[Zope-dev] Plone Conference 2010 schedule published
Over 400 attendees are set to meet at the 8th annual Plone Conference for a week-long programme of training, talks and developer sprints from the 25th to 31st October at the Thistle Grand Hotel in Bristol, UK. Plone Conference 2010 registrations are open. Plone, an Open Source Content Management System used throughout the world has a massive following and Plone events are held around the globe. The largest of these is the annual Plone Conference and this year will be held in the UK. Plone is used for developing websites, intranet and portals for corporations, NGOs and the public sector. Organised by Netsight Internet Solutions, it promises to bring together developers, designers, end users and business people. This year an additional event is being planned as a one-day mini-conference on the 26th October called Plone in Business which will be aimed specifically at analysts, advisors, evaluators and information professionals looking to find out more about Plone and see a showcase of successful Plone projects from across the sectors. It will also see the launch of the JBoye Plone Community of Practice. The main part of the conference, from the 27th - 29th October, has over 50 scheduled talks from speakers from 19 countries and includes an 'unconference' day in which talks will be proposed by the attendees. Plone Conference 2010 scheduled talks include: * Easier and faster Plone theming with Deliverance * Design and Development with Dexterity * Enterprise Search in Plone with Solr * Boosting productivity with Plone-driven Plone development * Brasil.gov.br: Building a digital nation with Plone Alan Runyan, co-founder of Plone and president of Enfold Systems along with Alex Limi, fellow co-founder of Plone and now Firefox User Experience Lead at Mozilla will be delivering a keynote. There will also be a guest keynote by Richard Noble, OBE, project director of the Bloodhound SSC project attempting be build a car to pass the 1,000mph land speed mark. The conference falls at a great time, with the recent release of Plone 4, a product that raises the bar in the Content Management System market with a faster, more user-friendly and more refined version of the product. So far, registrations for the conference have come from over 30 countries around the world. To find out more about the conference and to register, visit http://ploneconf2010.org. ___ Zope-Dev maillist - Zope-Dev@zope.org https://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope )
[Zope] Plone Conference Earlybird rate ends in 9 days
Hi All, Just to give any of those who are thinking of going a poke, the 8th International Plone Conference is happening here in Bristol, UK at the end of October. The bargain earlybird rate of £250+VAT for the 3-day conference ends at the end of the month just 9 days time! So go register your tickets now: http://www.ploneconf2010.org/ We are expecting over 400 delegates from around 30 countries to be attending, with over 50 talks, plus training, sprints, and an un-conference day. We will be putting a call out for speakers and training sessions shortly. As a slight aside... if you want to see how quick it is to get Plone 4 up and running, here is a screencast I just did at Europython yesterday in which I go from nothing but python installed to fully installed and running Plone instance in under 3 minutes: http://is.gd/dAqs1 -Matt - Matt Hamilton ma...@netsight.co.uk Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development and Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope-dev] catalog performance: query plan
Lennart Regebro regebro at gmail.com writes: I would be interested in seeing a bunch of Gurus sit down at some sprint and trying to come up with a catalog engine that is incremental and uses query plans. There is no reason that would not be stupidly fast. :) We can then make a new catalog that uses this engine but has the same API as the old one, to ship with some future version of Zope, say 2.12. There is the Plone Performance sprint we are hosting in Bristol, UK on the 11th - 14th Dec. http://plone.org/events/sprints/bristol-performance-sprint Whilst it is billed as a Plone sprint, of course much of the speedups can be done at the Zope level, so Zope-only developers are more than welcome :) This is exactly the kind of thing that I like hacking on personally, so would love to see it worked on at the sprint. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Understand. Develop. Deliver http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Browsing ancient history in CVS
I am sort of at my wit's end trying to find out how to work this out, and I've been sort of absent from Zope-dom for the a few years, so please forgive me if I've missed an obvious statement somewhere made about this, but... I'd like to browse around http://cvs.zope.org/ to see some of the older changes made to the tree. Unfortunately I cannot seem to figure out how to make the server actually show me any files. Even if I click 'show contents' on Attic, nothing actually appears. For example, at http://cvs.zope.org/Zope/?hideattic=0 I get 'There are 32 files, but none match the current selection criteria.' Never seen a ViewCVS behave like this. Is there a way I can get in to see the history? ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Browsing ancient history in CVS
Jens Vagelpohl wrote: On Aug 26, 2008, at 17:55 , Behrens, Matt wrote: I'd like to browse around http://cvs.zope.org/ to see some of the older changes made to the tree. Unfortunately I cannot seem to figure out how to make the server actually show me any files. Even if I click 'show contents' on Attic, nothing actually appears. For example, at http://cvs.zope.org/Zope/?hideattic=0 I get 'There are 32 files, but none match the current selection criteria.' Never seen a ViewCVS behave like this. Is there a way I can get in to see the history? Most projects have moved to SVN and can be browsed, with full history intact, on http://svn.zope.org. Which specific package are you trying to look at? Ah, I think I see. I was looking for the old Zope/ZServer (before it was moved to lib/python) and ViewCVS/Subversion doesn't seem to have a facility for actually identifying how far back in time I need to go before I can see it. That led me to believe that http://svn.zope.org/ didn't actually contain the history in question. Thanks for the pointer. ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope] ZClasses deprecation and upgrades
I am wondering about is the nature of the problems with ZClasses that led to their deprecation. If I move a 2.5.1 installation to 2.11, are my several existing ZClass-based products going to break in any known way I should be aware of? Should I consider a last-known-good upgrade target instead? Not really looking for ironclad assurances so much as general experience here. ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Question about Roles
You need to check to see if said user has that role on the object in
question. getRoles is only going to show you roles assigned in the User
Folder, not local roles.
This code is doing a similar thing on my site, with a different role:
dtml-if expr=_.SecurityGetUser().has_role('Development Manager',
this())
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Allen Schmidt Sr.
Sent: Tuesday, August 05, 2008 10:38 AM
To: zope@zope.org
Subject: [Zope] Question about Roles
Zope 2.8.9.1
I have a user in the root acl_users but no Roles set. Then I go into the
folder I want the user to have access in and using Local Roles, I assign
Manager. Then on the page I use:
dtml-if 'Manager' in _.SecurityGetUser().getRoles()
show the update and delete form buttons /dtml-if
For me, with Manager assigned in the root, I can see the buttons. But
for this user, the buttons are not there. When I dtml-var the above
getRoles() she only shows as 'Authenticated' but not 'Manager' and I
show both.
Just wondering why??
Thanks
Allen
___
Zope maillist - Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Re: The best way
Thanks! That solves my problem as well :).
-Matt
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tres
Seaver
Sent: Friday, January 11, 2008 2:04 PM
To: zope@zope.org
Subject: [Zope] Re: The best way
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Garito wrote:
Hi, all!
If you have download the ZSM product you could see I put on it a zexp
file with prototype and some other js file and a css file plus images
This was only a prototype solution to bring you the chance to see how
my ideas are but I think this is not a definitive solution
Now my question:
Which is the best zope way to serve this kind of files trying to avoid
any other product dependence?
Thanks a lot!
In the context of Five / Zope3, the static content items are
resources. One strategy would be to create a Zope2 product with those
files in a subdirectory, e.g.::
$ mkdir Products/garito
$ cd Products/garito
$ echo # ZSM product __init__.py
$ mkdir static
$ cat static/garito.css
body {
background: #FF;
}
^D
And then register that directory as a resource directory via ZCML::
$ cat configure.zcml
configure xmlns:browser=http://namespaces.zope.org/browser;
browser:resourceDirectory
name=garito
directory=static
/
/configure
^D
Now, when you start Zope2, you can pull in your static resources via
special URLs, like http://localhost:8080/++resource++garito/garito.css::
$ cd ../..
$ bin/zopectl start
. daemon process started, pid=25240
$ telnet localhost 8080
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
GET /++resource++garito/garito.css HTTP/1.0
HTTP/1.0 200 OK
Server: Zope/(unreleased version, python 2.4.4, linux2) ZServer/1.1
Date: Fri, 11 Jan 2008 18:53:11 GMT
Content-Length: 32
Last-Modified: Fri, 11 Jan 2008 18:44:47 GMT
Connection: close
Cache-Control: public,max-age=86400
Content-Type: text/css; charset=iso-8859-15
body {
background: #FF;
}
Connection closed by foreign host.
In that product, you could also register a template / browser view which
includes your resources, e.g::
$ cd Products/garito
$ cat garito.pt
html
head
link rel=stylesheet type=text/css
href=/++resource++garito/garito.css/
/head
body
h1 Garito's view /h1
/body
/html
^D
$ cat configure.zcml
configure xmlns:browser=http://namespaces.zope.org/browser;
browser:page
for=*
name=garito.html
template=garito.pt
permission=zope2.View
/
browser:resourceDirectory
name=garito
directory=static
/
/configure
^D
$ cd ../..
$ bin/zopectl restart
$ telnet localhost 8080
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
GET /garito.html HTTP/1.0
HTTP/1.0 200 OK
Server: Zope/(unreleased version, python 2.4.4, linux2) ZServer/1.1
Date: Fri, 11 Jan 2008 19:02:05 GMT
Content-Length: 151
Content-Type: text/html; charset=iso-8859-15
Connection: close
html
head
link rel=stylesheet type=text/css
href=/++resource++garito/garito.css /
/head
body
h1 Garito's view /h1
/body
/html
Connection closed by foreign host.
Which pulls in your static resources.
Tres.
- --
===
Tres Seaver +1 540-429-0999 [EMAIL PROTECTED]
Palladion Software Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHh72H+gerLs4ltQ4RAgwwAKDSJPrGAuwo++ShjWjZzyn06IDz1QCeK69s
+CIbgsCJkbRV5Tdh9XWEY9k=
=Du8x
-END PGP SIGNATURE-
___
Zope maillist - Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Best Practice for including Javascript in Zope Applications
Hello, Ok, I came up with a solution that I like; today I spent a little while making it so I don't have to load things into memory before they are served. Now it works quite nicely for serving out js/css/gui pics. I won't post what I did right now, as I haven't really cleaned it up and I'm ashamed of how it looks at the moment, but I'll post the usage of it to see if anyone would like to use it after I clean it up: ... from util import FileSystemResource #it's just in a utility module for my current project at the moment ... MyZopeObject(Implicit,Item,Whatever): #js and css are paths that are considered relative to my package directory (not the cwd for zope). It can be absolute too, if desired. js = FileSystemResource(js,Javascript Repository) css = FileSystemResource(css,CSS Repository) Now, say that there is ext-all.js in a directory called /path/to/zope/Products/MyProduct/js/. You could then link to the java script file by going to http://domain.com:8080/myZopeObject/js/ext-all.js. In particular, in dtml, I have a standard_html_header that looks something like this: ==standard_html_header.dtml== html head !--Set the title-- titledtml-var title/title dtml-commentscript src=dtml-absolute_url;/js/navbar.js/!--GUTS navbar--/dtml-comment link rel=stylesheet type=text/css href=dtml-absolute_url;/js/resources/css/ext-all.css !--Source in local_js unless the variable isn't defined-- dtml-try dtml-in expr=local_js script src=dtml-absolute_url;/js/dtml-sequence-item;/ /dtml-in dtml-except!--Do nothing-- /dtml-try /head !--Start the body-- body class=dtml-id;-body id=dtml-id;-body !--Set basic pre-nav header-- dtml-unless NO_HEADER h1 id=main-titleThis is a title./h1 /dtml-unless ==!End standard_html_header.dtml== Then in MyZopeObject, I wrap up my DTML in a method like so: ..other class stuff... _main = DTMLFile(dtml/main,globals()) def main(self): main_js=[ext-all.js,main.js] return _main(self.REQUEST,local_js = main_js) I did the whole local_js thing so I could control what JS got dropped into what pages without having to write a different header for each one. I will probably also do the same thing for the css just in case I want page-specific css files. This is what I'm doing at the moment, and it's working great. If this would be useful to someone else, I'll give it more than an hour and a half of thought, rewrite it more intelligently, and make it available. Otherwise, thanks to everyone for their comments! -Matt -Original Message- From: Tim Nash [mailto:[EMAIL PROTECTED] Sent: Thursday, January 03, 2008 12:38 PM To: Matt Hollingsworth Cc: zope@zope.org Subject: Re: [Zope] Best Practice for including Javascript in Zope Applications Matt, Please keep us updated on your strategy for serving extjs. I am also considering making my application a product for distribution but I was thinking along the lines of an install script for macs that would set up the apache webserver. I also like your approach. BTW, I haven't done it, but couldn't you just store an object in zodb that has a pointer to your video on the filesystem and access the video via a zope product? But maybe that is what LocalFS does, I haven't checked. see ya in the extjs forum. Just do a search for zope Tim On 1/2/08, Matt Hollingsworth [EMAIL PROTECTED] wrote: Yep! I have had very good luck with it so far; my little hack that I posted works like a (klutzy) charm and ExtJS is great with zope. The ExtJS folks are very well organized, and the library is quite powerful. It's working great. However, my application doesn't have quite the segregation that yours does; ExtJS and zope (DTML in particular) are much more intermingled, and can't be easily separated. This application is actually a frontend for a Java library that controls instruments at CERN (a research lab I work for), and I love the solution that it has presented. It works like a charm. (in case you're curious, it makes use of a wonderful python library I ran across called JPype (http://jpype.sourceforge.net) to execute the Java code) I am going to be accessing Zope through apache with the VHM, but there are multiple reasons why I don't want to serve the js through apache. This same principle is the reason that I don't want to upload things through FTP or WebDAV. I'm making a product, and I would like to keep it atomic, i.e., I want the only install procedure to be copy product folder to instance/Products. Uploading via WebDAV, or hosting the javascript using separate software, defeats that purpose. The solution that Tom proposed (LocalFS) seems to be what I want, but the problem is that I think it is way too out of date; it crashed my zope server (2.10.5) when I installed it. It says nothing can be found after I add an instance through the ZMI, and this is after I fixed a deprecated import ( from OFS.content_types import find_binary
RE: [Zope] Re: Best Practice for including Javascript inZope Applications
Andreas Jung wrote:
...
Larger JS frameworks like Dojo tend to be split across several files and
directories. The fun starts when such frameworks load/reload stuff
using relative URLs. A co-worker using Dojo intensively had to invest
some time in order to integrate such a JS monster properly. As far as I
remember Extjs also uses multiple files (but not as much as Dojo
does)..so please check in advance.
Another point: consider using CMF and putting your library files into a
directory system view on the filesystem. This makes your life much
easier.
Or just upload via WEBDAV.
One of the biggest advantages of Zope is the isolation from physical
file system.
Regards
Tino
Hello,
Thanks to everyone for your help. I thought about Tres's solution and
quickly discovered that I would be doing a *lot* of clicking/typing if I
wanted to upload all of the files necessary to make the ExtJS framework
available. I'll look into the WebDAV idea; I didn't think of that until
you mentioned it.
However, I came up with another possible solution that may be generally
useful after some (a lot actually) of coaxing. I threw this together in the
time between my new year's festivities :) : it's incredibly sloppy at the
moment, but before I worried about cleaning it up, I wanted to get some
feedback from you guys about it (pardon the annoying formatting problems):
def package_home(gdict):
Returns the location of the file that calls the function. You
must pass it globals() as the argument for it to work right.
:Parameters:
gdict : dict
A dictionary containing all of the global definitions for the
module. This is accessible via the python built-in function
globals()
:return: The fully qualified path for the directory in which the calling
module is residing
:rtype: string
filename = gdict[__file__]
return os.path.dirname(filename)
class FileSystemResource(Implicit,Item):
FileSystemResource is meant to make it easy to access file system
objects
through Zope. It works by taking over the object traversal process to
recursively return resources, simulating a directory structure, until
it finally reaches the end (__call__()), when it accesses the file
and returns it.
If you do
js = FileSystemResource()
in the class that you are publishing, then
http://www.domain.com/yourId/js/all.js
would return the contents of all.js.
:Authors: - Matt
:Date: 2007-1-1
def
__init__(self,path,name,cache=True,persist=False,sync=True,rootdir=package_h
ome(globals())):
Create a FileSystemResource with the specified name
self.path = path
self.name= name
self.cache = cache
self.persist = persist
self.sync = sync
self.rootdir = rootdir
if cache:
self._cache = {}
#
# Hooks #
#
def __before_publishing_traverse__(self,obj,REQUEST):
Just print the request path so I can debug easier
#print REQUEST.path: + str(REQUEST.path)
print REQUEST.path: + str(REQUEST.path)
def __bobo_traverse__(self, request, key):
Takes the key, meshes it with the request, and
generates the object from that
full_path = os.path.join(self.path,key)
if self.cache:
if self._cache.has_key(key):
o = self._cache[key]
fsr = o[0]
mod_time = o[1]
file_size = o[4]
#If modtime isn't the same, refresh the resource
latest_access_time = time.localtime()
num_accesses = o[3] + 1
new_entry =
(fsr,mod_time,latest_access_time,num_accesses,file_size)
self._cache[key] = new_entry
return new_entry[0]
else:
o = FileSystemResource(full_path,name=None)
#Set the modification time
mod_time = time #TODO: Implement
latest_access_time = time.localtime()
num_accesses = 1
file_size = 0 #TODO: Implement
self._cache[key] =
(o,mod_time,latest_access_time,num_accesses,file_size)
return o
o = FileSystemResource(full_path)
print Returning object + str(o)
return o
###
# ! End Hooks #
###
def cleanCache(self):
#TODO: Not implemented (placeholder vars so I'll remember what's in
the tuples)
for key,value in self._cache.items():
file_location = key
file_obj = value[0]
mod_time = value[1]
latest_access_time = value[2]
num_accesses = value[3]
file_size = value[4
RE: [Zope] Best Practice for including Javascript in Zope Applications
Yep! I have had very good luck with it so far; my little hack that I posted works like a (klutzy) charm and ExtJS is great with zope. The ExtJS folks are very well organized, and the library is quite powerful. It's working great. However, my application doesn't have quite the segregation that yours does; ExtJS and zope (DTML in particular) are much more intermingled, and can't be easily separated. This application is actually a frontend for a Java library that controls instruments at CERN (a research lab I work for), and I love the solution that it has presented. It works like a charm. (in case you're curious, it makes use of a wonderful python library I ran across called JPype (http://jpype.sourceforge.net) to execute the Java code) I am going to be accessing Zope through apache with the VHM, but there are multiple reasons why I don't want to serve the js through apache. This same principle is the reason that I don't want to upload things through FTP or WebDAV. I'm making a product, and I would like to keep it atomic, i.e., I want the only install procedure to be copy product folder to instance/Products. Uploading via WebDAV, or hosting the javascript using separate software, defeats that purpose. The solution that Tom proposed (LocalFS) seems to be what I want, but the problem is that I think it is way too out of date; it crashed my zope server (2.10.5) when I installed it. It says nothing can be found after I add an instance through the ZMI, and this is after I fixed a deprecated import ( from OFS.content_types import find_binary - from zope.app.content_types import find binary). I had to completely remove the product to get my Zope instance to work again. I'm getting the feeling that there isn't really a (recent) canned solution for accessing file system content, which is... strange at best, considering all the power that zope has at its disposal. You would think that accessing the file system would be present just because it is so simple to do. I'm not complaining, as I'm *very* happy with zope, I'm just surprised :). I realize that zope's principle is to store everything in the database, but this is unacceptable for content such as video files, right? I mean the ZODB file would be absolutely humongous (and slow? I don't know for sure how it's implemented). If there isn't already a working solution, I would be happy to come up with one; I could just hack out the parts of LocalFS that work, add a few features, and repackage it into a new product. It's not difficult to do (my little trivial solution already would work fine if I did a non-dumb implementation of the file-serving logic), and as much as I would like to use it for other projects, it would be worth my time. For example, I want to make a little video/music server as a personal project unrelated to my current one, and I really don't want to store things in the ZODB if I can help it... 1 video = +1 gig ZODB? :S I don't know much about zope obviously, so if I get some vehement objections to this route, I'll pick another :) Thanks! -Matt -Original Message- From: Tim Nash [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 02, 2008 2:03 PM To: Tom Von Lahndorff Cc: Matt Hollingsworth; zope@zope.org Subject: Re: [Zope] Best Practice for including Javascript in Zope Applications I am writing an application that uses extjs as the front end and zope on the back and they work together really well. I am using a webserver to server the extjs library and everything else comes out of zope. So far I have had no trouble with relative links or files broken up in different locations. It may be because I have fully committed to having an extjs front end. I typically serve a page out of zope, it calls the extjs library as well as custom JavaScript files. The web2.0 style page then makes multiple xhr calls back to zope to load smaller html and json fragments. Works like a charm and has the additional benefit of letting me cache the majority of the front end in the webserver and in the users browser. Have fun because you have just come across a wonderful combination...extjs and zope! Tim On Jan 2, 2008 6:38 AM, Tom Von Lahndorff [EMAIL PROTECTED] wrote: On Jan 1, 2008, at 7:20 PM, Matt Hollingsworth wrote: Hello, I'm new to developing for zope, and I have a quick question regarding some best practices when using Javascript in zope applications. I would like to use Ext JS (http://www.extjs.com/ ) in an application that I am writing. It is a fairly extensive library, so I didn't really want to copy/paste every single file into a dtml method. I looked all over the place for some discussion on this subject, but only found things relating to plone (which apparently has a javascript registry); however, I wish to stay away from plone for this particular application. What should I do to use these libraries? Is there a canned solution for this sort of thing? Thank you much! -Matt
[Zope] Best Practice for including Javascript in Zope Applications
Hello, I'm new to developing for zope, and I have a quick question regarding some best practices when using Javascript in zope applications. I would like to use Ext JS (http://www.extjs.com/ ) in an application that I am writing. It is a fairly extensive library, so I didn't really want to copy/paste every single file into a dtml method. I looked all over the place for some discussion on this subject, but only found things relating to plone (which apparently has a javascript registry); however, I wish to stay away from plone for this particular application. What should I do to use these libraries? Is there a canned solution for this sort of thing? Thank you much! -Matt ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] newbie Simple WebSite Construction Using Zope and Search
Just wanted to say thanks for all your responses, they were brilliant. It's givenme an insight into further zope use, whilst solving the immediateproblem! Fantastic.CheersMatt Yahoo! Photos NEW, now offering a quality print service from just 8p a photo.___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] newbie Simple WebSite Construction Using Zope and Search
Hi, I am trying to use Zope to create a very simple company website (about 40 pages, or so) with the intention of having the flexibility to expand functionality etc in due course. I have very little Python / DTML experience, but have managed to set up the site using includes on the main index page and then use aquisition to provide the content within each section.I'm not sure if this is a safe - or correct way of going about it, but it seems ideal for our purposes. The navigational menus dynamically include a link to each sub folder - ie website/services/ - and navigating to a section, index_html is automatically shown. The "mainContent" variable is then dynamically placed into index_html. (So there are separate mainContent dtmlDocuments in About Us, Services etc..) This means we can keep the content completely separate, and do not have to include headers, footers and other includes within the mainConte nt variable. Brilliant.However, when using the search script - http://www.zope.org/Members/Ioan/SiteSearch - results return a link back to the dtml_Document file mainContent, which gets displayed without any of the header of footer information. Is there any way to render the page with header and footer info? (By, I guess, redirecting the page to the containing folder, so that it pulls out index_html instead...)Any thoughts on this would be gratefully received - as I'm not sure this is the best way of using Zope, but it seems so much better than using plain old included variables. kind regards, Matt Yahoo! Cars NEW - sell your car and browse thousands of new and used cars online search now ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: Zope Foundation?
Hadar Pedhazur wrote: We have had _numerous_ discussions (all in email) with two members of ZEA. We came to an agreement and all seemed perfectly on target, which is why we began all of the other ZF documents and committee meetings, etc. Unfortunately, ZEA never delivered a single draft of the proposed transfer documents, even though they said that the documents already existed for the Plone trademark transfer. ...snip... Hadar, These are serious claims. I talked to Paul who looked into it and gave me the following information. Note that, since the negotiations are finished and the terms are agreed to, we can talk about this with whomever is interested. Some quick points: 1) ZEA emailed ZC on Aug 29, twice on Aug 30, Sep 5, and Sep 15. 2) The Sep 15 note reminded ZC of two points: a. We don't have the paperwork yet. We can't transfer something we don't have. (Contrary to public statements, the Plone paperwork hasn't arrived either.) b. We can't finish the transfer until ZC provides foreign address information for certain countries. This was discussed in the mails cited above. 3) ZEA has well over a hundred manhours over the last 18 months on this trademark. We are getting no compensation for past, present, or future work. Yet, ZEA continues to help the process, as the emails will attest. 4) ZEA gave the contact info for the trademark attorney to ZC, encouraged ZC to contact her (hasn't happened), and instructed her to help. These points might not be 100% right, ZEA might have made mistakes, we're not perfect, the trademark attorney could respond faster, we could email ZC twice per day, etc. On a personal note, ZEA is working for free to help ZC improve the value of a sharelholder asset. ZC might have legitimate complaints about ZEA's performance. However, public mudslinging does not incent our pro bono help on the transfer process. As ZEA has stated, ZC can go directly to the trademark lawyer. Instead, public mudslinging and constantly threatening the Zope Foundation could have a dire effect. We are one reporter away from a Zope: The Next Mambo? story[1][2]. We should immediately stop using the mailing lists and the Zope Foundation as negotiation tools for ZC property. ZEA might have mishandled things, or you might simply believe ZEA isn't acting in good faith. Let's find an alternate outlet for this. For example, add someone from ZEA to the advisory board that you mentioned. If you feel that ZEA isn't acting right, take it to the advisory board. ZEA gets a chance to respond. If the advisory board votes against ZEA, ZEA gets publicly thrown off the advisory board. ZEA has agreed (from the beginning) to hand over the marks at no financial gain. Once ZC provides the missing information and ZEA gets the papers, we're probably a few weeks away from wrapping this up. Any niggles in this are just niggles. The deal is done and there are no disagreements on the terms. The transfer process, although complicated, is in progress. Given this, the risk of being The Next Mambo outweighs the perceived benefit from mudslinging. -Matt [1] http://www.eweek.com/article2/0,1895,1850298,00.asp [2] http://www.mamboserver.com/index.php?option=com_contenttask=viewid=115Itemid=104 -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zsyncer issue
(Sorry about the cross post! I did not pay attention to what I was typing in the address, but perhaps this is the best place for this question anyway.) to achieve what end? One of my projects has a requirement for providing 99.99% uptime when hosting in their data center. Our Zope / Plone solution will be replacing an ASP / SQL Server solution that has 2x web servers and 2x SQL Servers (using log shipping). Tentatively, my hosting recommendation resembles two web servers, running Apache / FastCGI / Zope, and then two servers running ZEO / ZODB and ExFile. My current thoughts would be to commission SAN space between the two ZEO servers so that the Data.fs, etc. would be shared between the two database servers. SAN space is expensive, though, so when I saw a posting about Zsyncer, I was wondering if there might be a solution for keeping two instances of a ZODB synced up. We already have two Cisco CSS to handle heart beats and failover. Thanks for the responses... -Matt ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] [Plone-users] Zsyncer issue
I have not used Zsyncer before, so please excuse me if this question is remedial. Would Zsyncer be a good solution for making a ZEO-based ZODB highly available? If not, what are other people doing for larger Plone / Zope deployments? -Matt ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Re: Zope Foundation Update
Tino Wildenhain wrote: The statement of ZC indicates they want to transfer their trademark to ZF and now find the european trademark in other hands. OTOH, why not just transfer/licence what they have (the .us trademark) and just agree to ZEA transfer/licence the european trademark to ZF too? No, just the opposite. ZC do *not* want to transfer the marks to the ZF. I do find this position strange. Whilst they are willing to transfer all the IP, for which yes we are grateful. The issue being that many companies around the world are investing marketing money and time in developing and promoting the 'zope brand'. The problem is that this brand now (since ZC renamed from DC) also co-incides with Zope Corporation. The value of this brand is increasing and needs to be protected, hence why the marks have been trademarked in the other companies in which ZC did not register. I am guessing that ZC registered the marks in the countries that are most commercially valuable to them -- an understandable move as it was their bucks paying for it. However the *zope community* extends beyond these countries and needs protection too. The main conflict arises because: * The zope community and Zope Corporation use the same word 'zope' to identify themselves. * ZC don't want to let go of their trademarked name as that is a major asset to their business. * Many people in the zope community feel uneasy that a corporation which can be bought and sold owns the name of the software that they are developing. All these points are perfectly valid and understandable, but what we need to work out is a way in which we can try and combine and merge these conflicting points in a sane way. I personally (remember, these views are all mine) welcome Rob's ideas on how to ensure that ZC's potential successors or assigns use the Zope trademark in a fair way. The problem being, I don't see how that can happen if the trademarks are owned by ZC as if the company were bought it would be up to the new owned what would happen with its own property. Yes we could put a contract in place between ZF and ZC to say that ZF can be the arbiter of any disputes, but I don't see how that can remain in place if ZC changes hands. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Memory Errors
Malthe Borch wrote: MemoryError What is going wrong here? I'm running an OpenBSD-system with the latest Python 2.3.5 and 512 MB of RAM. The stack size is 0x10, as opposed to 0x2 that previous *BSD-distributions of Python had as default. Malthe, What architecture are you running OpenBSD on? We have been running Zope on OpenBSD/AMD64 3.6 for about a year now and it works pretty well. I have however recently discovered a python bug that I am trying to track down. I am unsure of the exact problem, but it affects the re and string libs: zeo1# uname -a OpenBSD zeo1.netsight.co.uk 3.6 conf#0 amd64 zeo1# python Python 2.3.4 (#1, Nov 16 2004, 08:26:06) [GCC 3.3.2 (propolice)] on openbsd3 Type help, copyright, credits or license for more information. import string string.whitespace '\t\n\x0b\x0c\r \x89\x8a\x8b\x8c\x8d\xa0' on all other platforms I've tried string.whitespace stops after '\r'... the trailing chars cause problems in weird and wonderful places. I upgraded to python 2.3.5 and get the same result. Not tried on python 2.4 yet. Other than that, we've not had any memory issues. On OpenBSD a single process cannot grow over 1GB of process memory (it can get more than that via anon-mmap, but python doesn't support that). On OpenBSD 3.5 we notice that if we hit the 1GB barrier hard it would panic the kernel, but that was fixed in 3.6. How much memory is python using when you get the memory errors? Has it truely used up all the memory on the system? There are soft limits that are set via login.conf and ulimit/limits which may be too low for you. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Re: Memory Errors
According to 'top', the total load is: * Memory: 80M/131M act/tot Free: 366M Swap: 0K/1028M used/tot, where Zope itself is using practically all of it. Well the question is, should Zope be using all that memory? how big is the site, what are you doing, how big are your caches etc? Our zope processes normally run about 500 - 750MB so maybe you just don't have enough memory. But odd that no swap is being used in your case. I would check your per-process memory limits maybe they need to be higher. Our 'zope' account is in login class 'daemon' which has higher default memory limits than 'standard'. And even then we bumped the limits up even higher. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Re: Re: Memory Errors
Malthe Borch wrote: Theo might be listening --- I'd rather not. OpenBSD is a great platform, and if there's music to be faced, OpenBSD will surely face it. But if these errors persist, I might have too. I've found OpenBSD/AMD64 and Zope to be an excellent platform. As I say I just need to track down this bug in python that has just become apparent (we have been running for almost a year without hitting it, so not too serious). The Opteron 244 (1.8Ghz) is about 20% or so faster on pystone than a 3Ghz Xeon, not very scientific test or relevent to real life, but a good guide). Especially interesting considering you can buy 2.8Ghz Opterons right now. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Re: Re: Memory Errors
I'd like to try and set up Zope in another login-class. It seems correct, as there are soft limits on memory usage in the default class. How would I go about this? Do you use a custom zopectl or run it straight off inetd? I'm not too experienced in OpenBSD-specifics yet, so any advise is appreciated. You need to have a zope user (adduser) and put that in the deamon class when it asks you. If you already has the user then you can change the class with 'chpass zopeuser'. Then you need to edit /etc/login.conf to raise the limits of deamon if you need to, and run cap_mkdb if you use databse versions of the login.conf file. Zopectl doesn't need to change. Just remember to set the effective-user to zopeuser in zope.conf -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Re: Zope Foundation Update
suggestion was a good one, and the fact that I agreed to it shows that we are more than willing to work with the community to find _reasonable_ ways to solve problems. Yes, it is reasonable and it is a start of dialogue. This is a distinct improvement over last week's approach of 'We are not negotiating anything. Hand it over or we set our lawyers on you'. When I *specifically* asked Lois if something like this was possible she re-iterated that you would not be willing to enter any further discussion. Perhaps European law is different that US law, but Rob stated clearly that the contract would name ZC's successors and assigns, which makes it legally binding on anyone who purchases ZC as well. In the US, that contract would survive the sale of ZC. I see no reason to be paranoid about that eventuality, as long as you would trust the initial contract between ZC and the ZF. OK, in which case, that makes sense to me. Combined with Rob's idea of letting the board of the ZF make the decisions on licensing issues I think I personally am happy. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
OpenBSD Python whitespace oddness (was Re: [Zope] Memory Errors)
Tim Peters wrote: (nbsp; in HTML). It's surprising to me to see \x89-\x8d there, though. It could be your system is set to use an unusual locale, or it could be a bug in the platform C libraries. Try writing a little C program to see what isspace() returns. Bingo! Thanks for the hints. You were correct, it was down to a mis-interpretation of the C99 and ISO 8859 standards. Looks like OpenBSD interprets it differently to everything else ;) The policy was changed 8 days ago: http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/ctype_.c Correct ctype classifications of chars = 0x80 wrt C99/POSIX and our man page. ok espie@ deraadt@ -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: Zope Foundation Update
Pre-amble: I post this as a principal in a decently-sized Zope-focused business in the UK. Our company is also partnering with ZEA for some work. I will try to correct some of Rob's factual errors, and set the record straight for some of the issues discussed here. I am not an official spokesperson of ZEA, though - so bear in mind that what I'm saying here reflects what *I* (and my company) think about the situation, and not what ZEA thinks. I know a bit about why the decision to register the trademarks in Europe was made, why the managing partners of ZEA authorised it, and what's going on on the other side of the fence. I am reasonably neutral, though - and care more about what happens to Zope the *community* than anything else. - Matt Hamilton, Netsight On Wed, 20 Jul 2005 01:07:25 +0200, Rob Page [EMAIL PROTECTED] wrote: We are sorely disappointed that ZEA is unwilling to transfer the marks quickly and quietly so that we can proceed swiftly toward the formation of the Zope Foundation. This is wrong. ZEA offered you to transfer the trademarks if you covered the expenses involved in the registration (including the salary of the trademark professionals involved in the registration process), no strings attached - but Zope Corporation declined, and was more interested in sending threatening letters about trademark abuse, even though ZEA is the rightful owner of these marks in Europe at the moment. They were more interested in having the matter resolved *their* way than to cover the actual costs involved in registering the trademarks from ZEA's side. We have offered to reimburse the registration fees paid by the ZEA to the WIPO (World Intellectual Property Organization) in order to facilitate the transfer. We have further offered to preserve their license to use the Zope mark in the conduct of their business as an association of Zope companies. Aidan McGuire of Blue Fountain (another UK zope company), Xavier Heymans (of ZEA) and myself had a conference call with Lois Snitkoff from ZC on the 12th of July in which we offered to transfer the trademark if ZC contribute to the fees of the registration and, in the unwillingness to transfer the trademark to the ZF, at least agree to some form of 'social contract' that states the uses and rights of the mark. After consulting with others within ZC Lois' reply stated: Just to let you know quickly, we will not be paying any of the costs incurred when you registered our trademark. I have checked with management and they reiterate what our position has been consistently. Which directly contradicts what is said above. In the three weeks since learning of ZEA's illegitimate registration of our marks we have tried diligently (but unsuccessfully) to get ZEA to unconditionally transfer the rights of the registration. The registrations were not illegitimate, the Zope trademark was not registered anywhere but in the US at this point, so it was done as a defensive move to make sure the trademark was in friendly hands. In Europe you have companies/trademarks like ZOPEN that could have been problematic for the registration and approval, so a decision was made early on to secure the trademark for the Zope *community*. The companies that constitute ZEA make up a large part of the professional Zope companies in Europe, and they have a lot to lose by the brand being insecure in Europe. And in what way does not accepting ZEA's offer, to transfer the trademark to you by covering the costs involved in the registration, constitute try diligently? ZEA's registration represents an abuse of registration and management of international trademarks and the misappropriation of a mark that is clearly the property of Zope Corporation. So why is Zope Foundation being used as a pawn in the corporate strategies of Zope Corporation? I find this unclear intent pretty disconcerting. We know that the establishment of a fair trademark license for the entire Zope community is an _essential_ component of the Zope Foundation. It is possible that we will come to a conclusion with the ZEA prior to the conclusion of a trademark dispute process. So why are you unwilling to put the Zope trademark under the ownership of Zope *Foundation*? Again, Zope Foundation is being used as a pawn in the company strategies of Zope Corporation. As an aside, the ZEA has also registered the Plone logo as a trademark. It is not our business, but came as a surprise to us, that the Plone Foundation is not the owner of the Plone trademark. Not true. ZEA's trademark experts helped Plone Foundation register the Plone trademark initially, and promptly transferred the ownership of the trademarks to the Plone Foundation, just as they are willing to do the same for Zope Foundation. Personally, I find it interesting that Zope Corporation insists on ownership of the trademark instead of putting it in the Foundation. The moment Zope Corporation goes bankrupt, any company can buy
[Zope] Arizona Zope User Group (AZZUG) now forming
The Arizona Zope User Group is now forming in the Phoenix Area. In response to numerous inquiries, sharp i.t. has sponsored an Arizona Zope User Group (AZZUG). The current site offers live chat, mailing lists, and areas for member-provided content. Although based in Phoenix, we invite anyone from Arizona to participate on the web site. As the site grows, we would like to incorporate content for users of all skill levels.Sign up at:http://www.azzug.org smime.p7s Description: S/MIME cryptographic signature ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope-dev] Python2.4 and Zope 2.7
Hi All, I'm having some trouble getting python2.3.4 running on FreeBSD 5.3b7 on an AMD Opteron, so for kicks tried python2.4rc3. It managed to pass the recursion regex test in test_re.py that was causing python2.3.4 to barf, but in trying to start Zope with python2.4rc3 I get the error below. Does anyone here know if Zope 2.7.0 should work with python 2.4? -Matt zeo1# bin/runzope /usr/local/lib/python2.4/whrandom.py:38: DeprecationWarning: the whrandom module is deprecated; please use the random module DeprecationWarning) Traceback (most recent call last): File /usr/local/Zope-2.7.0/lib/python/Zope/Startup/run.py, line 49, in ? run() File /usr/local/Zope-2.7.0/lib/python/Zope/Startup/run.py, line 18, in run opts = _setconfig() File /usr/local/Zope-2.7.0/lib/python/Zope/Startup/run.py, line 41, in _setconfig opts.realize(doc=Sorry, no option docs yet.) File /usr/local/Zope-2.7.0/lib/python/zdaemon/zdoptions.py, line 264, in realize self.load_configfile() File /usr/local/Zope-2.7.0/lib/python/zdaemon/zdoptions.py, line 308, in load_configfile self.zconfig_options) File /usr/local/Zope-2.7.0/lib/python/ZConfig/loader.py, line 43, in loadConfig return _get_config_loader(schema, overrides).loadURL(url) File /usr/local/Zope-2.7.0/lib/python/ZConfig/loader.py, line 71, in loadURL return self.loadResource(r) File /usr/local/Zope-2.7.0/lib/python/ZConfig/loader.py, line 183, in loadResource self._parse_resource(sm, resource) File /usr/local/Zope-2.7.0/lib/python/ZConfig/loader.py, line 234, in _parse_resource parser.parse(matcher) File /usr/local/Zope-2.7.0/lib/python/ZConfig/cfgparser.py, line 63, in parse section = self.end_section(section, line[2:-1]) File /usr/local/Zope-2.7.0/lib/python/ZConfig/cfgparser.py, line 116, in end_section self.context.endSection( File /usr/local/Zope-2.7.0/lib/python/ZConfig/loader.py, line 201, in endSection sectvalue = matcher.finish() File /usr/local/Zope-2.7.0/lib/python/ZConfig/matcher.py, line 170, in finish return self.constuct() File /usr/local/Zope-2.7.0/lib/python/ZConfig/matcher.py, line 212, in constuct v = v.convert(ci.datatype) File /usr/local/Zope-2.7.0/lib/python/ZConfig/info.py, line 65, in convert return datatype(self.value) File /usr/local/Zope-2.7.0/lib/python/Zope/Startup/datatypes.py, line 106, in importable_name package = __import__(n, g, g, component) File /usr/local/Zope-2.7.0/lib/python/DBTab/ClassFactories.py, line 18, in ? import OFS.Uninstalled File /usr/local/Zope-2.7.0/lib/python/OFS/Uninstalled.py, line 16, in ? import SimpleItem, Globals, Acquisition File /usr/local/Zope-2.7.0/lib/python/OFS/SimpleItem.py, line 27, in ? from CopySupport import CopySource File /usr/local/Zope-2.7.0/lib/python/OFS/CopySupport.py, line 549, in ? action ='manage_main',) File /usr/local/Zope-2.7.0/lib/python/DocumentTemplate/DT_String.py, line 474, in __call__ try: result = render_blocks(self._v_blocks, md) File /usr/local/Zope-2.7.0/lib/python/DocumentTemplate/pDocumentTemplate.py, line 202, in render_blocks cond=md[cond] File /usr/local/Zope-2.7.0/lib/python/DocumentTemplate/pDocumentTemplate.py, line 140, in __getitem__ v = self.dicts[key] File /usr/local/Zope-2.7.0/lib/python/DocumentTemplate/pDocumentTemplate.py, line 100, in __getitem__ raise KeyError, key KeyError: 'v' -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Re: Python2.4 and Zope 2.7
chrism wrote: FWIW, the fact that you get the error at that point means that cDocumentTemplate can't be imported (it's using pDocumentTemplate, which nobody uses since it's a fallback). This is probably the root of the problem. I suspect pDocumentTemplate would give the same error on any platform. I would start investigating why cDocumentTemplate fails to import. Doh! I bet it is because I have copied over the install from one of our other servers, and the C components will have been compiled with py2.3, and hence probably not imported successfully into py2.4. Before I realised this I did a fresh install, using Zope 2.7.3b2 and py2.4a3 and after I got all the modules I needed recompiled for py2.4 (PIL, GD, 4Suite, etc.) I started Zope and is still crashed with a Bus Error. Which was what I was getting with py2.3 on FreeBSD/AMD64. So it looks like it just gets a little further with py2.4, but there are still problems. I'll try and get the recursion limit a bit lower and see if that helps it get through. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Zope MemoryError after installing Plone
Hi all, I just compiled a fresh copy of zope 2.7 - it started up just fine. So then I grabbed Plone 2.0.4. After copying Plone to my Products directly, I cannot startup Zope and I get a MemoryError. Here is the tb: http://paste.plone.org/1317 I'm using python 2.3.3 on freebsd4 - Do I need recompile python with some special flag? Thanks, Matt --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047alloc_id=10808op=click ___ Plone-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/plone-users ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
RE: [Zope-dev] About populate folders by external scripts.
Hi Christian, If you are using Archetypes there is a useful tool in the Plone collective called ATImportTool. This will allow you to import your content from a flat file. It can create folders on the fly or use existing ones. It can also be used to update content. It's only available through cvs checkout for now: http://cvs.sourceforge.net/viewcvs.py/collective/ATImportTool/ hth, Matt -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Cristian S. Rocha Sent: Tuesday, August 10, 2004 6:16 PM To: [EMAIL PROTECTED] Subject: [Zope-dev] About populate folders by external scripts. Hi, I'm working in a Product (CMFBio) to store biological data as Plone content. To begin the database I need to populate a Plone Folder with a lot of these contents ( 1) in a batch way. That's the reason to make a little script who load a big file and create the objects in a folder. I was looking information about it, but was difficult to me found something in the zope.org page. I make a form to upload a file, but I would like do it in the command line. Could you help me with some examples to do that? Thanks, Cristian. -- Lic. Cristian S. Rocha [EMAIL PROTECTED] Departamento de Computación, Facultad de Ciencias Exactas y Naturales, Universidad de Buenos Aires. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope ) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
RE: [Zope-dev] Possible Windows Service improvements.
You left out the lack of 'zopectl debug' ;] I have managed to create it though -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mark Hammond Sent: Wednesday, August 04, 2004 7:35 AM To: [EMAIL PROTECTED] Subject: [Zope-dev] Possible Windows Service improvements. Hi all, I am starting to venture into the wonderful world of Zope! With the benefit of a complete lack of Zope experience, I have been able to look at the Windows service support from a fairly clean slate. However, I also realize this lack of experience means my ideas may be naive - hence I have attempted to split them into discrete issues for discrete rejection wink. 1) startup error redirection. I've noticed that the main Zope service driver for Windows seems to work fine when everything is setup correctly, but when things go wrong it offers no clues as to what. This is reflected in collector item 1020 (poor error reporting on product initialisation failure under windows). Issue 1408 (Configuration file imports don't see INSTANCE_HOME when running Zope as a windows service), via the referenced thread, has evidence of someone burning a day due to this. It cost me alot of time too :) I propose: Each time the child process terminates with a non-zero return code, the tail x-bytes of the child output be written to the Windows event log, where x~2k. 2) reporting of successful start and backoff strategy. A trivial startup error (eg, PYTHONPATH not set) will cause the Zope service to hopelessly retry for a number of minutes, and not respond to shutdown requests during a retry. At the moment, as soon as the service starts it reports successful startup to Windows. It then begins an attempt to start the child. If the child immediately fails, the code immediately begins the backoff strategy. This strategy appears to have 2 main purposes: * Startup may fail due to other 'services' not having yet started, so retry in the hope they become available. * The process may die due to some obscure error - restart it. On windows, assuming we install the service to depend on the tcpip service, I see no reason that the first reason is valid. If the process fails quickly the first time we attempt to launch it, it is almost certainly going to fail every time we try and launch it. The current strategy also means that 3rd party services could not themselves depend on the Zope service - the Zope service will report successful startup before it really has (and therefore the dependent service may itself fail). This isn't a known requirement today, but who knows! net start and other front ends also fail to detect fatal errors - they all say Zope started OK. I propose: We insist the child process can be created and continues to run for x seconds (where x~5). If that fails, we report an error (never reporting to Windows that we started successfully). If the child process stays alive for this period, we report success to Windows, and then use the existing backoff strategy should it die. If the machine is heavily loaded, this 5 seconds may expire before the fatal error is hit in the child - in that case, we are simply doing what we do now - using the backoff strategy to hopelessly attempt a restart - ie, a win in most cases, and no loss in the others. 3) environment setting The service process should set a number of environment variables before spawning the child - PYTHONPATH at a minimum, and according to issue #1408, INSTANCE_HOME. It already knows these values thanks to mkzopeinstance. I'm yet to determine where these values comes from for in binary build, but I see no reason not to fix this (and possibly remove whatever magic the binary does) I propose: A few trivial os.environ insertions based on the substitutions done by mkzopeinstance, before we create the child process(es). Alternatively, we create an explicit new environment we pass to CreateProcess, but I see no good reason for that.) 4) Currently, when the process is stopped, we immediately terminate the child process. This seems dangerous. We should find a way to gracefully terminate the child, and try that before we simply kill it. I propose: That someone help me work out how to do this wink. I've already worked out how if the service knows the username/password of a Zope administrator, but it doesn't! Sending a Ctrl_C 'signal' doesn't work without hacks to run.py (and I'm yet to confirm it will even with such hacks). I welcome any feedback on these issues. Obviously I am willing to back each of these proposals up (except 4!) with code that seems to work :) I would also welcome feedback on the best way to proceed (ie, create a new collector for each issue? thrash it out here? give up?wink, etc) Note that none of these issues would require a win32all/pywin32 update. If anyone was really upset by issue 1423 (Zope 2.7.1 won't run as service under NT), and also able to test, I'd be willing to fix it - but that *would* require a pywin32
[Zope-dev] Re: http://collector.zope.org/Zope/1347 - Zeo help
Laurence laurence at fluxinc.com writes: I'm running FreeBSD 5.2.1 (Current as of last night) with Zope 2.7.0, Postgresql 7.4.2, Python 2.3.3 and psycopg-1.1.13. Laurence, Yes this sounds like the FreeBSD thread stack size being too small. If you compiled python from the ports, then look in the Makefile for somethink like WANT_REALLY_HUGE_STACK and set that. eg. make WANT_REALLY_HUGE_STACK=yes install clean -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd.Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Design | Zope/Plone Development Consulting | Co-location | Hosting ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] The bleak Future of Zope?!
my nz$ 0.02 worth - is the future bleak? nothing seems to awry to me, this copy you pasted has no basis for argument - why even bother pasting it - for some upgrades of zope 2.* I need to rethink some rather understandable aspects of my zope products - each one appears to be a migration to z3. - if my next upgrade == z3 and I need to spend more than a few days fixing my products, then perhaps something went wrong. But I don't see that happening yet, but then, by being limited to production quality releases, I just read the news items and browse zope-dev. On 21/04/2004, at 7:58 PM, Martin Kretschmar wrote: Hello, Maik Jablonski of the german speaking Zope Users Group DZUG issued a pretty bleak outlook for the future of Zope. What are your oppinions? Here comes the translation of his oppoion: Maik, what makes you look full of scepticism for the future of Zope? Shortly said, the whole set of stupidities in connection with Zope3. It is a pretty bad state for a project, if it looms for years as the followup project on the horizon but in reality isn't one! I can't believe the fairy tales with the possible migration from Zope2 to Zope3. All the people which have dwelled more or less deeply into the Zope2 world, thereby having had an enormous learning curve and now running applications, will not be able to participate easily on the academic Zope3 train. The technic freaks who modell Zope3 are usually not application developers, which have to build and run working applications for real human users. The artifical not-yet-product Zope3 will sooner or later be distracting development efforts from Zope2 because Zope3 is almost finished. That doesn't look not nice ... Further I see the problem that Zope probably has no real target group as an application server. The enterprise world is dominated by .Net and J2EE. Zope in its current form without a sensible documentation in conjunction with the drama about the english zope book doesn't help changing this. Scripting has arrived in the Java world by Groovy, so this isn't a reason for using Zope anymore. In the world of small and medium applications PHP is likely to stay, because it leads much faster to results. Zope is to complicated for this. For the CMS stuff we have Plone, but this is rather suited for handling some simplistic documents for the intranet rather then a nice internet representation. This is because customizing Plone isn't trivial at all and nobody want's to run web pages with standard underwear blue. OK, the colours can be changed easily, other features via CSS, etc. ... Maybe I'm simply sick of moving along within web browsers and the file system without a sensible IDE and documentation. Regards, Maik ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope ) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] (no subject)
-- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Create top-level folder
Part of my product's job is to create a top-level folder. I can have it do that only when, from the management interface's add function, I add it to the root directory. I would like it to always be able to go to the root directory, regardless of where its added. In order to do this, I need to access the root directory object, but I don't know how. What function can I call to return the root directory object? Would 'getPhysicalRoot' do what I want? if yes, what do I call it on? -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Create top-level folder
Part of my product's job is to create a top-level folder. Currently, I can only get it to create the folder in what ever folder the product is added in. I would like to be able to get access to the root directory object but don't know how. How do I access the root directory object? Would 'getPhysicalRoot' do that? If yes, how do I use it? -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Call Product Constructor
This is the __init__.py of my product (ZID): from ZIDProduct import ZID def initialize ( context ): context.registerClass( ZID, constructors = ( ZID.manage_addZIDForm, ZID.manage_addZID, ZID.manage_add_folder ) ) I want the constructor ZID.manage_add_folder to get called at the end of the initialize function. How do I do this? -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Connection Refference
I am creating a product which has classes that override the Folder class so that my class controls access to some folders that it creates. From within the Folder class, specificially when the _setOb, _getOb and _delOb methods are called, is there a way to get access to the connection object/reference to the user that is making changes to the folders? I know there is the RESPONSE object for the product constructors, but I need a way to get to it from within the Folder class. -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] SSL Support
Does Zope support SSL? Is there a way I can enable/activate that support from a product? -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Encryption help
I am making a product that needs to recieve requests from clients over HTTPS and store data in an encrypted form only. Does Zope support HTTPS, and if yes, how do I activate that support? Further, how can I encrypt some files my product generates and have Zope write only the encrypted version to disk? -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-Coders] Re: [Zope-dev] Bug Day 8/02 recap
On Fri, Aug 16, 2002 at 09:58:38AM +0100, Chris Withers wrote: Well, there were a lot of 'rejected' issues and a fair few deferals too. I'm mildly concerned about some of those rejections being premature and some of the deferals being used just to bury stuff 'cos no-one has time to deal with them right now. Yes, there were a lot of rejections. Out of the ones I myself made, most were due to the bug report being invalid -- that happens a *lot* with any issue reporting system. Several also had to be dumped because more info was asked for six months ago and never received. We discussed most of them on IRC, which was truly the real benefit of having a Bug Day: getting that rough consensus needed to take action. I also made several resolutions, most of which were bugs that were fixed before, advertently or inadvertently. Very little code was checked in; most resolutions seemed to be bugs that had already disappeared for one reason or another. I consider this a good thing. :-) -- Matt Behrens [EMAIL PROTECTED] URL:http://zigg.com/ msg5/pgp0.pgp Description: PGP signature
[Zope-dev] Bug Day 8/02 recap
Zope Bug Day August 2002 was an unqualified success, with our largest bug total squashed to date: 45! The number of still-open collector issues dropped by almost 25%. Thanks to all those who participated! More information on Zope Bug Days can be found at http://dev.zope.org/CVS/BugDays. I think it would be good to hold another one in September; how's the 11th at 9 AM US/Eastern? (For the curious, we squashed #101, #115, #121, #46, #129, #27, #297, #29, #148, #461, #497, #38, #501, #106, #453, #69, #37, #40, #74, #95, #82, #507, #53, #168, #408, #81, #83, #90, #93, #104, #113, #61, #117, #127, #132, #134, #152, #268, #192, #13, #92, #179, #177, #518, AND #332.) -- Matt Behrens [EMAIL PROTECTED] ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Bug Day June 2002 results
I just wanted to give a quick summary of Bug Day June 2002, and get people thinking about July 2002 a little sooner so maybe more people can make it. Yeah, I know there were a lot of things going on this time around... Anyway, we fixed #151, #72, #6, #402, #79, #272, #409, #312, and #432, plus chrism@ worked tirelessly on the Transience problems. Total bugs resolved, then, is 10. Next Bug Day, provided folks are keen on it, would then be Thursday, July 18 (IIRC, the Europeans preferred Thursdays), starting at 9 AM US/Eastern. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Error by using libraries with an external method
Dario Lopez-Kästen wrote: From: Leonardo Rochael Almeida [EMAIL PROTECTED] Putting it in the Extesions directory, so that it can be imported by external methods, doesn't seem to work, even if you put Extensions in the PYTHONPATH, at least in my experience. hm... Putting it in the Extensions directory has worked for me using Zope 2.4.3 (I don't like to mess with the PYTHONPATHG in the Python Install)... Has this changed in later zopes? What's wrong with twiddling PYTHONPATH? My instance home has a 'Packages' directory, where I have stuff like _ldapmodule.so (for ZLDAP), imaging.so, and the PIL and ldap packages. My start script looks like this: #!/bin/sh PYTHON_VER=2.1.3 ZOPE_VER=2.5.1 INSTANCE_HOME=/zope PYTHONPATH=$INSTANCE_HOME/Packages export INSTANCE_HOME PYTHONPATH STUPID_LOG_FILE=$INSTANCE_HOME/var/log/zlog_`date +%Y%m%d`.log STUPID_LOG_SEVERITY=-200 export STUPID_LOG_FILE STUPID_LOG_SEVERITY echo `date` starting $INSTANCE_HOME/var/log/start_`date +%Y%m%d`.log exec $INSTANCE_HOME/Python-$PYTHON_VER/bin/python2.1 \ $INSTANCE_HOME/Zope-$ZOPE_VER/z2.py \ -F $INSTANCE_HOME/var/FastCGI.soc -m 8099 -p - $@ \ $INSTANCE_HOME/var/log/start_`date +%Y%m%d`.log 21 All in all, it works pretty well. No need to sweat messing with PYTHONPATH. All instance homes should do this, and have a Packages directory :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Crash Burn with Zope 2.6.0a1 and ZEO 2.0a1
Stefan H. Holek wrote: Z2.pid is created very late. I cannot ./stop a half-started Instance (not even a ZEO client waiting for the server!). Could we create the pid file earlier? Actually Z2.pid *is* now created earlier than with 2.5.1, the setuid stuff for root startups was moved after the Z2.pid creation to stop a potential security issue. I don't see any reason it couldn't be created before the servers are started, however. Others may have reasons why. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Bug Day for June?
Are we having a Bug Day on Friday? ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Python, Zope and pymalloc
Dario Lopez-Kästen wrote: Is anyone using zope with a python that is not configured with --without-pymalloc ? I understand that there is still a conflict with ExtensionClass unless python is cfg'd --without-pymalloc? You are correct, sir. ExtensionClass is not pymalloc-safe, so saith the Kromer. This is not to say it could not be made so. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] help system and .py files
Is it at all productive to have .py files in the help system byte-compiled? ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] ExternalEditor Windows
brian.r.brinegar.1 wrote: I've started a VB Script version for the Windows Scripting Host. Right now I'm in the proof of concept stage. I've got something that opens a file, spawns an editor, gets the process id, and can PUT a file to Zope. (works with SSL too) Please pardon my Windows ignorance, but does using WSH mean that IE will be required to be used? ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope crash restart
Myroslav Opyr wrote: System Platform freebsd4 Are you running with the pthread stack size patches applied to Python? See https://sourceforge.net/tracker/?func=detailaid=554841group_id=5470atid=305470 for the patch, and recompile Python with OPT=-g -O2 -DTHREAD_STACK_SIZE=0x2 ./configure --whatever-your-options-are ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Overriding HTTPResponse.unauthorized()
I've got some rather funky auth requirements where I need to stop Zope from challenging Basic authentication when Unauthorized is raised. I seem to be able to do this if I monkey-patch HTTPResponse.unauthorized(), but what I'd really like is to be able to hook into it to make a user folder-overridable challenge with a fallback to the standard unauthorized. Maybe such a hook would be useful in 2.6 :-) So, given that, can I get to the user folder from HTTPResponse.unauthorized()? Or are there any better ideas? ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] can't put !--#BCODE -- in dtml
[For future reference, questions like this one should go to [EMAIL PROTECTED] [EMAIL PROTECTED] is for discussion of development of Zope. Replies/followups directed there.] Yuan-Chen Cheng wrote: Can't put !--#BCODE -- in dtml, but !-- #BCODE -- is okay. The !--# syntax is an old DTML syntax, so what is happening here is that the DTML engine is trying to interpret the former as a DTML tag named BCODE. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] How about a Bug Day this Friday?
Brian Lloyd wrote: We are planning to have the inaugural bug day this Friday (April 12th) from around 9 a.m. US /Eastern until we've all had enough :^) Sounds good. Make it #zope-dev, as nothing ever happens there :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] ZClass Constructor Cleanup for 2.6
Casey Duncan wrote: Does anyone see a problem with changing the default generated constructor method for ZClasses to a python script in Zope 2.6? I think we are encouraging really bad style by keeping this in DTML, since it is purely business logic. Thoughts? I will, of course, implement this if nobody objects. +2 (I'm taking Andreas' vote because he says 'zclasses sux' and 'zclasses must die', so he's biased) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
ZCatalogPathAware (was Re: [Zope-dev] ZClass Constructor Cleanup for 2.6)
Leonardo Rochael Almeida wrote: ZClasses have been overlooked enough. Nobody has even bothered putting a ZCatalogPathAware available for them... I tried do to this quickly for someone on IRC once. The problem is that the mixin is identically named for CatalogAwareness and CatalogPathAwareness, and as such they show up looking exactly the same in the ZClass mixin list. :-) There's probably a way around this that wasn't immediately obvious at the time. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Next steps on Zope 2.6 plan
Brian Lloyd wrote: One suggestion Casey had was to start to codify a set of rules that features have to abide by to be considered for inclusion. Hmm, these rules seem to have several thinly veiled references to my pet project. :-) I do firmly agree with the rules in spirit, but I think a little clarification/discussion is in order so it doesn't get cut without good reason. - A feature release should never contain more than one blow-it- up-and-redo-it type project (such as radical changes to key parts of packaging or infrastructure). For example, it would probably be a bad idea to totally redo the ZODB, packaging and installation and the security system all in one release (unless it is a major release like Zope2 - Zope3). Agreed. I think it is important to note two things, though: 1. Creating the new, recommended installation procedure is different from gutting and replacing an existing feature, simply because we don't really *have* a recommended installation procedure right now. As currently proposed, you can still use Zope 2.6 just like you used Zope 2.5, except you'll type 'make' instead of 'python2.1 wo_pcgi.py'. 2. I've tried to keep this proposal clean enough that it can easily be brought into Z3, so that instances of Z2 and Z3 on the same system can be controlled and managed by the same software. The aggregate impact in terms of obsoleting existing knowledge and documentation is too great to do many of these at once. It takes time for users and developers to catch up after something major is refactored, and we need to keep this in mind. Just to reiterate, they'll have all the time they need. The only people I see scrambling to get up to date are Zope 2.6 packagers (like myself). Perhaps a qualification is in order here, i.e. mitigation of this effect by maintaining as much backwards compatibility as possible. - Features or components added to the Zope core should address a clear and generally agreed-upon need. Otherwise, accumulation of components over time will become a significant support burden for the zope maintainers. My proposal will probably reduce support burdens. Just the other day, on IRC, we had to tell someone to switch away from his nicely packaged RPM version of Zope and use the source distro. So maybe this should be a qualified rule as well? Thoughts? I'll volunteer to maintain the guidelines document on dev.zope.org if folks can send their guideline suggestions. I don't know if the above constitutes useful information for writing rule changes or not, but I hope it's helpful. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Moving forward on Zope 2.6
Florent Guillaume wrote: Okay, I'm a bit late but I'd like to integrate what's currently in NuxUserGroups, a bit updated maybe. http://www.zope.org/Members/nuxeo/Products/NuxUserGroups There will be a merge conflit with Lennart's Local roles blacklists, it it's chosen for 2.6, but I'm familiar enough with both code sets to manage the merge. I'm adding this proposal to the wiki. I do recall that we looked at NUG as XUFers at at one point, and akm said it looked like it'd be compatible, although we still needed UI for groups in XUF. Nobody has done this, incidentally. :-) I'm not convinced that it'll go so well with other user folders. My gut feeling is that while groups are a very, very good thing (we NEED them here), and I'd love to see them in Zope 2, I think the issue of compatibility with all the other user folders out there is going to be a huge sore spot. So, -1, unless you can prove to me that every user folder on zope.org that hasn't already been obsoleted due to Zope changes will also work with NUG integrated (and the unfortunate fact that everyone probably has to change UI probably makes that a non-issue.) This coming from a guy who really wants groups. :-/ ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Python 2.2 (was Re: [Zope-dev] Zope 2.6 planning - call for contributors!)
Lennart Regebro wrote: Are you planning to up the python version to 2.2? Because in that case I'd be happy to put in Authentication support in MailHost. Smtplib.py in 2.1.2 doesn't support authentication. I don't know how people are currently using Zope with 2.2. There is probably some really nasty problem being masked by the platform (seems to be Linux). See http://collector.zope.org/Zope/200 -- there's at least problems on Solaris and OpenBSD, probably others. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Umask? On Windows 98? Ha!
Lennart Regebro wrote: I get this message when starting Zope 2.5.1b1 on Windows 98: No you didn't, you got it on the trunk. I just double-checked. My big security patch was never checked in on the 2.5 branch. 2002-03-18T19:32:15 INFO(0) z2 Your umask of 000 may be too permissive; for the security of your Zope data, it is recommended you use 077 That's rather silly on Windows 98. :-) I agree. I noticed this over the weekend and am testing a few more scenarios. I mistakenly assumed that os.umask wouldn't exist on non-POSIX systems, so the try: block would cover it. But instead, os.umask says 0. A couple of questions: - Should that really be 077? That means that the owner can't read the files, but that other can! How can that be less permissive? 770 would make sense to me. I usually run z2.py with -u zope, and have zope own the files, and letting nobody else do scrap with them, 700, in other words. WHy would 077 be better? First, if you don't start the number with 0, it's not octal. Second, you are confusing umasks with modes. When you create a file on UNIX its modes are 0666 umask, directory 0777 umask. Thus, creating a file with umask 077 results in mode 0600 (read/write only for owner). The default UNIX umask is 022, which results in a Data.fs that is readable by all. You can twiddle permissions on it, sure, but it'll turn up readable by all again when you pack the database. - Is it silly to check for Windows? What happens on Windows NT, does that emulate umask somehow, or do you get 000 there too? Yes, but it's not silly to check for os.name == 'posix', which I will fix on my own time later, prob. tonight. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Asia To USA Shipping Rates
[EMAIL PROTECTED] wrote: We have a full collection of wholesale freight rate calculators at http://www.apx-air-cargo.com Our new calculator is here and it will calculate rates from Asia to over 30 US cities including customs clearance and delivery. Great! Is it available as a Product? Can I use it with Z3? CLICK HERE http://www.freight-calculator.com/ocean-asia/oceanasia.asp Oh, darn, I guess not. :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope 2.6 planning - call for contributors!
Behrens Matt - Grand Rapids wrote: This isn't exciting by any means unless you're one of the people who package Zope up for distribution, or maybe you're one of the people who manage lots of little Zopes on one system; but I'd like to revive the grand unified Zope installation and control proposal that has been floated by many people (including me) in one form or another for some time FYI, everyone who's following this: I have hijacked http://dev.zope.org/Wikis/DevSite/Proposals/InstallationAndConfiguration for this purpose. :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Bug days
Brian Lloyd wrote: In an effort to better keep up with the collector, I'd like to throw out the idea of doing periodic bug days (a la the mozilla bug days), where Zope geeks and committers would get together on IRC and spend a few hours knocking out issues. Yes, this would be *very* cool, if for no other reason than to try to thin out the Collector. I made one pass over it today and found a few that never got closed when resolved, etc. What several of them seemed to fall into, though, were ones that really merited a discussion of some sort to resolve, preferably with a senior engineer of some sort present to at least bounce ideas off. - Given the wide geographic area that committers (and patch submitters) cover, what is a good time of day for a bug day to start / end (where start and end are always going to be fuzzy, of course). I'm sure I could swing a weekday every once in awhile (during the workday, EST) at work. - Would it be better for bugdays to be ad-hoc, or should we try to set up regularly-scheduled bugdays at some reasonable interval? If the latter, we need to come up with a day / time that is agreeable to as many of the committers as possible. Better make 'em scheduled, or no-one will show. :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] User Folders
Chris Withers wrote: Right now, I'd like to see the scope kept _tight_, just dealing with authentication, no user metadata, that can wait for later. There is XUF, but I'm not sure about the code quality and I think it tries to do too much. Of course, I could be wrong... Speaking as someone who's worked on parts of the code, I don't think you're wrong. XUF has issues that I'm not sure anyone really understands, though my recent exploding user object cache work got it to the point where it does seem to be stable on heavily-loaded systems. Yes, it does try to do too much, I think. Back before I figured out enough of XUF to fix the cache issues I played around a bit with a virginal pluggable user folder (right now it does not do much of anything, including authenticate, but it is a beginning.) I still have the code, and my boss would still like to see it brought to fruition. I do have quite a bit to say about the design of such an animal. It's something we need. In any case, I'd be happy to monitor a discussion to build a solution to this (I might even be persuaded to strike up a fishbowl process ;-) and get the finished product done. I dunno if I could manage it for 2.6, but I'd certainly get it done for 2.7... I held back on suggesting this because I'm not convinced I have the resources or the ability to bring this baby up on my own, and especially not in time for 2.6. But if others are interested in _contributing_, everyone can count me in too, I'm sure (although how much time I have to offer is up in the air as other projects are starting to pound on my door...) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope 2.6 project updated
Christian Theune wrote: Well I saw the cookie crumbler wish has been added to the list already, and (as i tested it out this moment) don't see what exactly needs to be done than adding it by default to the root userfolder. Well, probably some facelifting to the default login, thats not urgent in any way but if wished i would do that. Well, as far as least-intrusive, CC loses some points by not being compatible with some of the user folders that do their own cookie auth, although that's arguably not CC's fault. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Cookie Crumbler and similar products (Re: Zope 2.6 project updated)
Christian Theune wrote: Hmm. I didn't get an answer right now (well i don't find the question again too) if the cookie crumbler would interfere subfolders (distor through acquisition) or would only be active on a sibling userfolder, which he is watching. I'm really not sure. I imagine it could be troublesome. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope 2.6 planning - call for contributors!
Brian Lloyd wrote: Let's get a discussion started to define 2.6. This isn't exciting by any means unless you're one of the people who package Zope up for distribution, or maybe you're one of the people who manage lots of little Zopes on one system; but I'd like to revive the grand unified Zope installation and control proposal that has been floated by many people (including me) in one form or another for some time. Wikiwise, this would wrap up http://dev.zope.org/Wikis/DevSite/Proposals/ZopeStartupProvisions and http://dev.zope.org/Wikis/DevSite/Proposals/InstallationAndConfiguration, at least. To summarize, this would involve - an expanded build program with an installation scheme that would allow multiple versions of Zope to be present on the same system - making that installation 'secure by default' - a registry of Zope installations and one of instances and their configuration settings - a 'zopectl' program or similar that would be able to start and stop instances - a 'zopeinstance' program or similar that would become the _recommended_ way of setting up Zope, by creating an INSTANCE_HOME It would be nice if - the same framework could apply to Zope 3, maybe taking care of that piece ahead of time I'm more than willing to head this up, though I question how long we have before 2.6 to do so. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] sre and import_class
re seems to prefer sre over pre these days, so the following bit of Products/PythonScripts/module_access_examples.py no longer works: # from re import RegexObject, MatchObject # allow_class(RegexObject) # allow_class(MatchObject) The reason seems to be that sre doesn't define RegexObject and MatchObject, preferring instead to define types SRE_Pattern and SRE_Match, which can't be imported. Arguably this is probably a deficiency in sre, but as it stands, it seems to be currently impossible to use re inside of python scripts. I'm using an EM. I'll file a Collector issue on this one, unless someone has a solution, or someone wants to just take the 're' section out of module_access_examples.py. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] how can i add index_html
sushant wrote: hi, i just wanted to know how can i publish my product in zope.org. as i have put it there(in software product) but i am unable to add index_html, can you pls suggest. how to add index_html into it. You really shouldn't be putting index_html into software products themselves. Software products already know how to render themselves; just set the appropriate properties. You can put an index_html into your home directory (which you probably already know) :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope builds (new Intel C++ compiler)
Matthew T. Kromer wrote: OK, but be warned -- gcc cvs isnt guaranteed stable, so often I have to hand tweak things (rebuilding certain modules with different options, etc.) In my experience, *any* gcc can produce crap code if you feed it the wrong options. It may be fun to play with options, but let me just throw in my two cents to this thread -- don't get so excited about your 25% speed gain that you throw it into production to trust your data with. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Python 2.2 and Makefile.pre.in (was Re: [Zope-dev] Zope under cygwin)
Tony Goodwin wrote: It appears to be trying to rebuild the python within Zope? There is a makefile.pre.in within Zope..src/lib/python, but poiting to it just gives error of form no target boot in MAkefile Python 2.2 doesn't come with a Makefile.pre.in, which Zope depends on to build the C extensions. I have heard that copying the one from a 2.1 installation will work. I have not yet tried it. I think this is getting to be a FAQ :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Python 2.1.2 causes Error code 6?
stefan holek wrote: At 28.01.2002 13:55 +, Chris Withers wrote: 1. What does Error Code 6 mean? #define ENXIO6 /* No such device or address */ Bzzt. The error code comes from waitpid(), which the Python library doco says has the same return code as wait(). The low eight bits are a signal, so we actually got a signal 6, not an exit code 6. Signal 6 is SIGABRT. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Very, very strange problem with 2_4-branch
After upgrading to 2_4-branch, I started having some problems with
authentication, or so I thought. I have a standard user folder in the
root and an XUF in a top-level folder.
After much wailing and gnashing of teeth, I dug into _check_context, and
added a debug statement, now I have:
def _check_context(self, object):
# Check that 'object' exists in the acquisition context of
# the parent of the acl_users object containing this user,
# to prevent stealing access through acquisition tricks.
# Return true if in context, false if not or if context
# cannot be determined (object is not wrapped).
parent = getattr(self, 'aq_parent', None)
context = getattr(parent, 'aq_parent', None)
if context is not None:
if object is None:
return 1
if not hasattr(object, 'aq_inContextOf'):
if hasattr(object, 'im_self'):
# This is a method. Grab its self.
object=object.im_self
if not hasattr(object, 'aq_inContextOf'):
# Object is not wrapped, so return false.
return 0
zLOG.LOG('BasicUser._check_context', zLOG.DEBUG,
'%s.aq_inContextOf(%s, 1) returned %d' %
(object.getPhysicalPath(), context.getPhysicalPath(),
object.aq_inContextOf(context, 1)))
return object.aq_inContextOf(context, 1)
I am getting the following log output:
2002-01-25T16:36:23 DEBUG(-200) BasicUser._check_context ('',
'zope').aq_inContextOf(('', 'zope'), 1) returned 1
and
2002-01-25T16:38:07 DEBUG(-200) BasicUser._check_context ('', 'zope',
'dept', 'is', 'alerts').aq_inContextOf(('', 'zope'), 1) returned 0
Now, the weird part is that this problem is sporadic. It will go away
and reappear with some frequency.
Any ideas? Anyone?
___
Zope-Dev maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Re: Python 2.1.2 does not fix the signal 11 crashing problem !!!!!!!!!!!
Anthony Baxter wrote: In that case, how about cutting a version which is 2.4.3 + the compiler fixes? Crashes are bad, and it would be very nice to Make Them Go Away. :) You already have that. Check out the Zope-2_4-branch from CVS (see http://dev.zope.org/CVS for info). Now leave poor Matt alone :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Testers needed for z2.py security patch
I've made a security patch for Zope 2.5.0b3 that addresses the setuid startup issues on UNIX and plan to backport it to 2.4.4 (?) and 2.3.3 once I get some positive reports. Only UNIX users need apply this patch. Windows may well have similar issues but I have no clue how to fix them. Please check it out and let me know how it works on your system, or if any clarifications are needed. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Re: Testers needed for z2.py security patch
Matt Behrens wrote: I've made a security patch for Zope 2.5.0b3 that addresses the setuid startup issues on UNIX and plan to backport it to 2.4.4 (?) and 2.3.3 once I get some positive reports. Only UNIX users need apply this patch. Windows may well have similar issues but I have no clue how to fix them. Please check it out and let me know how it works on your system, or if any clarifications are needed. Errr, it's available at http://www.zope.org/Members/zigg/UnixSecurityPatch, sorry for any confusion :-) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] CatalogAware Products and PropertyManager
On Thu, 13 Dec 2001, Dirk Datzert wrote: Hi, has anybody written a some hotfix-like product which makes the PropertyManager more CatalogAware ? I knew now that adding, changing, deleting properties of a CatalogAware object will not reindex the object, but I want to say that this would be a central point of interest of me. There is a similar Hotfix to make DTML Documents CatalogAware, I think it is called DocumentTools. It might work for what you are doing, or could be modifiable for your needs. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope server speed
On Thu, 6 Dec 2001, MANOTTI Alessandro wrote: I used Zope with DCOracle2 drivers to connect and extract 257000 (yes! it is a test... two hundred fiftyseven thousand records!) and Zope took more than 10 minutes, since I stopped it after that time (call SQL and print data via dtml-var ... TAG). That is quite a lot of records :) Out of interest, why test pulling out that many records? Does your application need to return that many records to the user? Can calculations be done in a stored procedure or something. I've never tried doing anything like this, so I don't really know what I'm talking about :) however I would have thought that it doesn't sound like a particularly realistic test (not that I know what your application does). I wonder how fast Zope is compared to CF in doing, say, 1000 repeat requests each of, say, 1000 records. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Searching/Indexing/ZODB/SQL/BerkleyDB
On Tue, 4 Dec 2001, Chris Withers wrote: (it can do boolean searches too, but the book is mainly about ranking). Please god tell me they cover phrase matching :-S No they don't really (if I remember right). I think they do talk about storing the position of the word in the document, so that could help. I need to dig the book out, I looked at it about 18 months ago. [snip headf*ck] Urm, maybe they'll take it a little slower than that? ;-) Yes they do. Condensing ~500 pages into one paragraph is a bit tricky :) -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Searching/Indexing/ZODB/SQL/BerkleyDB
On Tue, 4 Dec 2001, Casey Duncan wrote: Can you all recommend any other books on information retrieval? I was looking at Amazon last night, and I found a few that looked interesting, I'm just the type of guy that has to leaf through before I buy the damn thing. I guess I just need to find a good tech book store around here... Modern Information Retrieval by Ricardo Baeza-Yates and Berthier Ribeiro-Neto is pretty good too. Covers much more than just indexing (eg. user interfaces, languages, evaluation of effectiveness, distributed IR, Digital Libraries etc). If you are a member of the ACM there is lots of IR stuff in their digital library. Also the New Zealand Digital Library (www.nzdl.org) has some good links on it (the site can be quite slow at times) I think my first real proposal of any significance will be to replace the catalog with a truely industrial strength indexing bohemoth, that can be plugged into this whole component arch. thingamawhammy. BTW: I still wanna chat some time about this, I just need to decide when, perhaps late next week... I've normally got a window open on #zope most of the day (GMT), my nick is HammerToe (long story, that is not as interesting or painful as it sounds, and involves neither a hammer nor a toe). You might need to /msg me or beep me to get my attention :) -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Open Letters and Zope 3
Shane Hathaway wrote: Q: Will Zope 3X be compatible with Zope 2 products? A: No. What's up with the ZopeLegacy stuff in the co I'm getting now? Yes I am grabbing the branch... To check out Zope 3X from CVS: cvs -d :pserver:cvs.zope.org:/cvs-repository co -r Zope-3x-branch Zope3 :pserver:[EMAIL PROTECTED]:/cvs-repository And don't forget cvs login. Again, this is all quite exciting and I hope you can join the action. I hope to. Who's in charge of packaging and installation? I see an opportunity to do it right this time, I hope I'm not too late to the party. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: DCWorkflow (was Re: [Zope-dev] Another open letter. :-))
Stephan Richter wrote: I am actually working on such an animal, but I have no idea when/if I will be able to release the code. My request to the powers that be to be able to release my code is moving very slowly. In the meantime you can use it with a minimalist portal_actions/types/workflow triad with a little patch that's currently sitting in the PTK tracker. Number 401, I think. Sorry, no doco yet :-) PLEASE, look at OpenFlow (a Zope Product). It is based on years of research and covers all aspects. It works very well too! Well, I did, actually, for at least a little bit. Its concept of tokens seems to be geared much more towards RDBMS-backed apps, and in some areas seems needlessly complex, at least for the app I'm working on. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Searching/Indexing/ZODB/SQL/BerkleyDB
On Thu, 29 Nov 2001, Chris Withers wrote: I would rather avoid having to use a relational database unless I have to. Perhaps the index pluggability could be made to support different backends (like FileStorage et al does). Yeah, unfortunately, the difficult bit is combining queries: gimme the results where index1=='fish' and index2 is between 2 and 5kg. if index1 is in SQL and index2 is in ZODB, for example, how would you go about efficiently combining results? Is there not a set datatype in python that could be used? Admittedly, most of the stuff in MG is about textual searches rather than exact searches (it can do boolean searches too, but the book is mainly about ranking). It uses an algorithm called the 'Cosine Ranking Algorithm'. Basically if you imagine an N-dimensional space, where N is the number of terms in your vocabulary and represent a document as a vector in that space whose direction is the composite of the terms that appear in it. You then represent a query string as a vector in the same space, the similarity between the document and the query is the angle between the two vectors... the smaller the angle the greater the similarity. Still with me? :) -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Catalog improvements
On Wed, 28 Nov 2001, Andreas Jung wrote: I think the software MG from the book Managing Gigabytes is GPLed and currently released as mg-1.21. Walking through the TOC of the book, it seems to be a very detailed sources about text processing and gives very much informations about different indexes types. But I miss some explanations about current data structures like suffix arrays or suffix tree that have several advantages for text processing compared to B-Trees. Suffix Trees/Tries take up a *lot* of space. But they are very fast, and useful for searching for substrings. The main gist of the stuff in 'Managing Gigabytes' is that it is possible to store an ascending list of integers in a compressed form, such that on average each integer requires only 4 bits to represent it. This is obviously much more compact than a straight list of 32 or 64 bit integers/longs (plus any overhead python adds to its inbuild list type). The other point is that you can read and decode the lists very quickly (you don't need to decompress the entire list first before reading it). Also consecutive numbers only take 1 bit of storage, this means that 'stopwords' that are normally omitted from indexes due to their very high frequency (and hence bloat of the index) can be stored very efficiently. One problem is that all of the research done in MG is based on much older hardware than is currently availible and they try to make certain optimisations, which nowadays don't save much time. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Catalog improvements
On Tue, 27 Nov 2001, Andreas Jung wrote: Is this code available for public ? Sort of :) It used to be around, but the server with it on is currently offline and in need of a new disk controller, so it is not to hand. It is also poorly commented :( and written in very highly optimised (read: illegible) C. The main bits needed from it are the routines to store an retrieve compressed lists of ascending integers (ie. used in indexes). I want to write a python wrapper around them and release a list-like python data structure that will allow efficient storage of indexes. The other bit is the code for doing the cosine ranking similarity comparison in order to rank the documents in order of relevance to a query. Most of the code is taken from the book/code 'Managing Gigabytes' by Witten, Moffat Bell (http://www.cs.mu.OZ.AU/mg/) The code is quite old now (1999) and designed for quite large systems, or reletively static text (ie. doesn't do incremental indexing very well). I worked on developing a 'forward' index which could be easily updated, and then inverted quite quickly on a regular basis (since it didn't need to parse the source text again). -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Debugging help wanted for really weird ZClass problem
Got the traceback again today. Here it is: Traceback (innermost last): File /export/home/b14741/Zope_Dev/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /export/home/b14741/Zope_Dev/lib/python/ZPublisher/Publish.py, line 187, in publish File /export/home/b14741/Zope_Dev/lib/python/Zope/__init__.py, line 226, in zpublisher_exception_hook (Object: DevRequest_factory) File /export/home/b14741/Zope_Dev/lib/python/ZPublisher/Publish.py, line 171, in publish File /export/home/b14741/Zope_Dev/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: DevRequest_add) File /export/home/b14741/Zope_Dev/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: DevRequest_add) File /export/home/b14741/Zope_Dev/lib/python/OFS/DTMLMethod.py, line 195, in __call__ (Object: DevRequest_add) File /export/home/b14741/Zope_Dev/lib/python/DocumentTemplate/DT_String.py, line 546, in __call__ (Object: DevRequest_add) File /export/home/b14741/Zope_Dev/lib/python/DocumentTemplate/DT_With.py, line 133, in render (Object: DevRequest.createInObjectManager(REQUEST['id'], REQUEST)) File /export/home/b14741/Zope_Dev/lib/python/DocumentTemplate/DT_Util.py, line 231, in eval (Object: DevRequest.createInObjectManager(REQUEST['id'], REQUEST)) (Info: REQUEST) File string, line 2, in f (Object: guarded_getitem) NameError: global name 'DevRequest' is not defined In this case, DevRequest is my ZClass. DevRequest_addForm dtml-var manage_page_header dtml-var expr=manage_form_title(this(), _, form_title='Add Development Request') form action=DevRequest_add method=post table trth align=leftId/thtdinput name=id size=35/td/tr trth align=leftTitle/thtdinput name=title size=35/td/tr trth align=leftText/thtdtextarea name=text cols=35 rows=6/textarea/td/tr trtd/tdtdinput type=submit value= Add /td/tr /table input name=date type=hidden value=dtml-ZopeTime; /form dtml-var manage_page_footer DevRequest_add dtml-with DevRequest.createInObjectManager(REQUEST['id'], REQUEST) dtml-call propertysheets.metadata.manage_editProperties(REQUEST) /dtml-with dtml-if DestinationURL dtml-call RESPONSE.redirect(DestinationURL+'/manage_workspace') dtml-else dtml-call RESPONSE.redirect(URL2+'/manage_workspace') /dtml-if I have a complete backup of my Zope install now that has the nonfunctional ZClass. Can anyone help, suggest some steps to take, etc.? -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] Debugging help wanted for really weird ZClass problem
I need some debugging help with a problem I've had with 2.4 and ZClasses. I have been completely unsuccessful in tracking this one down so I can reproduce it and file a proper bug report on it. Specifically, while developing ZClasses (occasionally deleting and recreating them, i.e. to change base classes), I will often get to a point where I get a traceback ending in NameError: global name 'ClassName' is not defined I'm using the default constructor DTML method in this case, although a python script yields the same error. I thought I had this trapped in the wild, as I backed up Data.fs with the broken behavior, then exported the ZClass products this particular one depended on, made a new Data.fs, and reimported them. They worked. So then I restored the old Data.fs and it was suddenly working (no amount of packing, restarting, or cleanGlobals-ing could get me this far before, but somehow backing up and restoring Data.fs did...?) I'm really stumped here. Anyone have a clue or three? I'm willing to do some debug legwork if I can catch it again... -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] product distribution compliance
The TTW Product distribution tab is not compliant with http://www.zope.org/Wikis/DevSite/Proposals/FinishedProductGuidelines. Products/..., not lib/python/Products/... is what it should be doing. The attached patch makes it so. Incidentally, where are we supposed to be sending patches? Trawling recent mailing list archives comes up with several conflicting answers. klm@, ColDev, the ML...? -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture Product_py.patch.gz
Re: [Zope-dev] login prompt after letting user change his password.
Clark OBrien wrote: Hi all I have written some code to alow a user to change his password (below) The problem is that after executing this code the login dialog pops up. The login requires the user to enter his NEW password. There is absolutely nothing wrong with that. Basic authentication works by sending the username and password with each request. You've changed the password on the server, but the client is still sending the old password, which doesn't authenticate them any longer. The user'd have to do it sometime, why not right after their password is changed? BTW, the proper forum for this type of question is the main Zope mailing list, [EMAIL PROTECTED]. -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Re: Install doesn't start properly
R. David Murray wrote: On Mon, 22 Oct 2001, Martijn Pieters wrote: First, actually, untarring as root sets the ownership of a lot of the stuff in my solaris bindist to 506:100 (brian:users, it says in the listing.) Default behaviour when using tar as root; it'll preserve the UID and GID of the person that created the tar. Just FYI, this works right (IMO) under FreeBSD: files untarred as root are owned by root unless you use the p flag. Of course, this note only applies if you are just handling this item via doc changes; if you have install do the chown, it's moot. I'm still wrestling with myself over whether or not this is an issue that needs to be addressed by the install script. On one hand, it really is the administrator's responsibility to check ownership and permissions. On the other hand, just about every other mature open source package out there installs and operates somewhere *other* than its source tree, setting permissions and ownerships as it goes. :-/ I will probably add it to the massive patch I'm working on and see what kind of reception it gets... (ObMozillaBug: while I was typing the first paragraph, a display bug showed me that I was, in fact, wrestling with my elf.) -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] startup security status (say that five times fast... well, ok, it wasn't so tough after all)
I have a patch in hand that addresses MOST of the issues I brought up, but the biggie (tricking root into killing arbitrary processes) is a hard one to solve. I have many options, and I'd like opinions... Right now, the pid file is written out by the user that ZServer drops to after starting. This is bad because if that user is compromised, the pid file can be overwritten, and root can be tricked into killing (an) arbitrary process(es) the next time 'stop' is run. The obvious solution was to move the writing of the file up before the setuid() call. Now, the unprivileged user can't *change* the pid file. However, because the var directory must be writable by the unprivileged user, the unprivileged user can *remove* then *rewrite* the pid file, and we're back where we started. Solutions: 1. Have the stop script check ownership of the pid file to make sure it's still root's baby. This solution seems easiest, but something about it doesn't seem right to me. When something doesn't feel right to me, there's probably a way to fool it... 2. Enforce the sticky bit on the var directory. From Solaris' chmod(2) manpage: If a directory is writable and has S_ISVTX (the sticky bit) set, files within that directory can be removed or renamed only if one or more of the following is true (see unlink(2) and rename(2)): o the user owns the file o the user owns the directory o the file is writable by the user o the user is a privileged user (Privileged user means 'root'.) We only need to enforce the sticky bit if we start as root and are doing the requisite setuid(). My patch already has a test for this. 3. Have the pid file written into another directory that only root can write to. The rest of this should probably be another mail, but I figured I'd cover what my patch also does: 1. No longer defaults to running as 'nobody'. As I've explained, running as 'nobody' and the requisite permission settings that need to go with running as 'nobody' can set your Zope data up for compromise on your local system. If -u is not specified z2.py will SystemExit. 2. Warns you if you decide that you REALLY want to run as 'nobody', either with -u or by being nobody when starting z2. 3. Tells you when and who it actually setuid()s to. 4. Warns you if your umask isn't sufficient to protect your data files (experiment: pack your Data.fs and check its permissions.) All messages in this patch are going through zLOG for cleanliness' sake. -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] startup security status (say that five times fast... well, ok, it wasn't so tough after all)
I opted for #2, since it requires no changes to existing start/stop scripts. 2. Enforce the sticky bit on the var directory. From Solaris' chmod(2) manpage: If a directory is writable and has S_ISVTX (the sticky bit) set, files within that directory can be removed or renamed only if one or more of the following is true (see unlink(2) and rename(2)): o the user owns the file o the user owns the directory o the file is writable by the user o the user is a privileged user (Privileged user means 'root'.) We only need to enforce the sticky bit if we start as root and are doing the requisite setuid(). My patch already has a test for this. Patch is attached, against the current release. (diff -c, God bless Solaris... heh) -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture z2_py.diff.gz
Re: [Zope-dev] startup security status (say that five times fast... well, ok, it wasn't so tough after all)
I opted for #2, since it requires no changes to existing start/stop scripts. 2. Enforce the sticky bit on the var directory. From Solaris' chmod(2) manpage: If a directory is writable and has S_ISVTX (the sticky bit) set, files within that directory can be removed or renamed only if one or more of the following is true (see unlink(2) and rename(2)): o the user owns the file o the user owns the directory o the file is writable by the user o the user is a privileged user (Privileged user means 'root'.) We only need to enforce the sticky bit if we start as root and are doing the requisite setuid(). My patch already has a test for this. Patch is attached, against the current release. (diff -c, God bless Solaris... heh) -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture z2_py.diff.gz
[Zope-dev] Re: Install doesn't start properly
Martijn Pieters wrote: Please keep the mailing lists in the loop. I do not control the Zope source, and others may have an opinion as well. I am CC-ing Zope-Dev on this as this discussion is more appropriate there. Okay, as I said, I just didn't care to give the specifics wide publicity if it was going to be problematic for anyone having to rush to get fixes out in the face of details. Incidentally, as far as snipped portions go, it can be safely assumed I'm in agreement with you. On Mon, Oct 22, 2001 at 01:12:33PM -0400, Behrens Matt - Grand Rapids wrote: Files should be owned by root (which it would do if installed as root) and you can run as nobody, provided that nobody has permission to write to the var directory. First, actually, untarring as root sets the ownership of a lot of the stuff in my solaris bindist to 506:100 (brian:users, it says in the listing.) Default behaviour when using tar as root; it'll preserve the UID and GID of the person that created the tar. Yes, it was just a point from the point-of-view of someone who may not know better. Perhaps install should recursively change ownership? 2. nobody can arbitrarily destroy and replace any file in var, still leaving the possibility open for mischief. Writable directories mean you can rename, remove, etc. Solution: The sticky bit could get around this. I don't see how? What is the point of having one writeble directory for the process and then make it unwritable? The point of the var directory is to have only one place where the server process can do all its writing (which it needs to be able to do in order to operate). The sticky bit doesn't make the directory unwritable, it merely says that new files may be created, but old ones that you don't own may not be destroyed. Note that if you feel uncomfortable with the user 'nobody', you can also dictate that Zope switches to another UID. On Debian www-data is used, for example. I maintain the OpenBSD package (which I think will ship with 3.0, hurrah!), and I've solved this by stuffing the distribution into a root-controlled directory, then telling users the way to get Zope up and running is to create a dedicated user, then use a python script I added to the package (zope-instance) which populates an INSTANCE_HOME, creating start/stop scripts, Zope.cgi, inituser, and the like. Of course, back then, the whole port 80 thing was unknown to me. I was operating under the assumption that you front with Apache if you need to bind to 80. Incomplete research on my part. 3. Packing doesn't work unless nobody can read Data.fs. Letting nobody read Data.fs nullifies most of the security we gained. If we do let nobody read Data.fs, then when packing is performed we end up with a nobody-owned Data.fs. Nobody will have to be able to read Data.fs, otherwise the whole Zope process wouldn't work! Same for writing. The only way around this is having a separate server process control the writing (ZEO), or not run as root (and have another process like Apache provide port 80). Then we are back to the issue of having nobody be able to read Data.fs, ergo sensitive information in the ZODB compromised in case of a 'nobody' compromise. 'nobody' is counted on by all kinds of UNIX daemons to not have any sensitive permission, read _or_ write, in case of compromise. And actually, it looks like Data.fs is read in *before* the nobody drop. I had Data.fs root-owned with mode 600 (r/w only by owner) and Zope started fine. It was packing that was a problem. Not really nobody-related but still of note: with the default UNIX umask, new files (i.e. packed Data.fs) are created with read permissions for group and other. I don't see a recommendation to set umask 077 anywhere but I may just be missing it. I don't think there will be any problems with this. No problems with not setting it, or no problems with telling people to set it? If it's the former, having umask 022 means I can waltz on in as any user on the system and read any newly-created file in var, including Data.fs after it's packed the first time. pack doesn't worry about file modes. I suppose I should join zope-dev now :-) -- Matt Behrens [EMAIL PROTECTED] System Analyst, Baker Furniture ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
[Zope-dev] How to aquire from Context?
Dear All, I have been trying to work out how to acquire a DTML method first by context rather than by containment. According to the ZDG (Great read, thanks guys!): -- snip -- Containment Before Context If in the example above suppose both a and b have an color attribute: a=C(a) a.color=green a.b=C(b) a.b.color=red a.x=C(x) print a.b.x.color # prints green Why does a.b.x.color acquire color from a and not from b? The answer is that acquisition acquires from the containment before context. -- snip -- Now that makes perfect sense to me and I can see why it happens as such. However what if I want print a.b.x.color to return red? The scenario is this: I have a directory structure: / standard_html_header side_bar folderA foo bar side_bar index_html index_html calls standard_html_header which in turn calls side_bar. If I access this via /folderA/index_html I still get the side_bar in the root not the one in folderA. This makes sense in respect to the above ZDG stuff. But how can I get it to work the way I want (/folderA/index_html uses folderA/side_bar)? I've searched zope.org and found plenty of explainaintions why this is so, but no good examples or workarounds as how to get around it :( Any ideas? -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Request for a Pluggin Index (NameIndex)
On Mon, 11 Jun 2001, Chris Withers wrote: Wow Matt, you seem to know what you're talking about :-) My final year University project was to create an Open Source mailing list archive :) I did quite a bit of reading into information retrieval and assorted algorithms and data structures. I had a prototype running for quite some time, but is currently down as I am wiping the machine to start again in python :) The original system was a mix of C/Perl/Python and returned results in XML which then were formatted via XSLT. Once I get a spare minute I am going to try and re-implement it in Python and using ZODB (with BerkeleyDB storage) I might try and port some of the code over to work as a PluggableIndex too. One of the main tasks is to write a python wrapper around my compression code. I will have to look more closely at how to write Python modules in C, as it does lots of bit twiddling which is in a very tight loop. The object will basically be a compressed list to which you can append ascending integers and will allow various fast union/intersection operations with other similar objects. This in itself may be sufficent to use in a PlugginIndex. If you get a chance to implement the index I asked about, please gimme a shout, I'd love to try it out... Unfortunately I don't have the time. Unless I can use it myself directly in a project we have funding for (or unless anyone wants to fund my time to develop it) I will have to wait until I have some more time on my hands. PS: Whereabouts in the UK are you? Bristol. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] 60GB Data.fs?
On Wed, 6 Jun 2001, Erik Enge wrote: I'm running a 1GB Data.fs with CompressedStorage here and that takes probably about 3-5 minutes on a 1GHz with 1GB RAM. I keep banging my head against it, but it just won't run faster. Out of interest, is this startup time avoided when using BerkeleyDB as the storage? I know that it has its own indexes etc. so I am wondering if it no longer needs to load an index into memory. Also how are the disks layed out? Is it possible to have, say, 5 disks each on their own (no RAID) and then split the data.fs over them using PartitionedFileStorage or similar. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Request for a Pluggin Index (NameIndex)
On Tue, 5 Jun 2001, Chris Withers wrote: Looks like you should write your own index type. Zope 2.4 comes with an PlugableIndex interface to allow third-party indexes to be integrated into the Catalog. Yeah, I know all that, and I'm very much looking forward to playing with this. :-) However, the email was an invitation for anyone who's interested and currently has time on their hands (yeah, I know, there's lots of us like that ;-) to have a go at writing the index type for me... I would like to help if I had time :) I think the most efficient way of doing what you want is to construct an index based on a 'Suffix Trie' this essentially allows matching of arbitrary substrings very quickly, the only problem is that it takes up a fair amount of space. The upside is that it can be updated and incrementally added to quite easily (unlike many inverted list implementations). I confess I have not had the chance to look at the pluggable index types in 2.4, but would really like to as I would like to port over some indexing code I was working on for another project that allows compressed storage of inverted lists for indexes. On average you can store a 32-bit document id/ref in around 4 bits, which means you save a lot of space and can keep stopwords in the lexicon (as an example try searching for 'to be or not to be' in an index that removes stopwords :). Not only do you save space, but due to the way the inverted list is read and decompressed you save time on disk access for large indexes as there is less to physically read. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] ANNOUNCE: Zope 2.4.0 alpha 1 released
- the version.txt in lib/python/ says: Zope 2.4.0a1 (source release, python 1.5.2, linux2) which sounds a bit funny in my ears... Might be me, I dunno. Actually I have wondered something about that... Why does it always show up as linux2 even when not on linux? I'm on FreeBSD using a compiled from source python and Zope and it still shows up as Linux. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: Randomness (RE: [Zope-dev] CoreSessionTracking 0.8)
On Fri, 25 May 2001, Chris McDonough wrote: Bummer. How long is the session data container timeout set for? Are you sure you're just not exceeding the timeout? The session timeout is 120 minutes. I am using an external SessionDataComainter stored in the normal undo-able ZODB (I'm not expecting that much traffic to it). Looking into it further I don't think it is a CST fault :) I think I have fixed the problem. It was me not setting _p_changed on an object with a dict after adding items to the dict. Hence the session wasn't being lost, just the conents of the cart itself were not very persistent :) I'll be able to confirm this later today. Yes, any sort of object can go into session data... there are some caveats documented in the helpfile (for instance, acquisition-wrapped objects shouldn't be stored in session data), but otherwise anything's game. I can't find anything about acquisition-wrapped objects in the helpfile, what is the problem with them? -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: Randomness (RE: [Zope-dev] CoreSessionTracking 0.8)
On Thu, 24 May 2001, Chris McDonough wrote: These it appears CST is unstable reports are helpful to an extent (from Bjorn, Joachim, and Howard), as it lets me know that something needs to be done to CST. However, a much more helpful report would be one which provides a repeatable test case which invariably reproduces the problem instead of one which states the symptoms and effects of the problem. Just to add myself to the list, I too am having problems with CoreSessionTracking :( I am trying to find a test case for the problem, but I really can't replicate it. It first I thought it was a cookie issue, but I am now noting down the session id generated and it stays the same even when my session data is lost, so I don't think it is that. what I experience: I add an item to my shopping cart system and it shows up fine, all state is maintained. If I however leave the page and not touch anything for a couple of minutes and then reload the page, the cart is now empty. I know this is not that helpful, but I'm trying to tie it down myself! One thing that I do need to check though -- I am right in assuming I can insert complex objects into the SessionData right? I have an 'Order' class that amongst other things has a dict containing instances of a 'Product' class. The Order instance is stored in the SessionData. As I said it appears to work fine and I can add and delete items from my Order fine. Just it randomly looses it now and then. -Matt -- Matt Hamilton [EMAIL PROTECTED] Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
