Update of /cvsroot/modeling/ZModeling/ZModelizationTool/dtml
In directory sc8-pr-cvs1:/tmp/cvs-serv2635/ZModelizationTool/dtml
Modified Files:
ZModelizationTool_addForm.dtml explainModelizationTool.dtml
model_properties.dtml
Log Message:
ZModelizationTool:
- model's props page update: Oracle supported in core.
- Added the ability to load PyModels
- Removed the useless contraints on the 'id' which formerly should be
equal to 'modelization_tool'
- Added a security warning: the ZModelizationTool product may be
dangerous in a production environment.
Index: ZModelizationTool_addForm.dtml
===================================================================
RCS file: /cvsroot/modeling/ZModeling/ZModelizationTool/dtml/ZModelizationTool_addForm.dtml,v
retrieving revision 1.1.1.1
retrieving revision 1.2
diff -C2 -d -r1.1.1.1 -r1.2
*** ZModelizationTool_addForm.dtml 30 Jul 2002 15:35:02 -0000 1.1.1.1
--- ZModelizationTool_addForm.dtml 7 Sep 2003 13:51:43 -0000 1.2
***************
*** 3,10 ****
<BODY BGCOLOR="#FFFFFF" LINK="#000099" VLINK="#555555">
<H2>Add Modeling Tool</H2>
<form action="manage_addZModelizationTool"><table>
<tr><th>Id</th>
! <td><input type=hidden name=id value="modelization_tool">
! <code>modelization_tool</code>
</td>
</tr>
--- 3,20 ----
<BODY BGCOLOR="#FFFFFF" LINK="#000099" VLINK="#555555">
<H2>Add Modeling Tool</H2>
+ <p><table><tr>
+ <td><font color="FF0000">Security Warning!</font></td>
+ <td>
+ Please do not leave the <tt>ZModelizationTool</tt> product in a
+ production environment, especially now that it can load PyModel: PyModels
+ are evaluated through an <tt>exec</tt> statement, hence leaving the product
+ in a production environment may be a security hole (if you have ideas on how
+ this can be correctly handled, please
+ <a href="mailto:sbi...@us...">contact the maintainer</a>).
+ </td></tr></table>
+
<form action="manage_addZModelizationTool"><table>
<tr><th>Id</th>
! <td><input type=text name=id value="modelization_tool">
</td>
</tr>
Index: explainModelizationTool.dtml
===================================================================
RCS file: /cvsroot/modeling/ZModeling/ZModelizationTool/dtml/explainModelizationTool.dtml,v
retrieving revision 1.1.1.1
retrieving revision 1.2
diff -C2 -d -r1.1.1.1 -r1.2
*** explainModelizationTool.dtml 30 Jul 2002 15:35:02 -0000 1.1.1.1
--- explainModelizationTool.dtml 7 Sep 2003 13:51:43 -0000 1.2
***************
*** 7,10 ****
--- 7,21 ----
</p>
+ <p><table><tr>
+ <td><font color="FF0000">Security Warning!</font></td>
+ <td>
+ Please do not leave the <tt>ZModelizationTool</tt> product in a
+ production environment, especially now that it can load PyModel: PyModels
+ are evaluated through an <tt>exec</tt> statement, hence leaving the product
+ in a production environment may be a security hole (if you have ideas on how
+ this can be correctly handled, please
+ <a href="mailto:sbi...@us...">contact the maintainer</a>).
+ </td></tr></table>
+
<hr>
<h3>Managed Models</h3>
***************
*** 41,49 ****
<td align=center valign=top>
! <h3>Import a model from XML</h3>
<form action="manage_importModel" method="post" enctype="multipart/form-data">
<input type="file" name="file" size="25" value="" /><br>
<input type="submit" value="Import">
</form>
</td>
</tr>
--- 52,62 ----
<td align=center valign=top>
! <h3>Import a xml-model or a PyModel</h3>
<form action="manage_importModel" method="post" enctype="multipart/form-data">
<input type="file" name="file" size="25" value="" /><br>
<input type="submit" value="Import">
</form>
+ <b>Note:</b> to be successfully imported a pymodel should define a global
+ variable <tt>model</tt> containing the PyModel.
</td>
</tr>
Index: model_properties.dtml
===================================================================
RCS file: /cvsroot/modeling/ZModeling/ZModelizationTool/dtml/model_properties.dtml,v
retrieving revision 1.10
retrieving revision 1.11
diff -C2 -d -r1.10 -r1.11
*** model_properties.dtml 12 Jun 2003 00:28:25 -0000 1.10
--- model_properties.dtml 7 Sep 2003 13:51:43 -0000 1.11
***************
*** 22,26 ****
<th align="left">adaptorName</th>
<td><input type="text" name="adaptorName" value="&dtml-adaptorName;"/></td>
! <td align="left"><font size="-1">Currently supported: Postgresql, MySQL, SQLite (exact typo!!)</font></td>
</tr>
<tr>
--- 22,26 ----
<th align="left">adaptorName</th>
<td><input type="text" name="adaptorName" value="&dtml-adaptorName;"/></td>
! <td align="left"><font size="-1">Currently supported: MySQL, Oracle, Postgresql, SQLite (exact typo!!)</font></td>
</tr>
<tr>
|
