... Just in addition: sorry for coming back with this again, but it seems there still is a small bug in the current tree here. I've further investigated with...
3758
dr_frank_hoffmann
dr_frank_hof...
Jan 18, 2012 9:59 pm
FYI: it seems that the problem is due to this change of zope.browserresource: http://zope3.pov.lt/trac/changeset/115596 The following workaround might solve...
3759
Sebastian Tänzer
taenzermedia
Jan 26, 2012 4:07 pm
Hello fellow ZMs users, I'm generating a Google sitemap using the code from...
3760
Thorsten Weber
frost_helm
Jan 26, 2012 4:17 pm
Hi Sebastian, i noticed that too ... i think this comes from empty folders which have only subfolders but no content (?) and if you like to have declarative...
3761
Sebastian Tänzer
taenzermedia
Jan 27, 2012 9:22 am
Could you explain that preview flag a bit more? filteredtreenodes generated declarative urls just fine here without this. best, sebastian ... Could you explain...
3762
Thorsten Weber
frost_helm
Jan 27, 2012 9:44 am
Hi Sebastian, well, I saw that in your code example ... but i noticed that the code listed at zms-publishing does not render declarative urls out of the box. ...
3763
Niels Dettenbach
ndettenbach
Jan 27, 2012 9:55 am
... Here too: http://www.syndicat.com/open_source/zope_und_zms/zmsgooglesitemap/ It generates URLs as configured for the regarding zms instance. best regards, ...
3764
Sebastian Tänzer
taenzermedia
Jan 27, 2012 10:12 am
Hi Niels, any idea about the double output of some folders? Best, Sebastian...
3765
Niels Dettenbach
ndettenbach
Jan 27, 2012 10:33 am
... ...not yet, as i can't reproduce this (at least with my published version). Will check this (i.e. if it relies on some hidden folders or something like ...
3766
Sebastian Tänzer
taenzermedia
Jan 27, 2012 11:12 am
I found the problem: getHref2IndexHtml() generated the URL of the next child if the parent doesn't have any content (i.e. there's only folders in there). I...
3767
Thorsten Weber
frost_helm
Jan 27, 2012 11:36 am
Hi Sebastian, that´s what i thought ... thanks for sharing the script - works perfect for me! a way to optimize might be to build the list of folder_types...
3768
Sebastian Tänzer
taenzermedia
Jan 27, 2012 12:04 pm
Hi Thorsten, great to hear. I thought about the dynamic generation which actually isn't too hard to do: request = container.REQUEST response =...
3769
Sascha Gottfried
sascha.gottf...
Feb 1, 2012 5:51 pm
Hi ZMS developers, I read this thread and thought generating this sort of information should be possible mostly using ZMS API methods. The aspect of multiple...
3770
Thorsten Weber
frost_helm
Mar 15, 2012 1:44 pm
Hallo Developers, i just found an issue with the usage of localfs_command with non-admin users like ZMSAuthor: It seems as if a script (like onChangeObjEvt) is...
3771
Niels Dettenbach (Syn...
ndettenbach
Mar 15, 2012 2:19 pm
... Hash: SHA256 ... hmm, such things are usually done inn Zope by assigning proxy roles to the accessing method etc.. Another way could be setting up an own...
3772
Thorsten Weber
frost_helm
Mar 15, 2012 2:36 pm
Hi Niels, that does the trick ! :) i forgot that one can assign the proxy role manager to the onChangeObjEvent methode as well. thanx ! kind regards, Thorsten...
3773
Sascha Gottfried
sascha.gottf...
Apr 3, 2012 11:07 am
Hi Niels, what you did as well is giving a script all zope permissions available. This script is available for anybody in the web. With this script you access...
3774
Niels Dettenbach
ndettenbach
Apr 3, 2012 12:19 pm
... ...shure it does - so it is very (!) important to know what the script does and allows by theory and in practice... ... Can you give some more details or...
3775
Sascha Gottfried
sascha.gottf...
Apr 3, 2012 2:15 pm
Hi Thorsten, Zope Products (in your case: ZMS) offer an API that is available to restricted code if the required permission can be acquired in the request...
3776
Niels Dettenbach (Syn...
ndettenbach
Apr 3, 2012 5:05 pm
... Hash: SHA256 ... Ok, this - shurely - did not makes sense from a security perspective view and disabling that was the right way to react here. My...
3777
Thorsten Weber
frost_helm
Apr 4, 2012 7:52 am
Hello Sascha, thanks a lot for your detailed and very insightful explanation! and you are probably right concerning the exception - which might be raised...
3778
Sascha Gottfried
sascha.gottf...
Apr 4, 2012 7:59 am
Hi Niels, your comparison of zope proxy roles with unix suid made me really curious. I need to think about what I read online. A difference is definitely that...
3779
Thorsten Weber
frost_helm
Apr 12, 2012 2:29 pm
Hello again, I just proceeded as suggested by Sascha and activated verbose-security ( zope.conf, line 622 ) security-policy-implementation python ...
3780
Sascha Gottfried
sascha.gottf...
Apr 16, 2012 3:08 pm
Hi Thorsten, your traceback has no details about the line of YOUR code that is raising this traceback. A full traceback is usually in event.log in the...
3781
Sascha Gottfried
sascha.gottf...
Apr 18, 2012 1:55 pm
An additional note to my fist reply. I did setup a clean Zope 2.13.13/ZMS 2.13.4 using zc.buildout. I enabled verbose-security and the python security...
3782
Thorsten Weber
frost_helm
Apr 19, 2012 1:55 pm
Hi Sascha, first of all - thank you so much for your efforts and explanations! this really opens a door for me... my first post was more a guess than knowledge...
3783
Sascha Gottfried
sascha.gottf...
Apr 19, 2012 4:07 pm
Hi Thorsten, 1) please add the source code for http://myObj_url/FS_home.xml Is it a more python script or DTML method? 2) Explain your need for using...
3784
Thorsten Weber
frost_helm
Apr 20, 2012 7:50 am
Hi Sascha, 1) FS_home.xml is a dtml-methode which generates a xml-file to tell a flash app to load external resources in the backend there are various...
3785
Niels Dettenbach (Syn...
ndettenbach
Apr 20, 2012 8:42 am
... Hash: SHA256 ... ...just a small btw: I usually put such things which must hardly/directly interact with the local OS and/or fetching external ressources...
3786
Sascha Gottfried
sascha.gottf...
Apr 23, 2012 7:06 pm
Hi Thorsten, XSS or Code Injection are common to scripts that process user supplied data. You know if this is true for your scripts. If true - you can tell us...
