[Zope-dev] Location of common criteria documentation

2007-11-07 Thread Christian Theune
Hi,

we're (still/again/...) working on the common criteria project. We're in
a mode to try to finish it up and get done with.

I feel that Zope3/trunk/doc/security is not the right location for those
documents. I'd move them to a top level project in svn or something like
Zope3/common-criteria/.

Oppinions?

Christian

-- 
gocept gmbh  co. kg - forsterstrasse 29 - 06112 halle (saale) - germany
www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 -
fax +49 345 122 9889 1 - zope and plone consulting and development


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Zope 3.3 common criteria derivative

2007-11-07 Thread Christian Theune
Hi,

the common criteria evaluation is using zc`s Sharing security policy.
I need to specify a version number/name that describes the release to be
evaluated.

The most straight forward thing I can think of is to create a branch
derived from the 3.3 release series that includes zc.sharing and is
configured for using it in the common criteria evaluated way.

A name proposal would be Zope 3 Common Criteria Edition. The question
would be whether to let it have it's own version number (1.0) or to
start from the version number of Zope 3.3 that it was built on.

Comments?

Christian

-- 
gocept gmbh  co. kg - forsterstrasse 29 - 06112 halle (saale) - germany
www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 -
fax +49 345 122 9889 1 - zope and plone consulting and development


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Zope 3.3 common criteria derivative

2007-11-07 Thread Stephan Richter
On Wednesday 07 November 2007, Christian Theune wrote:
 A name proposal would be Zope 3 Common Criteria Edition. The question
 would be whether to let it have it's own version number (1.0) or to
 start from the version number of Zope 3.3 that it was built on.

I think it would be okay to start at 1.0; It is a important accomplishment and 
would confuse people less, I think.

My question would be, with Zope being split into packages now, would it not be 
easier to do the security evaluation based on a set of eggs? It would entail 
less code that needs to be reviewed.

Regards,
Stephan
-- 
Stephan Richter
CBU Physics  Chemistry (B.S.) / Tufts Physics (Ph.D. student)
Web2k - Web Software Design, Development and Training
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Location of common criteria documentation

2007-11-07 Thread Stephan Richter
On Wednesday 07 November 2007, Christian Theune wrote:
 we're (still/again/...) working on the common criteria project. We're in
 a mode to try to finish it up and get done with.

Yipee.

 I feel that Zope3/trunk/doc/security is not the right location for those
 documents. I'd move them to a top level project in svn or something like
 Zope3/common-criteria/.

I would prefer a top level directory, like common-criteria.

Regards,
Stephan
-- 
Stephan Richter
CBU Physics  Chemistry (B.S.) / Tufts Physics (Ph.D. student)
Web2k - Web Software Design, Development and Training
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Zope 3.3 common criteria derivative

2007-11-07 Thread Christian Theune
Hey,

Am Mittwoch, den 07.11.2007, 06:04 -0500 schrieb Stephan Richter:
 On Wednesday 07 November 2007, Christian Theune wrote:
  A name proposal would be Zope 3 Common Criteria Edition. The question
  would be whether to let it have it's own version number (1.0) or to
  start from the version number of Zope 3.3 that it was built on.
 
 I think it would be okay to start at 1.0; It is a important accomplishment 
 and 
 would confuse people less, I think.
 
 My question would be, with Zope being split into packages now, would it not 
 be 
 easier to do the security evaluation based on a set of eggs? It would entail 
 less code that needs to be reviewed.

Yes it would be but we're way too far down the road and really just want
to get finished what we started.

Christian

-- 
gocept gmbh  co. kg - forsterstrasse 29 - 06112 halle (saale) - germany
www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 -
fax +49 345 122 9889 1 - zope and plone consulting and development


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Zope Tests: 5 OK

2007-11-07 Thread Zope Tests Summarizer
Summary of messages to the zope-tests list.
Period Tue Nov  6 13:00:00 2007 UTC to Wed Nov  7 13:00:00 2007 UTC.
There were 5 messages: 5 from Zope Unit Tests.


Tests passed OK
---

Subject: OK : Zope-2.7 Python-2.3.6 : Linux
From: Zope Unit Tests
Date: Tue Nov  6 20:53:19 EST 2007
URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008606.html

Subject: OK : Zope-2.8 Python-2.3.6 : Linux
From: Zope Unit Tests
Date: Tue Nov  6 20:54:49 EST 2007
URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008607.html

Subject: OK : Zope-2.9 Python-2.4.4 : Linux
From: Zope Unit Tests
Date: Tue Nov  6 20:56:20 EST 2007
URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008608.html

Subject: OK : Zope-2.10 Python-2.4.4 : Linux
From: Zope Unit Tests
Date: Tue Nov  6 20:57:50 EST 2007
URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008609.html

Subject: OK : Zope-trunk Python-2.4.4 : Linux
From: Zope Unit Tests
Date: Tue Nov  6 20:59:20 EST 2007
URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008610.html

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Zope 3.3 common criteria derivative

2007-11-07 Thread Christian Theune
Hi,

Am Mittwoch, den 07.11.2007, 10:03 -0500 schrieb Jim Fulton:
 On Nov 7, 2007, at 4:47 AM, Christian Theune wrote:
 
  Hi,
 
  the common criteria evaluation is using zc`s Sharing security  
  policy.
  I need to specify a version number/name that describes the release  
  to be
  evaluated.
 
 I'm sad to say that, while I still like this security policy, we're  
 no longer using it, which probably means no one is using it.

I already somewhat suspected that but I do think it's still useful and
I'll continue using it for the sake of getting done.


 I apologize for pointing you in that direction. I sadly recommend using  
 the standard security policy. Of course, you're welcome to keep using  
 the sharing security policy. maybe that's easier at this point.

No worries.

I feel the same and except from deriving from the standard back then
nobody could have predicted this. I *was* thinking about switching but
that would make me rewrite large parts. I'll go down that road.

Thanks for the heads-up!

Christian

-- 
gocept gmbh  co. kg - forsterstrasse 29 - 06112 halle (saale) - germany
www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 -
fax +49 345 122 9889 1 - zope and plone consulting and development


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Zope 3.3 common criteria derivative

2007-11-07 Thread Jim Fulton


On Nov 7, 2007, at 4:47 AM, Christian Theune wrote:


Hi,

the common criteria evaluation is using zc`s Sharing security  
policy.
I need to specify a version number/name that describes the release  
to be

evaluated.


I'm sad to say that, while I still like this security policy, we're  
no longer using it, which probably means no one is using it.  I  
apologize for pointing you in that direction. I sadly recommend using  
the standard security policy. Of course, you're welcome to keep using  
the sharing security policy. maybe that's easier at this point.


Jim

--
Jim Fulton
Zope Corporation


___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Duplicate directive registration allowed

2007-11-07 Thread Malthe Borch
In zope/configuration/config.py:register it seems that it isn't being
asserted that no previous registration of a directive with the same
name has happened.

This might be desirable (not sure why) and currently happens for these
directives:

('http://namespaces.zope.org/meta', u'directive')
('http://namespaces.zope.org/meta', u'groupingDirective')
('http://namespaces.zope.org/meta', u'complexDirective')
('http://namespaces.zope.org/zope', u'securityPolicy')

This is on Zope 2.10.

So for instance, if Five registers the browser:viewlet then there's
nothing to prevent another package from including zope.viewlet's
meta.zcml which will then override that directive, breaking viewlet
support on Zope 2.10.

\malthe
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Re: [Checkins] SVN: zope.file/trunk/ Make a good package out of this package.

2007-11-07 Thread Bernd Dorn


On 02.11.2007, at 15:43, Benji York wrote:


Stephan Richter wrote:
zope.file was the *only* package of the 150+ I worked on that did  
not have extras.


I'm surprised.  I thought it was generally agreed upon not to do  
that. Darn.


no - afaik there is no agreement upon this, and imho it is not good  
to put extras in the general deps because one always ends up fetching  
all the zope packages as deps if using any zope.* package


-100 from me for removing extras




--
Benji York
Senior Software Engineer
Zope Corporation
___
Checkins mailing list
[EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/checkins


--
Lovely Systems, senior developer

phone: +43 5572 908060, fax: +43 5572 908060-77
Schmelzhütterstraße 26a, 6850 Dornbirn, Austria
skype: bernd.dorn



___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope] is it possible to bypass ZSQL methods and call storedprocedures in sqlserver straight from ZPT?

2007-11-07 Thread Andrew Milton
+---[ michael nt milne ]--
| ok thanks. I guess then if you're using the ZMI could you embed this in your
| ZPT? But I guess that is not best practice.

Using the ZMI you'd make a Python Script to call from your ZPT instead.
-- 
Andrew Milton
[EMAIL PROTECTED]
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] is it possible to bypass ZSQL methods and call storedprocedures in sqlserver straight from ZPT?

2007-11-07 Thread michael nt milne
ok thanks. I guess then if you're using the ZMI could you embed this in your
ZPT? But I guess that is not best practice.

On 11/6/07, Andrew Milton [EMAIL PROTECTED] wrote:

 +---[ michael nt milne ]--
 | thanks. Is there an example or a tutorial at all on this anywhere?


 # queryConnection holds the id of a DA


 connectionObject=getattr(self, queryConnection)
 connection = connectionObject()
 results = connection.query(SQL_GOES_HERE)

 This is from Product code, it should be usable (s/self/context/) in a
 PythonScript, but, I haven't tested it.


 --
 Andrew Milton
 [EMAIL PROTECTED]




-- 
michael
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: repozo.py problems

2007-11-07 Thread Maurits van Rees
Jim Dibb, on 2007-11-07:
 I'm going to dig up something that's really troubling me today, and a
 Martin Koekenberg in the past.

 Martin first posted the following about repozo.py.
 Traceback (most recent call last):
   File C:\Program Files\Plone 3\Zope\bin\repozo.py, line 76, in module
 from ZODB.FileStorage import FileStorage
 ImportError: No module named ZODB.FileStorage

I must say I saw this error today as well on a Linux server.  But when
I ran the same repozo command again two seconds later it *did* work.
Very strange.  Apparently you are less lucky. :-/

No idea for how to solve this, sorry.

-- 
Maurits van Rees | http://maurits.vanrees.org/ [NL]
Work | http://zestsoftware.nl/
Do not worry about your difficulties in computers,
 I can assure you mine are still greater.

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] five zcml addview question

2007-11-07 Thread David Davis
I am trying to create simple content type with zope 2.10.4 and five.  I have 
performed the following:
   
   - created a content interface 
   - created a content type class implementing the interface and extending both 
Persistent and SimpleItem
   - created zcml class entries for the content type
   - created zcml browser entries for 'addform' and 'editform'
   
  I am trying to get Zope to automatically create the forms based on the 
content schema.  Once these steps were completed, I found my content type in 
the ZMI add menu.  However, once I selected my content type, I got an error 
(see below).
   
  The error looks like it is missing a 'main_template' object.  Any ideas what 
might be wrong?
   
   
   
  ERROR MESSAGE:
   
  2007-11-07 12:31:01 ERROR Zope.SiteErrorLog 
http://localhost:8080/+/Password_add
  Traceback (innermost last):
  Module ZPublisher.Publish, line 119, in publish
  Module ZPublisher.mapply, line 88, in mapply
  Module ZPublisher.Publish, line 42, in call_object
  Module Products.Five.browser.metaconfigure, line 417, in __call__
  Module Shared.DC.Scripts.Bindings, line 313, in __call__
  Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec
  Module Products.PageTemplates.PageTemplateFile, line 129, in _exec
  Module Products.PageTemplates.PageTemplate, line 89, in pt_render
  Module zope.pagetemplate.pagetemplate, line 117, in pt_render
   - Warning: Macro expansion failed
   - Warning: exceptions.KeyError: 'main_template'
  Module zope.tal.talinterpreter, line 271, in __call__
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 891, in do_useMacro
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 536, in do_optTag_tal
  Module zope.tal.talinterpreter, line 521, in do_optTag
  Module zope.tal.talinterpreter, line 516, in no_tag
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 870, in do_useMacro
  Module zope.tales.tales, line 696, in evaluate
   - URL: index
   - Line 2, Column 1
   - Expression: PathExpr standard:'context/main_template/macros/master'
   - Names:
  {'container': + at /,
   'context': + at /,
   'default': object object at 0x0099F528,
   'here': + at /,
   'loop': {},
   'nothing': None,
   'options': {'args': (Products.Five.metaclass.SimpleViewClass from add.pt
 object at 0x05D4C710,)},
   'repeat': Products.PageTemplates.Expressions.SafeMapping object at 0x05D
49D78,
   'request': HTTPRequest, URL=http://localhost:8080/+/Password_add,
   'root': Application at ,
   'template': ImplicitAcquirerWrapper object at 0x05D4CDB0,
   'traverse_subpath': [],
   'user': User 'admin',
   'view': Products.Five.metaclass.SimpleViewClass from add.pt object at 0x
05D4C710,
   'views': zope.app.pagetemplate.viewpagetemplatefile.ViewMapper object at
 0x05D4CD50}
  Module zope.tales.expressions, line 217, in __call__
  Module Products.PageTemplates.Expressions, line 153, in _eval
  Module zope.tales.expressions, line 124, in _eval
  Module Products.PageTemplates.Expressions, line 100, in trustedBoboAwareZopeTr
averse
  Module OFS.Traversable, line 284, in unrestrictedTraverse
   - __traceback_info__: ([], 'main_template')
KeyError: 'main_template'
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] repozo.py problems

2007-11-07 Thread Jim Dibb
I'm going to dig up something that's really troubling me today, and a
Martin Koekenberg in the past.

Martin first posted the following about repozo.py.
Traceback (most recent call last):
  File C:\Program Files\Plone 3\Zope\bin\repozo.py, line 76, in module
from ZODB.FileStorage import FileStorage
ImportError: No module named ZODB.FileStorage

Which, it was noted was a problem with PYTHONPATH not being set.  One
question I have is why plone3 installlation does not set this variable
on installation?
So I set it and now have the following problem (note I slightly
modified repozo.py to print our sys.path before importing.)

C:\Program Files\Plone 3\Zope\binrepozo.py
['C:\\Program Files\\Plone 3\\Zope\\bin', 'c:\\Program Files\\Plone 3\\Zope\\lib
\\python', 'C:\\WINNT\\system32\\python25.zip', 'c:\\Python25\\DLLs', 'c:\\Pytho
n25\\lib', 'c:\\Python25\\lib\\plat-win', 'c:\\Python25\\lib\\lib-tk', 'C:\\Pyth
on25', 'c:\\Python25\\lib\\site-packages', 'c:\\Python25\\lib\\site-packages\\wi
n32', 'c:\\Python25\\lib\\site-packages\\win32\\lib', 'c:\\Python25\\lib\\site-p
ackages\\Pythonwin']
Traceback (most recent call last):
  File C:\Program Files\Plone 3\Zope\bin\repozo.py, line 75, in module
from ZODB.FileStorage import FileStorage
  File c:\Program Files\Plone 3\Zope\lib\python\ZODB\__init__.py, line 20, in
module
from persistent import TimeStamp
  File c:\Program Files\Plone 3\Zope\lib\python\persistent\__init__.py, line 1
9, in module
from cPersistence import Persistent, GHOST, UPTODATE, CHANGED, STICKY
ImportError: DLL load failed: The specified module could not be found.

From the following, it's pretty clear that the cPersistence.pyd file is 
present.
C:\Program Files\Plone 3\Zope\lib\python\persistentdir
 Volume in drive C has no label.
 Volume Serial Number is F07F-A1B8

 Directory of C:\Program Files\Plone 3\Zope\lib\python\persistent

11/07/2007  10:26 AMDIR  .
11/07/2007  10:26 AMDIR  ..
08/17/2007  08:51 AM15,872 cPersistence.pyd
08/17/2007  08:51 AM12,288 cPickleCache.pyd
06/23/2007  02:06 AM 2,826 dict.py
08/23/2007  01:02 PM 2,559 dict.pyc
06/23/2007  02:06 AM10,556 interfaces.py
08/23/2007  01:02 PM10,685 interfaces.pyc
06/23/2007  02:06 AM 2,929 list.py
08/23/2007  01:02 PM 3,431 list.pyc
06/23/2007  02:06 AM 4,193 mapping.py
08/23/2007  01:02 PM 3,148 mapping.pyc
06/23/2007  02:06 AM   738 README.txt
08/23/2007  01:01 PMDIR  tests
08/17/2007  08:51 AM 8,704 TimeStamp.pyd
06/23/2007  02:06 AM 8,258 wref.py
08/23/2007  01:02 PM 8,539 wref.pyc
06/23/2007  02:06 AM 1,211 __init__.py
11/07/2007  10:26 AM   793 __init__.pyc
  16 File(s) 96,730 bytes
   3 Dir(s)   8,482,267,136 bytes free

Is there a 'cPersistence.dll' file that is supposed to be somewhere,
and maybe I don't have that in my path?

Thanks a lot.  This is really frustrating.
Jim
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] running Zope/Plone on a Windows Virtual Machine?

2007-11-07 Thread michael nt milne
yes I realise about the single point of failure. Ideally of course we'd have
separate physical servers for this. It's an intranet so security is less of
an issue. There just seem to be advantages from running virtual machines.
I'm not an expert but aren't they easier to manage, rollback and back-up?
Possibly the best idea would be to have a dev and staging as virtual
machines on one server and then the live instance on another.

Interesting that a VM service would only require the RAM that Zope requires
normally. You would naturally think that the VM service would take up quite
a bit of RAM itself?

On 11/7/07, knitti [EMAIL PROTECTED] wrote:

 On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote:
  ok, so you could have two virtual machines say development and also
 staging
  which sat alongside a live production 'non virtual' instance of Zope.
 This
  would all sit on the one physical machine. The dev and staging instances
  would be switched off and on as required. With enough RAM and CPU would
 this
  be a realistic set-up for a service?
 
 Yes. Here are the implications:
 - the hardware is your single point of complete failure
 - the whole machine would share its performance among native and virtual
 instances, so staging and development will have an impact on the
 production
 instance
 - if you production instance gets compromised, its not far for
 intruders to staging/development
 - the other way round (atack on zope instance, then attack on vm to
 reach the host)
 is pobably not very much harder

 why don't you just run 3 zope instances on the host? If its a pure
 zope application,
 then they won't interfere with each other. Although you can't upgrade zope
 idependently then, its in any case better resource-wise.

 --knitti




-- 
michael
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Zope Jobs

2007-11-07 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Tom Von Lahndorff wrote:
 Anyone have any recommendations for a good place to post a Zope job?  
 Its for a freelance, work from where ever gig. Thanks.

Here is probably a good place, or zope-dev.


Tres.
- --
===
Tres Seaver  +1 540-429-0999  [EMAIL PROTECTED]
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHMcbU+gerLs4ltQ4RAndjAKDYis35TfnMSZYBtIrwuiw7+Iv8pwCbB1Zl
wM6DTW4N3dbfkhkeuwAL3bQ=
=bW2l
-END PGP SIGNATURE-

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] running Zope/Plone on a Windows Virtual Machine?

2007-11-07 Thread knitti
On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote:
 Has anyone tried this or had any experience with this? We're using Enfold
 Server and for staging and development purposes instead of using separate
 machines we're thinking of setting up a 'virtual machines' on the same
 server. There appear to be many benefits. However knowing
 that Zope/Plone are RAM instensive this
 could be an issue.

There is no issue in running Zope in Windows _or_ running Zope inside a VM.
It does need the same amount of RAM as running it not inside a VM. Whether
that counts as RAM intensive or not depends on what you do with it and
whether you have a comparison to another application.

VMs tend to have a bit lower performance per MHz, so if you can live with that
(and have the RAM to feed the VM) go ahead. You can later decide to put it
on a dedicated machine anyway.

--knitti
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] running Zope/Plone on a Windows Virtual Machine?

2007-11-07 Thread knitti
On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote:
 yes I realise about the single point of failure. Ideally of course we'd have
 separate physical servers for this. It's an intranet so security is less of
 an issue. There just seem to be advantages from running virtual machines.
 I'm not an expert but aren't they easier to manage, rollback and back-up?

that depends entirely on your needs. Copying away the Zope tree and the
instances' products and extensions every time you change something on it
and copying away the Data.fs every x hours isn't exactly hard, is it?
And it requires less space.
Having a VM lying aroung just to copy-over and run is also handy, but you
need more resources.
You decide. Design your backup/restore process well, when you need it you
probably won't have much time thinking about it.

 Interesting that a VM service would only require the RAM that Zope requires
 normally. You would naturally think that the VM service would take up quite
 a bit of RAM itself?

I didn't say that. I just said, that respective to zope's RAM usage
its irrelevant,
whether it is inside a VM or not. Of course you need the RAM for the VM itself.

--knitti
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Please help in selecting approach (zope2, 3, +grok, plone) for a new project

2007-11-07 Thread Martijn Faassen
Hello,

It's a good question. :)

On Nov 7, 2007 7:51 AM, Chetan Kumar [EMAIL PROTECTED] wrote:
 I am to start working on a new web (site/application) project. Wanted
 to find out better route from among the available choices. In other
 words what are *you* using ?

It depends on what I'm doing. If you need a full-featured CMS, use
Silva or Plone or
something like that, based no Zope 2 (with Zope 3 technologies).

I use Grok for web applications. Now since I'm one of the originators
of Grok that's not a big surprise. :)

Many people use Plone as a foundation for their own web applications.
That works if the web application can be fit into
Plone; you'll get a UI to work with and a ton of features. It can also
be frustrating and hard to maintain if the web application isn't much
like Plone. In that case instead of trying to bend Plone to your will
it might make sense to start with another framework.

 I have used zope 2 and plone in my past projects. The question arises
 now as we have new rewrite of zope with grok on the horizon and plone
 as always is there (with a new version). There is also new CMS based
 on zope (hivert announced recently on zope-dev). Exciting times, but a
 little confusion too.

 The site will tend towards social networking some time later as I see
 the requirements taking shape. At the moment it is about people
 joining a community website and exchanging information on a particular
 topic, reviewing items (articles, links, photos) added to the site.

Since you're talking about a community website it sounds at least
initially to me that Plone, or some other community-oriented CMS could
be a good fit. Silva doesn't sound like a good fit as it doesn't focus
on community features primarily.

Meanwhile all these things do tend to converge. Zope 2 software like
Plone is using Zope 3 technology. Grok and Zope 3 aren't
far apart and we're doing our best to make Grok compatible with
classic Zope 3 applications. I'm sure eventually Grok technology
will make it into Zope 2.

Regards,

Martijn
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] running Zope/Plone on a Windows Virtual Machine?

2007-11-07 Thread michael nt milne
Has anyone tried this or had any experience with this? We're using Enfold
Server and for staging and development purposes instead of using separate
machines we're thinking of setting up a 'virtual machines' on the same
server. There appear to be many
benefits. However knowing that Zope/Plone are RAM instensive this
could be an issue.

Thanks

-- 
michael
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] running Zope/Plone on a Windows Virtual Machine?

2007-11-07 Thread michael nt milne
ok, so you could have two virtual machines say development and also staging
which sat alongside a live production 'non virtual' instance of Zope. This
would all sit on the one physical machine. The dev and staging instances
would be switched off and on as required. With enough RAM and CPU would this
be a realistic set-up for a service?

On 11/7/07, knitti [EMAIL PROTECTED] wrote:

 On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote:
  Has anyone tried this or had any experience with this? We're using
 Enfold
  Server and for staging and development purposes instead of using
 separate
  machines we're thinking of setting up a 'virtual machines' on the same
  server. There appear to be many benefits. However knowing
  that Zope/Plone are RAM instensive this
  could be an issue.

 There is no issue in running Zope in Windows _or_ running Zope inside a
 VM.
 It does need the same amount of RAM as running it not inside a VM. Whether
 that counts as RAM intensive or not depends on what you do with it and
 whether you have a comparison to another application.

 VMs tend to have a bit lower performance per MHz, so if you can live with
 that
 (and have the RAM to feed the VM) go ahead. You can later decide to put it
 on a dedicated machine anyway.

 --knitti




-- 
michael
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] running Zope/Plone on a Windows Virtual Machine?

2007-11-07 Thread knitti
On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote:
 ok, so you could have two virtual machines say development and also staging
 which sat alongside a live production 'non virtual' instance of Zope. This
 would all sit on the one physical machine. The dev and staging instances
 would be switched off and on as required. With enough RAM and CPU would this
 be a realistic set-up for a service?

Yes. Here are the implications:
- the hardware is your single point of complete failure
- the whole machine would share its performance among native and virtual
instances, so staging and development will have an impact on the production
instance
- if you production instance gets compromised, its not far for
intruders to staging/development
- the other way round (atack on zope instance, then attack on vm to
reach the host)
is pobably not very much harder

why don't you just run 3 zope instances on the host? If its a pure
zope application,
then they won't interfere with each other. Although you can't upgrade zope
idependently then, its in any case better resource-wise.

--knitti
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] is it possible to bypass ZSQL methods and callstoredprocedures in sqlserver straight from ZPT?

2007-11-07 Thread robert rottermann

 You could also write a Product or External Method to access your
 databases directly, using something like:  http://pymssql.sourceforge.net/
 
you should not do that, you would get into lots of problems with zope's
transaction machinery.
always go trough a zope connection.

robert
begin:vcard
fn:Robert  Rottermann
n: Rottermann;Robert
email;internet:[EMAIL PROTECTED]
tel;work:++41 31 333 10 20
tel;fax:++41 31 333 10 23
tel;home:++41 31 333 36 03
x-mozilla-html:FALSE
version:2.1
end:vcard

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope-DB] ImportError: libmysqlclient_r.so.15

2007-11-07 Thread Michele Marcionelli

Hello Zope-DB members

I'm migrating my zope/python/mysql/... installation from RedHat 3 to  
RedHat 5 and I still have a little problem.


If I just start python and enter import MySQLdb I get the following  
error:



Python 2.3.6 (#1, Nov  7 2007, 17:02:40)
[GCC 4.1.1 20070105 (Red Hat 4.1.1-52)] on linux2
Type help, copyright, credits or license for more information.
 import MySQLdb
Traceback (most recent call last):
  File stdin, line 1, in ?
  File /scratch/local/app/python/current/lib/python2.3/site- 
packages/PIL/__init__.py, line 19, in ?


  File build/bdist.linux-i686/egg/_mysql.py, line 7, in ?
  File build/bdist.linux-i686/egg/_mysql.py, line 6, in  
__bootstrap__
ImportError: libmysqlclient_r.so.15: cannot open shared object  
file: No such file or directory


If I do the same after setting the LD_LIBRARY_PATH to /usr/local/lib/ 
mysql, I did not get error messages anymore!


Now the problem: I included the LD_LIBRARY_PATH to my startup-script  
zopectl (see below) but I still get the same error message in the  
event.log file:



2007-11-07T20:53:24 ERROR Zope Could not import Products.ZMySQLDA
Traceback (most recent call last):
  File /scratch/local/app/zope/2.8.9.1-2.3.6/lib/python/OFS/ 
Application.py, line 695, in import_product

product=__import__(pname, global_dict, global_dict, silly)
  File /scratch/ZOPE/TEMPLATE_ZOPE-2.8.9.1_SILVA-1.5.10/Products/ 
ZMySQLDA/__init__.py, line 91, in ?

import DA
  File /scratch/ZOPE/TEMPLATE_ZOPE-2.8.9.1_SILVA-1.5.10/Products/ 
ZMySQLDA/DA.py, line 92, in ?

from db import DB
  File /scratch/ZOPE/TEMPLATE_ZOPE-2.8.9.1_SILVA-1.5.10/Products/ 
ZMySQLDA/db.py, line 89, in ?

import _mysql
  File build/bdist.linux-i686/egg/_mysql.py, line 7, in ?
  File build/bdist.linux-i686/egg/_mysql.py, line 6, in  
__bootstrap__
ImportError: libmysqlclient_r.so.15: cannot open shared object  
file: No such file or directory


Any idea?

My versions:


Zope-2.8.9.1-final
Python-2.3.6
MySQL-python-1.2.2
mysql-5.0.45


The zopectl file:


#! /bin/bash

PYTHON=/scratch/local/app/python/2.3.6/bin/python
ZOPE_HOME=/scratch/local/app/zope/2.8.9.1-2.3.6

reldir=`dirname $0`
INSTANCE_HOME=`cd $reldir/..; pwd`
CONFIG_FILE=$INSTANCE_HOME/etc/zope.conf

SOFTWARE_HOME=/scratch/local/app/zope/2.8.9.1-2.3.6/lib/python
PYTHONPATH=$SOFTWARE_HOME

export PYTHONPATH INSTANCE_HOME SOFTWARE_HOME

export TEMP=/tmp
export LD_LIBRARY_PATH=/usr/local/lib/mysql
export PYTHON_EGG_CACHE=$INSTANCE_HOME/var/.python-eggs

ZDCTL=$SOFTWARE_HOME/Zope2/Startup/zopectl.py

exec $PYTHON $ZDCTL -C $CONFIG_FILE $@


Grazie,
Michele

--
ETH Zürich
Michele Marcionelli
IT Support Gruppe D-MATH
HG G 18
Rämistrasse 101
CH–8092 Zürich

[EMAIL PROTECTED]
http://www.math.ethz.ch/~michele

+41 44 632 6193 Telefon
+41 44 632 1404 Fax


___
Zope-DB mailing list
Zope-DB@zope.org
http://mail.zope.org/mailman/listinfo/zope-db


Re: [Zope-DB] Automatic capture of user ids for auditing

2007-11-07 Thread Charlie Clark

Am 07.11.2007, 21:11 Uhr, schrieb Ken Winter [EMAIL PROTECTED]:


Charlie, thanks for the encouraging response!


Encouraging? Not sure if that's quite the right word! ;-)

Just assuming you did have connections per user, how would you go about  
this?



What you suggest (below) is definitely the way I'd like to do this.
However, ZPsycopgDA and its communications with PostgreSQL are currently
black boxes for me, so I think I need some help taking the next steps.
A few hours of poking around have led me to the following fragmentary  
ideas.



* I have found what may be a likely candidate for the code that could be
customized: the method DB.query(self, query_string, max_rows=None,
query_data=None) defined (on my Windows system) in C:\Program Files\Plone
2\Data\Products\ZPsycopgDA\db.py.


Yep, that's the place.

* One idea is to parse the query_string in DB.query and, if it contains  
an

INSERT or UPDATE command, splice a clause to record the current user's id
into it (e.g. put last_updated_by = request.AUTHENTICATED_USER into the
SET clause of an UPDATE).  Doing it this way should require nothing  
special
on the PostgreSQL side, since the user identifier would come through as  
part

of the INSERT or UPDATE statement.


This is going to be your quickest way assuming you can write a good enough  
parser so you don't catch statements with INSERT or UPDATE as part of  
the parameters! Using the underlying .execute(SQLStatement, (paras,))  
method on the cursor might be preferable and would be available from our  
mxODBC Zope DA but this is unfortunately not compatible with ZSQL methods  
which predate the Python DB-API. You might, however, be able to use a  
stored procedure on the database to execute the query as rendered by the  
ZSQL method with the user passed as a parameter to the stored procedure.  
Again the mxODBC Zope DA would give you access to the .callproc(). No idea  
whether you could write such a stored procedure but I don't see why not.


* The idea of extending the DA pass the current ZOPE user seems  
cleaner.
However, I don't know how to get the DA to pass an additional parameter,  
and
I don't know how to get PostgreSQL to pick up the parameter so it can  
store

it as required.  In other words, I don't understand this API, and I don't
know where it is documented.


Zope doesn't support it and unfortunately relational databases aren't  
getting the attention they deserve in the Zope world at the moment.


Charlie

--
Charlie Clark
eGenix.com

Professional Python Services directly from the Source

Python/Zope Consulting and Support ...http://www.egenix.com/
mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/
mxODBC, mxDateTime, mxTextTools ...http://python.egenix.com/



 Try mxODBC.Zope.DA for Windows,Linux,Solaris,MacOSX for free ! 

eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
   Registered at Amtsgericht Duesseldorf: HRB 46611
___
Zope-DB mailing list
Zope-DB@zope.org
http://mail.zope.org/mailman/listinfo/zope-db


Re: [Zope-DB] ImportError: libmysqlclient_r.so.15

2007-11-07 Thread Charlie Clark
Am 07.11.2007, 21:31 Uhr, schrieb Michele Marcionelli  
[EMAIL PROTECTED]:


If I do the same after setting the LD_LIBRARY_PATH to  
/usr/local/lib/mysql, I did not get error messages anymore!
 Now the problem: I included the LD_LIBRARY_PATH to my startup-script  
zopectl (see below) but I still get the same error message in the  
event.log file:


Sounds like a permissions problem: the Zope user might not be allowed to  
access /usr/local/lib/mysql.


Charlie

--
Charlie Clark
eGenix.com

Professional Python Services directly from the Source

Python/Zope Consulting and Support ...http://www.egenix.com/
mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/
mxODBC, mxDateTime, mxTextTools ...http://python.egenix.com/



 Try mxODBC.Zope.DA for Windows,Linux,Solaris,MacOSX for free ! 

eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
   Registered at Amtsgericht Duesseldorf: HRB 46611
___
Zope-DB mailing list
Zope-DB@zope.org
http://mail.zope.org/mailman/listinfo/zope-db


Re: [Zope-DB] Automatic capture of user ids for auditing

2007-11-07 Thread Maciej Wisniowski
* The idea of extending the DA pass the current ZOPE user seems 
cleaner.

For me, changing DA seems to add 'audit' fields seems nasty. What if you
will have one specific table that doesn't need audit fields (this may
happen when you're using authentication sources that rely on DB and in 
many other cases).


I think that much cleaner might be to create something like
AuditEnabledZSQLMethods that will render to sql that contains necessary
statements and use it instead of ZSQLMethods when necessary.

Above assumes that you'll create a Zope Product that (possibly) inherits
from ZSQLMethods. You may take a look at CCZSQLMethods as they are
example of extending ZSQLMethods.

--
Maciej Wisniowski
___
Zope-DB mailing list
Zope-DB@zope.org
http://mail.zope.org/mailman/listinfo/zope-db