[Zope-dev] use new() function of md5
when i tried to use hash =md5.new() in (script)python zope .it gives me an error as you are not authorized to use new in this context . If you have any idea regarding hot to resolve this pls help me. Thankss ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] use new() function of md5
On 21.10.2008 12:33 Uhr, milind jagtap wrote: when i tried to use hash =md5.new() in (script)python zope .it gives me an error as you are not authorized to use new in this context . If you have any idea regarding hot to resolve this pls help me. FAQ http://plone.org/search?SearchableText=allow_module -aj begin:vcard fn:Andreas Jung n:Jung;Andreas org:ZOPYX Ltd. Co. KG adr;quoted-printable:;;Charlottenstr. 37/1;T=C3=BCbingen;;72070;Germany email;internet:[EMAIL PROTECTED] title:CEO tel;work:+49-7071-793376 tel;fax:+49-7071-7936840 tel;home:+49-7071-793257 x-mozilla-html:FALSE url:www.zopyx.com version:2.1 end:vcard ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Zope Tests: 4 OK
Summary of messages to the zope-tests list. Period Mon Oct 20 11:00:00 2008 UTC to Tue Oct 21 11:00:00 2008 UTC. There were 4 messages: 4 from Zope Tests. Tests passed OK --- Subject: OK : Zope-2.8 Python-2.3.6 : Linux From: Zope Tests Date: Mon Oct 20 20:46:45 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-October/010342.html Subject: OK : Zope-2.9 Python-2.4.4 : Linux From: Zope Tests Date: Mon Oct 20 20:48:15 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-October/010343.html Subject: OK : Zope-2.11 Python-2.4.4 : Linux From: Zope Tests Date: Mon Oct 20 20:51:17 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-October/010344.html Subject: OK : Zope-trunk Python-2.4.4 : Linux From: Zope Tests Date: Mon Oct 20 20:52:47 EDT 2008 URL: http://mail.zope.org/pipermail/zope-tests/2008-October/010345.html ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope 2.12 - supported Python versions
Sidnei da Silva wrote: I always was under the impression that Jim feared the code and the required security audit was perceived as a major painful undertaking. That was my perception too. But after looking at the code it is really not bad at all. The PyPy guys, who seem to be the authority on this kind of stuff, always shake their heads in woe at the mention of RestrictedPython. I've tried to understand what they perceive the real problems with it to be but haven't managed to extract anything meaningful :-( Perhaps one of you guys might have more luck engaging with them? Chris -- Simplistix - Content Management, Zope Python Consulting - http://www.simplistix.co.uk ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Issues with restricted Python (was Re: Zope 2.12 - supported Python versions)
On Oct 21, 2008, at 8:29 AM, Chris Withers wrote: Sidnei da Silva wrote: I always was under the impression that Jim feared the code and the required security audit was perceived as a major painful undertaking. That was my perception too. But after looking at the code it is really not bad at all. The PyPy guys, who seem to be the authority on this kind of stuff, always shake their heads in woe at the mention of RestrictedPython. As well they should. Relying on it is a lot of work and brittle. I've tried to understand what they perceive the real problems with it to be but haven't managed to extract anything meaningful :-( The problem is that it it starts with an environment in which things are allowed by default, and takes things away. This means that if anything is forgotten, then you end up with holes. A better approach is to start with something that lets you do nothing and add capabilities that are known to be safe. This is why some folks get all excited about capability-based security. The Zope 3 security proxy approach is much better than relying solely on restricted Python, because, as with a capability-based approach, it prevents what isn't explicitly allowed. It does this (for the most part) without having to do code manipulation. It still uses restricted Python do deal in a narrow way with basic objects, like strings and numbers, that are unproxied. It's use of restricted Python is so narrow that it is far less problematic. It would be really great if Zope 2 would switch to security proxies, although the transition is likely to be painful. I'm not sure that the PyPy guys are really authorities on the sorts of problems we're trying to address, although there is some overlap. If I remember correctly, they are just focussed on protecting the system from untrusted scripts. Our problem is harder because we also want to protect objects available to the scripts. Jim -- Jim Fulton Zope Corporation ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] ZopePublication Competing writes/reads
Hermann Himmelbauer wrote: Hi, Just by chance, I pressed the reload button of my browser for quite some time, so that my Zope3-based site was reloaded over and over. I was surprised to find the following in the logs: 2008-10-20T18:45:15 WARNING ZopePublication Competing writes/reads at /BSPSite/act/s/info: database conflict error (oid 0x0733, class zope.session.session.SessionData) Can someone explain me why this happens, if this is something dangerous or if I can forget about it? I tested the site with Apache Bench (ab2), with many concurrent requests and could not reproduce the problem. So my wild guess is the following: I use session.PersistentSessionDataContainer for my session, so every request will probably read/write to some Zope3 container/btree. And then, for some reasons these reads/writes compete, which leads to the above warning. If I use AB2, there's no cookie, thus no session, hence the problem does not arise. On the other hand, the zope root site (the Rotterdam ZMI) seems not to have this problem, as it seems, I can't trigger this warning message with fast reloads. Presumably that site does not use sessioning so does not suffer from the same problem. Laurence ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] zope.app.container won't compile
On 20.10.2008 15:45 Uhr, Tres Seaver wrote: Did you look at the include' directories? $ svn propget svn:externals $ZSVN/zope.app.container/tags/3.5.6/include persistent svn://svn.zope.org/repos/main/ZODB/trunk/src/persistent zope.proxy \ svn://svn.zope.org/repos/main/zope.proxy/trunk/src/zope/proxy $ svn propget svn:externals $ZSVN/zope.app.container/tags/3.6.1/include persistent -r 71248 \ svn://svn.zope.org/repos/main/ZODB/branches/3.7/src/persistent zope.proxy \ svn://svn.zope.org/repos/main/zope.proxy/trunk/src/zope/proxy Two observations: - - No released version should have 'trunk' externals for anything. - - The 3.5.6 version is pulling in a 'cPersistence.h' which has a '#include py24compat.h' in it. Of course, if everybody's just annoyed and wants to move on, I'll be happy to create another 3.6.2 release with Sidnei's fix in it. We should fix the externals for both 3.5.x and 3.6.x and re-release both. Can someone with zope-app-container zen will fix the mess and do new releases? Andreas begin:vcard fn:Andreas Jung n:Jung;Andreas org:ZOPYX Ltd. Co. KG adr;quoted-printable:;;Charlottenstr. 37/1;T=C3=BCbingen;;72070;Germany email;internet:[EMAIL PROTECTED] title:CEO tel;work:+49-7071-793376 tel;fax:+49-7071-7936840 tel;home:+49-7071-793257 x-mozilla-html:FALSE url:www.zopyx.com version:2.1 end:vcard ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] zope.app.container won't compile
I just tagged a 3.6.2 version with Sidnei's fix and pushed it to PyPI. However, the problem of depending on SVN 'trunk' externals is still present and will have to be addressed at some point. Alexander J Smith Software Engineer Zope Corporation On Oct 21, 2008, at 11:58 AM, Andreas Jung wrote: On 20.10.2008 15:45 Uhr, Tres Seaver wrote: Did you look at the include' directories? $ svn propget svn:externals $ZSVN/zope.app.container/tags/3.5.6/ include persistent svn://svn.zope.org/repos/main/ZODB/trunk/src/ persistent zope.proxy \ svn://svn.zope.org/repos/main/zope.proxy/trunk/src/zope/proxy $ svn propget svn:externals $ZSVN/zope.app.container/tags/3.6.1/ include persistent -r 71248 \ svn://svn.zope.org/repos/main/ZODB/branches/3.7/src/persistent zope.proxy \ svn://svn.zope.org/repos/main/zope.proxy/trunk/src/zope/proxy Two observations: - - No released version should have 'trunk' externals for anything. - - The 3.5.6 version is pulling in a 'cPersistence.h' which has a '#include py24compat.h' in it. Of course, if everybody's just annoyed and wants to move on, I'll be happy to create another 3.6.2 release with Sidnei's fix in it. We should fix the externals for both 3.5.x and 3.6.x and re-release both. Can someone with zope-app-container zen will fix the mess and do new releases? Andreas lists.vcf___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope ) ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] zope.app.container won't compile
Tnx! Andreas On 21.10.2008 21:46 Uhr, Alexander J Smith wrote: I just tagged a 3.6.2 version with Sidnei's fix and pushed it to PyPI. However, the problem of depending on SVN 'trunk' externals is still present and will have to be addressed at some point. Alexander J Smith Software Engineer Zope Corporation On Oct 21, 2008, at 11:58 AM, Andreas Jung wrote: On 20.10.2008 15:45 Uhr, Tres Seaver wrote: Did you look at the include' directories? $ svn propget svn:externals $ZSVN/zope.app.container/tags/3.5.6/include persistent svn://svn.zope.org/repos/main/ZODB/trunk/src/persistent zope.proxy \ svn://svn.zope.org/repos/main/zope.proxy/trunk/src/zope/proxy $ svn propget svn:externals $ZSVN/zope.app.container/tags/3.6.1/include persistent -r 71248 \ svn://svn.zope.org/repos/main/ZODB/branches/3.7/src/persistent zope.proxy \ svn://svn.zope.org/repos/main/zope.proxy/trunk/src/zope/proxy Two observations: - - No released version should have 'trunk' externals for anything. - - The 3.5.6 version is pulling in a 'cPersistence.h' which has a '#include py24compat.h' in it. Of course, if everybody's just annoyed and wants to move on, I'll be happy to create another 3.6.2 release with Sidnei's fix in it. We should fix the externals for both 3.5.x and 3.6.x and re-release both. Can someone with zope-app-container zen will fix the mess and do new releases? Andreas lists.vcf___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope ) -- ZOPYX Ltd. Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany Web: www.zopyx.com - Email: [EMAIL PROTECTED] - Phone +49 - 7071 - 793376 Registergericht: Amtsgericht Stuttgart, Handelsregister A 381535 Geschäftsführer/Gesellschafter: ZOPYX Limited, Birmingham, UK E-Publishing, Python, Zope Plone development, Consulting begin:vcard fn:Andreas Jung n:Jung;Andreas org:ZOPYX Ltd. Co. KG adr;quoted-printable:;;Charlottenstr. 37/1;T=C3=BCbingen;;72070;Germany email;internet:[EMAIL PROTECTED] title:CEO tel;work:+49-7071-793376 tel;fax:+49-7071-7936840 tel;home:+49-7071-793257 x-mozilla-html:FALSE url:www.zopyx.com version:2.1 end:vcard ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
