[Zope] Re: External Methods, Proxy Roles, and Executable Security

[George Lee]

p.s. This is in the context of a external method in a workflow scripts
folder, if  that helps.

Peace,
George



On 11/19/05, George Lee <[EMAIL PROTECTED]> wrote:
> In CMFCore 1.5.4:
>
> If a low-security-clearance user calls an external method that pastes
> an object from a PortalFolder, he gets an error because the following
> line in CMFCore.PortalFolder fails:
>
> if not sm.checkPermission(DeleteObjects, parent):
>raise AccessControl_Unauthorized
>
> This is even the case if "sm.checkPermission" is changed to
> "_checkPermission", which takes into account proxy roles. The external
> method does not allow proxy roles attached, so I can't just add a
> "Manager" proxy role.
>
> Because I called the pasting in an external method, I expected it to
> go through without security problems! Is this a right expectation /
> and a bug, or a wrong expectation?
>
> Peace,
> George
>
>
>
>
>
>
>
> On 11/18/05, George Lee <[EMAIL PROTECTED]> wrote:
> > I forget if I submitted a collector issue about this before, but I
> > didn't see it. I just posted one at
> > :
> >
> > Title: PortalFolder.py _verifyObjectPaste ignores executable security
> >
> > Version info: CMF 1.5.4 but also in trunk
> >
> > _verifyObjectPaste calls "sm.checkPermission(permission_name,self)"
> > rather than "_checkPermission(permission_name,self)"
> >
> > This makes it ignore executable security. So, if _verifyObjectPaste is
> > in an external method or in a script with sufficient proxy roles, it
> > raises an Unauthorized error for users when the external method /
> > proxy role security should suffice.
> >
> >
> >
> > On 9/9/05, Dieter Maurer <[EMAIL PROTECTED]> wrote:
> > > George Lee wrote at 2005-9-8 23:57 -0400:
> > > > ...
> > > >Is it okay to just replace sm.checkPermission with _checkPermission
> > > >from CMFCore.utils or is that not okay?
> > >
> > > Yes. But, please file a bug report as well.
> > >
> > > >Also Dieter I noticed that Alan Runyan and you briefly discussed this
> > > >issue back in 2002:
> > > >http://mail.zope.org/pipermail/zope-cmf/2002-September/015350.html
> > >
> > > Any internal use should always take executable security (i.e.
> > > executable ownership and proxy roles) into account.
> > > Not doing so is a but, as things expected to be possible are not
> > > and (maybe even worse) things expected to be impossible may
> > > be possible.
> > >
> > > There may be a need for application code to check the permissions
> > > of the user with proxy roles not taken into account.
> > >
> > >   E.g. a script that must use a "Manager" roles to do one
> > >   thing but does not want to do another unless the current
> > >   user has specific permissions.
> > >
> > > For this case, there also should be a method checking
> > > permissions with proxy roles not taken into account.
> > >
> > > --
> > > Dieter
> > >
> >
>
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] External Methods, Proxy Roles, and Executable Security

[George Lee]

In CMFCore 1.5.4:

If a low-security-clearance user calls an external method that pastes
an object from a PortalFolder, he gets an error because the following
line in CMFCore.PortalFolder fails:

if not sm.checkPermission(DeleteObjects, parent):
   raise AccessControl_Unauthorized

This is even the case if "sm.checkPermission" is changed to
"_checkPermission", which takes into account proxy roles. The external
method does not allow proxy roles attached, so I can't just add a
"Manager" proxy role.

Because I called the pasting in an external method, I expected it to
go through without security problems! Is this a right expectation /
and a bug, or a wrong expectation?

Peace,
George







On 11/18/05, George Lee <[EMAIL PROTECTED]> wrote:
> I forget if I submitted a collector issue about this before, but I
> didn't see it. I just posted one at
> :
>
> Title: PortalFolder.py _verifyObjectPaste ignores executable security
>
> Version info: CMF 1.5.4 but also in trunk
>
> _verifyObjectPaste calls "sm.checkPermission(permission_name,self)"
> rather than "_checkPermission(permission_name,self)"
>
> This makes it ignore executable security. So, if _verifyObjectPaste is
> in an external method or in a script with sufficient proxy roles, it
> raises an Unauthorized error for users when the external method /
> proxy role security should suffice.
>
>
>
> On 9/9/05, Dieter Maurer <[EMAIL PROTECTED]> wrote:
> > George Lee wrote at 2005-9-8 23:57 -0400:
> > > ...
> > >Is it okay to just replace sm.checkPermission with _checkPermission
> > >from CMFCore.utils or is that not okay?
> >
> > Yes. But, please file a bug report as well.
> >
> > >Also Dieter I noticed that Alan Runyan and you briefly discussed this
> > >issue back in 2002:
> > >http://mail.zope.org/pipermail/zope-cmf/2002-September/015350.html
> >
> > Any internal use should always take executable security (i.e.
> > executable ownership and proxy roles) into account.
> > Not doing so is a but, as things expected to be possible are not
> > and (maybe even worse) things expected to be impossible may
> > be possible.
> >
> > There may be a need for application code to check the permissions
> > of the user with proxy roles not taken into account.
> >
> >   E.g. a script that must use a "Manager" roles to do one
> >   thing but does not want to do another unless the current
> >   user has specific permissions.
> >
> > For this case, there also should be a method checking
> > permissions with proxy roles not taken into account.
> >
> > --
> > Dieter
> >
>
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] Reprise -- Manager Proxy Role ineffective for deleting/moving objects

[George Lee]

I forget if I submitted a collector issue about this before, but I
didn't see it. I just posted one at
:

Title: PortalFolder.py _verifyObjectPaste ignores executable security

Version info: CMF 1.5.4 but also in trunk

_verifyObjectPaste calls "sm.checkPermission(permission_name,self)"
rather than "_checkPermission(permission_name,self)"

This makes it ignore executable security. So, if _verifyObjectPaste is
in an external method or in a script with sufficient proxy roles, it
raises an Unauthorized error for users when the external method /
proxy role security should suffice.



On 9/9/05, Dieter Maurer <[EMAIL PROTECTED]> wrote:
> George Lee wrote at 2005-9-8 23:57 -0400:
> > ...
> >Is it okay to just replace sm.checkPermission with _checkPermission
> >from CMFCore.utils or is that not okay?
>
> Yes. But, please file a bug report as well.
>
> >Also Dieter I noticed that Alan Runyan and you briefly discussed this
> >issue back in 2002:
> >http://mail.zope.org/pipermail/zope-cmf/2002-September/015350.html
>
> Any internal use should always take executable security (i.e.
> executable ownership and proxy roles) into account.
> Not doing so is a but, as things expected to be possible are not
> and (maybe even worse) things expected to be impossible may
> be possible.
>
> There may be a need for application code to check the permissions
> of the user with proxy roles not taken into account.
>
>   E.g. a script that must use a "Manager" roles to do one
>   thing but does not want to do another unless the current
>   user has specific permissions.
>
> For this case, there also should be a method checking
> permissions with proxy roles not taken into account.
>
> --
> Dieter
>
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Problem with multiple Browser Id Managers

[Pablo Ziliani]

Thanks Chris and Dieter for your feedback, please see my notes below.

Chris McDonough wrote:


On Thu, 2005-11-17 at 22:47 -0300, Pablo Ziliani wrote:
 

since first (as I 
said) I had no trouble in adding another deeper BMI; and second, because 
any attempt to delete root's BMI ends in a "/browser_id_manager/ cannot 
be deleted." page error message.


Any hint?
   


I suspect it's a bug that the root browser id manager cannot be deleted.
That said, it shouldn't be necessary to delete it, as the session data
manager will use the "first" bid manager it finds in its acquisition
path to get the browser id (see
Products/Sessions/SessionDataManager.py).  In your case, probably what's
happening is that the machinery is finding the /session_data_manager
object at the root, and the "first" bid manager in *its* acquisition
path is the root /browser_id_manager.  If you also create a
'session_data_manager' object in your site, this one should be found and
it should use its peer 'browser_id_manager' object.

This area is somewhat murky as it's unusual to need multiple browser id
managers per server, so I'll be interested to know if creating a session
data manager fixes this problem.

- C

Adding the new session_data_manager did the trick as you both suggested, 
THANKS!


However, my first attempt was unsuccessful as upon creation I had set it 
to use an non-existing Transient Object Container (TrOC) under 
/temp_folder, in hope that this would create it at the same time. Yes, I 
know how easily I come to complicate things, but my hope was actually 
real: I did got both objects created... until I restarted Zope of 
course, where (consistently with its container function) I lost the new 
TrOC forever.
I can see in OFS/Application.py that both the temp_folder and the 
default Transient OC are recreated on startup, so I guess that the only 
way to get a "permanent" TrOC is by monkey patching Zope, what of course 
is beyond my needs, given that I can use (as I finally did) the default 
TrOC.


However now my question is: can't this configuration lead to session 
collisions, given that now I have multiple BIMs/SDMs making writes to 
the same TrOC?


Thanks in advance for your advise,
Pablo

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] convert DTML Document to a folder.

[Jonathan Cyr]

So, you'd like to turn an
independent entry into a container to hold more info?

-Jon

Martin Koekenberg wrote:

  The DTML Documents are userinfo documents.

I want to create a photoorder form and generate a dtml document with that 
users orders. I want to place that in his user folder.

Martin Koekenberg
-Original Message-
From: Andreas Jung <[EMAIL PROTECTED]>
To: Martin Koekenberg <[EMAIL PROTECTED]>, zope@zope.org
Date: Wed, 16 Nov 2005 15:42:35 +0100
Subject: Re: [Zope] convert DTML Document to a folder.

  
  

--On 16. November 2005 15:35:14 +0100 Martin Koekenberg 
<[EMAIL PROTECTED]> wrote:



  Hello,

Is it possible to convert a DTML Document to a folder, Both with
properties  ?
I use Zope 2.8.4.

  

Converting a piece of textual content to a folder makes no sense. WHat
are 
you trying to do???

-aj



  
  

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

  


-- 
Jonathan Cyr
http://www.cyr.info
http://www.weddingweblog.com
[EMAIL PROTECTED]


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] FYI: Zope 3 Book on Safari

[Jonathan Cyr]

FYI,

I noticed that O'Reilly just added Steven Richter's Zope 3 book to their 
Safari service.


I now read all my Safari-based manuals on a Tablet PC, rather than 
stocking my bookshelves with the appropriate resources at $30-50 bucks a 
pop.


Even though I'd already bought the Zope 3 book, I think it's great that 
I don't need to have it with me now.  I'll probably donate it to the 
local library as I did with the rest of my bookshelf resources.


O'Reilly, for some reason, doesn't seem to be the biggest fan of Zope or 
Python, so it's nice to see this addition to the service.


http://safari.ora.com

-Jon Cyr

--
Jonathan Cyr
http://www.cyr.info
http://www.weddingweblog.com
[EMAIL PROTECTED]

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] conflicts, sessions, and programming best practices guidelines

[Dennis Allison]

Thanks Dieter.  


On Fri, 18 Nov 2005, Dieter Maurer wrote:

> Dennis Allison wrote at 2005-11-15 14:54 -0800:
> >Has anyone prepared a set of best practice guidelines on the techniques to
> >use to minimize conflicts?
> 
>   *  Localize out into separate persistent objects attributes
>  with high write frequency.
> 
>  E.g. when you have a counter, put into its own
>  persistent object (you can use a "BTrees.Length.Length" object
>  for a counter).
> 
>   *  Implement "conflict resolution" for your high frequently
>  written persistent objects.
> 
>  Formerly, "TemporaryStorage" had only very limited
>  history information to support conflict resolution (which
>  limited the wholesome effect of conflict resolution).
>  Rumours say that this improved with Zope 2.8.
> 
>   *  Write only when you really change something.
> 
>  E.g. instead of "session[XXX] = sss" use
>  "if session[XXX] != sss: session[XXX] = sss"
>  (at least, if there is a high chance that "session" already
>  contains the correct value).
> 
> 
> 

-- 

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] filename splitter

[Dieter Maurer]

Tino Wildenhain wrote at 2005-11-15 21:07 +0100:
>Am Dienstag, den 15.11.2005, 19:26 +0100 schrieb Dieter Maurer:
>> Peter Bengtsson wrote at 2005-11-15 11:47 +:
>> >Hi, I don't usually do this but I need your advise on something.
>> >It's a filename splitter for a KeywordIndex of File objects.
>> >http://www.peterbe.com/plog/filename-splitter
>> >By applying this splitter I hope to be able to search for files by
>> >parts of the filename.
>> 
>> Are you aware, that the "PathIndex" can do this already --
>> especially the "Managable PathIndex" from my "ManagableIndex" product
>> 
>>   
>
>According to your documentation, it could be done with ManageableIndex,
>but PathIndex isnt yet there. Peter splits in the name, not
>just the path.

Are your sure?

  The "Managable PathIndex" splits a string string at '/' 
  (alternatively it takes a sequence) and indexes the result
  in a way to support quite efficiently subpath searches.

  Thus, it is applicable, if "filename-splitting" means splitting
  at "/' (or you use some arbitrary splitting beforehand)
  *AND* (more importantly) if one is interested in subpath
  queries.

  If the second condition is not given, as KeywordIndex may do
  as well (again a "Managable KeywordIndex" would allow the splitting
  to be formulated as a normalizer).


-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] cookie crumbler and error messages

[Dieter Maurer]

Paul Hendrick wrote at 2005-11-16 17:28 +:
>I'm using CookieCrumbler on a project which sits in / on one server,
>and /project in another.
>I'd like to secure a part of the site through *.metadata files so that
>users of a certain role can't access it. this is done and works well.
>however, when they try to access a part of the site which is secured,
>they're:
>a- given a log in popup prompt which they don't have the details for.

What is "a log in popup prompt"?
Do you mean the browser login dialog?

Usually, you should get the cookie crumblers login form.
If you get instead a browser login dialog, this means that
something went wrong. Often, it means that the URL located
object itself was not protected but it accesses a protected object.


Reconfigure your "error_log" object (ZMI, "Root Folder")
to not ignore "Unauthorized" exceptions.
Reproduce the error and look what the "error_log" might tell
you about it.

-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] convert DTML Document to a folder.

[Dieter Maurer]

Martin Koekenberg wrote at 2005-11-16 15:35 +0100:
>Is it possible to convert a DTML Document to a folder, Both with properties 
>?
>I use Zope 2.8.4.

As you explained in a later message, you seem only be interested
in the document's properties.

This is possible (but requires a bit of work from you):

  You use the "PropertyManager" API (partially documented
  in Zope's online help system; implemented (and documented via
  docstrings) in "OFS.PropertyManager.PropertyManager")
  to ask the document for its property info
  and to recreate the same properties on the folder.

  You will do this in a script (implemented by yourself;
  there is rarely a need to convert a document into a folder
  (and as Andreas explained, it is usually impossible)).


-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] conflicts, sessions, and programming best practices guidelines

[Dieter Maurer]

Dennis Allison wrote at 2005-11-15 14:54 -0800:
>Has anyone prepared a set of best practice guidelines on the techniques to
>use to minimize conflicts?

  *  Localize out into separate persistent objects attributes
 with high write frequency.

 E.g. when you have a counter, put into its own
 persistent object (you can use a "BTrees.Length.Length" object
 for a counter).

  *  Implement "conflict resolution" for your high frequently
 written persistent objects.

 Formerly, "TemporaryStorage" had only very limited
 history information to support conflict resolution (which
 limited the wholesome effect of conflict resolution).
 Rumours say that this improved with Zope 2.8.

  *  Write only when you really change something.

 E.g. instead of "session[XXX] = sss" use
 "if session[XXX] != sss: session[XXX] = sss"
 (at least, if there is a high chance that "session" already
 contains the correct value).


-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Problem with multiple Browser Id Managers

[Dieter Maurer]

Pablo Ziliani wrote at 2005-11-17 22:47 -0300:
> ... BrowserIdManager ...
>Unfortunately, my Zope instance holds multiples virtual sites, so I 
>can't simply change the root BMI that comes with Zope's installation; 
>instead I need to create inner BMI instances. So I did, giving the new 
>instance a different Browser Id Name than the root's _ZopeId both to 
>differentiate them and to be more site-specific.

The "BrowserIdManager" remains usually passive (unless you encode
the session id as port of the Url). It is usually the "SessionDataManager"
which activates the "BrowserIdManager".

Thus, if you need local "BrowserIdManager"s, you must use local
"SessionDataManager"s as well (a standard "SessionDataManager"
located the "BrowserIdManager" via acquisition and the fixed
name).

-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Zope 2.8.4 compilation error

[Dieter Maurer]

Gusti Gonzalez wrote at 2005-11-15 17:11 -0400:
> ...
>/usr/include/python2.3/Python.h:33:20: string.h: No existe el fichero o el
>directorio

This indicates that your "gcc" is not correctly set up:

  It does not find the header files of the standard C runtime library.

-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] session variables in the presence of conflicts

[Dennis Allison]

We are using MySQL but are fully transactional using innodb.

The sort of problems we are seeing are (cruft removed) are things like:

2005-11-18T12:50:16 ERROR txn.3075 Error in tpc_abort() on manager 
 at 1190763820>
2005-11-18T12:50:16 ERROR txn.3075 Error in tpc_abort() on manager 
 at 1190774252>
2005-11-18T12:50:16 INFO ZODB conflict error at 
/courses/topics/navigation_box (55 conflicts since startup at 
2005-11-18T12:13:38)
2005-11-18T12:50:16 ERROR txn.3075 Failed to abort object: Surrogate 
oid=
2005-11-18T12:50:16 ERROR txn.3075 Failed to abort resource manager: 
 at 1190763820>
2005-11-18T12:50:16 ERROR txn.3075 Failed to abort object: Surrogate 
oid=
2005-11-18T12:50:16 ERROR txn.3075 Failed to abort resource manager: 
 at 1190774252>

all of which appear to be the result of the the single conflict error.

The problems occur when the site is under load.  To date I have not been 
able to find a simple instance that can reproduce the problem.  Debugging 
in situ with a live system is not simple.  

In one instance, we have observed a loop where the conflict error 
generated resolution created another conflict error -- or so it appeared.




On Sun, 13 Nov 2005, Peter Bengtsson wrote:

> Have you considered upgrading to PostgreSQL? Things might have changed
> since the last time I tried mysql but I'm pretty sure Postgresql and
> psycopg deals much better with transactions in Zope. Admittedly, this
> doesn't explain why you're getting into trouble just because you've
> upgraded to zodb 3.4.2
> 
> On 11/13/05, Dennis Allison <[EMAIL PROTECTED]> wrote:
> > Zope 2.8.4
> > ZEO 3.4.2
> > ZODB 3.4.2
> > Python 2.4.2 or 2.3.5
> > MySQL 4.0.20
> > MySQL-Python 1.2.1c3 (although we see the same problems with 1.2.0)
> > MYSQLDA 2.0.9
> >
> > We have just moved from Zope 2.7.6 to Zope 2.8.4 motivated, in part, but
> > the ability to avoid read conflicts under ZODB3.4.2.  We have been having
> > a lot of problems: more conflict errors, release of unreleased locks in
> > MySQL transactions, loss of session variables, and others.
> >
> > We use session variables and MySQL very heavily.  Our MySQL tables are
> > MyISAM and are not transactional.
> >
> > ZODB3 3.4.1 introduce some changes to the conflict resolution which
> > appears to be a logical improvement but also appears to have acerbated
> > our problems.  In the ZODB# 3.4.2 system, if a commit fails, an exception
> > is raised and the transaction is aborted.  Zope then attempts to reschedule
> > the transaction.  The abort needs to roll back MySQL transactions that are
> > part of the conflicting ZODB and the  Session Variable Store so the
> > restart is clean.
> >
> > In our case, we have been using MyISAM tables, which are not
> > transactional.  The rollbacks fail and the locking in the database adapter
> > gets confused. Changing the table type from MyISAM to Innodb, which is
> > transactional, should resolve the MySQL problems, although it has yet to
> > be tested.
> >
> > Conflict errors also arise through the session variables.  Since we have a
> > multi-Zope system configuration sharing a single ZEO, the session
> > variables are stored in a Temporary Storage object on the ZEO host.  When
> > a conflict occurs, a number of things, none good, apparently can happen.
> > Session variable transactions cannot be rolled back (as the temporary
> > storage mechanism is not transactional).  And, at a different level,
> > session variable persistence requires that transactions require a
> > copy-out/copy-in mechanism to identify those changes which have been
> > changed and need to persisted; an aborted transaction may not be marked as
> > persistent and so will disappear at some apparently random time in the
> > future when the temporary store is packed and cruft removed.
> >
> > Some refactoring of the programming can help minimize the potential for
> > session variable conflicts, but they cannot be eliminated.
> >
> > If systems stability in the face of session variable conflicts is
> > important,
> >
> >   1.  Does the store for session variable need to be transactional
> >   and support rollbacks?
> >
> > and
> >
> >   2.  What Temporary Storage object provides the right mechanism to
> >   manage session variables with rollback efficiently?
> >
> >
> >
> > ___
> > Zope maillist  -  Zope@zope.org
> > http://mail.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://mail.zope.org/mailman/listinfo/zope-announce
> >  http://mail.zope.org/mailman/listinfo/zope-dev )
> >
> 
> 
> --
> Peter Bengtsson,
> work www.fry-it.com
> home www.peterbe.com
> hobby www.issuetrackerproduct.com
> 

-- 


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/

Re: [Zope] Problem with multiple Browser Id Managers

[Chris McDonough]

Hi Pablo,

On Thu, 2005-11-17 at 22:47 -0300, Pablo Ziliani wrote:
> Unfortunately, my Zope instance holds multiples virtual sites, so I 
> can't simply change the root BMI that comes with Zope's installation; 
> instead I need to create inner BMI instances. So I did, giving the new 
> instance a different Browser Id Name than the root's _ZopeId both to 
> differentiate them and to be more site-specific. Then I restarted Zope 
> (don't know if this really matters) and re-entered the site to see what 
> happened: I was still given the same cookie, _ZopeId.

I'll assume that you mean you're getting the same set-cookie header from
Zope rather than meaning that your browser continues sending the same
"_ZopeId" cookie back to the site.

> Reading the documentation I found this quote (browser-add.stx):
> 
> """
> 
> 
>   Instantiating Multiple Browser Id Managers (Optional)
> 
> (...) In its default configuration, Zope will not allow you to create a 
> browser id manager if one is installed in the root or in a place where 
> the new browser id manager can acquire the original browser id manager 
> via its containment path (for programmers: the session id manager's 
> class' Zope __replaceable__ property is set to UNIQUE). This means, 
> practically, that if you wish to have multiple browser id managers, you 
> need to carefully delete the root browser id manager, then you need to 
> place additional browser id managers in the most deeply-nested 
> containers first, working your way out towards the root, finally 
> replacing the root browser id manager if desired.
> """
> 
> ...which is either false or (more likely), outdated, 

Both.

> since first (as I 
> said) I had no trouble in adding another deeper BMI; and second, because 
> any attempt to delete root's BMI ends in a "/browser_id_manager/ cannot 
> be deleted." page error message.
> 
> Any hint?

I suspect it's a bug that the root browser id manager cannot be deleted.
That said, it shouldn't be necessary to delete it, as the session data
manager will use the "first" bid manager it finds in its acquisition
path to get the browser id (see
Products/Sessions/SessionDataManager.py).  In your case, probably what's
happening is that the machinery is finding the /session_data_manager
object at the root, and the "first" bid manager in *its* acquisition
path is the root /browser_id_manager.  If you also create a
'session_data_manager' object in your site, this one should be found and
it should use its peer 'browser_id_manager' object.

This area is somewhat murky as it's unusual to need multiple browser id
managers per server, so I'll be interested to know if creating a session
data manager fixes this problem.

- C





___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Zope 2.8.4 external methods do not autorefresh

[Dennis Allison]

 Yup. or so it seems.  Thanks.   Stupid errors confume the day... 

On Fri, 18 Nov 2005, Paul Winkler wrote:

> On Fri, Nov 18, 2005 at 11:25:06AM -0800, Dennis Allison wrote:
> > To adopt the code for the modified method the external method needs 
> > to be resaved.
> 
> *Or* you need to have 
> 
>debug-mode on
> 
> ... in your zope.conf.  It's always been that way.
> 
> I'm guessing you didn't turn on debug-mode for your 2.8 instance?
>  
> 

-- 

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] HTML to PDF.

[Fernando Lujan]

Chris Withers wrote:


Fernando Lujan wrote:

It's easy to configure and stuff? We currently are working with the 
reportlab, but it's painful to change the document... :(  I need a 
product which generates a PDF file on the fly. 



I'm guessing you're using the open source reportlan library?
Maybe you should think about going up to the RML processor they do, 
which costs money but is pretty amazing.


What sort of budget do you have for this?

A small budget. But my company is really interested in such 
processor/tool/product. Long ago, I sent a e-mail


to the reportlab team. I wanted to know if they provide a tool similar to 
iReport. But I received no answer.

Now, I ask again... is there such tool?

Thanks in advance, 


Fernando Lujan


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Zope 2.8.4 external methods do not autorefresh

[Paul Winkler]

On Fri, Nov 18, 2005 at 11:25:06AM -0800, Dennis Allison wrote:
> To adopt the code for the modified method the external method needs 
> to be resaved.

*Or* you need to have 

   debug-mode on

... in your zope.conf.  It's always been that way.

I'm guessing you didn't turn on debug-mode for your 2.8 instance?
 
-- 

Paul Winkler
http://www.slinkp.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Zope 2.8.4 external methods do not autorefresh

[Jonathan]

- Original Message - 
From: "Dennis Allison" <[EMAIL PROTECTED]>

To: 
Sent: Friday, November 18, 2005 2:25 PM
Subject: [Zope] Zope 2.8.4 external methods do not autorefresh




test framework:





Setup an external method

def eproc( self ):
   return 'hello world'

and run the test method.  It prints

hello world

Now, change the test method
 
def eproc( self ):

   return 'hello world too'

and run the test method.  It prints

hello world

which is a deviation from the usual Zope2 behavior.  


No its not.


To adopt the code for the modified method the external method needs 
to be resaved.


Yep.



Is this a bug or a feature?


Feature.



Jonathan

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] Zope 2.8.4 external methods do not autorefresh

[Dennis Allison]

test framework:





Setup an external method

def eproc( self ):
return 'hello world'

and run the test method.  It prints

hello world

Now, change the test method
  
def eproc( self ):
return 'hello world too'

and run the test method.  It prints

hello world

which is a deviation from the usual Zope2 behavior.  

To adopt the code for the modified method the external method needs 
to be resaved.

Is this a bug or a feature?



-- 

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Check Interval

[Andreas Jung]

--On 18. November 2005 12:35:09 -0500 "Kozloski, Matthew E" 
<[EMAIL PROTECTED]> wrote:




Its not a problem - I'm just curious as to why this is/may be.  From
reading docs/postings online, it seems to me that the higher the check
interval is, the faster the site should be (up to a point -- law of
diminishing returns sort of thing).  It is completely opposite for me
and inquiring minds want to know...




From my experience there is usually no need to change the interval...even 

not for large sites..

-aj




pgpvK1wkLHQk3.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] Check Interval

[Kozloski, Matthew E]

I have a fairly large zope installation (thousands of users, ~130G
combined zeo storages) and have been playing with the check interval.  I
have a single Xeon 3.2 that runs the show (both ZEO and Zope).  I notice
that when I set the check-interval at 826 (pystone / 50) the performance
is horrible.  In my case the lower I set the check interval, the faster
the site is (quite significantly).
 
Its not a problem - I'm just curious as to why this is/may be.  From
reading docs/postings online, it seems to me that the higher the check
interval is, the faster the site should be (up to a point -- law of
diminishing returns sort of thing).  It is completely opposite for me
and inquiring minds want to know...
 
Thanks - Matt
 
  


Matthew E. Kozloski
Systems Administrator
 
Specialized Technology Resources, Inc.
10 Water ST
Enfield, CT  06082 USA
 
t:   860-749-8371
f:   860-749-8234
e:  matthew.kozloski -at- strus.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] does anyone know of something like this

[Kate Legere]

I develop for a library and wanted to know if there was a zope product that
might accomplish what we're looking for before we build it ourselves.

We have a number of book club sets that are loaned out to patrons for a 6
week period. The way in which this differs from our regular collection is
that patrons can reserve a set by date rather than just joining a waiting
list.  Right now the way it works is almost beyond belief in it's complexity
and archaic-ness. 

As I say, we can build an application that will handle this but it seems
like it might be a common enough situation that if there was already
something out there that we could just modify we might be better off doing
that. 

Kate

 

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Render a string as tal

[Alan Warren]

On 11/18/05, Chris Withers <[EMAIL PROTECTED]> wrote:
> Alan Warren wrote:
> > single image into a folder.  So, I have a folder called view.  When an
> > image is viewed the URL looks like
> > /some_album/some_pic.jpg/view/?display=large
> >
> > The code looks like this:
> > 
> > 
> > 
>
> ouch.

Thanks.
>
> This is really contorted. Why do you use URL2 and URL3?

To extract just the id of the image being viewed.  The relative path
from the template that presents the image to the image being presented
will always match that pattern.

>
> Is imgObj not just 'here' anyway?
Not in a manner I could easily work with, view is a folder containing
index_html (the page template in question), and a handful of other
page templates and scripts -- all of which are specific actions a user
may wish to perform on a single image -- rather than on a whole album.

Given the scenario I've outlined, do you have another suggestion?
I agree this isn't aesthetically pleasing, but to me it was quite intuitive.

>
> What is the page template where this code comes from called?
/view/index_html

>
> Why do you do a global define?
Because I'm godless.

>
> Why two define statements instead of just one?
So as to not post a massively long line of code to the list that would
be even more spaghetti like.  If it makes you feel any better the
actual code is more in the form:




The question I was trying to answer wasn't about some coding style
issue, but rather about how to convert a string path to an object at
run-time.  I included the URL manipulation as an illustration of when
I had to use the path method.

Cheers,
Alan
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] Re: Zope 2.8.4 compilation error

[Tres Seaver]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Gusti Gonzalez wrote:

> Does anybody know what Debian (3.1) packages are required in order to compile
> zope 2.8.4?
> 
> Or, my only option is to download python from source and compile it as well?

I *think* that you need the following (I don't run 3.1, but it seems
enough on Ubuntu):  python2.3, python2.3-devel, zlib-devel

Note that using the distro-provided Python has caused occasional
problems in the past;  I almost always build a separate Python from
source for running Zope (you still want zlib-devel in that case).


Tres.
- --
===
Tres Seaver  +1 202-558-7113  [EMAIL PROTECTED]
Palladion Software   "Excellence by Design"http://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDfedD+gerLs4ltQ4RAor1AJ4heI5c1SCuBjs9vmJj/tDAxplaNwCg0rza
3qh95LoC7mgwFNgGG2ujP6Q=
=gTU0
-END PGP SIGNATURE-

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] Re: Zope 2.8.4 compilation error

[Gusti Gonzalez]

Does anybody know what Debian (3.1) packages are required in order to compile
zope 2.8.4?

Or, my only option is to download python from source and compile it as well?

Thanks for any help.

Regards,
Gusti.


David H escribió:
> Gusti Gonzalez wrote:
> 
>> Hi,
>>
>> I am having the following error when compiling Zope:
>> ---
>> "/usr/bin/python" "/infra/portal/Zope-2.8.4-final/setup.py" \
>>build
>> --build-base="/infra/portal/Zope-2.8.4-final/build-base/python-2.3"
>> --build-lib="/infra/portal/Zope-2.8.4-final/build-base/python-2.3/build-lib"
>>
>> --build-scripts="/infra/portal/Zope-2.8.4-final/build-base/python-2.3/build-scripts"
>>
>> --build-temp="/infra/portal/Zope-2.8.4-final/build-base/python-2.3/build-temp"
>>
>> running build
>> running build_py
>> running build_ext
>> building 'AccessControl.cAccessControl' extension
>> gcc -pthread -fno-strict-aliasing -DNDEBUG -g -O3 -Wall
>> -Wstrict-prototypes
>> -fPIC -IExtensionClass -IAcquisition -I/usr/include/python2.3 -c
>> AccessControl/cAccessControl.c -o
>> /infra/portal/Zope-2.8.4-final/build-base/python-2.3/build-temp/AccessControl/cAccessControl.o
>>
>> En el fichero incluído de
>> /usr/lib/gcc-lib/i486-linux/3.3.5/include/syslimits.h:7,
>> de /usr/lib/gcc-lib/i486-linux/3.3.5/include/limits.h:11,
>> de /usr/include/python2.3/Python.h:19,
>> de ExtensionClass/ExtensionClass.h:83,
>> de AccessControl/cAccessControl.c:51:
>> /usr/lib/gcc-lib/i486-linux/3.3.5/include/limits.h:122:75: limits.h:
>> No existe
>> el fichero o el directorio
>> En el fichero incluído de ExtensionClass/ExtensionClass.h:83,
>> de AccessControl/cAccessControl.c:51:
>> /usr/include/python2.3/Python.h:28:19: stdio.h: No existe el fichero o
>> el directorio
>> /usr/include/python2.3/Python.h:30:5: #error "Python.h requires that
>> stdio.h
>> define NULL."
>> /usr/include/python2.3/Python.h:33:20: string.h: No existe el fichero
>> o el
>> directorio
>> /usr/include/python2.3/Python.h:34:19: errno.h: No existe el fichero o
>> el directorio
>> /usr/include/python2.3/Python.h:36:20: stdlib.h: No existe el fichero
>> o el
>> directorio
>> /usr/include/python2.3/Python.h:39:20: unistd.h: No existe el fichero
>> o el
>> directorio
>> /usr/include/python2.3/Python.h:46:20: assert.h: No existe el fichero
>> o el
>> directorio
>> ...
>> ... and the error list goes on.
>> ---
>>
>> but the limits.h file does exist at the above mentioned location
>>
>> My environment is:
>> Debian 3.1 (stable)
>>
>> dpkg -l | grep python
>> ii  python 2.3.5-2An interactive high-level
>> object-oriented la
>> ii  python-ldap2.0.4-1A LDAP interface module for Python.
>> [dummy p
>> ii  python2.3  2.3.5-3An interactive high-level
>> object-oriented la
>> ii  python2.3-dev  2.3.5-3Header files and a static library
>> for Python
>> ii  python2.3-ldap 2.0.4-1A LDAP interface module for Python 2.3
>>
>> dpkg -l | grep gcc
>> ii  gcc3.3.5-3The GNU C compiler
>> ii  gcc-3.33.3.5-13   The GNU C compiler
>> ii  gcc-3.3-base   3.3.5-13   The GNU Compiler Collection (base
>> package)
>> ii  libgcc13.4.3-13   GCC support library
>>
>> dpkg -l | grep make
>> ii  ant1.6.2-2Java based build tool like make
>> ii  libant1.6-java 1.6.2-2.1  Java based build tool like make --
>> library
>> ii  make   3.80-9 The GNU version of the "make" utility.
>> ii  makedev2.3.1-77   creates device files in /dev
>>
>>
>> Any ideas what can be missing from my installation?
>>
>> Best regards,
>> Gustavo.
>>
>>
>>  
>>
> Gustavo,
> Did you download the full (developers) version of python from
> python.org?  If not you'll need to to compile Zope.
> David
> 
> 
> 
> 
> ___
> Zope maillist  -  Zope@zope.org
> http://mail.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
> http://mail.zope.org/mailman/listinfo/zope-dev )
> 
> 

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] conflicts, sessions, and programming best practices guidelines

[Michael Dunstan]

On 11/18/05, Chris McDonough <[EMAIL PROTECTED]> wrote:
>
> On Nov 17, 2005, at 4:46 AM, Dennis Allison wrote:
>
> >
> > Thank Chris, good pointsB.
> >
> > The session variable timeout is currently several hours as requird
> > by our
> > application. The timeout resolution remains at its default value.
>
> Making the resolution higher has been observed to reduce conflicts
> (see dunny's chart).

If you sessions live for several hours then perhaps you want a
increase session-resolution-seconds to something like 1800 (30
minutes) or more.

Also worth seeing if increasing WRITEGRANULARITY of
Products.Transience.TransientObject helps you.

> > I have
> > not dorked with disabling the inband housekeeping.  I don't see how it
> > would impact on our problem.  Am I missing something?
>
> Turning off inband housekeeping has the potential to reduce the
> numnber of conflicts because less work is done during normal
> sessioning operations.  Instead of doing the work to figure out
> whether it needs to clean up after itself during "normal" operations
> it relies on an external process.

And it is not that difficult to do.

Michael.
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Render a string as tal

[Chris Withers]

Alan Warren wrote:

single image into a folder.  So, I have a folder called view.  When an
image is viewed the URL looks like
/some_album/some_pic.jpg/view/?display=large

The code looks like this:





ouch.

This is really contorted. Why do you use URL2 and URL3?

Is imgObj not just 'here' anyway?

What is the page template where this code comes from called?

Why do you do a global define?

Why two define statements instead of just one?

Chris

--
Simplistix - Content Management, Zope & Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] HTML to PDF.

[Chris Withers]

Fernando Lujan wrote:
It's easy to configure and stuff? We currently are working with the 
reportlab, but it's painful to change the document... :(  I need a 
product which generates a PDF file on the fly. 


I'm guessing you're using the open source reportlan library?
Maybe you should think about going up to the RML processor they do, 
which costs money but is pretty amazing.


What sort of budget do you have for this?

cheers,

Chris

--
Simplistix - Content Management, Zope & Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] probably a simple answer..

[Chris Withers]

Kate Legere wrote:

Well, we're working on porting it over from linux but at the moment that's
my only option... I just had this impression that I'd seen something whereby
I could write to the filesystem using an external method.


Categorically, no web server can write to the file system on a client, 
think about what a horrific security hole that would be ;-)


Why on earth would you port anything over _from_ linux?!

cheers,

Chris

--
Simplistix - Content Management, Zope & Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] cookie crumbler and error messages

[Chris Withers]

Paul Hendrick wrote:

Hi all,
I'm using CookieCrumbler on a project which sits in / on one server,
and /project in another.


...that could do with more explanation :-S


I'd like to secure a part of the site through *.metadata files so that
users of a certain role can't access it.


This is _not_ the correct way to do this. Are you using Plone or 
something similarly silly?
What are you trying to do? What lead you to believe .metadata files are 
the way to go?



however, when they try to access a part of the site which is secured,
they're:
a- given a log in popup prompt which they don't have the details for.
and


You've likely managed to make the login form unaccessable to anonymous 
users...


cheers,

Chris

--
Simplistix - Content Management, Zope & Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] (no subject)

[Chris Withers]

AZAIS Bruce wrote:

Hi,

excuse-me for my English but i'm french ;-)


This is a Plone problem, you're likely to get more help on a Plone list.


*
"Le contenu de ce courriel et ses eventuelles pièces jointes sont
confidentiels. Ils s'adressent exclusivement à la personne destinataire.
Si cet envoi ne vous est pas destiné, ou si vous l'avez reçu par erreur,
et afin de ne pas violer le secret des correspondances, vous ne devez pas
le transmettre à d'autres personnes ni le reproduire. Merci de le renvoyer
à l'émetteur et de le détruire.

Attention : L'Organisme de l'émetteur du message ne pourra être tenu 
responsable de l'altération
du présent courriel. Il appartient au destinataire de vérifier que les
messages et pièces jointes reçus ne contiennent pas de virus.
Les opinions contenues dans ce courriel et ses éventuelles pièces
jointes sont celles de l'émetteur. Elles ne reflètent pas la position de 
l'Organisme
sauf s'il en est disposé autrement dans le présent courriel."
**


Yay! We have a clean sweep: html mail, no subject line and an obnoxious 
footer. Bonus points for the foreign language...


*sigh*

Chris

--
Simplistix - Content Management, Zope & Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )