.
> >
> >
> > > Hi,
> > >
> > > This morning I installed a few upgrades to MS 98 (Internet Explorer
> 5.01
> > > Service Pack 1) and when I go to my Zope site I can no longer see the
> > > management pages. The right frames are displayed and the navigation
> tree,
> > > but instead of the management screen for a folder I get the view
> contents.
> > >
> > > Any Ideas?
> > >
> > > Mike Echlin CP/SA/CM
> > > AECL Control and Operations Technology
> > > echlinm@aecl.ca
> > >
> > >
> > >
> > > _______________________________________________
> > > Zope maillist  -  Zope@zope.org
> > > http://lists.zope.org/mailman/listinfo/zope
> > > **   No cross posts or HTML encoding!  **
> > > (Related lists -
> > >  http://lists.zope.org/mailman/listinfo/zope-announce
> > >  http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> 
> 
> 
> --__--__--
> 
> Message: 27
> From: "Marc Fischer" <marcbpc@gmx.de>
> To: "Darin Lee" <LEEDM@state.mi.us>,
> 	<zope@zope.org>
> Subject: AW: [Zope] RE:ZCatalog update question
> Date: Mon, 19 Mar 2001 21:58:05 +0100
> 
> Thank you :-) 
> 
> That's it ... 
> I used the following syntax: 
> 
>     <dtml-call "this().reindex_object()">
> 
> in every method I create or edit an instance. 
> 
> Marc
> 
> 
> > -----Ursprungliche Nachricht-----
> > Von: zope-admin@zope.org [mailto:zope-admin@zope.org]Im Auftrag von
> > Darin Lee
> > Gesendet: Montag, 19. Marz 2001 19:10
> > An: zope@zope.org
> > Betreff: [Zope] RE:ZCatalog update question
> > 
> > 
> > Gari,
> > 
> > You must call <dtml-call reindex_object> in any of your methods 
> > that operate on data (constructor, edit functions etc.) in order 
> > for the object to be automatically updated in the ZCatalog. 
> > Simply inheriting ZCatalog as a base class is not enough.
> > 
> > Also, make sure when you are defining your base classes to 
> > include ZCatalogAware FIRST.
> > 
> > Good luck,
> > -Darin
> > 
> > 
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists - 
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> > 
> 
> 
> --__--__--
> 
> Message: 28
> From: "Norman Khine" <khine@btinternet.com>
> To: "Zope" <zope@zope.org>
> Date: Mon, 19 Mar 2001 21:24:17 -0000
> Subject: [Zope] DeprecationWarning
> 
> I just like to say that I have configured Zope to run under FreeBSD 4.3
> with
> Python 2.1b1
> 
> Zope Version  Zope 2.3.1b2 (source release, python 1.5.2, linux2)
> Python Version  2.1b1 (#1, Mar 15 2001, 23:29:56) [GCC 2.95.2 19991024
> (release)]
> System Platform  freebsd4
> Process Id  189 (143436800)
> Running For  2 min 58 sec
> 
> Although when I get the following errors when starting the server:
> 
> /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: thee
>   import regex
> /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub
> module
> is)
>   DeprecationWarning)
> /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: the
> regex me
>   import regex
> /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub
> module
> is)
>   DeprecationWarning)
> 
> Any ideas
> 
> Thanks
> 
> Norman
> 
> 
> 
> 
> --__--__--
> 
> Message: 29
> From: "Phil Harris" <phil.harris@zope.co.uk>
> To: "Norman Khine" <khine@btinternet.com>, "Zope" <zope@zope.org>
> Subject: Re: [Zope] DeprecationWarning
> Date: Mon, 19 Mar 2001 21:18:30 -0000
> 
> You should read the Python docs about deprecated features.
> 
> Basically the feature which is being warned about will be removeed in a
> later version, this is just a warning to developers that this is the case.
> 
> 
> ----- Original Message -----
> From: "Norman Khine" <khine@btinternet.com>
> To: "Zope" <zope@zope.org>
> Sent: Monday, March 19, 2001 9:24 PM
> Subject: [Zope] DeprecationWarning
> 
> 
> > I just like to say that I have configured Zope to run under FreeBSD 4.3
> with
> > Python 2.1b1
> >
> > Zope Version  Zope 2.3.1b2 (source release, python 1.5.2, linux2)
> > Python Version  2.1b1 (#1, Mar 15 2001, 23:29:56) [GCC 2.95.2 19991024
> > (release)]
> > System Platform  freebsd4
> > Process Id  189 (143436800)
> > Running For  2 min 58 sec
> >
> > Although when I get the following errors when starting the server:
> >
> > /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: thee
> >   import regex
> > /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub
> module
> > is)
> >   DeprecationWarning)
> > /usr/local/Zope/ZServer/medusa/asynchat.py:293: DeprecationWarning: the
> > regex me
> >   import regex
> > /usr/local/lib/python2.1/regsub.py:15: DeprecationWarning: the regsub
> module
> > is)
> >   DeprecationWarning)
> >
> > Any ideas
> >
> > Thanks
> >
> > Norman
> >
> >
> >
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> 
> 
> --__--__--
> 
> Message: 30
> Date: Sun, 18 Mar 2001 21:25:40 +0100
> From: Tino Wildenhain <tino@wildenhain.de>
> To: Oleg Broytmann <phd@mail2.phd.pp.ru>
> Cc: svedovelli <spinwing@inwind.it>,
> 	Zope Mailing List <zope@zope.org>
> Subject: Re: [Zope] Re: [Zope-Annce] Localized DateTime classes
> 
> Hi Oleg,
> 
> Oleg Broytmann wrote:
> > 
> > On Sun, 18 Mar 2001, Tino Wildenhain wrote:
> > > the point IMHO is, the locales setting applies to the server system,
> > > where it is serving pages for a client system and its settings.
> > > E.g. I would not expect russian date in a italian document...
> > 
> >    But of course! And because of this I would do entire site in one
> > langauge and one locale. The problem with Zope is that it's
> multithreaded,
> > and can't switch locales on the fly :(
> > 
> sure it can :) We "only" need to replace all the locale aware methods
> with language-negotiation aware methods. Additionally there is a need
> for local override of this, meaning if one wants to mix variuos
> languages
> in one page, it should be possible to give an extra attribute to an 
> equivalent of the <dtml-var> tag or something like that.
> 
> I'll make a proposal later this week as time allows
> 
> Regards
> Tino
> 
> 
> --__--__--
> 
> Message: 31
> Date: Sun, 18 Mar 2001 21:29:50 +0100
> From: Tino Wildenhain <tino@wildenhain.de>
> To: "Farrell, Troy" <troy.farrell@wilcom.com>
> Cc: 'Chris Withers' <chrisw@nipltd.com>, p.bizzarri@icube.it,
> 	zope@zope.org
> Subject: Re: [Zope] ANNOUNCE: ZopeMake 1.0
> 
> Hi Troy,
> 
> "Farrell, Troy" wrote:
> > 
> > Yes.  ZopeMake uses ZClient to allow commandline scripting of imports
> and
> > exports, but cannot import .zexp files that are not on the file system.
> > I've been thinking about 2 of Zope's "problems" (security features)
> lately
> > and I've almost hit some solutions.
> > <Ask DC to turn a deaf ear>
> > I wonder (I haven't looked) how difficult it would be to patch zope so
> it
> > can import .zexp files that are already in ZODB, so that I can
> > manage_addFile a .zexp file and then manage_importObjectFromZODB.  I was
> > thinking about using LocalFS for this, but I don't think LFS is deployed
> far
> > and wide enough for this.  Then again, if we get a solution for this,
> more
> > people might use LocalFS.  I might try to write the code if it sounds
> > doable.  It might be nice.
> 
> Its more easy to link /var to /import on filesystem :)
> 
> Regards
> Tino
> 
> 
> --__--__--
> 
> Message: 32
> Date: Mon, 19 Mar 2001 18:21:27 -0500
> Subject: Re: [Zope] Can one protect dtml from being rendered?
> From: Chris Muldrow <muldrow@mac.com>
> To: Bernd Worsch <bernd.worsch@frontsite.de>, <zope@zope.org>
> 
> <dtml-var document_src> will return the unrendered source of a DTML
> Document. I'm not sure if that's what you're looking for. (Since the tags
> inside the unrendered source are still within <> tags, they wont show in a
> browser. If you wanted them readable, you'd have to escape the html, I
> guess)
> Hope this helps.
> Chris Muldrow
> 
> > From: Bernd Worsch <bernd.worsch@frontsite.de>
> > Reply-To: Bernd Worsch <bernd.worsch@frontsite.de>
> > Date: Mon, 19 Mar 2001 19:08:14 +0100
> > To: zope@zope.org
> > Subject: [Zope] Can one protect dtml from being rendered?
> > 
> > Hi there!
> > 
> > My final question for today: When i generate a new document A and
> > take the document content from some kind of template B, is there
> > a way to get some dtml in the document rendered and some inserted
> > directly?
> > 
> > Suppose SomeVar holds 'SomeText' and AnotherVar holds 'AnotherText'.
> > 
> > How do i protect AnotherVar so that
> > 
> > <!-- begin B -->
> > <dtml-var SomeVar>
> > <dtml-var AnotherVar>
> > <!-- end B -->
> > 
> > becomes
> > 
> > <!-- begin A -->
> > SomeText
> > <dtml-var AnotherVar>
> > <!-- end A -->
> > 
> > after insertion?
> > 
> > Thanks 
> > Bernd
> > 
> > -- 
> > 
> > -----Bernd Worsch-----------bernd.worsch@frontsite.de--------
> > 
> > 
> > 
> > 
> > 
> > _______________________________________________
> > Zope maillist  -  Zope@zope.org
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists - 
> > http://lists.zope.org/mailman/listinfo/zope-announce
> > http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> 
> 
> --__--__--
> 
> Message: 33
> Date: Mon, 19 Mar 2001 17:47:25 -0600 (CST)
> From: Timothy Wilson <wilson@visi.com>
> To: Zope listserv <zope@zope.org>
> Subject: [Zope] avoiding nested DTMLs
> 
> Hi everyone,
> 
> I'm trying to figure out how to do something here while avoiding nested
> dtml 
> tags. Here's what I've got:
> 
> I have a TinyTable containing two fields: "name" and "status". I have a
> DTML
> Document in the same folder as the TinyTable for each "name" in the
> TinyTable. I want to display that DTML Document based on the value of
> "status" in the TinyTable.
> 
> Here's some code:
> <dtml-in testTable>
>  <dtml-if "status <> ''">
>   <p><<< insert DTML Document here >>></p>
>  </dtml-if>
> </dtml-in>
> 
> So in the code above I want to insert <dtml-var spam_html> (which is a
> DTML 
> Document in the current folder), for example, if the TinyTable contains a
> line that looks like:
> 
> "spam_html", "X"
> 
> I hope I'm making myself clear. Anyone have any ideas?
> 
> -Tim
> 
> --
> Tim Wilson      | Visit Sibley online:         | Check out:
> Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/
> W. St. Paul, MN |                              | http://slashdot.org/
> wilson@visi.com |   <dtml-var pithy_quote>     | http://linux.com/
> 
> 
> 
> --__--__--
> 
> Message: 34
> From: "Anton A. Zotov" <futurb@nh.km.ua>
> To: <zope@zope.org>
> Date: Tue, 20 Mar 2001 02:06:45 +0200
> Organization: Xception
> Subject: [Zope] Getting Errors trying to map permissions in Zope 2.3.0 for
> win32
> 
> This is a multi-part message in MIME format.
> 
> ------=_NextPart_000_000B_01C0B0E2.6A500360
> Content-Type: text/plain;
> 	charset="koi8-r"
> Content-Transfer-Encoding: 7bit
> 
> I'm getting permanent errors trying to map permissions in Zope product
> created by myself.
> I seem to do everything right. Could anybody tell me how to avoid the
> problem ?
> Please see Zope trace page attached.
> Thx in advance,
> Anton.
> 
> 
> ------=_NextPart_000_000B_01C0B0E2.6A500360
> Content-Type: text/html;
> 	name="manage_setPermissionMapping[1].html"
> Content-Transfer-Encoding: quoted-printable
> Content-Disposition: attachment;
> 	filename="manage_setPermissionMapping[1].html"
> 
> <html><head><title>This is top level admin's management interface =
> class</title></head><body bgcolor=3D"#FFFFFF">
> 
> 
> <table border=3D"0" width=3D"100%">
> <tr valign=3D"TOP">
> 
> <td width=3D"10%" align=3D"center">
> <img src=3D"http://localhost:8080/p_/ZButton" alt=3D"Zope">
> </td>
> 
> <td width=3D"90%">
>   <h2>Zope Error</h2>
>   <p>Zope has encountered an error while publishing this resource.</p>
>  =20
>   <p>
>   <strong>Error Type: TypeError</strong><br>
>   <strong>Error Value: too many arguments; expected 2, got =
> 3</strong><br>=20
>   </p>
> =20
>   <hr noshade>
> =20
>   <p>Troubleshooting Suggestions</p>
> 
>   <ul>
>     <li>The URL may be incorrect.</li>
>   <li>The parameters passed to this resource may be incorrect.</li>
>   <li>A resource that this resource relies on may be encountering an =
> error.</li>
>   </ul>
> 
>   <p>For more detailed information about the error, please
>   refer to the HTML source for this page.
>   </p>
> 
>   <p>If the error persists please contact the site maintainer.
>   Thank you for your patience.
>   </p>
> </td></tr>
> </table>
> 
> 
> <p><a href=3D"http://www.zope.org/Credits" target=3D"_top"><img =
> src=3D"http://localhost:8080/p_/ZopeButton" width=3D"115" height=3D"50" =
> border=3D"0" alt=3D"Powered by Zope" /></a></p></body></html>
> 
> <PRE>
> Traceback (innermost last):
>   File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 222, =
> in publish_module
>   File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 187, =
> in publish
>   File C:\Workshop\xception\lib\python\Zope\__init__.py, line 221, in =
> zpublisher_exception_hook
>     (Object: Admin)
>   File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 171, =
> in publish
>   File C:\Workshop\xception\lib\python\ZPublisher\mapply.py, line 160, =
> in mapply
>     (Object: manage_setPermissionMapping)
>   File C:\Workshop\xception\lib\python\ZPublisher\Publish.py, line 112, =
> in call_object
>     (Object: manage_setPermissionMapping)
>   File =
> C:\Workshop\xception\lib\python\AccessControl\PermissionMapping.py, line =
> 150, in manage_setPermissionMapping
>     (Object: Admin)
> TypeError: (see above)
> 
> </PRE>
> ------=_NextPart_000_000B_01C0B0E2.6A500360--
> 
> 
> 
> --__--__--
> 
> Message: 35
> Date: Mon, 19 Mar 2001 17:14:55 -0700
> From: Casey Duncan <cduncan@kaivo.com>
> Organization: Kaivo, Inc. (www.kaivo.com)
> To: Timothy Wilson <wilson@visi.com>
> CC: Zope listserv <zope@zope.org>
> Subject: Re: [Zope] avoiding nested DTMLs
> 
> Timothy Wilson wrote:
> > 
> > Hi everyone,
> > 
> > I'm trying to figure out how to do something here while avoiding nested
> dtml
> > tags. Here's what I've got:
> > 
> > I have a TinyTable containing two fields: "name" and "status". I have a
> DTML
> > Document in the same folder as the TinyTable for each "name" in the
> > TinyTable. I want to display that DTML Document based on the value of
> > "status" in the TinyTable.
> > 
> > Here's some code:
> > <dtml-in testTable>
> >  <dtml-if "status <> ''">
> >   <p><<< insert DTML Document here >>></p>
> >  </dtml-if>
> > </dtml-in>
> > 
> > So in the code above I want to insert <dtml-var spam_html> (which is a
> DTML
> > Document in the current folder), for example, if the TinyTable contains
> a
> > line that looks like:
> > 
> > "spam_html", "X"
> > 
> > I hope I'm making myself clear. Anyone have any ideas?
> > 
> > -Tim
> > 
> 
> Possibly this (untested):
> 
> <dtml-in testTable>
>     <dtml-if status>
>         <p><dtml-var expr="_[status]"></p>
>     </dtml-if>
> </dtml-in>
> 
> I don't see any way to safely avoid nesting the dtml-if tag, if status
> might be empty. This is not anything I would consider a problem though.
> 
> -- 
> | Casey Duncan
> | Kaivo, Inc.
> | cduncan@kaivo.com
> `------------------>
> 
> 
> --__--__--
> 
> Message: 36
> Date: Tue, 20 Mar 2001 12:25:16 +1200 (NZST)
> From: John Morton <jwm@plain.co.nz>
> Subject: Re: [Zope] Zope security management
> To: Phil Harris <phil.harris@zope.co.uk>, zope@zope.org
> Reply-To: John Morton <jwm@plain.co.nz>
> 
> On Mon, 19 Mar 2001 19:37:11 -0000 Phil Harris <phil.harris@zope.co.uk>
> wro=
> te:
> 
> > Bill,
> >=20
> > There is another answer to part 2, use javascript to create an md5 hash
> o=
> f
> > the user,somesecret,password.
> >=20
> > This can be sent instead of the password and then validated on the
> server
> > side, since the username and md5 hash is all that is sent across the
> wire=
> ,
> > it should be a lot more secure than plain text.
> >=20
> > I have a library for javascript md5 if anyone is interested (which,btw,
> I
> > 'stole' from the PHPlib ;) ).
> 
> This method, as described,  will not protect you from traffic sniffing at
> all. Where the attacker was sniffing for username and password
> combinations being submitted to the login page, they now sniff for an MD5
> sum that will do the same job. Once in, the attack probably won't have too
> many problems changing the password to something they know.=20
> 
> What it comes down to, is that any regular form based (initial)
> authentication scheme will involve sending authenication data using a
> known, and necessarily publicly accessable formulation (the login form) to
> a known and public URL that will decide whether to authenticate the user
> or not. As a result, an attacker can trivially find out what an
> authenication token should look like, and extract them at their leisure.
> 
> You could probably transform the simple passive sniffing attack to a more
> complex man-in-the-middle attack by including a unique id for each login
> form hit and only accepting authentication tokens with a given id once. An
> attacker would need to intercept the authentication token and use it
> instead of the user in order to gain access. Coupled with short timeouts
> on the live ids, and a policy that users can only be logged in once, and
> you'll have tighter security than a plaintext password system - but it's
> still nowhere near as good as using SSL so that authentication tokens
> cannot be distinguished from any other traffic in the stream.
> 
> John
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 37
> Date: Mon, 19 Mar 2001 18:26:11 -0600 (CST)
> From: Timothy Wilson <wilson@visi.com>
> To: Casey Duncan <cduncan@kaivo.com>
> Cc: Zope listserv <zope@zope.org>
> Subject: Re: [Zope] avoiding nested DTMLs
> 
> On Mon, 19 Mar 2001, Casey Duncan wrote:
> 
> > Possibly this (untested):
> > 
> > <dtml-in testTable>
> >     <dtml-if status>
> >         <p><dtml-var expr="_[status]"></p>
> >     </dtml-if>
> > </dtml-in>
> > 
> > I don't see any way to safely avoid nesting the dtml-if tag, if status
> > might be empty. This is not anything I would consider a problem though.
> 
> Cool. That worked. I need to read up on that _[] stuff. Thanks.
> 
> -Tim
> 
> --
> Tim Wilson      | Visit Sibley online:         | Check out:
> Henry Sibley HS | http://www.isd197.k12.mn.us/ | http://www.zope.org/
> W. St. Paul, MN |                              | http://slashdot.org/
> wilson@visi.com |   <dtml-var pithy_quote>     | http://linux.com/
> 
> 
> 
> --__--__--
> 
> Message: 38
> From: David McCuskey <david.mccuskey@bigfoot.com>
> To: Zope Mailing List <zope@zope.org>, Chris Muldrow <muldrow@mac.com>,
>         Lee
>  Marzke <lmarzke@kns.com>
> Subject: Re(2): [Zope] Zope hosting
> Date: Mon, 19 Mar 2001 16:33:29 -0800
> 
> On 03/19/01, Kit enlightened me with:
> 
> >Not at all too good to be true. I use Hurrah for one of my sites. They
> are
> >fast, prompt, helpful, and knowledgeable about Zope. I think they are the
> >best deal running in Zope hosting at this time.
> >-- 
> >Kit O'Connell
> >Zope Administrator
> 
> i second that.
> 
> the 100Mb and 3Gb of bandwidth makes the deal very attractive. you have
> full rights over your own zope instance and can install any package you
> want. plus you get all of the regular UNIX access, etc.
> 
> the only gripe i have is that i can't FTP to my zope instance for editing.
> 
> david
> 
> 
> 
> >-----Original Message-----
> >From: Lee Marzke [mailto:lmarzke@kns.com]
> >Sent: Friday, March 16, 2001 6:43 PM
> >To: zope@zope.org
> >Subject: Re: [Zope] Zope hosting
> >
> >
> >Anyone have experience with 
> >  http://www.hurrah.com/     ?
> >
> >The advertise a virtual Zope account with PostgreSQL or MySQL
> >for $25/mo.   Sounds to good to be true.
> >
> >Lee
> >
> >
> >On 16-Mar-01 Jake Berglund wrote:
> >> Hello,
> >> 
> >> You can find a list of lots of zope hosting providers here:
> >> 
> >> http://www.zope.org/Resources/ZSP
> >> 
> >
> 
> -- 
> David McCuskey
> david.mccuskey@bigfoot.com
> 
> 
> 
> --__--__--
> 
> Message: 39
> Date: Tue, 20 Mar 2001 13:36:28 +1200 (NZST)
> From: John Morton <jwm@plain.co.nz>
> To: zope <zope@zope.org>
> Reply-To: John Morton <jwm@plain.co.nz>
> Subject: [Zope] More ZClass oddities
> 
> I'm experiencing a few problems with some ZClasses and catalogs under
> 2.2.5 - they look like bugs, but they could be a result of a clue shortage
> on my part.=20
> 
> The first one relates to a ZClass that uses Object manager as a base
> class. When instances are created, a ZCatalog is automatically added
> (cusiously, I don't need to specify that ZCatalogs can be subobjects for
> this to occur). As I'm in the development stages, I let Z Seach Interfaces
> be subobjects of my ZClass but when it comes to adding a serach interface
> instance, the automatically created catalog isn't listed as a searchable
> object - and nor is any other catalog I add.
> 
> The second problem relates to ZClasses created as a subobject of another
> ZClass. This means that those items can only be created inside an instance
> of the parent class (the desired effect), but it also seems to mean that
> those object types don't show up in the type list of the 'Find Items To
> Catalog' tab in the catalog in the same folder.=20
> 
> So... Bugs? Or is there something I don't know?
> 
> John
> 
> 
> 
> --__--__--
> 
> Message: 40
> From: "Brian Lloyd" <brian@digicool.com>
> To: <luke@seeTO.com>, <zope@zope.org>
> Cc: <brian@digicool.com>
> Subject: RE: [Zope] Installation Probs
> Date: Mon, 19 Mar 2001 22:07:14 -0500
> 
> > > Actually, that's what happens on my Windows Zope as well. 
> > > Can you try another machine? 
> > 
> > I had that happen when I was trying the 2.3.0 betas.
> > The Win32 Zope installation creates some Registry entries. 
> > One of the entries points at the location of the service code.
> > If you uninstall Zope it does not remove those entries from the
> registry.
> > If you later install another version of Zope in a different 
> > directory, Zope will fail silently trying to start the service.
> > 
> > how to fix?
> > edit the registry and remove the offending references.
> > Install Zope again, and all will be sweetness and light.
> 
> Bleah. The problem is that ZService.py does its own 
> registry fiddling that is not known to the WISE installer, 
> so it can't clean it up correctly (PythonService.exe also 
> does some fiddling, but I don't think that affects this).
> 
> I've done some investigating and I've found a way to make 
> WISE invoke ZService.py remove (to clean up) on uninstall. 
> This will be included in 2.3.1 b3. Note that for those who 
> do not have Zope running as a service, it currently shows 
> a quick error message in a dos box at uninstall time (though 
> the error doesn't hurt anything). Tomorrow I'll take a look 
> at the ZService.py and see if there is a way to shut that 
> up.
> 
> 
> Brian Lloyd        brian@digicool.com
> Software Engineer  540.371.6909              
> Digital Creations  http://www.digicool.com 
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 41
> Date: Mon, 19 Mar 2001 23:51:33 -0500 (EST)
> From:  <ghaley@mail.venaca.com>
> To: zope@zope.org
> Subject: [Zope] ZMySQL Database connection trouble
> 
> hi,
> 
> I am trying to add a ZMySQL database connection.  Everything seems to go
> ok, but when I try to view the Products Management, it shows the ZMySQL as
> a broken product, when I view it, there is an error that says:
> 
> ImportError: /usr/lib/python1.5/site-package/MySQLmodule.so:  undefined
> symbol: uncompress
> 
> If I try to go the the /opt/zope/lib ,etc. directory and start the db.py
> connection directly, python db.py, i get the same error.  
> 
> If someone could provide some direction on how to recompile the .so file
> so that it can handle the uncompress problem, I would be most grateful.
> 
> btw, i've read the various howtos on the zope.org site, and i didn't find
> this particular problem there.  
> 
> I am running MySQL 3.23, the most recent release of zope, on linux 2.2
> running slackware 7.0
> 
> Many thanks.
> 
> ciao!
> greg.
> 
> Gregory Haley
> DBA/Web Programmer
> Venaca, LLC
> 
> 
> 
> --__--__--
> 
> Message: 42
> Date: Tue, 20 Mar 2001 09:34:39 +0300 (EAT)
> From: Patrick <patrick@eahd.or.ug>
> To: <zope@zope.org>
> Subject: [Zope] some confusion on ftp security.
> 
> I was just wondering if there is a separate config file for the Medusa FTP
> server because it alows anonymous logins even when I have used the zope
> management interface to create a user say fgh who has the rights that
> would usually be given to the anonymous group. I even defined a matching
> group fgh and removed all rights from the anonymous group.
> 	The advantage is that the user can not see list or download any
> files but I was just suggesting that the user does not get a login prompt
> at all in the first place incase this user manages to find some way of
> exploiting the system.... (or have I missed something)
> 
> 
> Thanks.
> Patrick
> 
> 
> 
> --__--__--
> 
> Message: 43
> From: Dennis Pabalan <demic.pabalan@q-linux.com>
> To: zope@zope.org
> Date: Tue, 20 Mar 2001 14:27:33 +0800
> Subject: [Zope] newbie
> 
> Hi there guys!!
> 
> I am a newbie and I just finished a zope tutorial " elvis"? I want to
> place it
> as a webpage (i want others to see it) how will I transfer the files? and
> in
> what directory? 
> I also want to add admin users to my management page :) 
> 
> Sorry for that newbie question :) 
> 
> 
>  -- 
> 
> "think like a beginner, not an expert"
> 
>  .--.  Demic Pabalan                           mobile://+63.917.345.1692
> ( () ) Q Linux Solutions, Inc.               office://+63.2.894.3592/
>  `--\\ A Philippine Open Source Solutions Co.  http://www.q-linux.com/
> 
> 
> --__--__--
> 
> Message: 44
> Date: Tue, 20 Mar 2001 04:07:29 -0300
> From: Luciano Ramalho <luciano@hiper.com.br>
> To: Timothy Wilson <wilson@visi.com>
> CC: Casey Duncan <cduncan@kaivo.com>, Zope listserv <zope@zope.org>
> Subject: Re: [Zope] avoiding nested DTMLs
> 
> Timothy Wilson wrote:
> > Cool. That worked. I need to read up on that _[] stuff. Thanks.
> 
> Knowing Python really helps in decrypting _['x']. 
> 
> First of all, _ is just a valid, albeit weird, variable name in Python.
> _ does not have any special powers in Python (as $_ has in Perl). 
> 
> The syntax y['x'] means: fetch item 'x' from dictionary y. y is not a
> real dictionary, but rather an object that behaves mostly like a
> dicionary. So _['x'] just means, fetch item 'x' from the namespace. In a
> dicionary, whatever goes inside the [] is called a "key". Now, what
> happens if I write y[x] and not y['x']? That is an indirection, is is
> discussed a few paragraphs below.
> 
> Now, although _ would be just a regular variable name in Python, in DTML
> expressions it always refers to the namespace object which, like I said,
> is not really an object but just pretends to be one. The symbol for the
> namespace object could be 'namespace', 'super_dict', or '_ground'. But
> it was called '_'. Zopistas I've met pronounce _ as "under" or
> "namespace", depending on how formal they are.
> 
> Like a dicionary, _ has a has_key method, which you call like this:
> "_.has_key('x')". Unlike a regular dictionary, it gives you access to
> dozens of Python functions such as int "_.int(x)", and whole modules
> such as string, DateTime and random: "_.random.randint(x,y)". On the
> other hand, _ does not have some usual dicionary methods, like keys() or
> items(), which are useful to retrieve the entire contents of a
> dictionary.
> 
> WHAT _['x'] REALLY DOES
> 
> The strangest thing about _ is that when you access something in it,
> like _['x'], it doesn't just fetch the x object for you. Whenever _
> retrives an object, it checks whether the object is callable (most
> things are callable objects in Zope). If the object is callable, _ calls
> or invokes it, which means the object is executed as code, and then what
> you get is not the object, but the result of executing it, whis is
> normally a string containing HTML. This is the same behaviour of the
> dtml-var "name" attribute. So:
> 
> (1) <dtml-var name="x"> 
> 
> gives the same result as
> 
> (2) <dtml-var expr="_['x']">
> 
> but is not the same as
> 
> (3) <dtml-var expr="x">.
> 
> For instance, if x is a DTML Method, (1) and (2) execute, or render it,
> replacing DTML tags within x by their results, and returning plain HTML.
> Then if you want to access some z attribute of x, you get the dreadful
> "String object has no attribute z", which tells you that x is no longer
> a rich object like a folder or a document, but is now a flat string
> containing the HTML resulting from rendering the x object. 
> 
> With syntax (3) you just fetch it, which depending on context would
> display the unrendered DTML code.
> 
> If you need to indirectly fetch an object without executing it, you have
> to use another of _'s methods, getitem. The expression "_.getitem('x')"
> returns a reference to the object called x, without invoking it. 
> 
> INDIRECTION
> 
> Notice difference between:
> 
> (2) <dtml-var expr="_['x']">
> 
> (4) <dtml-var expr="_[x]">
> 
> These mean COMPLETELY DIFFERENT things. In (2) you want to get the
> object called 'x' from the namespace dictionary. The key you are using
> is the string 'x'. 
> 
> In (4), you are getting the object whose name is stored in variable x.
> The key, in this case, is whatever is referred by the variable x. If x
> refers to the string 'ni', then _[x] means _['ni'], that is, fetch the
> object called 'ni'. 
> 
> That is why _[x] is called an indirection: in our example you are not
> fetching 'ni' directly, but indirectly through the x variable. The next
> time _[x] is evaluated, x may refer to 'sikander', and then _[x] may
> yield a totally different result.
> 
> The same rationale goes for 
> 
> (5) <dtml-var expr="_.getitem('x')">
> 
> (6) <dtml-var expr="_.getitem(x)">
> 
> The result of (5) is the same as
> 
> (3) <dtml-var expr="x">
> 
> so you would never use (5) in real code. 
> 
> But (6) is useful to fetch an object indirectly without executing it.
> 
> 
> AN INTERESTING EXPERIMENT
> 
> Try this: within a folder, create two methods with ids 'method1' and
> 'method2'. Leave 'method2' with its default content, but replace the
> content of 'method1' with this, then View it.
> 
> <dtml-var standard_html_header>
> 
> <dtml-var name="method2">
> <hr>
> <dtml-var expr="method2">
> <hr>
> <dtml-var expr="_['method2']">
> <hr>
> <dtml-var expr="_.getitem('method2')">
> 
> <dtml-var standard_html_footer>
> 
> If my explanations were any good, you should understand what is going on
> now.
> 
> The whole _ issue is why, whenever I teach Zope, I include at least one
> hour of "instrumental Python".
> And while playing with the Python interpreter, I always make the
> students create and do lots of operations with a dictionary called _.
> 
> 
> --
> Best regards,
> 
> Luciano
> 
> 
> --__--__--
> 
> Message: 45
> From: "Andrei Cenja" <cnj@finsiel.ro>
> To: <zope@zope.org>
> Date: Tue, 20 Mar 2001 10:29:57 +0200
> Subject: [Zope] Large File Support ?!
> 
> OK, I'm sorry if this question is gonna prompt bursts of laughter, but
> here
> it goes :-)
> 
> If I intend to store many files (and large ones, too) into Zope (on RHL7,
> BTW) - something close to a few GBs, it would mean that Zope's database
> will
> get to be one several-gigs-large file. Someone warned me of possible
> problems if using very large files under linux. The question is: was he
> right ? How does Zope cope with that ?
> 
> Thanks !
> 
> Andrei Cenja, Bucharest, Romania.
> 
> 
> 
> --__--__--
> 
> Message: 46
> To: Dieter Maurer <dieter@handshake.de>
> Cc: zope@zope.org
> Subject: Re: [Zope] <dtml-sendmail>
> From: Petr Knapek <knapek@knapek.pvt.net>
> Date: 20 Mar 2001 10:01:23 +0100
> 
> >>>>> On Mon, 19 Mar 2001 20:52:21 +0100 (CET), Dieter Maurer <dieter@h=
> andshake.de> said:
> 
> Hi,
> 
>     DM> Petr Knapek writes:
>     >> I have a list of user e-mail addresses which is created
>     >> dynamically.  I would like to use <dtml-sendmail> tag to send an
>     >> e-mail at all addresses in my dynamical list but do not know what
>     >> the syntax of mailto attribute in sendmail tag shoul be.=3D20=3D=
> 20
>     DM> Do not use the "mailto" attribute, use the "To:" header in the
>     DM> send mail, similar to:
> 
>     DM>       <dtml-sendmail mailhost=3D...> To: <dtml-var
>     DM> expr=3D"_.string.join(address_list,',')"> ....
> 
> I think this should be better:
> <dtml-var expr=3D"_.string.join(address_list, ',\n ')"> ....
> 
>     DM> ATTENTION: This is indented only for readability. In your DTML
>     DM> code, "To:" must start in the first column!
> 
> I have resolved my problem just few minutes after sending e-mail.
> Again, thank you very much for help, ideas etc.
> 
>     DM> Dieter
> 
> Petr
> 
> --=20
> Petr Kn=E1pek
> NEXTRA Czech Republic, s.r.o., Hlinky 114, 603 00 Brno, Czech Republic
> e-mail: mailto:petr.knapek@nextra.cz
> tel:+420-5-43 554 150
> FAX:+420-5-43 554 214
> 
> 
> 
> --__--__--
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> 
> 
> 
> End of Zope Digest