Plone | The Plone CMS : root integration package

 by   plone Python Version: 6.0.4 License: No License

kandi X-RAY | Plone Summary

kandi X-RAY | Plone Summary

Plone is a Python library. Plone has no bugs, it has build file available and it has low support. However Plone has 18 vulnerabilities. You can download it from GitHub.

The Plone CMS: root integration package
Support
    Quality
      Security
        License
          Reuse

            kandi-support Support

              Plone has a low active ecosystem.
              It has 214 star(s) with 47 fork(s). There are 190 watchers for this library.
              OutlinedDot
              It had no major release in the last 6 months.
              There are 1 open issues and 11 have been closed. On average issues are closed in 209 days. There are no pull requests.
              It has a neutral sentiment in the developer community.
              The latest version of Plone is 6.0.4

            kandi-Quality Quality

              Plone has 0 bugs and 0 code smells.

            kandi-Security Security

              OutlinedDot
              Plone has 18 vulnerability issues reported (1 critical, 3 high, 14 medium, 0 low).
              Plone code analysis shows 0 unresolved vulnerabilities.
              There are 0 security hotspots that need review.

            kandi-License License

              Plone does not have a standard license declared.
              Check the repository for any license declaration and review the terms closely.
              OutlinedDot
              Without a license, all rights are reserved, and you cannot use the library in your applications.

            kandi-Reuse Reuse

              Plone releases are not available. You will need to build from source code and install.
              Build file is available. You can build the component from source.
              Plone saves you 0 person hours of effort in developing the same functionality from scratch.
              It has 2 lines of code, 0 functions and 1 files.
              It has low code complexity. Code complexity directly impacts maintainability of the code.

            Top functions reviewed by kandi - BETA

            kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
            Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of Plone
            Get all kandi verified functions for this library.

            Plone Key Features

            No Key Features are available at this moment for Plone.

            Plone Examples and Code Snippets

            No Code Snippets are available at this moment for Plone.

            Community Discussions

            QUESTION

            Buildout - Allow hosts for package download
            Asked 2022-Feb-27 at 11:26

            I have a Plone 5.0.5 deployment and the need the package zc.zrs for ZODB replication. After adding the information to the buildout.cfg, I've added the URL https://pypi.org/simple on the index parameter:

            ...

            ANSWER

            Answered 2022-Feb-27 at 11:26

            The Plone buildout should be able to download from pypi by default. Check if you can download with wget into your download folder:

            wget https://files.pythonhosted.org/packages/5c/b2/5a516f4883fc766ea37a9d979a5cacddc1b29df17140c14da26676a3c4b5/zc.zrs-3.1.0.tar.gz

            You should have a downloads folder in your buildout-cache folder, if you are using the default installer. I do that sometimes when the server has some strange network configurations and can't download some packages directly.

            Source https://stackoverflow.com/questions/71269839

            QUESTION

            Rename Dexterity object (id) after copy
            Asked 2021-Nov-09 at 19:38

            It's simple to choose the object ID at creation time with INameChooser. But we also want to be able to choose the object ID after a clone (and avoid copy_of in object ID).

            We tried several different solutions :

            • subscribers on events :
              • OFS.interfaces.IObjectClonedEvent
              • zope.lifecycleevent.interfaces.IObjectAddedEvent
              • ...
            • manage_afterClone method on content class

            Every time, we get a traceback because we changed the ID "too soon". For example when using Plone API :

            ...

            ANSWER

            Answered 2021-Nov-09 at 19:38

            So unfortunately not...

            But you can access the original object from within _get_id.

            For example:

            Source https://stackoverflow.com/questions/69890262

            QUESTION

            PyPI puzzle: -(Hyphen) and . (Dot) are used in what cases respectively?
            Asked 2021-Sep-19 at 23:03

            You can see projects with names like django-pipeline or django-localflavor on PyPI, but you also see plone.scale.

            The former uses - (hyphen), while the latter uses . (dot).

            If these projects are not well known, then they were probably used randomly and without much thought, but both of these projects are well known, but use different symbols for separating PyPI project names.

            A search for 'PyPi Project Hyphen Dot' did not turn up any information about it.

            Hyphen or Dot, is there a difference between these two usages, and if so, what is the difference? In what cases are they used respectively?

            Special Note: This refers to the name of the release package, not the name of the import package, which cannot use - or . .

            ...

            ANSWER

            Answered 2021-Sep-18 at 03:07

            The . is a way to access submodules of a package. So, plone is the parent package and scale is the submodule. You can read up on it here: https://docs.python.org/3/tutorial/modules.html#packages

            If you've ever used the os module, you'll often do things like:

            Source https://stackoverflow.com/questions/69231254

            QUESTION

            Build views in Plone only with Python?
            Asked 2021-Sep-02 at 15:10

            Is there any way to write a view in Plone using only Python? I found a way for forms, but what else can you build for views ? Without tal expressions

            Link: https://docs.plone.org/4/en/develop/addons/helloworld/extend/form.html

            ...

            ANSWER

            Answered 2021-Sep-02 at 15:10

            You can write a view using Python that generates the HTML you want, without the need for a template.

            Please have a look at https://training.plone.org/5/mastering-plone-5/index.html, specifically https://training.plone.org/5/mastering-plone-5/views_2.html#view-classes

            Generally, it's best to ask Plone questions in our forum, https://community.plone.org

            Source https://stackoverflow.com/questions/69031868

            QUESTION

            Plone 5 custom content types missing in portal navigation
            Asked 2021-Feb-08 at 21:00

            When adding dexterity content types to my Plone 5.3 instance, they do not show up in the portal navigation.

            I tried ttw and with a custom product.

            The catalog is up-to-date. I forced rebuilding with no success.

            The behaviors added to the type are:

            ...

            ANSWER

            Answered 2021-Feb-08 at 21:00

            Layer 8 error.

            After fiddling around with other settings, I remembered that this is actually an option. Under /@@navigation-controlpanel, one can select the content types that appear in the portal navigation.

            Source https://stackoverflow.com/questions/66093350

            QUESTION

            Nginx proxy pass to reverse proxy
            Asked 2020-Sep-15 at 06:11

            I'm fairly new to nginx and stuck with the current configuration.

            I also checked ssl - nginx does redirect, nginx as proxy for web app, nginx proxy_pass, nginx proxy rewrite and another post related to my question.

            I also looked into some other posts which didn't help me right now. I didn't read all of the approximately 21500 posts around the topics nginx and proxy.

            Google also failed directing me to the solution.

            Current setup is:

            [CMS (Plone in LAN)]<--->[Reverse-Proxy (Apache / http://oldsite.foo)]

            This is the old site setup. Basically we need a redesign of the CMS. But it has grown with plenty of dependencies and self written modules by at least two developers (who never met each other). It will be a task for merely a year to get it replaced properly. There is also some weird stuff in the Apache config, so we can't avoid using Apache at the moment.

            Unfortunately we need an optical redesign as soon as we can.

            So we came with the idea to use Diazo/XSLT in Nginx to redesign the old website and show our assessors some results.

            Therefore I try the following setup:

            [Plone]<--->[Apache]<--->[Proxy (XSLT in Nginx / https://newsite.foo)]

            Here is my xslt_for_oldsite config file (Cache-Control only off for debugging):

            ...

            ANSWER

            Answered 2020-Sep-15 at 06:11

            Meanwhile I found the solution.

            Apache sent the data gzipped and sub_filter couldn't handle it (see official documentation: sub_filter).

            Indeed I tried to avoid this by using proxy_set_header Accept-Encoding ""; but it didn't work. The reason is that this part must be set in location context.

            Hence the correct configuration for Ubuntu 20.04 LTS, Nginx 1.14.0 at the time of writing (2020-09-15) is:

            Source https://stackoverflow.com/questions/63847404

            QUESTION

            How are blobs removed in RelStorage pack?
            Asked 2020-Sep-01 at 00:34

            This question is related to How to pack blobstorage with Plone and RelStorage

            Using zodb database with RelStorage and sqlite as its backend I am trying to remove unused blobs. Currently db.pack does not remove the blobs from disc. The minimum working example below demonstrates this behavior:

            ...

            ANSWER

            Answered 2020-Sep-01 at 00:34

            By default, the blob storage directory is used as a cache, storing blob data that also is stored in the database; the idea is that loading blob data from a local disk cache is faster than from a remote database server. Packing in a history-free storage with caching blob storage doesn’t delete unreachable blob files, instead relying on the file size limiter to evict stale cache data when room needs to be made. However, you did not set a size limit, so the cache grows unbounded and those unreachable blob files will live on forever.

            Packing can’t remove blob files here because the cache is local to each ZODB client; it is outside the jurisdiction of the ZODB storage, as it were. This may not be as apparent when using SQLite as the database layer but imagine using Postgres instead, on a separate server, with multiple clients across different computers and you can see that cache clean-up is not feasible when packing.

            Note that the other blob storage option is the shared blob storage, which is probably closer to what you expected this to be: all blob data is stored on disk, not in the database. When used with a remote database server and multiple clients you’d need to place this on something like a NTFS share. Packing operates directly on the blobs in that case and unreachable blob files are removed immediately when you pack.

            You have two options:

            • Set a size limit for the blob cache by setting blob-cache-size. Packing still won’t remove the blob files, but they will be removed when space is running low.

            • Switch to a shared blob cache (set shared-blob-dir to true). For a sqlite-backed RelStorage this probably makes more sense than a caching blob storage, in spite of the dire warnings in the documentation!

            So the easiest change would be to switch blob storage modes:

            Source https://stackoverflow.com/questions/63613502

            QUESTION

            SOLVED: Plone does not checkout a development addon over SVN. Reason: Plone add-ons cannot have dashes in the name
            Asked 2020-Jul-16 at 20:17

            Problem solved: When creating a Plone add-on project, make sure your add-on's name doesn't have any dashes when creating it with Mr. Bob. It took me about 3 hours to figure that out.

            I intend to develop an add-on for Plone. From what I have gathered after reading the manuals, the best way to do so that is compatible with my development tools is by setting up a standalone SVN HTTP server and having Plone checkout my add-on's source code into its own directories.

            Having read that, I started out by installing Mr. Bob and Plone's bobtemplates (pip install mr.bob bobtemplates.plone). Then I created on my SVN server a new directory, checked it out into a new directory in my local filesystem with svn checkout https://192.168.1.10/svn/SVN/plone-test/trunk, and initialized a new project this way:

            ...

            ANSWER

            Answered 2020-Jul-16 at 20:17

            After 3 hours of bashing my head against the wall and re-reading everything for the tenth time, I found on the thread I linked before a suggestion that maybe having a dash in my package name renders it incompatible with pip. After going again through all these steps but with a hyphen-less name, Buildout finally picked up my package.

            I therefore declare this problem solved, and leave this question here on the public interest of making everybody's life easier, since it's very easy to fall into this mistake and figuring it out is not trivial.

            Source https://stackoverflow.com/questions/62926080

            QUESTION

            How I load images in Plone 4.3 with Nginx
            Asked 2020-Jul-15 at 14:02

            I follow this tutorial Plone Deplayoing Nginx and created config file in NGINX:

            ...

            ANSWER

            Answered 2020-Jul-09 at 10:06

            Let's first try to find out if, your Plone is working fine with images. For that you should call it directly without any proxy like nginx in front. If images are working, then we have to fix your nginx config. Trying without your Content-Security-Policy part in nginx, to see if it works without that, would e my next step. Every application works differently, therefor we should focus on what we need for Plone to run. And lucky you, that is not much. If Plone was working in this setup with Squid, than it might be the nginx config. Here are a working one:

            Source https://stackoverflow.com/questions/62736366

            QUESTION

            Listing the title of created items in a choice field of another item in plone
            Asked 2020-Jun-19 at 09:38

            I have a problem with my Plone item I cannot solve. 'Car' is supposed to create a list of all instances of 'Colour'. All 'Colour' instances are in a given container. I cannot make it static because I want to add more 'Colour' instances in the future. I tried selecting each item in my container and add it to my vocabularylist. I only need the id/title of my object, but I always end up with a giant stacktrace of failures. In the end I want to choose a colour out of the given instances on creating a new 'Car' instance similar to a dropdown. I have read the docs but cannot find a solution and this is my best idea. I am also not a python programmer and this is my first plone project. I can add the complete failure list later if you need it.

            I appreciate every bit of help. Thank you.

            ...

            ANSWER

            Answered 2020-Jun-19 at 09:38

            Please always add your traces, so that we can help you better. There is also the official community.plone.org forum, where are more people can help you.

            I recommend you to use the plone.api to find your objects, this is a bit easier and well doumented.

            something like this:

            Source https://stackoverflow.com/questions/62446628

            Community Discussions, Code Snippets contain sources that include Stack Exchange Network

            Vulnerabilities

            Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.
            Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
            Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).
            The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user. System using the plone docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
            An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
            CVE-2020-7941 CRITICAL
            A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.
            An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site.
            Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unspecified input in the (1) browser_id_manager or (2) OFS.Image method.
            Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5.
            Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method.

            Install Plone

            You can download it from GitHub.
            You can use Plone like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.

            Support

            For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .
            Find more information at:

            Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items

            Find more libraries
            CLONE
          • HTTPS

            https://github.com/plone/Plone.git

          • CLI

            gh repo clone plone/Plone

          • sshUrl

            git@github.com:plone/Plone.git

          • Stay Updated

            Subscribe to our newsletter for trending solutions and developer bootcamps

            Agree to Sign up and Terms & Conditions

            Share this Page

            share link