Re: [Zope] Zope-2.8.1, LocalFS, and the importance of _p_jar

2005-11-23 Thread Chris Withers

John Ziniti wrote:

The problem I have with my "solution" is that I have
no clue what _p_jar is.


It's all to do with ZODB persistence. I'm not sure why the wrapper was 
ever given a _p_jar, it's probably not a good idea, but then LocalFS is 
very old but was very good at the time, so there's likely to be a good 
reason for it to be there :-S


I dunno, try contact Jonathan Farr, the product's author and see if he 
can remember. Other than that, maybe ask on zodb-dev@zope.org about any 
problems you may experience from removing it :-S


My wories aren't so much about persistence, but whether these wrappers 
will play nicely with the transation framework without a _p_jar. They 
should, but I wouldn't want to bet on it...


good luck!

Chris

--
Simplistix - Content Management, Zope & Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] DateTime mess

2005-11-23 Thread Chris Withers

Hi Jürgen,

Many thanks for even thinking about looking at the DateTime debacle ;)

Jürgen Herrmann wrote:

Well, that would be cool. Just a question: How do you plan to keep and
verify backwards compatibility? Any database, with any type of
DateTime object, must work transparently.


100% compatibility isn't desireable, because its broken atm ;P


Well yes, but you don't want to force people to change in an unpleasant 
way. From what I can see, DateTime _should_ just be a lightweight 
wrapper around Python's datetime.datetime to add the extra formatting 
commands, helper methods and zodb persistence.


However, it isn't, and I don't think changing it to be so is the way to go.

What I _would_ like to see is a new package that works with both Zope 3 
and Zope 2 and offers exactly this. We could advocate switching to this, 
with DateTime becoming deprecated and removed in, say, Zope 2.10.


I wonder if Zope 3 has something that meets these needs already? Perhaps 
you could have a dig and find out on [EMAIL PROTECTED]


cheers,

Chris

--
Simplistix - Content Management, Zope & Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Does ZWiki compromise Win2003 security behind a firewall?

2005-11-23 Thread Jens Vagelpohl


On 24 Nov 2005, at 00:00, Bill Bell wrote:



Yes or no.

OK, I know it's not that simple. I am working in an agency that  
employs a third party to manage our network. The third party is  
reluctant to install Zope and ZWiki for me, claiming that this will  
open "the system" to "potential attacks".


The wiki would be for use by agency personnel only and be available  
on a non-routable address, behind a firewall.


Could someone tell me how this could be a security risk?


It cannot. The people who claim that are, to put it mildly, clueless.  
It looks like they are operating on the typical principal of "I don't  
know it, so I don't like it".


jens


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Does ZWiki compromise Win2003 security behind a firewall?

2005-11-23 Thread Bill Bell

Yes or no.

OK, I know it's not that simple. I am working in an agency that employs a third 
party to manage our network. The third party is reluctant to install Zope and 
ZWiki for me, claiming that this will open "the system" to "potential attacks".

The wiki would be for use by agency personnel only and be available on a 
non-routable address, behind a firewall.

Could someone tell me how this could be a security risk?

Thanks for any ideas.

Bill

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] init.d script and out of place instances

2005-11-23 Thread Jens Vagelpohl


On 23 Nov 2005, at 23:59, Fernando Martins wrote:



Hi,

As far as I can see and tried, the zope2.8 script only deals with  
instances

which are created in the default instance directory,
/var/lib/zope2.8/instance/.

I would prefer to keep a specific instance of zope in a different  
directory,
together with other related directories, e.g. files from LocalFS.  
That is, I
prefer to have all directories of the application, zope or not,  
under a

common directory. Is there anything wrong with this approach??

I tried to symlink into the instance into /var/lib/zope2.8/instance  
but the
start script fails. BTW, where are the messages logged? (I'm  
running Ubuntu)


Is there any solution? Is this specific to the distribution?


Zope itself does not ship with an init.d script. So yes, this is most  
likely a distribution/packaging issue that should be brought to the  
packagers' attention.


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] init.d script and out of place instances

2005-11-23 Thread Andreas Pakulat
On 23.11.05 23:59:34, Fernando Martins wrote:
> As far as I can see and tried, the zope2.8 script only deals with instances
> which are created in the default instance directory,
> /var/lib/zope2.8/instance/.

That could be, I don't have Zope2.8 installed here...

> I would prefer to keep a specific instance of zope in a different directory,
> together with other related directories, e.g. files from LocalFS. That is, I
> prefer to have all directories of the application, zope or not, under a
> common directory. Is there anything wrong with this approach??

Not necessarily.

> I tried to symlink into the instance into /var/lib/zope2.8/instance but the
> start script fails. BTW, where are the messages logged? (I'm running Ubuntu)

What messages do you mean? The ones that you see when you run
/etc/init.d/zope start? I don't know about Ubuntu, but on Debian those
are only logged when the scripts are run during bootup. These are put
into /var/log/boot by the bootlogd. Errors that each instance produces
should be in the log files in $INSTANCE_HOME/log

> Is there any solution?

Sure built Zope from Source and run mkzopeinstance with a full path.

> Is this specific to the distribution?

Not specific to Ubuntu, but I guess specific to distribution-packages of
Zope. You'll find that many Zope-People rather built Zope themselves
than relying on distribution packages. There were (are?) some issues
with the distribution packages and with the packagers not doing their
job right, or trying to do "too much"...

Andreas

-- 
Excellent time to become a missing person.
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] init.d script and out of place instances

2005-11-23 Thread Fernando Martins

Hi,

As far as I can see and tried, the zope2.8 script only deals with instances
which are created in the default instance directory,
/var/lib/zope2.8/instance/.

I would prefer to keep a specific instance of zope in a different directory,
together with other related directories, e.g. files from LocalFS. That is, I
prefer to have all directories of the application, zope or not, under a
common directory. Is there anything wrong with this approach??

I tried to symlink into the instance into /var/lib/zope2.8/instance but the
start script fails. BTW, where are the messages logged? (I'm running Ubuntu)

Is there any solution? Is this specific to the distribution?

Regards,
Fernando


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: External Methods, Proxy Roles, and Executable Security

2005-11-23 Thread Dieter Maurer
Tres Seaver wrote at 2005-11-22 16:51 -0500:
> ...
>The actual problem here is a confusion of "authorization" with
>"containment constraints":  the CopySupport code is using a single check
>to test both, which makes it impossible to do the Right Thing (TM):
>either the proxy roles should be taken into account, in which case the
>containment constraint may be violated, or they shouldn't, in which case
>a proxy-role-granted script cannot be used to perform a "controlled"
>paste which would otherwise not be authorized.

Not sure that I follow you:

  In my view, "all_meta_types" can be used to enforce
  "containment constraints". "CopySupport" handles this
  it a perfect fashion.

  After this "containment constraints" check, it
  checks that the copying/moving/renaming user has the
  right to add the object in the destination folder
  (it fact, it checks that the creating action can be traversed to,
  which is a bit different and fails when the action contains a
  query string).
  Modern versions take proxy roles into account.

  The problem is that trusted code lacks a means to
  set proxy roles -- thus, it cannot do what untrusted
  code with appropriate proxy roles can.


-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope-2.8.1, LocalFS, and the importance of _p_jar

2005-11-23 Thread Dieter Maurer
John Ziniti wrote at 2005-11-22 13:26 -0500:
>I've encountered the issue described here:
>
>http://mail.zope.org/pipermail/zope/2005-August/161120.html
>
>on a recently upgraded Zope using LocalFS.  I have tracked
>down the issue to the fact that the object that LocalFS
>"hands" to ZODB is a WrapperObject, and this object does
>not have an oid.  This raises an AssertionError during
>the _commit method of ZODB.Connection.

Congratulation!

>
>The problem I have with my "solution" is that I have
>no clue what _p_jar is.

It is the ZODB connection a persistent object was
loaded from.

Only a persistent object (which come from the ZODB) should
have it. Non persitent wrappers should lack it.

-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Spam] Re: [Zope] HTML to PDF.

2005-11-23 Thread Fernando Lujan

Asad Habib wrote:
Fernando. There is a python equivalent of the PHP script HTML_ToPDF.php 
that you can use as well. And it's free as well!


Thanks Asad. I already downloaded it... How can I use it passing a HTML 
file and returning a PDF to the browser? Did you already work with it?


Thanks.

Fernando Lujan
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Asad Habib

Absolutely! Google is a man's best friend.

- Asad


On Wed, 23 Nov 2005, Tino Wildenhain wrote:


Am Mittwoch, den 23.11.2005, 14:29 -0500 schrieb Asad Habib:

No need to bake a pie when you can buy one at the grocery store!


You can? Where is the store where I can buy the python wrapped
render/print lib of gecko/mozilla please?





___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Tino Wildenhain
Am Mittwoch, den 23.11.2005, 14:29 -0500 schrieb Asad Habib:
> No need to bake a pie when you can buy one at the grocery store!

You can? Where is the store where I can buy the python wrapped
render/print lib of gecko/mozilla please?



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Asad Habib

No need to bake a pie when you can buy one at the grocery store!

Asad :)

On Wed, 23 Nov 2005, Andreas Jung wrote:




--On 23. November 2005 17:05:36 -0200 Fernando Lujan 
<[EMAIL PROTECTED]> wrote:



Yes... I saw this tool. But the company wants a python solution for

this... :(



Then bake one :-)

-aj

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Andreas Jung



--On 23. November 2005 17:05:36 -0200 Fernando Lujan 
<[EMAIL PROTECTED]> wrote:



Yes... I saw this tool. But the company wants a python solution for

this... :(



Then bake one :-)

-aj

pgpI7W4nVbcpG.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Asad Habib
Fernando. There is a python equivalent of the PHP script HTML_ToPDF.php 
that you can use as well. And it's free as well!


- Asad


On Wed, 23 Nov 2005, Fernando Lujan wrote:


Andreas Jung wrote:



--On 23. November 2005 16:45:00 -0200 Fernando Lujan 
<[EMAIL PROTECTED]> wrote:




Yes and I found this product:
http://www.stylusstudio.com/xml_screenshots.html



You should read my former answer carefully. I pointed you to the
tool "CSSTOXSLFO" and the Xinc PDF converter (www.lunasil.com).
Both are Java based applications and can be integrated into Python
and Zope.


Hi Andreas,

Yes... I saw this tool. But the company wants a python solution for this... 
:(


Thanks anyway. :)

Fernando Lujan

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Fernando Lujan

Andreas Jung wrote:



--On 23. November 2005 16:45:00 -0200 Fernando Lujan 
<[EMAIL PROTECTED]> wrote:




Yes and I found this product:
http://www.stylusstudio.com/xml_screenshots.html



You should read my former answer carefully. I pointed you to the
tool "CSSTOXSLFO" and the Xinc PDF converter (www.lunasil.com).
Both are Java based applications and can be integrated into Python
and Zope.


Hi Andreas,

Yes... I saw this tool. But the company wants a python solution for 
this... :(


Thanks anyway. :)

Fernando Lujan

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Andreas Jung



--On 23. November 2005 16:45:00 -0200 Fernando Lujan 
<[EMAIL PROTECTED]> wrote:


Yes and I found this product:
http://www.stylusstudio.com/xml_screenshots.html


You should read my former answer carefully. I pointed you to the
tool "CSSTOXSLFO" and the Xinc PDF converter (www.lunasil.com).
Both are Java based applications and can be integrated into Python
and Zope.

-aj

pgp6Q1tYhEz84.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Asad Habib
Fernando, take a look at HTML_ToPDF (www.rustyparts.com). It's free and it 
works.


- Asad


On Wed, 23 Nov 2005, Fernando Lujan wrote:


Andreas Jung wrote:



--On 23. November 2005 16:08:42 -0200 Fernando Lujan 
<[EMAIL PROTECTED]> wrote:



Chris Withers wrote:


A tool to do what, specifically?



A Front-End to design the PDF format. Like Jasper Reports, but one which
works with python and reporlab. :)



Did you look at XSLFO as suggested. It really works


Yes and I found this product: 
http://www.stylusstudio.com/xml_screenshots.html


With this tool, I can create a HTML export to a XML. And with this XML, can I 
generate dinamic PDF files on the fly with the reportlab's software?


Thanks in advance.

Fernando Lujan
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Fernando Lujan

Andreas Jung wrote:



--On 23. November 2005 16:08:42 -0200 Fernando Lujan 
<[EMAIL PROTECTED]> wrote:



Chris Withers wrote:


A tool to do what, specifically?



A Front-End to design the PDF format. Like Jasper Reports, but one which
works with python and reporlab. :)



Did you look at XSLFO as suggested. It really works


Yes and I found this product: 
http://www.stylusstudio.com/xml_screenshots.html


With this tool, I can create a HTML export to a XML. And with this XML, 
can I generate dinamic PDF files on the fly with the reportlab's software?


Thanks in advance.

Fernando Lujan
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Andreas Jung



--On 23. November 2005 16:08:42 -0200 Fernando Lujan 
<[EMAIL PROTECTED]> wrote:



Chris Withers wrote:

A tool to do what, specifically?


A Front-End to design the PDF format. Like Jasper Reports, but one which
works with python and reporlab. :)



Did you look at XSLFO as suggested. It really works

-aj



pgpvNyb7CTeie.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] HTML to PDF.

2005-11-23 Thread Fernando Lujan

Chris Withers wrote:

A tool to do what, specifically?


A Front-End to design the PDF format. Like Jasper Reports, but one which 
 works with python and reporlab. :)


Thanks.

Fernando Lujan
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] standard_error_message as PageTemplate?

2005-11-23 Thread Peter Bengtsson
On 11/23/05, Jürgen Herrmann <[EMAIL PROTECTED]> wrote:
> hi there!
>
> is it possible to replace the standard_error_message dtml method by
> a page template? has anybody done this? seems like i don't get
> error_type, error_tb etc...
>
Really?!
I remember doing it once and I think it was all there in the options namespace.
Couldn't find the pagetemplate right now but at least this might give
you some hope.
Try creating it as a python method eg.
class Site(...):
def standard_error_message(self, *a, **k):
   print str(a) + str(k)

> regards, juergen herrmann
> ___
>
> >> XLhost.de - eXperts in Linux hosting <<
>
> Jürgen Herrmann
> Bruderwöhrdstraße 15b, DE-93051 Regensburg
>
> Fon:  +49 (0)700 XLHOSTDE [0700 95467833]
> Fax:  +49 (0)721 151 463027
> WEB:  http://www.XLhost.de
> ___
> Zope maillist  -  Zope@zope.org
> http://mail.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://mail.zope.org/mailman/listinfo/zope-announce
>  http://mail.zope.org/mailman/listinfo/zope-dev )
>


--
Peter Bengtsson,
work www.fry-it.com
home www.peterbe.com
hobby www.issuetrackerproduct.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] standard_error_message as PageTemplate?

2005-11-23 Thread Jürgen Herrmann
hi there!

is it possible to replace the standard_error_message dtml method by
a page template? has anybody done this? seems like i don't get
error_type, error_tb etc...

regards, juergen herrmann
___

>> XLhost.de - eXperts in Linux hosting <<

Jürgen Herrmann
Bruderwöhrdstraße 15b, DE-93051 Regensburg

Fon:  +49 (0)700 XLHOSTDE [0700 95467833]
Fax:  +49 (0)721 151 463027
WEB:  http://www.XLhost.de
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )