Re: [Zope] Ann: ZGDChart 0.4.2.b
> there two small bugs in "addZGDChart.dtml" which causes it to > display only a white page at least under netscape I found two other HTML "buglets": - in "manage/edit.dtml" the block closes with , so the chart types are not displayed in Netscape (Linux) - in "manage/view.dtml" there should be a "bgcolor="FF" in the body tag, otherwise the screen is grey in Netscape (old MSIE users' problem; with IE the predefined background color is white, so they won't notice ...) Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] RedHat site mentions Zope (SuSE too!)
I checked: Zope 2.1.6 is shipped with the DeLuxe and Server versions of RedHat 7.0, but not with the Standard edition. They have split Zope into a couple of separate packages. On the web page they mention Zope a couple of times! BTW: Zope (also the 2.1.6) is also on the SuSE 7.0 (Professional) distribution. So Zope is now on most of the major distributions (RedHat, SuSE, Debian)! Am Die, 26 Sep 2000 schrieb John: > Yes I saw that too, but when I went to check the package list (to see > what version it was) there was no mention of it. > John Leach > > > > >>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<< > > On 9/25/00, 4:51:04 PM, Stephan Richter <[EMAIL PROTECTED]> wrote regarding > [Zope] RedHat site mentions Zope: > > > > Hello everyone, > > > I just saw on www.redhat.com the following: > > > Features for the developer: > > ... > > "Popular web application development tools like PHP and Zope" > > > Link: http://www.redhat.com/products/software/linux/rhl7_standard.html > > > Wow, pretty cool. It is only a five bullet list! I guess Zope is winning > > acceptance rapidly. > > > Regards, > > Stephan > > -- > > Stephan Richter > > CBU - Physics and Chemistry Student > > Web2k - Web Design/Development & Technical Project Management > > > > ___ > > Zope maillist - [EMAIL PROTECTED] > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > _______ > Zope maillist - [EMAIL PROTECTED] > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Fwd: Re: [Zope] Why do session vars suddenly disappear?
Hello! > Maybe it's because I don't understand the Zope mechanisms completely yet, I think so ;-) > but I sometimes have a hard time preserving some variable state between one > and the other web page. This is not possible without additional measures. How should Zope know that you have visited that other web page before? HTTP is a stateless protocol that doesn't per se keep track of your "session". Fortunately there are a couple of so-called SESSION management tools to help you (and in one of the next Zope versions session management will be integrated). Check for products like HappySession or FS Session. They keep track of the users (e.g. by using cookies) and make any variables you store to the session namespace available for later use on other pages. > This happens most often when I call one dtml-method from another one. If the > called dtml-method in its turn also calls some other dtml-method which needs > some dtml-var from the first template, almost inevitably a Zope error screen > appears with some 'unknown variable' or whatever message. For this (getting REQUEST variables transported to another method than the one that was called by the form) there is a procedure that works without sessions. You can just set the variables in the REQUEST for the next page again: E.g. you received a "Name" variable: stores the variable to the REQUEST. > I cannot reproduce this fully yet, maybe in my next mail. The same misery > happens when opening a document with frames. The separate frames seem to > hold no knowledge of any previously set vars. see above. For the web server the frameset is just a set of independent HTTP requests. Only with session tracking by cookies, authentication (logins) or special session URLs that hold a user-specific ID this can be handled. > Last but not least with Netscape 6 PR2 there seems to be no session state > possible whatsoever, no matter what I tried. Even a simple form is not able > to pass on its parameters to the receiving dtml-method. Hope this helped. Joachim > Help! > > _ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. > > Share information about yourself, create your own public profile at > http://profiles.msn.com. > > > ___ > Zope maillist - [EMAIL PROTECTED] > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de --- -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] IMAP and Zope!
Hello! I am searching for a current IMAP Adapter solution for Zope. What we have found so far is Ryan Hughes' WorldPilot, which has great IMAP support, but doesn't really integrate with Zope, and the two products "NotMail" and "IMAP Adapter" on the classic Zope site. The latter two seem to have been unmaintained for quite a while. Does anybody use the old IMAP Adapter successfully with Zope 2.2.x or know an alternative solution? We are working on an integrated groupware solution (it will all be open sourced) and want to either store all documents (incl. mail) in a single Zope-based storage or at least simulate that by dynamically wrapping the mails into objects (similar to what Local_FS does with files on the file system). Thanks in advance! Joachim. -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] IMAP and Zope!
Thanks for the input I got! Just a small wrap-up of what I learned: - The NotMail and old IMAP Adapter code don't seem to be seriously used by anybody - WorldPilot could be a solution, but it only if it was more modular. Ryan Hughes promised to integrate it into Zope by release 2 (incl. a ZODB-based document storage - There is a similar project by Morten W. Petersen that also will feature a ZODB-based message storage that will be searchable, Catalog-aware etc. Joachim. -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de --- -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] LDAP won't work - yes I've applied the patch
I also don't get the LDAP Methods to work, even tried on 2.1.6. The test tab works as usual, but when I use them in DTML I don't have success either. Can anybody who got them working please try to explain the syntax step by step? The provided examples don't work for me. That's what I do: 1. I have a working LDAP Connection 2. If I create an LDAP method ("ldapmethod") with the argument "sn" and the filter "sn=" I get the correct result with the test tab. 3. I try to use the method in DTML: , This raises an Error Type: KeyError Error Value: sn The strange thing is that the method itselfs seems to work but passes no data: If I just use . then the number of "." equals the number of entries the method should pass. Also, results in things like "[, ]", again the number of empty elements is correct, they just shouldn't be empty ... __ Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] What happened to the Zope IE Editor effort?
Hi! I just got reminded of the Zope Internet Explorer WYSIWYG editor. It still can be found at http://www.zope.org/Members/johanc/ZIE ... and for anybody using IE 5.x it is a very cool thing, even if it is just intended to be a basic demo. I'd like to know if anybody is still working on that thing/actively using it? As far as I remember, the project was somewhat halted because it was a parallel effort to the Mozilla-based Zope Studio. But then, Zope Studio is also not very actively worked on, and Mozilla is still not ready for prime time ... To have a "plug-in" WYSIWYG HTML editing widget for both IE and Netscape/Mozilla would be an important improvement for the content management functionality of Zope. I've seen a couple of similar tools around, and it doesn't seem to be impossible to implement this for the two main browsers (and let an automatic browser detection do the rest). Anybody interested? Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] ZODB question: get older object versions without undo
Hello Philipp! > 1. Since ZODB does not overwrite objects on change one can get the older versions >when undoing the changes. > My question now: how can I access older versions of objects without undoing >transactions? (I had a short glance at the ZODB classes, but found nothing) The code for the History functionality is in History.py, which is located in the .../lib/python/OFS directory of a Zope 2.2.x installation. It is currently used by DTMLDocument .py and DTMLMethod.py (both also in OFS) and implements the history tab functionality for the management interface. As the actual implementation is plain simple (import History, add "History.Historical" to the class definitions and "+History.Historical.manage_options" to the manage_options), I patched my Image.py, which defines the classes for images and files, accordingly. The only thing that won't work right "out of the box" is the "Compare" option - you'd have to implement document-specific comparison code. I don't know if it is that easy to do the same patch with ZClasses, but it might be worth a try (I guess patching the necessary base classes should work). As you can script everything in the management interface, this patch makes all your file/image objects' old versions accessible, including date of change and id of the person who changed. I think it would also be possible to look at what History.py is doing and implement the functionality you need without the "overhead" of patching the object classes. I didn't check in detail, but all you need seems to be there (or should be found in some ZODB documentation). Regards Joachim. Content-Type: text/html; name="unnamed" Content-Transfer-Encoding: 7bit Content-Description: -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Content Management System
>> I'm beginning to wonder if > > content management and system administration should be split out into > > separate subsystems. Or if a CMS Tool Kit should be developed. (workflows, > > syndication, etc...). We (iuveno) are currently preparing a major project to write a full-featured CMS on base of Zope. The first client will be a university, but the system will also be usable in commercial environments, and it will be open source from the first day on (except for the client-specific stuff of course). The first draft of the general architecture is as follows: There is a ZClass- or Python-product-based toolkit that provides the standard functionality, like base classes, workflow logic, etc. Plugin ZClasses implement the actual organization logic, so you can choose between building a university, a sports club, or maybe a consulting business by just choosing the corresponding modules. Chromes (logos, stylesheets, ...) and Views (page layouts) are also implemented as plugins. There will be a full-fledged workflow/project management component (at least in the long run). The concept will build upon ideas from the PTK and the ZDP-tools. There is a very simple prototype we will make public after some clean-ups. We are checking at the moment if we should set up a now project homepage or wiki or join an existing effort like the ZDP-tool-based initiative of Maik Röder on or the PTK. BTW: My experience with "dumb users" working with the Zope interface is quite positive. As long as they just have to add, change or delete predefined objects it doesn't seem to be that bad. They just shouldn't have to know about DTML or even acquisition. Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Non-existing Zope-Security!!!
> Create the user in the top level folder that they are allowed to > see. > Not in the /www folder That alone wouldn't do it if we are talking about "seeing the objects", e.g. by calling the "objectIds" method in the root folder. You also have to switch off the root folder's "Access contents information" rights for Anonymous and the sub-tree managers. I think Zope security is really a bit weak here because the standard settings are NOT blocking "Access contents information" and blocking it makes programming a bit harder ... BUT: You CAN configure it correctly if you want to. Joachim -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Does anybody work on a database adapter for SAP DB?
Hello! I'd like to know if anybody is working on a database adapter for the SAP DB. Some background info: The SAP DB is a version of Adabas D that was bought by SAP for use with their enterprise software R/3 a couple of years ago. It's an enterprise-level, fast relational database with transaction support, stored procedures, subselects, and the like. And: It's under the GPL now! The binaries are up already on http://www.sabdb.org - source is going to be published soon. SAP provides three Python modules to - access the database using SQL - manage the database - manage the replication manager of the DB That means building a DA should be straightforward (I just don't know if the modules are threadsafe already ...). Any feedback welcome ... Joachim -- Iuveno - Smart Communication Joachim Werner _ Marie-Curie-Straße 6 85055 Ingolstadt Tel.: +49 841/90 14-325 (Fax -322) Mobil: +49 179/39 60 327 E-Mail: [EMAIL PROTECTED][EMAIL PROTECTED] WWW: www.iuveno.de/www.iuveno-net.de ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Web mail with POP3
Look at Morten Petersen's ZopeGUM project (http://www.zope.org/Members/morphex). It has POP3. The interface is still more or less missing, but Morten is advancing quite well ... Also see my comments below ... Joachim - Original Message - From: Aleksander Salwa <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 16, 2000 9:28 AM Subject: [Zope] Web mail with POP3 > I need to build a web mail product with pop3 back-end. > There is WorldPilot, but AFAIK it has no pop3 support. > I'm thinking about taking web inteface/application design from WorldPilot > and writing code to talk to pop3 server (probably based on POPMail > product). > Is this a good approach, or someone already has wrote something like this > for Zope ? WorldPilot is completely IMAP-centric. The users are authenticated against the IMAP server, and all mail data is stored there. The frontend code is NOT really IN Zope, but just published VIA Zope. So integrating POPMail with WorldPilot is virtually impossible . You might of course reuse the design and HTML code from WorldPilot ... ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Reasons for Apache?? SSL?? (was "Running Mailman CGI under Zope ZServer")
> how to. This works well and Apache serves Zope pretty well and we can even > use SSL (there are some issues to be resolved that I suspect are due to > misconfiguration on our server). However, I can always access Zope directly > using port 8080 (or whatever port where ZServer is listening to) without > SSL. > > This is aboviously not the intended behaviour. Is there a way to prevent > this? I know there is ZServerSSL but isn't the whole point of using Apache > that it is a better and more robust web-server than Zserver? (apart from the > fact that we need to serve a lot of static content as well). > > What are the main resons for serving Zope behind Apache? A lot of Zope sites (including www.zope.org itself) actually use Apache only as a proxy server, i.e. Apache doesn't SERVE the content, but just relays requests to ZServer (you'd need the SiteAccess product on the Zope part for this configuration option). So you can have different Zope servers serve parts of the same web site, use Apache to set up virtual servers, or easily set up SSL for parts of your site. Apache can then also be used to serve static parts of your web site, like large documents or images. Also, Apache can be used to cache Zope requests. ZServer (with or without Apache as a proxy) is definitely faster than any other option (FastCGI, ...). Regarding your problem: Set up a simple packet filter firewall (most Linux distros have scripts for that, e.g. SuSE has "firewals") and don't allow access to port 8080. Cheers Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] RE: ANNOUNCE Zope 2.2.3 release...
> FYI - someone has noticed a problem with the posted > 2.2.3 release that needs looking into, so I've unlisted > it for the time being. I'll send out a note and re-list > it after we dig into this a bit... Oh no, not this one again ... How good that I learned my lesson from the infamous 2.1.x series, when you always replaced or withdrew the latest bugfix release due to "some errors" right after we had updated all our servers ... What about having a "beta" phase for every release, even the x.x.x ones? Cheers, Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: [Zope-PTK] mynetscape-like product
On Tuesday 26 December 2000 21:53, albert boulanger wrote: > Dose anyone have a product or modification to the user's page in the > PTK to behave like the user customizable layout you get at sites like > mynetscape.com? This would work with RSS and OCS syndication sources > (as well as others). We at iuveno have something like that from a recent project, but it is not ready for prime time yet. The basic page layout works, but RSS-integration and customization forms are still missing. Keep asking us! Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Tux & Zope?
> Are you sure Tux will help in conjunction with Zope ? AFAIK Tux can only > handle static html pages and nothing more. Any request to dynamic pages > (and I wold consider any Zope powered system being 100% dynamic) has to > be passed to another (user-level) webserver. So IMHO in the case of Zope > this would be no improvement at all. > > But that's just my thoughts, please correct me, if I'm wrong. Yes, Tux can only serve static content, but images in dynamically created HTML pages behave exactly the same as images in static web sites. How should the web browser know that a page was served by a dynamic server? It gets every single image by sending a new HTTP request. So of course the images (and all other static stuff like sound files, PDF documents etc.) can be served by Tux after the corresponding HTML page was served by Zope! Cheers, Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] ZDESIGN IDEAS = How to improve 'manage' ?
> > - You can work with full SSL-encryption, maybe even client certificates. > >This is much more secure than TELNET or FTP. (Unfortunately, SSH/SCP, > >while being the "better TELNET/FTP" is not always an option, and it > >always opens up more than necessary) > > what exactly does SSH open uo 'more than necessary'. Sufficient clue on > admin's side provided? Of course, "suficient clue on admin's side provided", you are right. But I don't know too many cases of perfectly secure configurations ... > > - People won't hack together their own solutions for the problem (with > >LocalFS installed and me having the rights to add LocalFS instances, > > it would take me not very long to "infiltrate" any Zope server. Just add > > the "Extensions" folder via LocalFS and upload all you need as External > > Methods ...) > > That requires a few things, if I am not mistaken... > > a) ZServer runs as anything but nobody/nogroup and is not >jail(8)ed/chrooted. If that is the case, well, I'd personally shoot >the admin responsible for that if something comes up. > > b) ${ZOPEROOT}/Extensions allows nobody to write into it - shoot admin. Again you are right, but as Zope is really easy to install, I'd guess that it is not only used (and installed) by "uberadmins" who know exactly what they are doing ... Joachim ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: [Zope-dev] Re: [Zope] ZDESIGN IDEAS = How to improve 'manage' ?
On Tuesday 09 January 2001 15:41, Martijn Pieters wrote: > On Mon, Jan 08, 2001 at 12:18:37PM -0500, Mohan Baro wrote: > > Are you planning a manage_install for products? > > The ability for superusers to install complelte products directly through > > the management interface, no need for ftp. > > similar to import/export feature > > I hope not! > > Anyone gaining management access to your Zope server will be > able to install arbitrary products on your server and gain access to the > file system. > > There is a strict dividing line between the file system and the ZMI, > allowing installation through the web interface will cross that line with > one giant step. I think this is a political one. For me, the things that are really valuable on a web site are the data and the user information, which both are available through the web interface. At least if Zope runs as a user and has its own home directory, the additional damage that can be caused by people with file system access is not very high. O.k., they can shut down my server. They can do that by using "manage_shutdown" from the web anyway. Same with deleting all data on the server. IMHO a well-designed "over-the-web" installation concept would make Zope MORE secure, not less e.g.: - You can work with full SSL-encryption, maybe even client certificates. This is much more secure than TELNET or FTP. (Unfortunately, SSH/SCP, while being the "better TELNET/FTP" is not always an option, and it always opens up more than necessary) - People won't hack together their own solutions for the problem (with LocalFS installed and me having the rights to add LocalFS instances, it would take me not very long to "infiltrate" any Zope server. Just add the "Extensions" folder via LocalFS and upload all you need as External Methods ...) Cheers, Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Holiday Calendar anyone? (cont.)
> Doesn't have to be a Zope product. Not even Python for that matter. Just as > long as it is possible to _integrate_ with a zope site. Depends on WHEN you need it ... By end of January/early February we'll have a groupware thingy ready that will do things like holiday planning etc. (and much more ...) Joachim ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] List of New products
On Wednesday 10 January 2001 10:04, Francois-regis Chalaoux wrote: > It was a great idea to get the list of product sort on date in download > zone. Today appears only categories and product annonced in news. > > So, is it a maintenance period or a stable presentation of products ? There is a link on the left ("All Products") that gives you back the full list. But I had to search for it, too ... Cheers, Joachim ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] log file.
> Is the Zope log file in Common Log File Format? Yes. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] logging: Can I switch it off?
(How) Can ZServer logging be switched off? Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] href on a local file
Hi! > documentation, I couldn't find any about the Zope internals. Does anybody > know where to look for such documentation? a) The code itself is quite well-documented ;-) b) There are documents on zope.org on how the ZODB works and on programming Database Adapters; I guess there is even more, but well-hidden ;-) c) Always try the zdp.zope.org (Zope Documentation Project) site for more stuff > script. I'd like to avoid that, because with our zillion images this would > bloat the database pretty much. > in the dtml. If I understand it right, the product "Local File System" > would be a possibility to do that. Is it the right way to go, or does > anybody have a better / other solution? There is a product called ExtFile/ExtImage that does exactly what you need. But you could also build your own solution very easily, e.g. using Apache (or the new Tux webserver for extra performance ...) to serve the images and just manage the upload via Zope/LocalFS. > BTW: I read about dropping external python modules in some future version > of Zope. For us, the main point with Zope is, that you can build a web > front end for a bunch of python modules we have. Thus, from our point of > view, the dtml-binding possibility to python modules is essential. There is a tendency towards making more stuff available over the web (e.g. "replacing" External Methods by web-manageable "python scripts". This might make External (Python) Methods more or less unnecessary (BTW: Most of them could just be uploaded to Zope/the ZODB). But the full-fledged Python Products (or modules) you put into the Products folder will definitely not go away soon. That's how most of the major Zope applications are developed. Cheers, Joachim iuveno AG Smart Communication ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Problem with zope.org?
Hi! I'm getting this or similar errors quite frequently these days: Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request GET /foo. Reason: Document contains no data Additionally, a 502 Bad Gateway error was encountered while trying to use an ErrorDocument to handle the request. Apache/1.3.12 Server at www.zope.org Port 80 This seems to be a problem with zope.org, not my local stuff. Cheers, Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] MySQL connection string.
Indra Gunawan wrote: > Hello, > could anyone tell me how to make connection string to MySQL in Linux? > I use Zope 2.3 and I've tried the > > database@[host] username password This should work. Your problem is probably somewhere else. Are you sure that the database adapter, database etc. are all set up correctly? Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] How can a document know its own URL?
> > Can anyone tell me how to use DTML to get at the URL for the document > being displayed? > Sometimes, things can be so easy ;-) Joachim. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )