Re: [Zope-dev] Re: [Zope 2.12] Eggification of Zope 2 - pros and cons?
Chris McDonough wrote: FTR, there are things in Zope 2 (like Missing and Record IIRC) that depend on ExtensionClass (or Acquisition) headers, and there is no way to tell setuptools to depend on an external package to provide compile-time headers. We could fake it by including externals in Zope2 svn for these headers, but then there's version dependency "hidden" in these externals that will be violated if the EC and Acqusition eggs change in any given setup. There's certainly no hue and cry from the masses I've heard that EC and Acquisition be usable outside Zope 2. For this reason, I'm not entirely sure it makes sense to break Acquisition and EC out of a larger Zope 2 package. Likewise for DateTime (given that there's already a Python datetime). I suspect it would be decomposition for the sake of decomposition, which is not very compelling. There are is a similar problem between things in Zope2 and ZODB, but ZODB does have a life outside Zope2, so I think it does make sense for a Zope2 depend on an external egg for ZODB packages. Likewise for Medusa. This is already packaged as an egg, we just need to delete it from ZServer. - C ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Zope 3 on Jython - Google Summer of Code
Hello Zope developers and Zope community! I am applying with "Zope 3 on Jython improvements" to Google Summer of Code. It would be really a great help to receive some feedback on this undertaking from the community and also developers of Zope! Please have a look at the following thread on the Zope GSoC malinglist: http://mail.zope.org/pipermail/gsoc/2008-March/000136.html Thanks in advance! Kind regards, Georgy Berdyshv -- Georgy Berdyshev GPG key: 830F68C5 Fingerprint: 0379 ED5A BEE5 65A8 7BD5 31E7 F5B4 1EC7 830F 68C5 ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Re: SVN: z3c.schema2xml/branches/jw-experiment/ Fairly mechanical changes where IXMLGenerators are now multi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jan-Wijbrand Kolman wrote: > Log message for revision 84963: > Fairly mechanical changes where IXMLGenerators are now multi > adapters on field and request (essentially making them into views). Why would I need or want a request to do XML serialization? If you have such a use case, can you make the request-dependent bits separate from the existing adapters, so that applications which use them in situations where there is no request in sight continue to work? Tres. - -- === Tres Seaver +1 540-429-0999 [EMAIL PROTECTED] Palladion Software "Excellence by Design"http://palladion.com -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFH6/Sj+gerLs4ltQ4RAvA1AKDR0ImgPF5F/GxM/lrB2ma84efjwQCeIOy8 Bb+NqUVk+02n7WLqJI9z3ig= =6q2A -END PGP SIGNATURE- ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Packaging Zope for Fedora
--On 27. März 2008 20:42:50 +0200 Marius Gedminas <[EMAIL PROTECTED]> wrote: On Wed, Mar 26, 2008 at 09:20:27PM +0100, Dieter Maurer wrote: Timothy Selivanow wrote at 2008-3-25 17:12 -0700: > ... > Now when I say "rip out", I don't mean repackage (make a sub RPM), I > mean remove from the RPM that I am making. I don't want to provide a > "new" Docutils. That Zope ships with its own "Docutils" comes from the fact that the standard one has a big security hole. Which one? The one that lets you embed any file on the filesystem into a web page? http://docutils.sourceforge.net/docs/howto/security.html I didn't know Zope's bundled version of docutils fixed that. In any case, the src/docutils in the Zope 3.2 tree either doesn't have the fix, or it doesn't work. I tested it and ended up closing that hole in an application myself. At least Zope 2 uses Docutils with the related options disabled. No idea about Zope 3.2. -aj pgpK98dCDd36X.pgp Description: PGP signature ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Packaging Zope for Fedora
On Wed, Mar 26, 2008 at 09:20:27PM +0100, Dieter Maurer wrote: > Timothy Selivanow wrote at 2008-3-25 17:12 -0700: > > ... > >Now when I say "rip out", I don't mean repackage (make a sub RPM), I > >mean remove from the RPM that I am making. I don't want to provide a > >"new" Docutils. > > That Zope ships with its own "Docutils" comes from the fact > that the standard one has a big security hole. Which one? The one that lets you embed any file on the filesystem into a web page? http://docutils.sourceforge.net/docs/howto/security.html I didn't know Zope's bundled version of docutils fixed that. In any case, the src/docutils in the Zope 3.2 tree either doesn't have the fix, or it doesn't work. I tested it and ended up closing that hole in an application myself. Marius Gedminas -- Alan Turing thought about criteria to settle the question of whether machines can think, a question of which we now know that it is about as relevant as the question of whether submarines can swim. -- Dijkstra signature.asc Description: Digital signature ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Zope Tests: 5 OK
Summary of messages to the zope-tests list. Period Wed Mar 26 12:00:00 2008 UTC to Thu Mar 27 12:00:00 2008 UTC. There were 5 messages: 5 from Zope Tests. Tests passed OK --- Subject: OK : Zope-2.8 Python-2.3.6 : Linux From: Zope Tests Date: Wed Mar 26 21:52:24 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-March/009310.html Subject: OK : Zope-2.9 Python-2.4.4 : Linux From: Zope Tests Date: Wed Mar 26 21:53:55 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-March/009311.html Subject: OK : Zope-2.10 Python-2.4.4 : Linux From: Zope Tests Date: Wed Mar 26 21:55:25 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-March/009312.html Subject: OK : Zope-2.11 Python-2.4.4 : Linux From: Zope Tests Date: Wed Mar 26 21:56:55 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-March/009313.html Subject: OK : Zope-trunk Python-2.4.4 : Linux From: Zope Tests Date: Wed Mar 26 21:58:25 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-March/009314.html ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] zope.component.zcml _protectedFactory not protecting?
Hi, I'm a little confused by the "permission" attribute on the statement. First of all, a principal not having the set permission still gets the adapter. That wouldn't be much of a problem if the adapter was securiy-proxied. The adapter is created with the _protectedFactory: def _protectedFactory(original_factory, checker): # This has to be named 'factory', aparently, so as not to confuse # apidoc :( def factory(*args): ob = original_factory(*args) try: ob.__Security_checker__ = checker except AttributeError: ob = Proxy(ob, checker) return ob factory.factory = original_factory return factory I wonder why the factory only creates a security proxy when it cannot assign __Security_checker__ to the adapter. I suppose this is intentional? Regards, -- Christian Zagrodnick gocept gmbh & co. kg · forsterstrasse 29 · 06112 halle/saale www.gocept.com · fon. +49 345 12298894 · fax. +49 345 12298891 ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
