Re: [Zope-dev] [announce] for the CVS junkies: multiple ZODB mounting product.

2000-06-01 Thread Anthony Baxter


 Shane Hathaway wrote
 You did better than you think, Anthony.  I was going to release the
 product I've been putting together, but your little product does
 virtually the same thing.  Good work!

Lucky guessing, and trawling CVS. :)

 There is, however, a major security problem with making it so easy to
 mount a FileStorage.  In my product, per Jim's suggestion I set it up
 so that the user is required to create an External Method in order to
 mount a database.  That actually makes things a little more flexible in
 that it provides you the ability to mount things other than
 FileStorages.

I'm curious - could you elaborate on the security issues of this? The 
convenience of not having to write an External Method each time you 
want to mount or unmount a ZODB is high. :)

 There are still some issues with mounted databases.  The primary issue
 is that they interact strangely with ZClasses.  However, if you have
 the same ZClass defined in both the primary database and the mounted
 database, ZClasses seem to work fine.  (I wouldn't bet my company on
 it, though.)

Yah, I've been thinking a bit about that, and it's not at all obvious
how it should work. In my case, I want to be able to mount something like
/partners/partnerA
  partnerB
  partnerC
with each partner object a different ZODB. Unfortunately, the current
implementation uses ZClasses in each one. So if I upgrade any one, I
have to upgrade all of them. (and then we're back to the old 'how do
you upgrade ZClasses' issue, which, unless I'm mistaken, has never 
really been resolved).

 The other issues are that you can't easily undo nor manage mounted
 databases.  That is more of a UI problem which could be solved by
 product authors, however.  I envision a product that would create a
 "mounted database manager" object.  Inside the database manager you
 could add as many mount points as you want.  The database manager
 object is where you would go to pack any of the mounted databases.

Yeah - the mount points are entirely invisible. One thing I'd considered
doing was to make the Product provide a registry of mount points and their
underlying FileStorages. 

 ... And please report any problems which you may think are being caused
 by the mount.  http://www.zope.org/Wikis is a mounted database and it's
 running fine, but YMMV.

It is? Okay, that makes me feel better.

A couple of issues I'd like clarification on: 

Any mounted filestorage is searched for an object called 'Application'. 
I'm assuming it will also want things like Control_Panel c as well. What's
the bare minimum a new mounted FS needs? Right now, I'm copying Data.fs.in
and blowing away the stuff in it, but nuking it's standard_html_blah is
a bit more problematic. Would it be worth making a 'create new empty
ZODB FS' function?

If you try to mount /Control_Panel/Products from a mounted ZODB, you get
an 'Attribute Error: _owner'. I'm assuming the Control Panel is special
cased by the ownership code when it's the main ZODB.

How does this work with the Owner mods in recent CVS? If I remember 
correctly, objects keep a reference to their Owner - won't this break
across ZODBs?

thanks,
Anthony


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] [announce] for the CVS junkies: multiple ZODB mounting product.

2000-06-01 Thread Shane Hathaway

Anthony Baxter wrote:
 I'm curious - could you elaborate on the security issues of this? The
 convenience of not having to write an External Method each time you
 want to mount or unmount a ZODB is high. :)

Okay, I looked a little more and I see you're not allowing slashes in
the filename.  That's a decent solution.  Don't forget backslashes (for
MS Windows).  You may want to create mounted databases in a directory
other than /var, since there may be other sensitive files there.

If you're using more than one acl_users folder, remember that the
Manager role, regardless of user context, will give users the right to
use your product in their own directory.

One small change you should make: call the MountPoint._test() method
right after creating the new mount point.  It will ensure any mount
exceptions are propagated up correctly.

  There are still some issues with mounted databases.  The primary issue
  is that they interact strangely with ZClasses.  However, if you have
  the same ZClass defined in both the primary database and the mounted
  database, ZClasses seem to work fine.  (I wouldn't bet my company on
  it, though.)
 
 Yah, I've been thinking a bit about that, and it's not at all obvious
 how it should work. In my case, I want to be able to mount something like
 /partners/partnerA
   partnerB
   partnerC
 with each partner object a different ZODB. Unfortunately, the current
 implementation uses ZClasses in each one. So if I upgrade any one, I
 have to upgrade all of them. (and then we're back to the old 'how do
 you upgrade ZClasses' issue, which, unless I'm mistaken, has never
 really been resolved).

AFAIK you can just delete or rename a product and install the new
version of a set of ZClasses.

  The other issues are that you can't easily undo nor manage mounted
  databases.  That is more of a UI problem which could be solved by
  product authors, however.  I envision a product that would create a
  "mounted database manager" object.  Inside the database manager you
  could add as many mount points as you want.  The database manager
  object is where you would go to pack any of the mounted databases.
 
 Yeah - the mount points are entirely invisible. One thing I'd considered
 doing was to make the Product provide a registry of mount points and their
 underlying FileStorages.

ZODB/Mount.py already provides such a registry, so you may want to use
that, although it applies to *all* mount points rather than some kind
of subset.

 A couple of issues I'd like clarification on:
 
 Any mounted filestorage is searched for an object called 'Application'.
 I'm assuming it will also want things like Control_Panel c as well. What's
 the bare minimum a new mounted FS needs? Right now, I'm copying Data.fs.in
 and blowing away the stuff in it, but nuking it's standard_html_blah is
 a bit more problematic. Would it be worth making a 'create new empty
 ZODB FS' function?

Actually FileStorage provides a nifty trick: you can just name a
database file and if it doesn't exist it will be created.  That could
be a security problem.  Or it might just be a good feature.  It will be
created with the "true" bare minimum, which doesn't even have an
Application object

The id of the MountPoint and the last item of the mounted path must
match for a subtle reason.  When ObjectManager looks up the object, it
uses the ID of the mount point.  The object it finds is assumed to have
the correct ID.  If there is no assurance of that, mounted databases
could cause some confusion for OFS.

One possibility you may consider is allowing the user to create a
FileStorage on the fly.  You can do one of two things: override
_getMountRoot(), which is a hook I provided for the very purpose of
accessing databases that have no Application object, or manually create
an Application object in the new database.  Either way, you must ensure
that the ID of the mounted object is the same as the ID of the mount
point.

 If you try to mount /Control_Panel/Products from a mounted ZODB, you get
 an 'Attribute Error: _owner'. I'm assuming the Control Panel is special
 cased by the ownership code when it's the main ZODB.

 How does this work with the Owner mods in recent CVS? If I remember
 correctly, objects keep a reference to their Owner - won't this break
 across ZODBs?

Hmm... I don't see why you would want to mount the Control_Panel,
except to fiddle with ZClasses.  I would suggest finding a way to get
ZClasses to operate more naturally might be a better approach.

Shane

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] [announce] for the CVS junkies: multiple ZODB mounting product.

2000-06-01 Thread Anthony Baxter


 Shane Hathaway wrote
 Okay, I looked a little more and I see you're not allowing slashes in
 the filename.  That's a decent solution.  Don't forget backslashes (for
 MS Windows).

Bah. Silly backwards operating system. Ok dokey.  

 You may want to create mounted databases in a directory
 other than /var, since there may be other sensitive files there.

I thought about that, then thought 'that can wait for another day'. 
This is muchmuch simpler to implement.

 If you're using more than one acl_users folder, remember that the
 Manager role, regardless of user context, will give users the right to
 use your product in their own directory.

Hm - it's not possible for a Manager in a higher level to remove
privileges from a manager defined in a subfolder, I think. A pity.
Will document it.

 One small change you should make: call the MountPoint._test() method
 right after creating the new mount point.  It will ensure any mount
 exceptions are propagated up correctly.

Ok dokey. I've just made a change to my code for both of these, 


  with each partner object a different ZODB. Unfortunately, the current
  implementation uses ZClasses in each one. So if I upgrade any one, I
  have to upgrade all of them. (and then we're back to the old 'how do
  you upgrade ZClasses' issue, which, unless I'm mistaken, has never
  really been resolved).
 
 AFAIK you can just delete or rename a product and install the new
 version of a set of ZClasses.

So long as the classid stays the same. There's also a scaling issue - if
I have dozens of objects, this will be bad. I've got a solution for this
case - the stuff that goes into the sub-ZODB will be redone to only use
python-created objects.


 ZODB/Mount.py already provides such a registry, so you may want to use
 that, although it applies to *all* mount points rather than some kind
 of subset.

Yeah, I was going to try and hook a mounted databases tab into the Control
Panel. Zope gets an /etc/mtab :)

 Actually FileStorage provides a nifty trick: you can just name a
 database file and if it doesn't exist it will be created.  That could
 be a security problem.  Or it might just be a good feature.  It will be
 created with the "true" bare minimum, which doesn't even have an
 Application object

Yep, I discovered that. Since it breaks without an Application, 
and it might be a security problem, I just disabled it - the file 
must exist first. 


 The id of the MountPoint and the last item of the mounted path must
 match for a subtle reason.  When ObjectManager looks up the object, it
 uses the ID of the mount point.  The object it finds is assumed to have
 the correct ID.  If there is no assurance of that, mounted databases
 could cause some confusion for OFS.

I also hit this. Much confusion on the part of poor little Zope. The code
now will only let you specify an 'id' if you're mounting the root of a ZODB
(since the default ZODB doesn't have an id on it's root object.) This may 
not be the right thing to do, but I couldn't figure out an appropriate way
to do it otherwise.

Hm, maybe a small script in utilities that will create a real bare minimum
ZODB with an Application and a Control_Panel c. might be the go here.

 One possibility you may consider is allowing the user to create a
 FileStorage on the fly.  You can do one of two things: override
 _getMountRoot(), which is a hook I provided for the very purpose of
 accessing databases that have no Application object, or manually create
 an Application object in the new database.  Either way, you must ensure
 that the ID of the mounted object is the same as the ID of the mount
 point.

I think I'm going to need to revisit the code tomorrow morning and write
the little 'ZODB maker'.
 
 Hmm... I don't see why you would want to mount the Control_Panel,
 except to fiddle with ZClasses.  I would suggest finding a way to get
 ZClasses to operate more naturally might be a better approach.

Yep, you figured out what I was doing - it was more a matter of 'should
it work this way?'
-- 
Anthony Baxter [EMAIL PROTECTED]   
It's never too late to have a happy childhood.


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Zope 2.1.6: Test.py problem with patch

2000-06-01 Thread Dieter Maurer

Problem:
Description:
  If a DTML method is accessed with "ZPublisher/Test.py",
  an "Unauthorized" exception is raised in "verify_watermark".
 
Environment:
  Zope 2.1.6, Linux 2, Intel

Analysis:
  The module "BaseRequest" is imported twice: once as "BaseRequest"
  and once as "ZPublisher.BaseRequest".
  The AUTHENTICATED_USER (and its watermark) is constructed by
  the first module instance; the check is made against
  the watermark of the second module instance and therefore
  fails.

Patch:
  URL:http://www.handshake.de/~dieter/pyprojects/zope/test.pat


Dieter

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] BerkeleyStorage with ZODB problem

2000-06-01 Thread nw_moriarty

I'm developing a large program and think that ZODB with BerkeleyStorage is the best 
option.  I had a python test program working using FileStorage that worked.  I 
substituted BerkeleyStorage and it fails thus:

Traceback (innermost last):
  File "btest.py", line 118, in ?
mydb = Database()
  File "btest.py", line 22, in __init__
self.db = DB(SleepyStorage(file))
  File "/usr/local/dc/zope/lib/python/ZODB/BerkeleyStorage.py", line 107, in __init__
self._index.open(name, db.DB_BTREE, db.DB_CREATE | dothread)
  File "/usr/lib/python3rd/TCS/bsddb/db.py", line 639, in open
val = apply(dbc.DB_open,(self.this,arg0,)+args)
db.error: (22, 'Invalid argument')

Has any got a working example of BerkeleyStorage that works!

Nigel


--== Sent via Deja.com http://www.deja.com/ ==--
Before you buy.

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Zope 2.1.6: ZCatalog's Reindex unintuitive?

2000-06-01 Thread Dieter Maurer

ZCatalog's "manage_catalogReindex" rebuilds the indexes for currently
cataloged objects. Object which do no longer exist are removed.
However, new objects in the catalog's "search space" are not added.

This has the advantages, that 
 1. the catalog can be filled with several finds
 2. cataloged objects can be manually managed (removed).

However, it does not support well a common use: provide search
facilities for part of a WebSite. For this use, new pages, too,
would have to be found and indexed.

I know, of cause, that a DMTL method could do this job.
However, a general method "manage_catalogRefind" might be
generally useful. It would remember the parameters for
the last find operation and reapply the find.

What do you think?


Dieter


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] What causes the failure

2000-06-01 Thread Timothy Grant

Robin Becker wrote:

 Zope Error
 
 Zope has encountered an error while publishing this resource.
 
 Error Type: SuperCannotOwn
 Error Value: Objects cannot be owned by the superuser

I just installed the 2.2a release and I get the same error when trying
to import my exported site.

Have you discovered a resolution?

Thanks.

-- 
Stand Fast,
tjg.

Timothy Grant [EMAIL PROTECTED]
Chief Technology Officer  www.exceptionalminds.com
Red Hat Certified Engineer  (503) 246-3630
Avalon Technology Group, Inc.  fax  (503) 246-3124
Linux...Because rebooting isn't normal

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Zope 2.1.6: ZCatalog's Reindex unintuitive?

2000-06-01 Thread Kevin Dangoor

- Original Message -
From: "Dieter Maurer" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, June 01, 2000 5:31 AM
Subject: [Zope-dev] Zope 2.1.6: ZCatalog's Reindex unintuitive?


 I know, of cause, that a DMTL method could do this job.
 However, a general method "manage_catalogRefind" might be
 generally useful. It would remember the parameters for
 the last find operation and reapply the find.

I like the other solutions that exist/are coming into existence/are
proposed. They are:

1) CatalogAwareness for ZClasses. I like this one least, but it exists
today. Your custom ZClasses can just subclass CatalogAware and they will
automatically add themselves to the catalog when they are created and remove
themselves when they are deleted. Drawbacks: it's a pain to catalog them to
anything but something called "Catalog", and it only works for your custom
objects.

2) ZPatterns 0.4 (http://www.zope.org/Members/pje/Wikis/ZPatterns/HomePage):
This allows you to create objects that use DataSkins to determine how they
are stored. Additionally, you can set up methods that get called for adds
and deletes, so you can automatically catalog things however you would
like... plus, you can set that up on a folder by folder basis. Drawbacks:
not available yet, only works for your custom objects.

3) ObserverAndNotification Interface
(http://www.zope.org/Members/michel/Projects/Interfaces/ObserverAndNotificat
ion): Objects can be notified of events. This is a very generic interface
and should allow for all sorts of stuff. Drawbacks: I don't know if any work
has been done on implementation (work is still going on on the interfaces, I
think), and I don't know if you'll be able to create an observer that
automatically catalogs objects like DTML Methods even though the DTML Method
has no knowledge of the observer. I kind of get the feeling that you'll be
able to do such things...

I like all of these solutions, because they are automatic. Having a
catalogRefind implies that someone needs to actively do something to make
the catalog get updated...

Kevin



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope] KeyError since installing Squishdot 0.4.0

2000-06-01 Thread David Trudgett

Since I installed Squishdot 0.4.0 (yesterday) on Zope 2.1.6 (under Red Hat 
Linux) I've been getting KeyErrors when clicking on an article's topic 
image, which uses an URL like this:

http://myserver/Zope/testsquish/search?subject=Squishdotop=articles

In Squishdot 0.3.2, the errors didn't occur.

I applied the fixes mentioned by Michel Pelletier in his (Zope-dev] message 
("The Mysterious Key Error and Unrelated Searc Result Bug"), and updated 
the ZCatalog. This didn't fix the problem.

Here is the stack trace:

Traceback (innermost last):
   File /data/Zope-2.1.6/lib/python/ZPublisher/Publish.py, line 214, in 
publish_module
   File /data/Zope-2.1.6/lib/python/ZPublisher/Publish.py, line 179, in publish
   File /data/Zope-2.1.6/lib/python/Zope/__init__.py, line 202, in 
zpublisher_exception_hook
 (Object: ElementWithAttributes)
   File /data/Zope-2.1.6/lib/python/ZPublisher/Publish.py, line 165, in publish
   File /data/Zope-2.1.6/lib/python/ZPublisher/mapply.py, line 160, in mapply
 (Object: search)
   File /data/Zope-2.1.6/lib/python/ZPublisher/Publish.py, line 102, in 
call_object
 (Object: search)
   File /data/Zope-2.1.6/lib/python/Products/Squishdot/Squishdot.py, line 
954, in search
 (Object: ElementWithAttributes)
   File /data/Zope-2.1.6/lib/python/ZPublisher/HTTPRequest.py, line 760, in 
__getitem__
KeyError: (see above)


Does anyone have any ideas on how to fix this?

Thanks.

David Trudgett





___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] security issues

2000-06-01 Thread Ragnar Beer

Howdy everyone!

I will soon have a Zope-site ready to go online. How can I make shure 
that I did everything (concerning Zope) to stop intruders? Where can 
I find information about protecting a Zope-site? Has anyone had 
security problems so far?

--Ragnar

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Linking to Mailing List Managers

2000-06-01 Thread Ian Sparks

Hi,

With all the talk about Syndication I started to think about linking with
mailing list managers.

Ideally I'd like members of my portal site to be given a free email address
username@sitename, bouncing all mail to that address to their real email
address.

In a roles-based membership scheme it would also be nice to be able to send
email to role@sitename, so the email goes to all members with that role.

Has anyone done anything like this, linking to an existing Mailing List
Manager like Majordomo from Zope? I want to manage the whole thing through
some Zope management pages.

- Ian Sparks.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Thread-safe PostgreSQL adaptor?

2000-06-01 Thread Hannu Krosing

[EMAIL PROTECTED] wrote:
 
 try also,
 
 ZPoPyDA
 
 ZPoPyDA is a *stable* Postgresql Database Adapter for Zope based on our driver PoPy.
 It aims to replace the current ZPygresql DA.
 
 This database adapter is released under the GPL Licence.

AFAIK this is the only DA with GPL license.
Both Zope and python have much freer licenses making GPL probably 
a poor choice if you "aims to replace the current ZPygresql DA".

What is the reason behind GPL'ing it ? 

If you you hope to make money selling commercial licences I doubt it will
work.
Many peaople are afraid of contaminating their work with smallish GPL products
and would rather use inferior but free products.

 You can get the tarball at http://www.mixadlive.com/software

Thanks

-
Hannu

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] Strange Zope behavior/Instability (Zope going down)

2000-06-01 Thread Marcus Collins

 -Original Message-
 From: Rob Sporleder [mailto:[EMAIL PROTECTED]]
 Sent: 31 May 2000 21:55
 To: Jason Spisak
 Cc: [EMAIL PROTECTED]
 Subject: RE: [Zope] Strange Zope behavior/Instability (Zope 
 going down)
 
 All of the python z2.py processes are still running. I 
 haven't checked if I can get to it using http://localhost. The 
 server is offsite. However, I did try an http get from the command 
 line and it did not respond.

Hi!

I had similar problems some time ago (which have not been entirely resolved
-- I'm still trying to tie them down -- but now seem to be less frequent),
which seemed to be related to particular page accesses. Are you able to
identify from your logs any pages/methods that have repeatedly been called
prior to Zope going down?

See the Wiki at:
http://www.zope.org/Members/tseaver/Projects/HighlyAvailableZope/TwistingInT
heWindProblems

and take a look at DiagnosingHangProblems for some suggestions. Perhaps you
could post the details of your own situation there as well?

hth,

-- Marcus

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Thread-safe PostgreSQL adaptor?

2000-06-01 Thread Hannu Krosing

Hannu Krosing wrote:
 
 [EMAIL PROTECTED] wrote:
 
  try also,
 
  ZPoPyDA
 
  ZPoPyDA is a *stable* Postgresql Database Adapter for Zope based on our driver 
PoPy.
  It aims to replace the current ZPygresql DA.
 
  This database adapter is released under the GPL Licence.
 
 AFAIK this is the only DA with GPL license.

and only ODBC driver has LGPL license (the "Lesser" or "Library" GPL which 
leaves you much more freedom than the stock GPL).

 Both Zope and python have much freer licenses making GPL probably
 a poor choice if you "aims to replace the current ZPygresql DA".

IMHO, if you want it to fly you should either use PostgreSQL or Python 
license for PoPy and either Python or Zope license for ZPoPyDA.

--
Hannu

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] security issues

2000-06-01 Thread Anthony Baxter

 Ragnar Beer wrote
 Howdy everyone!
 
 I will soon have a Zope-site ready to go online. How can I make shure 
 that I did everything (concerning Zope) to stop intruders? Where can 
 I find information about protecting a Zope-site? Has anyone had 
 security problems so far?

Easiest (most brutal?) fix I've found - hide Zope behind an Apache,
and prohibit access to any URLs of the form .*/manage.*

If you don't need to use basic auth to the Zope, then use a rewrite
rule to strip out any Authentication headers in the requests.

Anthony

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] ZPoPyDA license (was: [Zope] Thread-safe PostgreSQL adaptor?)

2000-06-01 Thread Federico Di Gregorio

hi,

Hannu Krosing [EMAIL PROTECTED] wrote:

  This database adapter is released under the GPL Licence.
 
 AFAIK this is the only DA with GPL license.
 Both Zope and python have much freer licenses making GPL probably 
 a poor choice if you "aims to replace the current ZPygresql DA".
 
 What is the reason behind GPL'ing it ? 

we strongly belive in free software.

 If you you hope to make money selling commercial licences I doubt it will
 work.

absolutely! it will never work! if you go for free software you have to make
money on other things than licenses. that's why we choosed the gpl.

 Many peaople are afraid of contaminating their work with smallish GPL products
 and would rather use inferior but free products.

many people try to *speculate* by using free software without giving
back to the community. imho a license that allows that is a bad license.

the only good reason for changing the license would be Digital Creations
asking us to do so because they want to include ZPoPyDA in one of their
products but don't want to be binded by the gpl. we are using zope and
making money out of it and i don't like if they can't do the same with
out work.

but, for now, both PoPy and ZPoPyDA will remain GPL.

ciao,
federico

-- 
Federico Di Gregorio
MIXAD LIVE System Programmer   [EMAIL PROTECTED]
Debian GNU/Linux Developer  Italian Press Contact[EMAIL PROTECTED]
  All programmers are optimists. -- Frederick P. Brooks, Jr.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Ordered list

2000-06-01 Thread Itamar Shtull-Trauring

Marcio Moreira wrote:

 My question is: How can I have an ordered listing of all popular names of all
 plants (in other words, how can I have an ordered listing of data stored in 
"lines"-type properties on diferent class instances)?

You could catalog them in a ZCatalog (make them catalogaware) and make this
property a meta-data column.

-- 
Itamar S.T.  [EMAIL PROTECTED]   
"It don't get thingier than that!"

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Q: Link status/checking -

2000-06-01 Thread Jrgen Skogstad

Kindest,

I was wondering about a few points I havn't seen any references
to. Are there any implementations in Zope that can verify the 
validity of an url? That is; 

1) A link database is generated .. and should be maintained.
2) A process should be run at least once a week to check the
   validity of links in the database. 
3) If the link is not "valid" .. it sets a tag in the db which
   says it's untrusted .. which again could show that in the
   link listed on the web through Zope.
4) .. and if it's untrusted for N runs .. it is removed.

.. have anyone looked into that? .. and anyone made any conclusions
as to how one can solve that?

I am not that familiar with Python .. but I might be interested
in generating such an engine.. based on Zope / mySql of some
sorts.

.. Perl support would really make me happy right now!

Have a real nice day. 

Kindest,
Jørgen Skogstad




___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] KeyError since installing Squishdot 0.4.0

2000-06-01 Thread Chris Withers

On Thu, 1 Jun 2000, David Trudgett wrote:

 Since I installed Squishdot 0.4.0 (yesterday) on Zope 2.1.6 (under Red Hat 
 Linux) I've been getting KeyErrors when clicking on an article's topic 
 image, which uses an URL like this:
 
 http://myserver/Zope/testsquish/search?subject=Squishdotop=articles

Yep, sorry, this was a bug introduced in the move to ZCatalog.

The workaround is to append body= to the above URL.
There's also a patch in the [EMAIL PROTECTED] archives.

This will be fixed in 0.4.1 due on Monday once I get back from my holiday
:-)

cheers,

Chris



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Thread-safe PostgreSQL adaptor?

2000-06-01 Thread Hannu Krosing

Oleg Broytmann wrote:
 
 Hi!
 
 On Thu, 1 Jun 2000, Hannu Krosing wrote:
  AFAIK this is the only DA with GPL license.
  Both Zope and python have much freer licenses making GPL probably
  a poor choice if you "aims to replace the current ZPygresql DA".
 
  What is the reason behind GPL'ing it ?
 
Aha, well, the GPL-vs-BSD-vs-MPL-vs...! :)))
 
As PostgreSQL mailing list member you (like me) saw these debates many
 times. I don't think we need to continue the flame here :)

True. The problem is that in some perverted fashion it seems to me that if 
I use a GPL library with something the whole thing should go GPL, i.e. my 
use of ZPoPyDA could make me obliged to distribute Zope under GPL, which I 
of course can't do and thus i start feeling scizophrenic ;)

There are people who loke BSD-style licensing, and there are GPL
 devotee. In this far-from-ideal world it is hard to say what is more free.
 I, personnaly, love GPL and publish whatever I can under GPL.

I personally don't have anything against (L)GPL either, its just my gut 
feeling that having _multiple_ potentially clashing licenses inside what 
should be ideally one package is confusing as the interactions of  
licenses can't be understood by noone ;)

--
Hannu

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Thread-safe PostgreSQL adaptor?

2000-06-01 Thread Oleg Broytmann

On Thu, 1 Jun 2000, Hannu Krosing wrote:
 True. The problem is that in some perverted fashion it seems to me that if 
 I use a GPL library with something the whole thing should go GPL, i.e. my 

   Yes - that's why I love GPL :)

 use of ZPoPyDA could make me obliged to distribute Zope under GPL, which I 
 of course can't do and thus i start feeling scizophrenic ;)

   No - just using the GPL'd adapter do not require you to distribute Zope
under GPL. The adapter is just a "plugin"; there was an explanation from
RMS that GPL'd plugins does not require to GPL the main program and vice
versa; there probably will be newer version of GPL (don't know how soon)
which will explain the plugin thingie in details.

   In short - only linking with GPL code "infects" your code with GPL.

Oleg.(All opinions are mine and not of my employer)
 
Oleg Broytmann  Foundation for Effective Policies  [EMAIL PROTECTED]
   Programmers don't die, they just GOSUB without RETURN.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Form POST question (and a QUERY_STRING Q.)

2000-06-01 Thread Yosef Gold

I use Zope in the old bobo fashion.  I have a homegrown session
management class that I use.  When a session is idle for a long
while, I ask the user for his password again before allowing him to
continue.  Generally, I then use the URL from the REQUEST object and
RESPONSE.redirect() to send him where he was trying to go after he
reenters his password (he never got there because I gave him a
session timeout screen instead).  This works well except in one
case.  If a user submits a form that uses POST to send it's data, I
am not forwarding the posted data and so I get a Zope error that a
parameter is missing.

Is there a way for me to get the raw posted data and forward that too
via the RESPONSE object?

A seperate small side question.  I thought that all the paremeters
after the "?" in an URL or a submitted form (using GET) are put into
the QUERY_STRING variable within the REQUEST object.  I don't see
this variable there at all.  Can someone explain when/where this
variable is set/sent .


Thanks,
Yosef


---
Yosef Gold ([EMAIL PROTECTED])

---



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] The funny _.None,_ feature in DTML kind of question

2000-06-01 Thread Shalabh Chaturvedi

There is some more information at
http://www.zope.org/Documentation/How-To/AdvancedDTML
Look for the section "DTML Calling Arguments".

Reading that left me a bit confused because here you say (and I have read
elsewhere too) that method is passed client=_.None. I thought that the client
should be the object on which the dtml method  'operates'. So how does the dmtl
method access the attributes of the object it is called upon? Is it because the
namespace object '_' has the namespace of the object on top?

Any example of where the client parameter would be useful?

Thanks,
Shalabh
- Original Message -
From: Vitaly Osipov [EMAIL PROTECTED]
To: Johan Carlsson [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Thursday, June 01, 2000 3:50 PM
Subject: Re: [Zope] The funny _.None,_ feature in DTML kind of question


 Everything is more or less simple - when you invoke method by dtml-var
 meth1 - that "mapping" _ and "client" _.None are passed automagically :)

 when you invoke method with explicit arguments like dtml-var "meth1()",
 you have to pass those two explicitly like dtml-var "meth1(_,_.None,...)"

 details are here:

 http://lists.zope.org/pipermail/zope/2000-January/017687.html

 - Original Message -
 From: "Johan Carlsson" [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, June 01, 2000 12:43 AM
 Subject: [Zope] The funny _.None,_ feature in DTML kind of question


  Hi,
  This feature really bugs me so I thought I
  write a Tips (or HOWTO). But I need some help.
  (Also I believe it's documented somewhere, but
  I cant figure out where...)
 
  When calling the a DTML-method the second time
  in a row the namespace just disapears.
 
  Using _.None and _ as begining arguments make
  it all work again.
 
  The questions are:
  -Why does DTML act like this, is there a logical explanition?
  -Where is this documented? (I know I say it somewhere)
  -What would be the best way to name and categorise this "feature".
 
  Best Regards,
  Johan Carlsson
 
 
  If you understand my brief problem description,
  here's a scenario:
 
  In /folder1
  there is three DTML-methods: meth1, meth2
  In /folder1/folder2
  there is a fourth DTML-method: meth3
 
  /folder1/meth1:
  dtml-with folder2 #changes the namespace
  dtml-call "meth3()"   # works just fine
  /dtml-with
 
  /folder1/meth2:
  dtml-call "meth1()"   #doesn't work
 
  /folder1/folder2/meth3:
  dtml-var "'hällå wörld'" # or something useful like hello foobar
 
 
  Solution:
 
  In /folder1
  there is three DTML-methods: meth1, meth2
  In /folder1/folder2
  there is a fourth DTML-method: meth3
 
  /folder1/meth1:
  dtml-with folder2 #changes the namespace
  dtml-call "meth3(_.None,_)"   # works just fine
  /dtml-with
 
  /folder1/meth2:
  dtml-call "meth1(_.None,_)"   #works like a working thing
 
  /folder1/folder2/meth3:
  dtml-var "'hällå wörld'"   #or something useful like hello foobar (oh,
 it the same...)
 
 
 
  ___
  Zope maillist  -  [EMAIL PROTECTED]
  http://lists.zope.org/mailman/listinfo/zope
  **   No cross posts or HTML encoding!  **
  (Related lists -
   http://lists.zope.org/mailman/listinfo/zope-announce
   http://lists.zope.org/mailman/listinfo/zope-dev )


 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )





___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] dtml-tree puzzling behaviour!

2000-06-01 Thread Patrick J.M. Keane


This is REALLY weird.

I have a dtml-tree in a DIV panel (there are others).  If I expand any
branch of the tree, all of the javascript (and imagemaps, and everything
else in other div panels become disabled (in Netscape 4.7 under linux).

I haven't tried it on IE, but this is rather distressing!  Any ideas why
that might be?

PK



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] RE: Zope digest, Vol 1 #810 - 56 msgs

2000-06-01 Thread Tom Neff

Luis Cortes [EMAIL PROTECTED] writes:
   I'm trying HomeSite HTML Editor - which is really slick for
 somethings.
  I was wondering if there was some easy way to turn off the
 mangling of dtml tags when switching between design view and edit
 view???

HomeSite is indeed a wonderful program!  Very extensible, you can even teach
it about DTML within reason.

Unfortunately "Design View" uses an embedded Microsoft HTML editing control
(cousin of FrontPage Express) that is NOT wonderful and not under
Allaire/HomeSite's supervision.  That's why they have options to "repair"
your HTML after visiting Design View. :)  They only put it in there so they
could offer some sort of WYSIWYG as a selling point against other packages.
Most of us turn it off.

If you want another DTML-teachable editor that does WYSIWYG right, try
Dreamweaver.


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Interbase / Cacheing - A thought

2000-06-01 Thread Hannu Krosing

Ian Sparks wrote:
 
 Had a thought that I wanted to share.
 
 Interbase has a feature known as "event alerts". In a trigger you can post
 "events" which are just fixed data strings e.g. "DataAdded" or
 "Insert_tblUsers".

PostgreSQL has them too.

It's not (afaik) supported by DB-API, but could be used in a DA that talks 
to some lower level API.

 A client database connection can register to listen to these events.
 
 I don't know if any Zopeish Interbase access method supports this (ODBC
 doesn't to my knowledge) but it would be incredibly useful for synching
 cached database objects. Zope could hold a representation of the table data
 in cached objects for quick access. Each object could have one or more
 "event" methods which related to a database event. When the database adaptor
 received an event message from Interbase it could inform all objects with a
 matching event method (these methods would refresh their cached data with
 current values from the database).
 
 In this way database and Zope cache could be synced *without* having to poll
 the database at an interval. In all, a very efficient mechanism.

 Just an idea I wanted to put out there.

Thanks for getting it out.

I have been contemplating the same for PostgreSQL but have been too lazy to do 
it myself ;)

--
Hannu

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Re: dtml-tree puzzling behaviour!

2000-06-01 Thread Patrick J.M. Keane

"Patrick J.M. Keane" wrote:

 This is REALLY weird.

 I have a dtml-tree in a DIV panel (there are others).  If I expand any
 branch of the tree, all of the javascript (and imagemaps, and everything
 else in other div panels become disabled (in Netscape 4.7 under linux).

So, the answer has SOMETHING to do with the

#whatever=

that trails at the end of the URL.  When this is removed, all is well.  Is
this just a HREF anchor jump?  The answer might possibly be for me to
eliminate it from my python tree code, unless it serves some other purpose
(not serving a purpose for me, these are small trees).

So, am I wrong to think you can use a NAME= anchors in a DIV tag?
I would assume so, but Netscape does render DIVs in a sort of bizzare way,
so perhaps you cannot.  In which case, this has nothing to do with zope,
but more to do with Netscape.  Well, that sucks. :)

Anyway to work-around this within the dtml-tree code by modifying tree-s
or e or c?  I'd like to have a fix so that if you click on a [+] you get a
URL back with no trailing #placefinder.

pk



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Interbase / Cacheing - A thought

2000-06-01 Thread Ian Sparks


Hannu,

Does PostgresSQL allow you to have dynamic events? By this I mean can you do
things like :

PostEvent "Update_tblUsers_Record_" + new.RecordID;

I believe that in Interbase the events are compiled into the trigger, not
interpreted at Runtime so you can't have an Interbase event alert you to a
change in a particular record, only that a change has occurred on a table.

Coming from a RDBMS background myself I'd prefer to see RDBMS integration be
tighter to Zope - properties etc being stored in the database where
appropriate. For reasons of speed you don't want to have to go to the DB
each time you want a property but having a data-aware object which knows
when to update itself would solve this problem nicely.

It should also help with load-balancing and failover where you could have a
cluster of Zope instances all working on the same monster DB, all being kept
in sync. via the event alerter mechanism.

Just my thoughts.

- Ian.


- Original Message -
From: "Hannu Krosing" [EMAIL PROTECTED]
To: "Ian Sparks" [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, June 01, 2000 11:28 AM
Subject: Re: [Zope] Interbase / Cacheing - A thought


Ian Sparks wrote:

 Had a thought that I wanted to share.

 Interbase has a feature known as "event alerts". In a trigger you can post
 "events" which are just fixed data strings e.g. "DataAdded" or
 "Insert_tblUsers".

PostgreSQL has them too.

It's not (afaik) supported by DB-API, but could be used in a DA that talks
to some lower level API.

 A client database connection can register to listen to these events.

 I don't know if any Zopeish Interbase access method supports this (ODBC
 doesn't to my knowledge) but it would be incredibly useful for synching
 cached database objects. Zope could hold a representation of the table
data
 in cached objects for quick access. Each object could have one or more
 "event" methods which related to a database event. When the database
adaptor
 received an event message from Interbase it could inform all objects with
a
 matching event method (these methods would refresh their cached data with
 current values from the database).

 In this way database and Zope cache could be synced *without* having to
poll
 the database at an interval. In all, a very efficient mechanism.

 Just an idea I wanted to put out there.

Thanks for getting it out.

I have been contemplating the same for PostgreSQL but have been too lazy to
do
it myself ;)

--
Hannu

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )





___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] CHAT

2000-06-01 Thread Gonçalo Gomes





Silver_Surfer: how do you see the future of Zope fighting 
against PHP space on the web?
Jim: I don't know much (enough) about PHP, but from what I 
vaguely know, PHP methods seem like a logical step.
this answer was done to my question (i am lucipher) and i asked
"how do you define zope and php?"
BYE!


RE: [Zope] Form POST question (and a QUERY_STRING Q.)

2000-06-01 Thread Marcus Collins

Hi,

There was a thread a week or so ago about passing POSTed variables after
authenticating, some of which will be useful -- see the archived message,
suggestions and caveats at: 

http://zope.nipltd.com/public/lists/zope-archive.nsf/47ba74c812dbc5dd8025687
f0024bb5f/3e46f2835c820eae802568eb002c802a?OpenDocument

Regarding your second question, REQUEST.QUERY_STRING works for me using
Zope; maybe someone else has some pointers regarding its use in "the old
bobo fashion" with which I'm not too familiar.

hth,

-- Marcus

 -Original Message-
 From: Yosef Gold [mailto:[EMAIL PROTECTED]]
 Sent: 01 June 2000 12:50
 To: [EMAIL PROTECTED]
 Subject: [Zope] Form POST question (and a QUERY_STRING Q.)
 
 
 I use Zope in the old bobo fashion.  I have a homegrown session
 management class that I use.  When a session is idle for a long
 while, I ask the user for his password again before allowing him to
 continue.  Generally, I then use the URL from the REQUEST object and
 RESPONSE.redirect() to send him where he was trying to go after he
 reenters his password (he never got there because I gave him a
 session timeout screen instead).  This works well except in one
 case.  If a user submits a form that uses POST to send it's data, I
 am not forwarding the posted data and so I get a Zope error that a
 parameter is missing.
 
 Is there a way for me to get the raw posted data and forward that too
 via the RESPONSE object?
 
 A seperate small side question.  I thought that all the paremeters
 after the "?" in an URL or a submitted form (using GET) are put into
 the QUERY_STRING variable within the REQUEST object.  I don't see
 this variable there at all.  Can someone explain when/where this
 variable is set/sent .
 
 
 Thanks,
 Yosef
 
 --
 --
 ---
 Yosef Gold ([EMAIL PROTECTED])
 --
 --
 ---
 
 
 
 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )
 

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] [announce] MountedFileStorage product - mount multiple ZODBs.

2000-06-01 Thread Anthony Baxter


I've bolted together a simple Product which allows you to mount
sub-ZODB's through the zope management interface.

http://www.zope.org/Members/anthony/software/MountedFileStorage/

(it's now up to version 0.01 :)

It _requires_ an up-to-date CVS version of Zope. It won't work on
2.2a1. I'd expect it will work on 2.2, whenever that happens.

Most of the credit for this goes to the guys at DC who did all the
work - but any bugs are probably in my bit, not the bits they did. 

Anthony


readme follows:


Created by anthony. Last modified on 2000/06/01. 

Ok, so the DC guys have been talking about allowing multiple ZODB
support, but I couldn't see a way to use it. A bit of trawling through
the CVS and I found the guts of a MountedItem object which has now been
removed. Using that as inspiration and a source of pointers, I've bolted
together a really simple Product for mounting multiple ZODB files onto
a Zope installation.

You should also check out the MountedDatabases section of the ZODB Wiki.

First of all, you need to be running a really really recent CVS version
of Zope. 2.2alpha1 isn't good enough. Then install this product (it
unpacks in lib/python/Products/MountedFileStorage).

Sample usage:

cd $zope/var ; cp Data.fs.in nifty.fs

Select Mounted FileStorage from the product add list.

For file put nifty.fs. Leave path blank, and put whee as the id. You've
now got a copy of the default Zope install mounted.

In the same session, add a new Mounted FileStorage, for the Path
put in QuickStart/Outline. Leave id blank. You've now mounted the
QuickStart/Outline folder from the mounted FS as Outline in the current
folder.

WARNING: This is really really untested stuff. It Works For Me. Not
To Be Taken Internally.  Do Not Come Crying To Me If It Breaks Your
Zope Install.

If you want to play with this stuff, you really should back up your
Data.fs first.

Security Issues: There probably are some. I've no idea what they might
be. The product makes a really simple-minded effort to not allow badness
through (any filename with a / or \ in it). Don't give access to the
permission Mount FileStorages to anyone that you don't trust, though. Note
that this includes anyone with Manager role on the system. Note also,
though that you can only mount existing files that are in var/.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Z Search creates input fields with width=30?

2000-06-01 Thread Jason Byron

Shouldn't the input fields created with Z Search
include "size=30" instead of "width=30"?

I'm using an older version of Zope so maybe this has
been changed already?

__
Do You Yahoo!?
Send instant messages  get email alerts with Yahoo! Messenger.
http://im.yahoo.com/

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Linking to Mailing List Managers - Mailman and Zope

2000-06-01 Thread Ken Manheimer

On Thu, 1 Jun 2000, Nils Kassube wrote:

 Zope/E-Mail integration is something I'm very interested in doing as
 part of my CS studies (What's the English word for "Studienarbeit"?). 
 However, my todo list of non-commercial projects is full, so it's 
 probably going to take some time to do something that's not paid for,
 sigh, I should spend some time looking for companies here in Lübeck
 or Hamburg open for new technology which is not based on Java...
 
 With management via Zope pages do you mean something like the
 administration pages of GNU Mailman (written in Python)?
 
 http://www.gnu.org/software/mailman/mailman.html
 http://www.list.org

One of the first things zope exercises i did when learning zope, not tool
long after coming to digital creations, was create a product that hooked
up with the Mailman installation on zope.org.  (One of the last things i
did at my prior job, at CNRI, was to resurrect and revitalize the
prototype Mailman, for use as the maillist manager on python.org.)

I moved on to other things, and the MMRoster product may be way out of
date - i don't even know if the mailman interfaces have changed from
underneath, and i *know* that the zope ones have - but the product still
may offer some useful clues about one way to hook up with mailman.  I just
uploaded a tarball of it to my members folder - see 

  http://www.zope.org/Members/klm/MailmanStuff/MMRoster.tar.gz

(I know ethan is interested in this topic, and barry warsaw, mailman's
current maintainer and my old colleague/buddy, has also expressed
interest, so i'm cc'ing them.)

All this said, i'm spread too thin at the moment to be able to *do* much
more than watch, maybe chime in, if stuff happens...

Ken Manheimer
[EMAIL PROTECTED]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] ANN: Perl For Zope

2000-06-01 Thread Ng Pheng Siong

On Wed, May 31, 2000 at 10:45:31PM +1200, Rodger Donaldson wrote:
 the sheer, stupid *hatred* directed by a big
 chunk of the list at anyone who doesn't draw and quarter perl 
 programmers on
 sight 

That's an overstatement.


 But if this list is representitive of the python
 community - well, I don't need more idiots in my life.

Oooo, now you're calling everyone an idiot.

May I ask if you do this stuff for a living, or for fun? 

I do this for fun, and I intend to try Enhydra (Java), Mason (Perl),
ACS (Tcl) and assorted other stuff. I don't let other people who 
use those stuff put me off. 

If I am doing this for a living, the type of people on the
users' mailing list is just one (minor) factor in selecting the
technology.

gratuitious insult
Your response is typical of one from the Perl community. No wonder 
people on this list are up in arms over the idea of integrating
Perl and Zope. They worry more people like you will turn up!
/gratuitious insult

My $0.02.

Cheers.
-- 
Ng Pheng Siong [EMAIL PROTECTED] * http://www.post1.com/home/ngps


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] ODBC connection to Oracle

2000-06-01 Thread vsbabu

Hi there,

Has anyone tried connecting using  ZODBC
from a WinNT machine to an Oracle database?

The ODBC connection works. But when I create
a ZODBC connection from ODBC dsn, it doesn't.

I give the connect string as
DSN userid password

as mentioned under ZODBC add screen...


Any help?

Thanks
Babu

http://vsbabu.csoft.net

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] something missing in my Oracle setup?

2000-06-01 Thread Alexandre A. Drummond Barroso

I'm having the same kind of problem.
This is my environment:

RedHat Linux 6.1
Stronghold 2.4.2/Apache1.3.6
Zope 2.1.6 (running as PCGI)
DCOracle 1.3.0
ZOracleDA 2.1.0
Oracle 8.1.6 (client with C-Pro environment installed)

The environment is properly set: LD_LIBRARY_PATH is correct, ld.so.conf was properly 
midified and I've already run ldconfig.
I've successfuly compiled the DCOracle product and tested it with success.

But when I try to create a ZOracle connection object, the server gives me the 
following answer: "Internal Server Error - The server
encountered an internal error or misconfiguration and was unable to complete your 
request". And here is the message I've found in
the error log file: "[error] PCGI Error: [503 Service Unavailable] ((116) unable to 
connect, fd=4) Success".

Does anybody know what is happening and how to solve this?

TIA,

Alexandre.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 31, 2000 10:44 AM
To: [EMAIL PROTECTED]
Subject: Re: [Zope] something missing in my Oracle setup?


I wanted to thank Jens and Anthony for the pointers.

I ended up doing the full server install.  The only other thing
required was to put $ORACLE_HOME/lib in my ld.so.conf and run ldconfig.

Things seem to work fine now, though I haven't really hammered on
DCOracle yet.

Thanks again,

-Justin



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] dtml-tree div issue from this morning.

2000-06-01 Thread Patrick Keane


The problem is the order.

Netscape apparently likes to see URLS like

http://www.my.com/this.html#foo?var=data
not
http://www.my.com/this.html?var=data#foo

It chokes on the first, and is happy with the 2nd.  IE is happy with
either.  Any chance this can be checked in as a revision to the tree
code to be tested and confirmed?

PS - Which is the standard format of the two (as per ww3 or whatnot?)

pk



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Interbase / Cacheing - A thought

2000-06-01 Thread Cary O'Brien

 Ian Sparks wrote:
  
  Had a thought that I wanted to share.
  
  Interbase has a feature known as "event alerts". In a trigger you can post
  "events" which are just fixed data strings e.g. "DataAdded" or
  "Insert_tblUsers".
 
 PostgreSQL has them too.
 
 It's not (afaik) supported by DB-API, but could be used in a DA that talks 
 to some lower level API.
 

They are supported by the TCL interface that comes with PostgreSQL 
(src/interfaces/libpgtcl in the PostgreSQL source tree) if you are
looking for examples of how they work.  (Search for listen and
notify in pgtclCmds.c

-- cary


  A client database connection can register to listen to these events.
  
  I don't know if any Zopeish Interbase access method supports this (ODBC
  doesn't to my knowledge) but it would be incredibly useful for synching
  cached database objects. Zope could hold a representation of the table data
  in cached objects for quick access. Each object could have one or more
  "event" methods which related to a database event. When the database adaptor
  received an event message from Interbase it could inform all objects with a
  matching event method (these methods would refresh their cached data with
  current values from the database).
  
  In this way database and Zope cache could be synced *without* having to poll
  the database at an interval. In all, a very efficient mechanism.
 
  Just an idea I wanted to put out there.
 
 Thanks for getting it out.
 
 I have been contemplating the same for PostgreSQL but have been too lazy to do 
 it myself ;)
 
 --
 Hannu
 
 --__--__--
 


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] Proposal for mail-in to Zope

2000-06-01 Thread Richard Folwell

 Some alternatives we considered and didn't go for:
   - write something in Zope to listen for SMTP connections, effectively
 large portions of an MTA. This would be cool but painful.

Providing a basic SMTP server is not at all difficult to do in Python.  I did a 
cut-down one once as
part of a test system, and extending it would be straightforward (the cut-downness was 
not in
structure, just did not bother to implement the SMTP commands I did not need - the 
underlying design
was a state-machine [natch!] - however one problem I did come across was that it was 
not possible to
implement the state machine completely from the RFC, which contains ambiguities).

Some potential troublespots in re-visiting this work:

 - error handling, if done properly, might cause some problems (the state machine 
helps a lot here,
but I cannot guarantee that I did not miss something obvious)
 - emails nowadays can be very large, with MIME encoded movies and stuff.  Each 
received email has
to be stored somewhere - can we (would we want to?) reliably store this kind of data 
in the ZODB?

   - pull mail from a POP or IMAP server. This had the downside that it
 introduced polling into the system (slow) and also required something
 to happen on a schedule, which doesn't happen in Zope yet.

Funny you should mention this.  I am considering moving my domain from the current ISP 
to a friend's
server.  One of my current ISP's services that I use is webmail, so I was looking at 
how this could
be done after the move.  Sending mail through a web interface is a doddle, but what 
about viewing
received emails?  I had got as far as realizing that something could be built on 
Python's support
for POP3 - use POP3 to collect the headers of currently available messages, create a 
web page
displaying them, with each entry linked to a page that would download (without 
deleting) an
individual email.

I think that my current ISP's webmail system must be doing something like this.  So 
far it looks
fairly straightforward to implement.

Richard
(who now realizes that he has to find that old Python SMTP server code - now I wonder 
where I put it
...)


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Form POST Question (and a QUERY_STRING Q.)

2000-06-01 Thread Andrew H. Chatham

 Is there a way for me to get the raw posted data and forward that
 too via the RESPONSE object?

What I ended up doing was following Zen's suggestion and creating an
external method that basically does (not an exact quote; it's on another
computer):

def generateForm(self):
outForm = []
for (name, value) in self.REQUEST.form:
outForm.append ('input type="hidden" name"%s" value="%s"' % (name,
value)
return string.join (outForm, '\n')

It's a little more than that, but I don't have it in front of me. (this
wouldn't deal with quotes right).

I haven't run into the name="mynum:int" problem yet, but maybe that's
just luck, or maybe it's just because of my particular forms. The bad
part is that I don't know of any way to pass POST data on a redirect
(anybody know how to do this, or is this impossible?), so for now I just
have a form that's nothing but a Submit widget with all the other dat a
hidden. 

You can of course change it all into GET data and just join them
together using:
   '%s=%s' % (url_quote_plus(name), url_quote_plus(data))
and joinging with , in which case you actually can do a redirect, but
presumably someone made it POST for a reason, so I'm not going to mess
with it. It's an inelegant solution and might not work for everything,
but it's all I have for now!

Andrew

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] How do I detect in DTML when I'm in the management interface?

2000-06-01 Thread Jason Byron

I have a ZClass that I would like to be able to create
using the management interface and in DTML from the
users end with the same DTML script.  I believe I need
something like this to get it to work:

(if in management interface)

dtml-call "create_my_zclass(_.None, _)"

(else)

dtml-with "manage_addProduct['my_zclass']"
dtml-call "create_my_zclass(_.None, _, NoRedir=1)"
/dtml-with

and create_my_zclass has this code in it:

dtml-with
"my_zclass.createInObjectManager(REQUEST['id'],
REQUEST)"
dtml-call
"propertysheets.my_zclass_info.manage_editProperties(REQUEST)"
/dtml-with
...

How do I create the first if else?
Is there a better/easier way of doing this?




__
Do You Yahoo!?
Send instant messages  get email alerts with Yahoo! Messenger.
http://im.yahoo.com/

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Zope on Windows NT

2000-06-01 Thread Luis Cortes

Hello,

Does anybody know how to change the Port that Zope uses on Windows NT
when it is installed as a Service???  I know how to change it when it is
installed as standalone - but that doesn't work when I run it as a service. 


Thanks for your help,
Luis.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Zope on Windows NT

2000-06-01 Thread Phil Harris

Luis,

see:

http://zope.nipltd.com/public/lists/zope-archive.nsf/47ba74c812dbc5dd8025687
f0024bb5f/341813706896c719802568e1007a5a9c?OpenDocumentHighlight=0,currentc
ontrolset

Which will probably mangle in the mailer, so if it don't work:

goto http://zope.nipltd.com/public/lists/zope-archive.nsf/$$Search?OpenForm

and search for currentcontrolset

hth

Phil
[EMAIL PROTECTED]
- Original Message -
From: "Luis Cortes" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: 01 June 2000 23:18
Subject: [Zope] Zope on Windows NT


 Hello,

 Does anybody know how to change the Port that Zope uses on Windows NT
 when it is installed as a Service???  I know how to change it when it is
 installed as standalone - but that doesn't work when I run it as a
service.


 Thanks for your help,
 Luis.

 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Thread-safe PostgreSQL adaptor?

2000-06-01 Thread Daryl Tester

Oleg Broytmann wrote:

 On Thu, 1 Jun 2000, Hannu Krosing wrote:
 True. The problem is that in some perverted fashion it seems to me that if
 I use a GPL library with something the whole thing should go GPL, i.e. my

This was my impression of GPL too.  I thought that's why the LGPL (?) was
created.

No - just using the GPL'd adapter do not require you to distribute Zope
 under GPL. The adapter is just a "plugin"; there was an explanation from
 RMS that GPL'd plugins does not require to GPL the main program and vice
 versa; there probably will be newer version of GPL (don't know how soon)
 which will explain the plugin thingie in details.
 
In short - only linking with GPL code "infects" your code with GPL.

This is unclear, and sounds like hair splitting to me.  What's the
difference between linking and using a plugin?  What happens when
the plugin is a dynamically linked shared library?  I haven't seen
PoPy, but if it's a C library interface under Python (like Pygresql)
the chances are good.

Confusion reigns.


Regards,
  Daryl Tester

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] ODBC connection to Oracle

2000-06-01 Thread Theodore Patrick

We have had mixed results depending on the ODBC driver you use to make your
DSN.

Here is what I found.

1. Microsofts ODBC Driver for ORACLE on NT4.0, NT2000
-CREATE DSN -OK
-ZOPE ZODBC -OK
-ZSQL METHODS -OK

2. ORACLE ODBC DRIVER on NT 4.0, Especially NT2000
-CREATE DSN -OK
-ZOPE ZODBC CONNECTION -OK Visually! On First Query it will break.
-ZSQL METHODS -Broken

When in doubt use the MICROSOFT DRIVER for ODBC! That is our rule. You will
also find that this same problem exists in using ORACLE drivers when viewing
databases via ACCESS. It will typically crash Access and potentially more.

Theodore E. Patrick
Ishophere.com - Indigo Networks


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Thursday, June 01, 2000 12:16 PM
To: [EMAIL PROTECTED]
Subject: [Zope] ODBC connection to Oracle


Hi there,

Has anyone tried connecting using  ZODBC
from a WinNT machine to an Oracle database?

The ODBC connection works. But when I create
a ZODBC connection from ODBC dsn, it doesn't.

I give the connect string as
DSN userid password

as mentioned under ZODBC add screen...


Any help?

Thanks
Babu

http://vsbabu.csoft.net

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Python and Zope Question

2000-06-01 Thread Scott Burton

Major newbie here. I am wanting to create a python method that 
iterates over items in a folder object in Zope. I am struggling with 
how to access objects in the ZODB in python. Here's the script in the 
simplest form.
for x in folderObject :
  return x

I am going to do things to the items once I have access to them, I 
just can't figure out how to reference ZODB objects in Python. I have 
done searches on the zope site and looked through the zdp but could 
not find anything.

I am calling the method from a DTML-var pythonMethodName with no 
args. My assumption is that since this is a Python Method, it has 
access to the ODB structure without having to pass it anything. Am I 
wrong here?

Thanks,

Scott B.
Voice: 661-325-0288
Business: www.launchpoint.net
Weblog Portal: www.blogthis.com

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Python and Zope Question

2000-06-01 Thread R. David Murray

On Thu, 1 Jun 2000, Scott Burton wrote:
 for x in folderObject :
   return x
 
 I am going to do things to the items once I have access to them, I 
 just can't figure out how to reference ZODB objects in Python. I have 

for x in folderObject.objectValues(['some_meta_type','some_other_type']):
  do stuff

If the external method is in a folder, then 'self' is the folder
object when the method gets called.

--RDM


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Python and Zope Question

2000-06-01 Thread Kevin Dangoor

- Original Message -
From: "Scott Burton" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, June 01, 2000 6:58 PM
Subject: [Zope] Python and Zope Question


 Major newbie here. I am wanting to create a python method that
 iterates over items in a folder object in Zope. I am struggling with
 how to access objects in the ZODB in python. Here's the script in the
 simplest form.
 for x in folderObject :
   return x

You need to put self as a parameter to your method and then do
for x in self.folderObject.objectValues():
  return x

You use "self" to get at all of the stuff in the ZODB. Note that self is
bound to the container of the PythonMethod. So, if you want the PM to work
on the current folder, you can just do:

for x in self.objectValues():
  return x

(Of course, this will just return the first value, but that was your example
:)

Kevin


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] The Zope Weekly News

2000-06-01 Thread ethan mindlace fremen

This week's ZWN covers the upcoming Open Source Convention,
the forthcoming Zope 2.2, the PTK's further integration
with the community and Zope.org's new community features and recent
events.
   
The opinions expressed in Zope Weekly news are solely the author's,
and not the opinions of Digital Creations, The Zope Community
at-large, or the Spanish Inquisition.

The Zope Weekly News now has a "permanent home",
http://www.zope.org/Documentation/ZWN.

And Now For Something Completely Different:

Open Source Convention

  Zope is going to have a strong showing at the "Open Source
Convention",
  http://conferences.oreilly.com/oscon2000/, July 17-20, 2000
  This conference should be pretty amazing.  Guido 
  von Rossum is giving a State of Python speech,
  Gregory Bendord is giving a futuristic keynote
  on the "Comfy Culture", and the Zope community
  will be there as well:

  o Ryan Huges will be "talking about worldpilot",
http://www.oreillynet.com/pub/e_sess/725

  o Paul Everitt will be talking about
"the Zope-Mozilla Initiative",
http://www.oreillynet.com/pub/e_sess/853

  o Christopher Petrilli will be giving a
tutorial on "Zope for developers",
http://www.oreillynet.com/pub/w/python_tutorials.html
based on the materials "taught at IPC8",
http://www.zope.org/Members/petrilli/Presentations/

  o In the "It's like Zope just not" department,
Elaine Ashton is holding a Birds of a 
Feather to talk about how Zope's success
isn't due to the inherent goodness of
Python, and that "Perlers can do it too",
http://conferences.oreilly.com/oscon2000/bofs/ 


Documentation Status

  -- by Amos Latteier

I'd like to share some what Michel Pelletier and I have been doing to
improve Zope documentation.

  * We conducted a poll to help us determine what was most needed. We
found out that Zope docs are of middling quality and folks most want new
user help.

  * We wrote an online help system for Zope and wrote help content for
all management screens. Right now we are updating this content for Zope
2.2. The help system will ship with Zope 2.2 and an alpha is available
right now.

  * We've started a Zope API documentation process. Right now there is
an extensive Zope API documentation wiki on Zope.org. The fruits of this
labor will be API docs that will ship with Zope in the online help
system. Right now several API docs are complete and are included in the
current 2.2 alpha.

  * We've overhauled Zope training materials and will make them
available publicly in the next week or so.

  * We're still working on Zope Guides and References replacements. I
think that the training materials will be quite useful for this effort.
I hope to have Guide and Reference replacements done by the end of the
summer.

Zope Status

  -- by Brian Lloyd

 Summary

  o Lots of collector issues were completed for inclusion in 2.2 beta.

  o All of the hard thinking for the remaining todo list for beta 1 
is basically done. Now its a race to the finish line :^)


Last week highlights

   20 collector issues were fixed last week in preparation for 2.2
beta,  
   mostly issues that pre-date the 2.2 alpha release.
   Kudos to this week's MVPs who submitted patches and 
   helped to diagnose bugs and test fixes:

o Toby Dickenson contributed a patch to speed up Zope
  startup.

o Itamar Shtull-Trauring and Chris Withers tracked
  down a problem with image caching that affected
  certain versions of Netscape browsers.

o Phillip Eby helped uncover a problem with double
  aborting of objects registered with the transaction machinery.

o Itamar also sent a patch for Netscape misfeature
  that recognizes Windows extended ISO Latin-1 
  characters as HTML delimiters which would have 
  slipped by HTML quoting.

o Anthony Baxter and Kevin Dangoor helped track down
  a problem with importing in the 2.2 alpha release.

o Shane Hathaway did some much-needed work on the
  DateTime module.

Many folks also participated in a discussion of a
proposed Observer interface to support event-based designs
(like email notification) in Zope. There is now a proposed
set of Observer interfaces on the "interfaces Wiki",
http://www.zope.org/Members/michel/Projects/Interfaces
on Zope.org (and there was much rejoicing). 

Next week

  Finish up outstanding issues and get a 2.2.0 beta 1 release out.
  The outstanding issues to finish before the beta are:

o Changing how ownership is handled for move / rename
  operations. Ownership info will not change for move 
  or rename operations, and a new knob will likely be 
  added to the "import" screen so you can choose to
  import objects with their existing ownership 
  information intact. The online help for ownership
  will be updated accordingly.

o Some basic hooks to support virtual hosting (a la
  SiteAccess) have been designed and will be added 
  to allow product 

[Zope] images in access database

2000-06-01 Thread Terry Kerr

Hi,

I would like to be able to have gifs/jpgs stored in an MS access
database and then pull the out using zope and display them in rendered
documents.  I am completely new to access.  I have successfully
installed the ODBCDA into zope, and are able to connect to an access
database and pull ordinary text data out of tables.

I have created a table in access with a column of type 'OLE object' and
put a gif image in as data.  This is the only way I know how to get an
image into the table.  The problem I think with this is that it is a
link to the gif on the HDD, and doesn't actually have the data in the
table?  Anyway, when I pull the data out of the table from zope, access
puts a header and footer around the gif binary data, and hence a simple
dtml-var blah wont work to display the image.  Has anyone else every
pulled images from an access database.  Will I have to write a method to
strip the header and footer from the returned data before displaying the
gif?

terry.

--
-
Terry Kerr ([EMAIL PROTECTED])
Adroit Internet Solutions
http://www.adroit.net/
03 9563 4461
0414 938 124



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Interbase / Cacheing - A thought

2000-06-01 Thread Hannu Krosing

Cary O'Brien wrote:
 
  Ian Sparks wrote:
  
   Had a thought that I wanted to share.
  
   Interbase has a feature known as "event alerts". In a trigger you can post
   "events" which are just fixed data strings e.g. "DataAdded" or
   "Insert_tblUsers".
 
  PostgreSQL has them too.
 
  It's not (afaik) supported by DB-API, but could be used in a DA that talks
  to some lower level API.
 
 
 They are supported by the TCL interface that comes with PostgreSQL
 (src/interfaces/libpgtcl in the PostgreSQL source tree) if you are
 looking for examples of how they work.  (Search for listen and
 notify in pgtclCmds.c
 

The lower level python interfaces (_pg, pg) support them too.

-
Hannu

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Interbase / Cacheing - A thought

2000-06-01 Thread Hannu Krosing

Ian Sparks wrote:
 
 Hannu,
 
 Does PostgresSQL allow you to have dynamic events? By this I mean can you do
 things like :
 
 PostEvent "Update_tblUsers_Record_" + new.RecordID;

No, but it may change sometime (possibly soon) as PostgreSQL is an
open-source
product ...

 I believe that in Interbase the events are compiled into the trigger, not
 interpreted at Runtime so you can't have an Interbase event alert you to a
 change in a particular record, only that a change has occurred on a table.

The same is true for postgrSQL, only the syntax is LISTEN/NOTIFY.


Hannu

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] [announce] SQL Session 0.2.9 available.

2000-06-01 Thread Anthony Baxter

A long-overdue update to SQL Session is out.

This version (0.2.9) will be the last version in the 0.2.x series
(assuming no brown paper bag bugs in this release). I will be now working 
on 0.3.x, which will hook into the transaction machinery so that it only
makes a single set of updates in a transaction.  This should lower
the database hits significantly.

Installation: If you have a previous version of SQLSession, you might
need to go to the management panel of your Session object after installing
the new version and hit 'Change'. 
Note that the default schema has changed to avoid bad words like 'name',
'session', 'sessions' and 'value', since some databases have issues with
these.


Changelog from 0.2.3:

Code now uses it's own decodestring/encodestring, because the
standard python lib supplies an incredibly stupid implementation.
(take a string, wrap it in a StringIO, then pass it to encode
which then pulls out the string again.) Rough testing shows that 
a small string encode or decode drops from 1ms or so to about 
1/20th of that. Given how often this is done, it makes a big
big difference.

Jeff Hoffman supplied a patch that makes SQLSession work with 
2.2 - adding __allow_access_to_unprotected_subobjects__ = 1 to
the SESSION object. Ooo, magic.

Changed the default schema and queries to avoid using the words 
'session', 'value' or 'name'. Different databases have different
ideas of which are and are not reserved words.

Added a new option 'path', to specify the cookie path. This means 
that you can specify, say, /foo, and only the browser will only
send the cookie when requesting URLs beginning with /foo.

Re-did some of the internals to avoid what may or may not have been 
a refcount cycle. I'm still not sure what caused it - assigning the
SESSION object to REQUEST.SESSION, with SESSION keeping a reference 
to the parent Session object. It now finds Session by acquisition.

A number of dumb bugs were squished.

Anthony
--
Anthony Baxter [EMAIL PROTECTED]
It's never too late to have a happy childhood.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] MS SQL server and Zope

2000-06-01 Thread Andrew Kenneth Milton

+[ paul beard ]-
| anyone have any insight on accessing a SQL server store thru Zope? I have
| an app that's backed by SQL server and rather than buy r/w licenses for
| it, I'd be happy to use Zope to access it readonly. 

What platform are you running Zope under?

-- 
Totally Holistic Enterprises Internet|  P:+61 7 3870 0066   | Andrew Milton
The Internet (Aust) Pty Ltd  |  F:+61 7 3870 4477   | 
ACN: 082 081 472 |  M:+61 416 022 411   | Carpe Daemon
PO Box 837 Indooroopilly QLD 4068|[EMAIL PROTECTED]| 

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] MS SQL server and Zope

2000-06-01 Thread Anthony Baxter

 paul beard wrote
 anyone have any insight on accessing a SQL server store thru Zope? I have
 an app that's backed by SQL server and rather than buy r/w licenses for
 it, I'd be happy to use Zope to access it readonly. 

You can use the Sybase libs to access it. See 
http://www.zope.org/Members/anthony/dcSybase-on-linux/



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Virtual host admin under Apache+ZServer+SiteAccess

2000-06-01 Thread J M Cerqueira Esteves

On Thu, Jun 01, 2000 at 06:18:25PM -0600, ethan mindlace fremen wrote:
 o Some basic hooks to support virtual hosting (a la
   SiteAccess) have been designed and will be added 
   to allow product authors to write virtual hosting 
   support without fragile dependencies on parts of
   the Zope core.

Greetings

For security reasons, I would like to do web administration of remote Zope
installations via ssh port forwarding.  For instance, while running

  ssh -g -L 8080:foo.bar:8080 foo.bar

one can access a ZServer on foo.bar:8080 using  http://localhost:8080/.

However, I'm using Apache with ZServer and SiteAccess for virtual
hosting as documented in http://www.zope.org/Members/anser/apache_zserver, 
and this has a nasty implication: once I activate a SiteRoot inside some
Zope folder "/parrot" for making it the top folder of a virtual host
http://parrot.bar/, the use of URLs under http://parrot.bar/ is forced
whenever administering content under the "/parrot" folder, even if
arriving from a foo.bar:8080 document: the browser is then no longer
connecting through the secure channel but talking directly with
http://parrot.bar/.  Of course this could also be redirected, but not so
easily.

In this example, it would be nice to be able to administer the contents
of http://parrot.bar/ either via parrot.bar (typically for less
sensitive content, end users) or via foo.bar:8080 (more delicate
administrative tasks, administrators which know how to encrypt
communication with ssh).  Is there interest (or is it feasible) to make
virtual hosting support evolve to allow this?  (I didn't think much
about the implications, but can already notice a problem under the
virtual hosting strategy above (ZServer+Apache): how to make Zope
"guess" if it should write absolute URLs for parrot.bar or for foo.bar:8080?)

Even better would be web content administration under SSL, of course :)

 jmce: +351 919838775 ~ http://artenumerica.com/ ~ http://artenumerica.org/


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )