RE: [Zope-dev] BTreeFolder2.objectIds() - accessing _tree.keys() slow

2006-01-13 Thread sean . upton
 [EMAIL PROTECTED] wrote:
  I'm pretty sure this works.
 
 Ok, I get it now.  I misread it the first time.
 
  This returns the equivalent of running
  self.objectIds(spec=self._mt_index.keys()) on the current 
  trunk/release code, which should be identical to 
 self._tree.keys(), but much, much faster.
  I'm still somewhat ignorant as to why self._tree.keys() is so slow 
  with 100k-plus objects (waking up too many persistent objects?),
 
 I suspect the cost is in creating ghosts for all of the 
 persistent objects.
 
 No objections here--I like this patch.

Thanks Shane - glad it makes sense.  I don't have contributor rights - would
you or anyone else be willing to gateway this diff for me and commit such
changes?

Thanks,
Sean
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


RE: [Zope-dev] BTreeFolder2.objectIds() - accessing _tree.keys() slow

2006-01-12 Thread sean . upton
 
  Hacking objectIds() as follows (diff against trunk pasted inline) - 
  gettting ids off of the meta type index for all used meta types - 
  seems to make things much quicker.  Two questions:
 
 Are you sure this actually works?  _mt_index.keys() is 
 supposed to provide a list of all meta_types used in the 
 folder.  To get the object ids from it, you'd need something 
 like this:
 
 ids = []
 for d in self._mt_index.values():
ids.extend(d.keys())
 
 The structure of _mt_index is documented in a comment:
 
  _mt_index = None  # OOBTree: { meta_type - OIBTree: { 
 id - 1 } }

I'm pretty sure this works.  The in each OIBTree in _mt_index, the keys are
ids of contained objects for all respective meta types in the folder - I use
self._mt_index.keys() to list all meta_types and leverage your original code
that runs when spec parameter has been passed gets run every time - loops
through all meta_types does a union() of set and ids for each meta_type.

This returns the equivalent of running
self.objectIds(spec=self._mt_index.keys()) on the current trunk/release
code, which should be identical to self._tree.keys(), but much, much faster.
I'm still somewhat ignorant as to why self._tree.keys() is so slow with
100k-plus objects (waking up too many persistent objects?), but using the
ids stored a few layers deep in the _mt_index seems a viable alternative
with the same expected return result.

With a bit more effort put in, the diff pasted below should be more complete
and illustrate better:


Index: BTreeFolder2.py
===
--- BTreeFolder2.py (revision 41285)
+++ BTreeFolder2.py (working copy)
@@ -341,21 +341,22 @@
 # Returns a list of subobject ids of the current object.
 # If 'spec' is specified, returns objects whose meta_type
 # matches 'spec'.
-if spec is not None:
-if isinstance(spec, StringType):
-spec = [spec]
-mti = self._mt_index
-set = None
-for meta_type in spec:
-ids = mti.get(meta_type, None)
-if ids is not None:
-set = union(set, ids)
-if set is None:
-return ()
-else:
-return set.keys()
+
+mti = self._mt_index
+if spec is None:
+spec = mti.keys() #all meta types
+
+if isinstance(spec, StringType):
+spec = [spec]
+set = None
+for meta_type in spec:
+ids = mti.get(meta_type, None)
+if ids is not None:
+set = union(set, ids)
+if set is None:
+return ()
 else:
-return self._tree.keys()
+return set.keys()


 security.declareProtected(access_contents_information,
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] BTreeFolder2.objectIds() - accessing _tree.keys() slow

2006-01-11 Thread sean . upton
I have very large BTreeFolder2 (CMFMember via BaseBTreeFolder in Archetypes)
- has about 260k items in _tree - objectIds() is painfully slow, as is
self._tree.keys() - I've casually observed using the meta type index to get
the object ids is many orders of magnitude faster.

Hacking objectIds() as follows (diff against trunk pasted inline) - gettting
ids off of the meta type index for all used meta types - seems to make
things much quicker.  Two questions:

1. Can this be considered safe in all cases (I'll code this behavior on a
Subclass or in a monkey patch)?

2. If yes to #1, is there an appropriate place to lobby for this to be
changed, perhaps in BTreeFolder2 product itself?



Index: BTreeFolder2.py
===
--- BTreeFolder2.py (revision 41285)
+++ BTreeFolder2.py (working copy)
@@ -341,10 +341,14 @@
 # Returns a list of subobject ids of the current object.
 # If 'spec' is specified, returns objects whose meta_type
 # matches 'spec'.
+
+mti = self._mt_index
+if spec is None:
+spec = mti.keys()
+
 if spec is not None:
 if isinstance(spec, StringType):
 spec = [spec]
-mti = self._mt_index
 set = None
 for meta_type in spec:
 ids = mti.get(meta_type, None)

Thanks,
Sean

+--+
 Sean Upton  SignOnSanDiego.com
 Site Technology Supervisor The San Diego Union-Tribune
 619.718.5241 [EMAIL PROTECTED]
 350 Camino De La Reina San Diego, CA 92108

  Plone Powered!  plone.org  ++  python.org  ++  zope.org  
+--+ 

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


RE: [Zope-dev] storing passwords

2003-06-15 Thread sean . upton
Or SimpleUserFolder: create a user folder class in a Zope product that
subclasses both SimpleUserFolder and OFS.Folder.  Then put ZSQL methods and
a few TTW python scripts in the folder contents of an instance of this class
to make it work.  I've done something similar to this with relative success.

Sean

 -Original Message-
 From: Andreas Jung [mailto:[EMAIL PROTECTED]
 Sent: Sunday, June 15, 2003 1:34 PM
 To: Markus Bengts; [EMAIL PROTECTED]
 Subject: Re: [Zope-dev] storing passwords
 
 
 exUserFolder is your friend.
 
 -aj
 
 --On Sonntag, 15. Juni 2003 23:28 Uhr +0300 Markus Bengts 
 [EMAIL PROTECTED] 
 wrote:
 
 
  Hello,
 
  I want to use the same usernames and passwords in Zope and 
 some other
  servers. The usernames and password digests are stored in a 
 PostgreSQL
  database, and a given username and password -pair can be 
 checked with a
  simple SQL-query.
 
  I need to modify Zope to look up and to save passwords in 
 PostgreSQL.
 
  Has someone done this before? Can someone tell me which source file
  contains the method that reads or saves passwords? Can this 
 be done by
  modifying only one source file?
 
  Markus
 
  ___
  Zope-Dev maillist  -  [EMAIL PROTECTED]
  http://mail.zope.org/mailman/listinfo/zope-dev
  **  No cross posts or HTML encoding!  **
  (Related lists -
   http://mail.zope.org/mailman/listinfo/zope-announce
   http://mail.zope.org/mailman/listinfo/zope )
 
 
 
 
 
 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://mail.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope )
 

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


RE: [Zope-dev] storing passwords

2003-06-15 Thread sean . upton
There are many possibilities.  I would try exUserFolder first (it might work
with just configuration (no code) for your use-case), and if you have needs
more specific, you can develop your own user-folder type (a bit harder, but
not much) using SimpleUserFolder (a generic base class for
rolling-your-own user folders).

Sean

 -Original Message-
 From: Markus Bengts [mailto:[EMAIL PROTECTED]
 Sent: Sunday, June 15, 2003 2:22 PM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Subject: RE: [Zope-dev] storing passwords
 
 
 
 Thank you!
 
 I am still trying to find out what Zope is and what it can do. I
 somehow missed the alternative user folders when I skimmed 
 through the
 Zope Book. This was a pleasant surprise:
 
 http://www.zope.org/Products/user_management
 
 On Sun, 15 Jun 2003 [EMAIL PROTECTED] wrote:
 
  Or SimpleUserFolder: create a user folder class in a Zope 
 product that
  subclasses both SimpleUserFolder and OFS.Folder.  Then put 
 ZSQL methods and
  a few TTW python scripts in the folder contents of an 
 instance of this class
  to make it work.  I've done something similar to this with 
 relative success.
 
  Sean
 
   -Original Message-
   From: Andreas Jung [mailto:[EMAIL PROTECTED]
   Sent: Sunday, June 15, 2003 1:34 PM
   To: Markus Bengts; [EMAIL PROTECTED]
   Subject: Re: [Zope-dev] storing passwords
  
  
   exUserFolder is your friend.
  
   -aj
  
   --On Sonntag, 15. Juni 2003 23:28 Uhr +0300 Markus Bengts
   [EMAIL PROTECTED]
   wrote:
  
   
Hello,
   
I want to use the same usernames and passwords in Zope and
   some other
servers. The usernames and password digests are stored in a
   PostgreSQL
database, and a given username and password -pair can be
   checked with a
simple SQL-query.
   
I need to modify Zope to look up and to save passwords in
   PostgreSQL.
   
 

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


RE: [Zope-dev] Versions: should they die?

2003-06-05 Thread sean . upton
If I remember correctly, though, there was still a lot in question about
legitimate use cases.  The web-services cluster-safety use-case I sketched
out here (http://mail.zope.org/pipermail/zope3-dev/2002-October/003112.html)
is still (perhaps) a valid case, but ONLY in a very-carefully constructed
application (and even that case leaves me wanting a better app-level way to
do it).

I think I agree with the feeling that versions should stay in ZODB, but be
depreciated/marked as official evil in ZMI.

Sean

 -Original Message-
 From: Guido van Rossum [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, June 03, 2003 5:08 PM
 To: Paul Winkler
 Cc: [EMAIL PROTECTED]
 Subject: Re: [Zope-dev] Versions: should they die?
 
 
  To anyone not following the Problem committing  zope 
 'version' objects
  thread on [EMAIL PROTECTED]:  It's been proposed that Versions should be
  at least stamped in the ZMI with big warnings, or possibly disabled
  altogether.  Numerous users have been bit by the fact that versions
  basically do not work as advertised, leading in various 
 cases to zodb 
  corruption or work that can't be saved.  There are other 
 security issues
  that Oliver Bleutgen raised privately which I won't state here.
  
  Comments?  Could we get at least some warnings in the ZMI before
  2.6.2 final?
 
 IMO versions do nothing except complexify the code.  I believe it's an
 official Zope Corp position to discourage them for new projects.  Yet
 Jeremy Hylton seems to think that they are somehow useful and has
 carefully preserved them in ZODB 4 (== Zope 3).  If it were up to me,
 they would have been gone, with a big helping of YAGNI!
 
 --Guido van Rossum (home page: http://www.python.org/~guido/)
 
 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://mail.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope )
 

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


RE: [Zope-dev] support for low level HTTP Response logging?

2003-02-25 Thread sean . upton
Are you mainly concerned about the http headers in the response, or the
response body?  If it is just the headers, Squid's log_mime_hdrs feature
will log all HTTP headers from both the request and response for you for
each request.  If nothing else, perhaps it's a start...

Sean

-Original Message-
From: Romain Slootmaekers [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 25, 2003 2:25 AM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] support for low level HTTP Response logging?


Yo,

searching the zope site and googling yielded too many data and no info, 
so I might as well ask it here.

We are very interested in finding out the exact HTTP Responses that the 
zope server pushes towards the client.

So is there a low level hook for logging the http responses ?
We want the exact response, complete with all header info etc.


Why not just sniff, you might ask? Well, we are developing a web 
application for mobile microbrowsers, and most these clients have no 
hooks for attaching a sniffer client side. Installing a sniffer server 
side is not possible for other reasons.

TIA,

Sloot.


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


RE: [Zope-dev] zope connector

2003-02-18 Thread sean . upton
Use ZEO and DBTab and a shared mounted object database that both Zope
instances have access to.  Put any objects that need to be accessed by both
Zope servers in that common storage mounted at some folder-level in your
zope setup.

Sean

-Original Message-
From: Tena Sakai [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 18, 2003 1:56 PM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] zope connector


Folks,

I am interested in accessing resorcces from two or more
zope servers.  For example,

   br
   hahaha!
   br

   dtml-var name=funny

   br
   hohoho!
   br

The code snippet above will, when rendered, yield:

   hahaha!
   hehehe!
   hohoho!

provided that the entity funny ultamately returns hehehe! and
accessible within the name space.

But how could I do this if the object funny is on a different zope
server?  Ie., how can I connect two name spaces on different
zope servers in some not-so-caotic fasion?

Thanks in advance.

Regards,

Tena Sakai


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Zope Server Control

2003-02-07 Thread sean . upton
The buttons work; you are not clicking with enough pressure.  Try again
until your wrist hurts. ;)

I agree, this looks nice.  I also wonder about adding total memory usage for
each Zope ZEO client.

Also, this layout could be tweaked to have a more vertical look and likely
work in a PyQT app on the Zaurus or similar handheld.

Sean

-Original Message-
From: Paul Winkler [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 07, 2003 1:47 PM
To: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Zope Server Control


On Fri, Feb 07, 2003 at 03:16:46PM -0500, Shane Hathaway wrote:
 Okay, I added some features to the mockup:
 
 http://hathaway.freezope.org/Images/controller_snapshot2.png

I dig it.

(clicking on the mockup buttons) Ungh. Can't seem to make it work.
(drool drool)

-- 

Paul Winkler
http://www.slinkp.com
Look! Up in the sky! It's AMERICAN TWIN THE MAYOR OF REVENGE!
(random hero from isometric.spaceninja.com)

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )



[Zope-dev] RE: [Zope] Time module in python scripts

2003-02-06 Thread sean . upton
I hope you all don't mind, but I've moved this to Zope-dev.  I would like to
propose that it be possible without modification (default behavior) in a
future version of Zope to import the time module and its methods safely into
TTW Python Scripts.

I haven't used this yet in TTW code (I've had to work around it), but it
seems like it might be good to un-restrict it, especially for CMF
installations that heavily utilize date metadata.
time.localtime(time.time()) is, AFAICT, the only way to determine if you are
in standard or DST at any point in time during the year.  You can't have a
page-template appropriately display correct times for content from multiple
time-zones without this (I'm sure many CMF installations will need this),
and it seems silly to write an external method for this; allowing import of
the time module is a good workaround, but I would suggest it be enabled by
default in Zope.

My particular use-case is AP newswire stories which are in EST/EDT.  The
timezone offset changes for this twice a year, and having a fixed
calculation based upon some assumption of a fixed timezone offset in my own
timezone (PST/PDT) won't work.  I need to be able to know my own timezone
offset to do the math, and for this I need to use
time.localtime(time.time())[8] to get it.  I'm sure community sites and
things like blogs, or anything else that works across the geographic
boundaries of differing time zones could use this too.

Thoughts?

Sean

-Original Message-
From: Chris McDonough [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 06, 2003 2:01 PM
To: Chris Muldrow
Cc: '[EMAIL PROTECTED]'
Subject: Re: [Zope] Time module in python scripts


Apparently.  See /lib/python/Products/PythonScripts/README.txt or the
Zope Developer's Guide Security chapter for info on how to enable it...

- C


On Thu, 2003-02-06 at 16:49, Chris Muldrow wrote:
 I'm trying to do
 Import time
 Time=time.time()
 
 in a Python Script, but I'm getting login prompts and Error Value: You
are
 not allowed to access time in this context messages. Is the time module
one
 that's restricted in Python Script?
 Chris
 
 
 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )



___
Zope maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] ESI Integration in Zope

2003-01-30 Thread sean . upton
Out of curiosity, Beyond coding XHTML-based ZPTs with tags in the ESI
namespace, what else is needed in Zope to make this work?  Does Zope need to
set an HTTP header for downstream proxies to know that the content of the
page is supposed to be processed for ESI?

Sean

-Original Message-
From: Brian Lloyd [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 30, 2003 1:12 PM
To: [EMAIL PROTECTED]
Subject: RE: [Zope-dev] ESI Integration in Zope


 What is the roadmap for ESI integration in zope ?
 (http://www.zope.com/News/PressReleases/OpenSourceESI)
 
 In which version of zope : 2.6, 2.7 or 3.0 ?
 
 Thanks.

We're shooting for Zope 2.7. Jim still needs to work out a 
lingering issue with it.

Brian Lloyd[EMAIL PROTECTED]
V.P. Engineering   540.361.1716  
Zope Corporation   http://www.zope.com 

 

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] ClientCache and Large Files

2002-12-16 Thread sean . upton
This sounds like the most appropriate solution, as long as you are careful
to make sure that Squid or other forward cache is configured to cache files
that large, it isn't likely going to be by default.

Sean

-Original Message-
From: Casey Duncan [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 16, 2002 8:21 AM
To: Guido van Rossum; Brian R Brinegar
Cc: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] ClientCache and Large Files


On Monday 16 December 2002 10:53 am, Guido van Rossum wrote:
  We're running ZEO with Zope 2.5.1. We currently have a ZEO Cache
  (ClientCache) of 200 meg. Occasionally someone will download a 300
  meg file that completely blows away the client cache. Is there a way
  to prevent this?

You're best bet would be to put a proxy cache in front of Zope. Zope's not 
very efficient at serving big static files like this compared to Apache or 
squid.
 
 I'm afraid not; this isn't a very typical use case.  You could
 implement a file size limit, or increase the cache size to be more
 than twice the largest expected dowload (the cache is implemented as
 two files, each of which is limited to half the nominal cache size).

I think it would be nice to be able to control cacheability of certain 
objects. However it smells like a YAGNI, especially with good front end 
caches that can take care of it.

-Casey

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Re: Unsecure design of ExternalFile

2002-11-07 Thread sean . upton
I'm not familiar with ExternalFile, but likely plan to use it in the future.
I think a list of expressly permitted directory locations (including all
subdirectories) might be more secure.  You can't go wrong with a default
directory for files (perhaps $INSTANCE_HOME/var/files or something?), but
otherwise an implicit deny all - then leave it up to the user to edit some
access list file in the product (for example, call it 'diraccess.txt').
Does this seem reasonable?

Sean

-Original Message-
From: Craeg K Strong [mailto:cstrong;arielpartners.com]
Sent: Thursday, November 07, 2002 8:25 AM
To: Jonagustine Lim
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: [Zope-dev] Re: Unsecure design of ExternalFile


Yikes!  Scary stuff.

However, here are some things to consider:

a) ExternalFile advertises itself as being a developers/
content authors tool, not really for production.
Of course, most folks end up using it for production,
anyway... ;-)

b) Once created, an ExternalFile cannot be retargetted
to point to another file in the file system

c) The permission to create an ExternalFile instance is
different than the permission to edit one.  The permission to
create an ExternalFile instance should be assigned
judiciously...

d) the Zope server should be run as a user that has very
limited permissions.

e) Even if a user *does* have permission to edit
an ExternalFile, they only have whatever permission the
user running the Zope server has.  If the Zope user
(usually webserver or something like that) does not
have permission to write to /etc/passwd, it doesn't matter
if you create an ExternalFile pointing to it, you still
can't write to it...

However, the points you raise are valid, as they are
Zope-specific, and the zope user webserver *would*
probably have permission to do your (1) and (2) examples.

What would you recommend?  Perhaps there should be
a predefined list of forbidden directories for ExternalFiles?
The problem is that-- in the development scenario-- the
very things you mention below might be what you
legitimately *want* to do as a developer.

Well, thanks for pointing this out.  Let's continue
the conversation a bit, perhaps a good solution will
reveal itself (even if it is only some kind of warning
in the documentation...)

Regards,

--Craeg

PS I am CC-ing the zope-dev mailing list, as I think this
warrants a wider audience

Jonagustine Lim wrote:
 Hi!
 
 I just noticed that it's possible to create or replace
 any files in the filesystem using the ZMI with
 ExternalFile installed.
 
 Possible exploits:
 
 1. Use ExternalFile web interface to replace Zope
 Data.fs
 
 2. Create a .py file in /Zope/Extensions and run it by
 creating an Extenal Method.
 
 Anyway, I hope you can fix this or put a warning up.
 
 Jon
 


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Integrating ZEO with Zope 2.7

2002-10-02 Thread sean . upton

+1

IMHO, Zope releases should, in this scenario, be configured by default to
use a custom_zodb.py file with ClientStorage over a socket at startup,
making the default config of Zope one that uses ZEO.  Also, start scripts
should be distributed with options to support both the following:
- Zope's start script Start ZEO via ZEO's start.py,
  wait for confirmation of loaded storages,
  then start Zope's z2.py
- Separate shell scripts to start each

The advantage to this is the ability get access to the ZODB in automation
and sysadmin scripts without taking Zope down.  This should be transparent
to those who don't care, unless there is a huge performance difference
between directly using FileStorage, and using ClientStorage on a local
socket to the same end (is the protocol overhead really that much?)...

Sean

-Original Message-
From: Guido van Rossum [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 02, 2002 11:27 AM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] Integrating ZEO with Zope 2.7


We're close to finishing a new version of ZEO, which will be released
as part of the next ZODB3 release (formerly StandaloneZODB).

I think this would be a good opportunity to make ZEO a standard part
of Zope, starting with Zope 2.7.

Advantage for users: if you download Zope, you have everything you
need; you don't have to find and download a separate ZEO or ZODB
release.

Advantage for Zope developers: no need to test and maintain a separate
ZEO release.

There will still be a separate ZODB3 release, which will include ZEO.
We have to do this anyway, for people who want to use ZODB outside
Zope.

Is there anybody who thinks this is a bad idea?

(Full disclosure: Brian  Jim think it's a good idea, as long as we
make sure that the ZEO that goes into the Zope 2.7 release is properly
documented from the sysadmin POV, i.e. how to start/stop/configure.
Of course we'll do this.)

--Guido van Rossum (home page: http://www.python.org/~guido/)

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Integrating ZEO with Zope 2.7

2002-10-02 Thread sean . upton

Hmm... My thought: on Win32, bind the TCP port to the loopback address.
Since Win32 in _most_ cases is not a multi-user system, this would have the
general effect of keeping this from being an issue (unless you ran terminal
services on your Win32 server).  This obviously doesn't solve security
concerns for things like virus/worm/script issues, but I would think that on
Windows, if you have that problem, this is the least of your concerns (since
there is likely another way a script could attack your underlying storage).

On Unix, use a socket file and setup file permissions as you see fit...

Surely, the appropriate action could be taken by a single startup script,
based upon the platform?

Sean

-Original Message-
From: Toby Dickenson [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 02, 2002 12:31 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Integrating ZEO with Zope 2.7


On Wednesday 02 Oct 2002 8:03 pm, [EMAIL PROTECTED] wrote:
 +1

+1

 IMHO, Zope releases should, in this scenario, be configured by default to
 use a custom_zodb.py file with ClientStorage over a socket at startup,

That is a tempting idea.

Use of a TCP socket has security implications that make it a bad choice for
a 
default, unless we implement mutual authentication.

Use of a unix socket has the obvious problem that it wont work on windows.



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



[Zope-dev] Proxy Object / __getattr__ / Acquisition

2002-08-29 Thread sean . upton

I am trying to implement a proxy class (specifically for the purposes of
multi-versioned document objects (folderish proxies that contain the object
that they proxy to).  I am using __getattr__ within my product, and the code
pasted below works, and does not break Implicit acquisition (because the
object that _CurrentVersion points to is subclassed from SimpleItem, which
implements Implicit Acquisition). However, because of the way that this
messes with Acquisition, certain things like accessing the ZMI pages or
acquired methods can be quite slow (but work).  I suspect that this is
because an instance of this class actually acquires items through the item
it proxies to, which conveniently is contained inside it, which makes
acquisition work for the instance of this class (albeit magnitudes slower).

I would really like to make this perform better and act properly, but I'm at
a loss as to the right way to do this.  Thoughts?

Sean

class MVProxy(Folder):

Object acting as proxy to multiple document
implementations serving for each version of this
document; this is a proxy object class
Subclasses OFS.Folder.Folder

def __init__(self, id, title=''):
self.id = id
self.title = title
timestamp = str(int(time.mktime(time.localtime(
currentId = id+'_'+timestamp
current = DocumentCoreImpl(currentId, title)
self._setObject(currentId, current)
self._CurrentVersion = current

def __getattr__(self, name):
return getattr(self._CurrentVersion, name)

+---
| Sean Upton
|  Site Technology Supervisor SignOnSanDiego.com
|  Development  Integration The San Diego Union-Tribune
|  619.718.5241 [EMAIL PROTECTED]
|PATH_TO_THE_DARK_SIDE = 'c:\winnt\system32'
+---

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Slow zope on windows 2000?

2002-08-28 Thread sean . upton

For what its worth, a long time ago, with an ancient version of Zope running
on the original W2k Professional on my home machine (minus any service
packs), Zope (running as a service) was magnitudes of order slower after
coming back from a system Hibernate; I no longer hibernate/power-manage
Win2k, nor run Zope on Windows, so I'm really not sure why this was, and
likely will never know.

Sean

-Original Message-
From: Adam Manock [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 28, 2002 10:51 AM
To: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Slow zope on windows 2000?




I'm not sure that is the case you know. Oracle 9i Linux is faster on my
Linux Athlon 800 than the same release on my Win2k Dual Piii 1GHz.

Also my Win box has 1Gb ram, while my Linux box has only 512Mb...

In other news  Apache is reported to run faster on Linux that Win2000, 
as is PostgreSQL. Samba is reported to provide double the throughput of 
Win2000 native file services, with half the response delay for client
requests.

Very much so! On a Win2k with Dual P3 1Ghz Zope runs slower than the same
install on a Linux box with 1 P133  (I have tested this on multiple
different configurations and every time it comes out the same)

This, however, is almost an order of magnitude difference, and may need 
further investigation...

Adam


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Slow zope on windows 2000?

2002-08-28 Thread sean . upton

Actually, I believe that NT Workstation ran dynamic web apps better than NT
server.  This was because the tuning on NT server out of the box was really
geared toward file-server type applications.  I assume the case is the same
with win2k.  At that, I don't think is would be noticeable enough, except
under real stress.

Sean

-Original Message-
From: Arndt Droullier [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 28, 2002 12:13 PM
To: [EMAIL PROTECTED]
Subject: AW: [Zope-dev] Slow zope on windows 2000?






 This, however, is almost an order of magnitude difference, and may need
 further investigation...

 Adam


ThereĀ“s also a difference between Win2000 and Win2000 Server. The Server
version is optimised for network and system operations(thread/memory
allocation) and really much faster than the normal edition.
I suppose you will have a magnificant performance difference with Zope on
these two systems.

Arndt


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Zope Binary Release Changes for Zope 2.6

2002-08-21 Thread sean . upton

In theory (and as a Debian user), I like the idea of support for as
distro-neutral of a linux distribution as possible; on the other hand,
supporting RedHat 7.2 is a must for Zope accessability to new developers
(since there are a lot of RedHat 7.2 systems out there).  Is Python 2.1
under woody really compiled with LFS support?  That would be great, but
still likely means that your best bet is to build Zope from source, or just
use the Zope packages in Debian Main.

Anyway, Debian 3.0 uses glibc 2.2 (I'm not sure if this is a big deal???).  

A thought: rather than require yet another Zope binary distribution to be
packaged for Debian by Zope Corp (esp. Since Zope packages are fairly decent
in Debian), the Zope.org download page might want to contain a link to:
http://packages.debian.org/cgi-bin/search_packages.pl?keywords=zopesearchon
=namessubword=1version=allrelease=all
for Debian users, just like it mentions the contributed RPMs.

Sean

-Original Message-
From: Nagarjuna G. [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 20, 2002 9:39 PM
To: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Zope Binary Release Changes for Zope 2.6


On Tue, Aug 20, 2002 at 10:57:14AM -0400, Matthew T. Kromer wrote:
 Zope is currently released in three binary formats:
 
Windows - i386
 
 Solaris 2.6 - SPARC
 
 Linux RH 5.2 - i386
 
 All binary releases come with python 2.1.3, built without large file 
 support.
 
 We are proposing to change the binary distributions to newer releases, 
 at least on the Solaris and Linux platforms.  
 
 The new Solaris binary would be Solaris 2.8.
 
 The new Linux binary would be RedHat 7.2 based (i.e. glibc 2.1).
 
 It is very likely that the supplied Pythons would be built with large 
 file support *enabled* for these platform, unless some unforseen 
 compatibility issue arose.

Is it difficult to make the GNU/Linux binary distro independent?  All
the binaries that I have been using from the Zope site work to the
best of my knowledge on distros.  Why mention Redhat specailly?  I
work on Debian Woody 3.0, and the python 2.1 is compiled with large file
system support.

Nagarjuna

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] PathIndex doesn't index last part of path

2002-08-21 Thread sean . upton

I'm all for putting together a proposal to do this, soliciting comments, and
contributing to the effort.  What would be the right venue for that?

On the other hand, AFAIK, the addition of a depth query feature to PathIndex
as it is wouldn't likely break existing indexes.  And given that Andy's need
(get metadata for a Cataloged object, given some cached referecne, in this
case a path, to it) could be filled by the Catalog itself (or changes to
it), I'm not sure what other features would be needed out of PathIndex?

In brief, what I would like:
results = Catalog.searchResults(path={'query':myContainersPath,
'depth':0, 'level':0})
Where depth means:
-1  In parent of path specified (up one)
0   Contained within path specified
1   Contained in path specified or directly in one of its
children
2   Same as above, but also in child container's child

No depth specified means behavior is like current functionality in path
indexes.  A brief glance at docs and code gives me the impression that this
could peacefuly co-exist with level.

Sean

-Original Message-
From: Andreas Jung [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 19, 2002 11:14 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: Re: [Zope-dev] PathIndex doesn't index last part of path



- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Tuesday, August 20, 2002 00:58
Subject: RE: [Zope-dev] PathIndex doesn't index last part of path




 One thing that seems to be feature-broken about PathIndexes, though, is
the
 lack of ability to specify a depth (not level, but depth of a match, for
 example, to specify items).  Above and beyond support for a specific place
 within a hierarchy, there needs to be a simple mechanism to support query
 for an absolute path, and only objects directly matching that path, or
 directly contained within that path.


Following this thread I appears to me that there is a need for several
new functionalities inside the PathIndex (maybe a new PathIndexNG). In
this case I suggest to write a proposal to collect all requirements.
I volunteer to help on the implementation.

Andreas


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] PathIndex doesn't index last part of path

2002-08-19 Thread sean . upton

If the question is begged, why use the catalog: for folders with thousands
of objects, applications like CMF skins can be amazingly slow using
ObjectManager methods and CMF-wrapped equivalents; they also do not provide
sorting.  For applications like this, both containment and flexible query
support (sorting) are important.

Use-case: thousands of objects in a Portal Folder.  CMF Skins like Plone use
ObjectManager based methods to get a list of siblings in a sidebar.  When
you have 1000+ items in the folder, the fact that this takes 2 minutes on an
Athlon 2000+/1GB server, isn't batchable, and isn't sortable is sort of sad.
Use of the Catalog makes much more sense here (I can sort, and the
performance penalty is low, so I can take a slice of the resulting sequence
of brains, and do getObject() over each one; even if a container could be
improved performance wise to have a quick objectIds() method, ObjectManager
interfaces have no mechanism to specify sorting based on metadata like you
could do with a Catalog query).

One thing that seems to be feature-broken about PathIndexes, though, is the
lack of ability to specify a depth (not level, but depth of a match, for
example, to specify items).  Above and beyond support for a specific place
within a hierarchy, there needs to be a simple mechanism to support query
for an absolute path, and only objects directly matching that path, or
directly contained within that path.

The workaround for this is to add a custom FieldIndex that indexes the
string value of the path of the items container, and this requires putting a
python script in the root of a CMF portal, for example, that is acquired by
all indexed content.  It would be nice if the PathIndex machinery could do
this out of the box.

http://lists.zope.org/pipermail/zope-cmf/2002-August/014167.html
http://lists.zope.org/pipermail/zope-cmf/2002-August/014204.html

Sean

-Original Message-
From: Casey Duncan [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 16, 2002 4:55 PM
To: Andy McKay; [EMAIL PROTECTED]
Subject: Re: [Zope-dev] PathIndex doesn't index last part of path


A PathIndex is designed to make it more efficient to aggregate objects at
various levels of containment. Their primary use case AFAIK is to allow to
to limit queries to particular places within a hierarchy. The idea is to
eliminate recursive searching of leaf level folders when you want all
objects under a higher level and its child levels.

Also, by not indexing the nodes themselves, the index is an order of
magnitude smaller and searches are therefore faster and it takes less room
and is faster to update.

In fact there is no need to index the entire path of an object in the
catalog. Even with no Indexes defined, ZCatalog already does this for you.
The uid of every entry in the catalog is the full path to the object (as a
string). Unfortunately, ZCatalog does not expose this to the surface but you
can write a trivial external method to do it. And I might entertain adding a
ZCatalog API to do so if I had a good use case. Right now you can only
access entries by RID.

Now that begs the question, If you already know the path to the object you
are looking for, why are you using the Catalog in the first place? I highly
doubt doing what you describe below is faster than just directly accessing
the object. In fact I'd be willing to be its slower, especially since you
are searching two indexes to get it. Unless of course these are dynamically
generated objects of some kind (no stored in Zope).

As for making RIDs more permanent, that would basically require a rewrite of
the Catalog, and make certain operations much more expensive. As it stands,
your application should only assume that RIDs are valid within a single
transaction. You should use the path to uniquely identify objects, or some
application defined uid that gets cataloged otherwise.

-Casey

- Original Message -
From: Andy McKay [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, August 17, 2002 6:22 PM
Subject: [Zope-dev] PathIndex doesn't index last part of path


 This is mostly a question for AJ, but any input would be great. This bug
bit
 me today and is documented here:
 http://collector.zope.org/Zope/449/ISSUE_TRANSCRIPT/view

 I dont understand the brief argument against this one, it would make sense
 to me to able to pull an object out of the catalog based on its path. For
 example if I want /foo/bar/blammo, currently this means there is only one
 way of pulling the an object of the catalog given this path. Thats to send
 (path='/foo/bar', id='blammo'), rather than (path='/foo/bar/blammo'). Why
 wouldnt we want it this way?

 One thing I have done is store a whole bunch of references to objects as
 selected by the user. These are essentially random objects and the
quickest
 way is to pull them back out of the catalog. Of course I cant do more than
 one object per query (unless Im missing some other way) Id love to do
 

RE: [Zope-dev] More Zope 2.6 requests

2002-03-08 Thread sean . upton

+1 on #2 - definitely useful.

Sean  

-Original Message-
From: Jim Washington [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 08, 2002 5:26 AM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] More Zope 2.6 requests


While we are asking, I have two things that I would consider valuable 
additions to Zope 2.6:

1.  UserSniffer.  Currently an External Method, but has functionality 
that should be available OOTB to assist making those (horrors!) 
browser-dependent hacks.  It has other uses, too, like explaining to 
clients that their browser is five years old and needs the free upgrade 
that is available.

2.  Support for HTTP_X_FORWARDED_FOR.  Many (most?) of us run zope 
behind Apache ProxyPass or Squid, and the Zope logs therefore save the 
ip address of the proxying machine rather than any semblance of where 
the client browser is.  I realize that other proxies do not always 
follow the rules, etc., etc., but I think that using 
HTTP_X_FORWARDED_FOR if not null would be better than a log full of 
192.168.1.1.

Apologies if these have already been discussed under another heading.

-- Jim Washington



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



TF ZMI, was: RE: [Zope-dev] Zope 2.6 and OrderedFolders

2002-03-07 Thread sean . upton

You know, the funny thing is that TF really accomplishes the goals of a
ZMI/UI-improvement hack (unclutter a view of a folder to VISUALLY separate
the software/content/presentation space) implemented, IMHO, in the wrong
place.  I would think there is another way that a Folder UI could be
uncluttered without the magic of TF, and that is add translucency (items
are there, but obscured from view) to the UI layer - that is, the ability to
VISUALLY unclutter different users' views of objects in a folder via ZMI;
views could be stored per user.  

For example, you could select ZSQL Methods and RDB connections in a folder
to be hidden from everybody but the Database programmer; you could keep
these and Python Scripts obscured from the view of a content person or
presentation designer, etc.  Well, they wouldn't be hidden, but visually
'compacted' and relegated to a small drop-down box at the bottom of the page
to unclutter it... so the standard tabled object list wouldn't iterate over
objectIds() or objectValues(), but instead a higher-level filter function.
A complimentary filter function would render the 'hidden' objects as a
sequence as well.


__ZMI manage_main Now:__

===\===\===\===\--- ZMI tabs
% :::===

TP.NAME. .SZ. ..LM..
[]--  --
[]--  --
[]--  --
[]--  --
[]--  --

[RN][CT][CP][DL][I/E][SA]  --- Buttons
for checked


__ZMI With Translucency:___

===\===\===\===\--- ZMI tabs
% :::===

TP.NAME. .SZ. ..LM..
[]--  --
[]--  --
[]--  --
[]--  --
[]--  --

[RN][CT][][][][][Hide] --- New HideBtn

Hidden Items:
[Select Item... [v]
[Open][Unhide][ViewAll]--- Buttons for
doing things
  ^ with hidden
  | items
  |
  +--- ViewAll =
pop-up new
window


This would be more visually convenient.  I'm thinking of trying to
monkey-patch OFS.Folder to just do this. 

Of course, with these kind of modifications, for any given folder, there's
no mandatate that anything need to be hidden at all.  Thoughts?

Sean

-Original Message-
From: Casey Duncan [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 06, 2002 12:02 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Zope 2.6 and OrderedFolders


On Wednesday 06 March 2002 02:49 pm, [EMAIL PROTECTED] allegedly
wrote:
 Is this a suggestion that TF go into the core?  One other (major) problem
 with TF is that it breaks session tracking site-wide, or at least the
 ability to have more than one session id manager per Zope instance in CST;
 I'm not sure about sessions in Zope 2.5...

 TF seems to have too much normalcy-hijacking magic to go into the core, if
 you ask me...

 Sean

-1 on TF in the core. Nice hack, but too much magic and there are
significant 
performance implications if I remember correctly.

Also Zope 3 will render TF superfluous.

/---\
  Casey Duncan, Sr. Web Developer
  National Legal Aid and Defender Association
  [EMAIL PROTECTED]
\---/

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Zope 2.6 and OrderedFolders

2002-03-06 Thread sean . upton

Is this a suggestion that TF go into the core?  One other (major) problem
with TF is that it breaks session tracking site-wide, or at least the
ability to have more than one session id manager per Zope instance in CST;
I'm not sure about sessions in Zope 2.5...

TF seems to have too much normalcy-hijacking magic to go into the core, if
you ask me...

Sean

-Original Message-
From: Eric Roby [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 06, 2002 10:56 AM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] Zope 2.6 and OrderedFolders


I think OrderedFolders is a great product and should be in the core ...
but does this also mean that TransparentFolder will get those parts
(that Shane mentioned some time ago) optimized that kept it from making
it into the core before??  If so ... sounds like a win-win situation.


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Zope 2.6 planning - call for contributors!

2002-03-03 Thread sean . upton

Perhaps synchronization over ZEO as well as XML-RPC?  Thoughts?

Sean

-Original Message-
From: Andy McKay [mailto:[EMAIL PROTECTED]]
Sent: Sunday, March 03, 2002 5:04 PM
To: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Zope 2.6 planning - call for contributors!


 I'd like to see the ZSyncer Product, or a variant thereof, included in
 Zope by default.  That is, I'd like Synchronization, to a be a default
 property of Zope objects, so that objects/content can be pushed and
 pulled between two Zope installations.

Thanks for the enthusiasm but its still too hacky to go into the core.
Ideally I'd rather put in the time so this is more transparent in Zope 3.
--
  Andy McKay



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Zope 2.6 planning - call for contributors!

2002-02-28 Thread sean . upton

Hmm... would this still work with Squid or Apache caching in front of Zope?


I assume that since each browser can accept different transfer-encodings,
this has to be done as close to the browser as possible, otherwise content
sent in one transfer encoding would be sent to every user if it was to be
cached (in other words, instead this would have to be done using the
experimental Squid TE code)...

Sean

-Original Message-
From: Chris McDonough [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 28, 2002 2:36 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Zope 2.6 planning - call for contributors!


 I've modified HTTPResponse and ZServer/HTTPResponse.py to allow for gzip
content
 encoding on a response-by-response basis.  I'm mostly using this with
xml-rpc, but it
 could be generalized and combined with a gzipper- cache manager.

I'd like this.  It would help with the lack of transfer-encoding by Squid.


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] PDF-specific Bug in the ZServer implementation??? Orjust strange behavoiur of IE?

2002-01-07 Thread sean . upton

Acrobat uses something called byte-serving, which is a pain to support
sometimes on the server-side, because it essentially amounts to serving
parts of a file up to a given byte offset; when Acrobat acts as an HTTP
client, it requests the PDF file, and once it has enough of the top of the
doc to get header info from the file, it is able to omit downloading the
whole thing and request portions of the file between 2 byte offsets, which
represent the start and end of a page, as part of the http request.
Byte-serving, unfortunately is not implemented in all http servers (or is
broken in some, i.e. Apache 1.3.14).  I'm not sure what the story for
ZServer is, but I am curious to find out if there have been any developments
in this regard...

More info in the IETF RFC for HTTP 1.1:
http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.12

Sean

-Original Message-
From: Joachim Werner [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 07, 2002 12:28 PM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] PDF-specific Bug in the ZServer implementation??? Or
just strange behavoiur of IE?


Hi!

This is my first post in the new year, so best wishes for 2002 from Germany!

And on we go with my problem:

I have a ZClass-based Class derived from File. It holds PDF documents. SOME
(not all) of them do not auto-open in Acrobat Reader as they are supposed to
if MS IE 5.x is used. Opera etc. seem to work. The files themselves are
o.k., and opening in Acrobat Reader AFTER downloading (via right
mouseclick/save as) works fine, too.

If the same document that doesn't auto-open when downloaded fom the Zope
server is downloaded from plain Apache, it works ...

The configuration is Zope 2.4.1 (binary release, python 2.1, linux2-x86),
python 2.1.0, linux2 on a SuSE Linux with Apache as Proxy server (via
proxy_pass). I checked the HTTP header with WGET, and they are identical for
working and non-working PDF docs. The mime type is set to application/pdf
...

Any hints on that?

Joachim


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



[Zope-dev] 100k+ objects, or...Improving Performance of BTreeFolder...

2001-12-09 Thread sean . upton
 these results with OFS.Folder.Folder yet.  I'm too
lazy/busy to comparison test.

- I'm relatively sure that, in my app, the text index BTrees in the Catalog
are very 'bushy' (more so than normal) because I am indexing people's full
names, and street addresses, which means there are less common words than
indexing, say, an every-day document.

- Also, I want to make it clear that if I had a data access API that needed
more than simple information about my datasets (i.e. I was trying to do
reporting on patterns, like CRM-ish types of applications), I would likely
wrap a function around indexes done in the RDB, not in Catalog.  My requires
no reporting functionality, and thus really needs no indexes, other than for
finding a record for customer service purposes and account validation
purposes.  The reason, however, that I chose ZCatalog was for full text
indexing that I could control/hack/customize easily.  My slightly uninformed
belief now is that for big datasets or enterprise applications (whatever
that means), I would use a hybrid set of (faster) indexes using the RDB's
indexes where appropriate (heavily queried fields), and ZCatalog for
TextIndexes (convenient).   I'm sure inevitable improvements to ZCatalog
(there seems to be community interest in such) will help here.

- I wonder if directory-storage combined with ReiserFS might make for an
interesting future ZODB choice for this sort of app.

Sean

=
Sean Upton
Senior Programmer/Analyst
SignOnSanDiego.com
The San Diego Union-Tribune
619.718.5241
[EMAIL PROTECTED]
=

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] ZCatalog

2001-12-06 Thread sean . upton

what do you mean by fuzzy?  Do you mean with wildcards, NL, or something
else?

-Original Message-
From: Dirk Datzert [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 06, 2001 1:03 PM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] ZCatalog


Hi,

I'm looking for a howto or a hint for fuzzy search in german and english
with ZCatalog / CatalogQuery

Can anybody sent me a URL ?

Thanks
Dirk


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] ZCatalog

2001-12-06 Thread sean . upton

Personally, I am of the opinion that sending a Catalog raw queries is not
very useful for really powerful searching... hopefully this changes in the
future, but for now...

Since catalog doesn't have anything built-in that does this, other than
globbing vocabularies, you have to do this within your appliction.  What you
want to do is hijack and rewrite user queries before sending them through a
catalog query...  for example:

word = 'dancing'
newword = re.sub('ing$', '*', word)
#newword is now 'danc*' which

This would work with plural words as well, as long as you have a useful set
of patterns for word endings...  

For alternate spellings, abbreviations, and synonyms you would need to
create lookup tables and indexed methods that took advantage of them for
text indexes.  This works only for text indexes though...  

In summary, use query rewrites for word endings and auto-wildcarding (the
work is done at search time)... and use methods that weight and translate
your text in your product code (the work is done at index time)...

Sean

-Original Message-
From: Dirk Datzert [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 06, 2001 1:38 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] ZCatalog


the search engine htdig has a fuzzy feature which automatically search for
different endings or alternative spelling of a word, based on the ispell
algorithm

[EMAIL PROTECTED] schrieb:

 what do you mean by fuzzy?  Do you mean with wildcards, NL, or something
 else?

 -Original Message-
 From: Dirk Datzert [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, December 06, 2001 1:03 PM
 To: [EMAIL PROTECTED]
 Subject: [Zope-dev] ZCatalog

 Hi,

 I'm looking for a howto or a hint for fuzzy search in german and english
 with ZCatalog / CatalogQuery

 Can anybody sent me a URL ?

 Thanks
 Dirk

 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Competition

2001-12-06 Thread sean . upton

Uh, this is brand clarification... Sometimes people (well, people who don't
pay enough attention) don't get that company X is associated with product Y.
Look what happend to Borland when they changed their name to Inprise but
kept the old product names.  For those folks who don't pay attention to
every detail of goings on in the Zope community, or are not subscribed to
lists, or are new to Zope, I imagine that a name discrepancy could be
confusing...

I hope you aren't saying that basic, well thought-out, marketing strategies
are somehow predatory behavior?  Let's not even try to compare this to
hijacking in the style of a certain Redmond-based company.

Sean

-Original Message-
From: Clark O'Brien [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 06, 2001 3:57 PM
To: Casey Duncan; R. David Murray; Chris Withers
Cc: Stephan Richter; [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Competition


I don't think ZC feels this way.

Note the comment by Hadar Pedhazur, Chairman of Zope
Corporation:
comment
at:http://www.zope.com/News/PressReleases/DC2ZC

This name change is intended to ensure that Zope and
the company that develops Zope are more closely
associated with one another in the marketplace.



--- Casey Duncan [EMAIL PROTECTED] wrote:
 I think its only competition in the same sense as I
 am competing with all of 
 you for oxygen. 
 
 Let's call it coopetition.
 

/---\
   Casey Duncan, Sr. Web Developer
   National Legal Aid and Defender Association
   [EMAIL PROTECTED]

\---/
 
 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists - 
 
 http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope )


__
Do You Yahoo!?
Send your FREE holiday greetings online!
http://greetings.yahoo.com

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Competition

2001-12-06 Thread sean . upton

I'm going to suggest that this is off-topic for zope-dev, as this is a list
fostering cooperation among developers who do not mind sharing their 'beans'
and who do not hold the delusions of conspiracy theory.  If you are not
willing to play by the ad-hoc cooperative social contract of this
development community, please go away.  This is my last post on this matter,
and I suggest others follow suit.

Anyway, you do know all kinds of embarrassing health problems can happen
from hoarding beans, don't you?

Sean

-Original Message-
From: Clark O'Brien [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 06, 2001 4:44 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [Zope-dev] Competition


No I am not implying anything other then there
is competition in the Zope marketplace and ZC has
positioned itself to be the one that ends up with the
most beans.

This is what makes the free market work and I would do
the same thing if I was in their shoes.

However, I am not in their shoes, and therefore don't 
want to brand their company and don't want to add my
beans to their pile of beans. Thats all I was saying.
Clark 








--- [EMAIL PROTECTED] wrote:
 Uh, this is brand clarification... Sometimes people
 (well, people who don't
 pay enough attention) don't get that company X is
 associated with product Y.
 Look what happend to Borland when they changed their
 name to Inprise but
 kept the old product names.  For those folks who
 don't pay attention to
 every detail of goings on in the Zope community, or
 are not subscribed to
 lists, or are new to Zope, I imagine that a name
 discrepancy could be
 confusing...
 
 I hope you aren't saying that basic, well
 thought-out, marketing strategies
 are somehow predatory behavior?  Let's not even try
 to compare this to
 hijacking in the style of a certain Redmond-based
 company.
 
 Sean
 
 -Original Message-
 From: Clark O'Brien [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, December 06, 2001 3:57 PM
 To: Casey Duncan; R. David Murray; Chris Withers
 Cc: Stephan Richter; [EMAIL PROTECTED]
 Subject: Re: [Zope-dev] Competition
 
 
 I don't think ZC feels this way.
 
 Note the comment by Hadar Pedhazur, Chairman of Zope
 Corporation:
 comment
 at:http://www.zope.com/News/PressReleases/DC2ZC
 
 This name change is intended to ensure that Zope
 and
 the company that develops Zope are more closely
 associated with one another in the marketplace.
 
 
 
 --- Casey Duncan [EMAIL PROTECTED] wrote:
  I think its only competition in the same sense as
 I
  am competing with all of 
  you for oxygen. 
  
  Let's call it coopetition.
  
 
 /---

Casey Duncan, Sr. Web Developer
National Legal Aid and Defender Association
[EMAIL PROTECTED]
 
 ---/
  
  ___
  Zope-Dev maillist  -  [EMAIL PROTECTED]
  http://lists.zope.org/mailman/listinfo/zope-dev
  **  No cross posts or HTML encoding!  **
  (Related lists - 
  
 
 http://lists.zope.org/mailman/listinfo/zope-announce
   http://lists.zope.org/mailman/listinfo/zope )
 
 
 __
 Do You Yahoo!?
 Send your FREE holiday greetings online!
 http://greetings.yahoo.com
 
 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists - 
 
 http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope )


__
Do You Yahoo!?
Send your FREE holiday greetings online!
http://greetings.yahoo.com

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Searching

2001-12-05 Thread sean . upton

I think this could be done well at the application level, above the Catalog
if done right, but one would have to have good synonym translation table
specific to their application.

I do this in an application using a TinyTable with translation information
for abbreviations (i.e. VW printed in a classified auto ad gets expanded to
Volkswagen, so people can search for both)...  If there was any sort of
thesaurus database of sorts available to your application, I suppose, in
theory, one could do some synonym-oriented indexing, profided that you index
a method that brute-force weights the real words by outputting them a
greater factor of times than the synonym (i.e. index a method that outputs
the original text 3 times and synonyms for the meaningful words (non-stop
words) in that text perhaps once.  This is not difficult from a development
perspective, but involves having synonym data and deciding what words should
be translated to their synonyms, and what ones should not.

I think the real issue here is not having a database of synonyms - and, at
that, you would have to have one for whatever language(s) you needed to
support.

Sean

-Original Message-
From: Dieter Maurer [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 05, 2001 1:24 PM
To: Dirk Datzert
Cc: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Searching


Dirk Datzert writes:
  I'm looking for a search tool which can do semantic/synonym search.
  
  Can this be done via ZCatalog ?
Not out of the box.

You could place something before ZCatalog (which parses subquerie for
search term and expands them into a set of synonyms).
But you would need to work quite hard to get true semantic search...



Dieter

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] ZCatalog becoming empty when using Update in conjunction with ZPatterns

2001-12-03 Thread sean . upton

Are you using any virtual hosting setup of any kind?  If so, switching from
using a base class of CatalogAware.CatalogAware to
CatalogPathAware.CatalogAware might solve this problem...

Sean

-Original Message-
From: Jean Jordaan [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 03, 2001 1:59 AM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] ZCatalog becoming empty when using Update in
conjunction with ZPatterns


Hi all

I had a ZCatalog with about 3500 DataSkin instances indexed. Then 
I started to index instances of a regular ZClass as well. Then I 
added another index, to catalog an additional property of this 
ZClass, and hit Update Catalog.

When Zope returned from updating, there were no records in the 
Catalog, though the Vocabulary was intact. I see that I cannot
search for the DataSkin metatypes using the Find Objects
ZCatalog tab: they don't show up in the Find objects of type
field. So perhaps this is why updating failed.

However, now the Catalog is not accepting any entries. I originally
did the cataloging using this kind of loop on all the classes I 
wanted indexed::

  ids = container.Roundup.Issues.defaultRack.getPersistentItemIDs()
  for id in ids:
  object = container.Roundup.Issues.defaultRack.getItem(id)
  Catalog.catalog_object( object
, string.join( object.getPhysicalPath()
 , '/'))

When I try to run that again, I still get There are no objects in 
the Catalog. upon return. When I run it using a newly created catalog 
('testCatalog') instead, it works fine.

Could anyone perhaps explain what's happening here? 

Regards,
Jean


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



[Zope-dev] Overriding base class method / CatalogAware mixin

2001-11-25 Thread sean . upton

I'm having the same problem described in:

http://lists.zope.org/pipermail/zope-dev/1999-November/002427.html

My class inherits from a few base classes including CatalogAware as a mixin;
I'm trying to override a method in my core API superclass (which uses
MySQLdb, and thus mx-DateTime), with a similar method that is compatible
with Zope's DateTime; I got a TypeError that I think is due to
ExtensionClass when trying to call the superclasses method, even with an
instance of the subclass passed as the first variable.  Since this didn't
work, I ended up having to create a temporary instance of the superclass and
inside a method of the subclass - not entirely graceful, but it works.

Is there a more graceful way to get around this? (I'm using Zope
2.3.3/Python 1.5.2 at the moment).

Sean

=
Sean Upton
Senior Programmer/Analyst
SignOnSanDiego.com
The San Diego Union-Tribune
619.718.5241
[EMAIL PROTECTED]
=

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Deleting objects in BTreeFolder

2001-11-08 Thread sean . upton

Oops... this isn't a problem; I accidentally passed _delObject() an object
reference instead of its id...  Doh.  My bad.
Sean

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 07, 2001 5:01 PM
To: [EMAIL PROTECTED]
Subject: [Zope-dev] Deleting objects in BTreeFolder


Wondering why calling _delObject() in BTreeFolder, which inherits
_delObject() from ObjectManager, doesn't work with BTreeFolder._getOb(), and
I have to use BTreeFolder._delOb() to delete a contained object in a
BTreeFolder.  Is this incompatibilty by design?

I run into trouble using _delObject (traceback #1 below), getting a
deliberately raised AttributeError, but changing this to _delOb raises a key
error when calling 'del tree[id]' on line 195.

Thoughts?

Sean

=
Traceback #1:
Traceback (innermost last):
  File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 223, in
publish_module
  File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 187, in publish
  File /usr/lib/zope/lib/python/Zope/__init__.py, line 221, in
zpublisher_exception_hook
(Object: Traversable)
  File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 171, in publish
  File /usr/lib/zope/lib/python/ZPublisher/mapply.py, line 160, in mapply
(Object: rebuildDataFromSQL)
  File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 112, in
call_object
(Object: rebuildDataFromSQL)
  File /usr/lib/zope/lib/python/Products/a4Profiles/ZopeCirculation.py, line
169, in rebuildDataFromSQL
(Object: Traversable)
  File /usr/lib/zope/lib/python/OFS/ObjectManager.py, line 340, in
_delObject
(Object: Traversable)
  File /usr/lib/zope/lib/python/Products/BTreeFolder/BTreeFolder.py, line
179, in _getOb
(Object: Traversable)
AttributeError: (see above)

=
Traceback #2:
Traceback (innermost last):
  File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 223, in
publish_module
  File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 187, in publish
  File /usr/lib/zope/lib/python/Zope/__init__.py, line 221, in
zpublisher_exception_hook
(Object: Traversable)
  File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 171, in publish
  File /usr/lib/zope/lib/python/ZPublisher/mapply.py, line 160, in mapply
(Object: rebuildDataFromSQL)
  File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 112, in
call_object
(Object: rebuildDataFromSQL)
  File /usr/lib/zope/lib/python/Products/a4Profiles/ZopeCirculation.py, line
169, in rebuildDataFromSQL
(Object: Traversable)
  File /usr/lib/zope/lib/python/Products/BTreeFolder/BTreeFolder.py, line
195, in _delOb
(Object: Traversable)
KeyError: (see above)



=
Sean Upton
Senior Programmer/Analyst
SignOnSanDiego.com
The San Diego Union-Tribune
619.718.5241
[EMAIL PROTECTED]
=

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Web Services for Zope

2001-09-26 Thread sean . upton

 {snip}

 trying-to-auto-generate-a-wsdl-from-my-product'ly yours

Hmm... in the interim, what about using ZPT (+ParsedXML, of course) and a
few python scripts to do this?

Sean
___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Vulnerability: attacking can get file list and directory

2001-09-24 Thread sean . upton

On a high-traffic site, wouldn't the log get really big, really quickly with
tracebacks?  It is also nice to have the tracebacks in the browser window
for debugging... 

Why not just enable tracebacks to clients from trusted IP address ranges or
domains...  Set this up as an option in Z2.py?

Anyway, that's my 3-mile high take on it... 
Sean

-Original Message-
From: Shane Hathaway [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 24, 2001 7:59 AM
To: Oliver Bleutgen
Cc: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Vulnerability: attacking can get file list and
directory


Oliver Bleutgen wrote:

 From a non-technical, PR-wise point of view let me add that
 this type of vulnerability easily gets zope mentioned on lists
 like bugtraq. The perception is that these thing really are 
 vulnerabilities.


You're right, a quick search on google for path disclosure 
vulnerability yields a lot of hits for lots of applications.

It troubles me that people consider PDV to be important at all when the 
client-side trojan bug is still fully exploitable on all browsers 
including IE and Mozilla! (AFAIK)  Client-side trojans, which can cause 
your browser to invisibly post a comment on a weblog, execute a 
financial transaction, or break into servers you maintain, are a major risk.

PDV just yields information you might give out anyway.  But maybe we 
could deal with it anyway by writing an error.log instead of sending 
the traceback to the browser.  What do you think?

Shane



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Vulnerability: attacking can get file list and directory

2001-09-24 Thread sean . upton

Personally, I think this really should be an integration issue instead of a
Zope issue: use a front-end proxy server (i.e. Squid) and set up ACLs to
prevent this...
Sean

-Original Message-
From: Oliver Bleutgen [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 24, 2001 9:10 AM
To: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Vulnerability: attacking can get file list and
directory


Hi shane,

 Oliver Bleutgen wrote:

 From a non-technical, PR-wise point of view let me add that
 this type of vulnerability easily gets zope mentioned on lists
 like bugtraq. The perception is that these thing really are
 vulnerabilities.


 You're right, a quick search on google for path disclosure
 vulnerability yields a lot of hits for lots of applications.

 It troubles me that people consider PDV to be important at all when the
 client-side trojan bug is still fully exploitable on all browsers
 including IE and Mozilla! (AFAIK)  Client-side trojans, which can cause
 your browser to invisibly post a comment on a weblog, execute a
 financial transaction, or break into servers you maintain, are a major
 risk.

I had put something about that theme at the client-side trojan wiki, 
put I'll repeat myself since you mentioned it ...

Methinks the creators of the http/1.1 rfc were aware of the dangers
we call client-side trojan and wrote the following:


9.1.1 Safe Methods

   Implementors should be aware that the software represents the  user
   in their interactions over the  Internet, and should be careful  to
   allow the user to be aware of any actions they might take which may
   have an unexpected significance to themselves or others.

   In particular, the  convention has  been  established that the  GET
   and HEAD methods  SHOULD NOT  have the  significance of  taking  an
   action other than retrieval.  These methods ought  to be considered
   safe. This allows user agents to represent other methods, such as
   POST, PUT and DELETE, in a  special way, so  that the user  is made
   aware  of   the  fact  that  a  possibly  unsafe  action  is  being
   requested.

   Naturally, it  is not  possible  to  ensure that  the server   does
   not  generate  side-effects  as  a   result of   performing  a  GET
   request; in fact, some dynamic resources  consider that a  feature.
   The important distinction here is that the user did not request the
   side-effects, so therefore cannot be held accountable for them.



Zope really should not accept GET requests to dangerous manage_* 
(or other) methods, that would ensure it's at least compliant with the 
spirit of that rfc. If the user decides to use a browser which allows
javascript to auto-submit forms and stuff, it's his choice.
I have a feeling that other ideas like checking referer etc. are bound
to fail after one or two generations of new browsers. We should have
in mind that the same people who will design these browsers already
had the bright idea of implementing auto-submitting of hidden forms.

 PDV just yields information you might give out anyway.  But maybe we
 could deal with it anyway by writing an error.log instead of sending
 the traceback to the browser.  What do you think?

I fear it would make working with zope harder for unexperienced
users. When working with apache/perl on linux, I always had a
tail -f /var/log/httpd/error.log running in a terminal, but if you're
solely working on windows without using the power of cygwin or other
tools, this might get tedious.

What I would like to see is a error product which can be freely 
configured to show more or less details depending on its context
(i.e. user/role etc.) and able to optionally write to a log file. 
I know this is a lot of work and has its technical problems, 
but it's a nice imagination.

cheers,
oliver

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] Problems with CatalogAware?

2001-09-10 Thread sean . upton

Right now I only call index_object() after an edit, as I was assuming that
after adding things would be automatically taken care fo for me, but
obviously this is not the case.  There are, indeed, default values in some
properties within the class __init__ method.

I think what is happening is that I am indexing methods (not properties),
and since my factory method doesn't call an explicit reindex_object() after
some properties are changed (code below) I am having problems.  I wonder if
I call self[id].index_object() after self._setObject(id, ad) if that will do
the trick?

Thanks for the reply,
Sean

def manage_addAdItem(self, id, title, REQUEST=None):
 Zope managment interface create method for AdItem

 ad=AdItem(id)
 ad.setId(id)
 ad.setTitle(title)
 if REQUEST is not None:
   ad.setAdBody(REQUEST['adBody'])
   if (len(REQUEST['keywords'])  0):
 ad.setKeys(REQUEST['keywords'])
   ad.setAdDateMulti(=REQUEST['Ad'], mm=REQUEST['Admm'],
dd=REQUEST['Addd'])
   ad.setRtDateMulti(=REQUEST['Rt'], mm=REQUEST['Rtmm'],
dd=REQUEST['Rtdd'])
   ad.featureURL=REQUEST['featureURL']
 self._setObject(id, ad)
 if REQUEST is not None:
   return self.manage_main(self, REQUEST)



-Original Message-
From: Toby Dickenson [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 6:28 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [Zope-dev] Problems with CatalogAware?


On Fri, 31 Aug 2001 15:17:27 -0700, [EMAIL PROTECTED] wrote:

I have a python product that has a class derived from CatalogAware and
Folder.  I programmatically add instances of these (1000s of them) on an
automated basis every day in the early morning.

My problem is that whenever I do this, the Catalog is updated with some
problems:
1 - Metadata is skewed: DateTime objects are cataloged, and they end up
with
the wrong date ('2001/01/01') instead of today's date, even though the
actual property contains today's date.  The index in question is built from
a property.
2 - Text indexes only get a portion of their text stored in the metadata,
not all of it.  The index in question is built from a class method in the
product code.


Appologies if you already know this.

CatalogAware will automatically reindex if an object is added,
deleted, or moved. However it does not automatically reindex if
properties are changed.

It sounds like your index might contain the default (initial) values
for these properties. Do you need to add a call to reindex_object()
after changing them from the defaults?

Toby Dickenson
[EMAIL PROTECTED]

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: PossitionIndex (was: Re: [Zope-dev] ZCatalog phrase indexingrevisited)

2001-06-16 Thread sean . upton

A lot of folks who do power searches, say, librarians or other trained
researchers, familiar with the bells and whistles of more powerful search
engines, will want a simple operator for proximity, with the ability to
specify proximity depth:

For example:

Lexis-Nexis:Sean w/2 Upton  (where w/2 is within 2 words)
Also, lexis doesn't count stop-words in proximity
indexes.
Folio/Nextpage: Sean Upton@2

IMHO, the syntax is clean and very brief in the Lexis-Nexis case and should
suppliment a more generic 
Sean ... Upton
style search.

Sean

-Original Message-
From: Chris McDonough [mailto:[EMAIL PROTECTED]]
Sent: Saturday, June 16, 2001 2:59 AM
To: Erik Enge
Cc: [EMAIL PROTECTED]
Subject: Re: PossitionIndex (was: Re: [Zope-dev] ZCatalog phrase
indexingrevisited)


Erik Enge wrote:
 
 On Fri, 15 Jun 2001, Chris McDonough wrote:
 
  Once you're satisfied with the implementation, would you be willing
  submit the module to the collector?
 
 Will do.  Have you thought about how users actually are to use
 exact-phrase?  What I'm thinking I will do here (currently I've only been
 testing explicitly with adjoinedby in the query) is to insert
 adjoinedby in phrased searches:
 
 erik enge- erik adjoinedby enge
 erik ... enge  - erik near enge
 
 What do you think?

These both look like good spellings, and I think erik near enge would
be a good alias for erik ... enge as well..

- C

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] ANNOUNCE: Zope 2.4.0 alpha 1 released

2001-06-01 Thread sean . upton

My impression is that FileStorage implements a 32-bit id-type-thingy
somewhere (look at ZODB docs, I think there is something about this
somewhere), which limits it (in addition to the Linux kernel ext2 fs limit),
to  2GB.  With 7.5 GB, I'd use a more advanced storage like the new - well,
not quite released ;) - Berkeley (libdb3 based) storages, though I haven't
tried anything like that myself...  

Does anyone have any comments on the reliability of PartitionedFileStorage
in this regard as a temporary solution?  Is anyone using
PartitionedFileStorage in a production environment?

Sean

-Original Message-
From: Holger Lehmann [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 01, 2001 2:33 AM
To: Brian Lloyd; [EMAIL PROTECTED]
Subject: Re: [Zope-dev] ANNOUNCE: Zope 2.4.0 alpha 1 released


Hi Brian, hi all,

great to hear this.

Now comes a tricky question:

Suppose we are running a Linux Kernel 2.4.x and using the latest Python 2.x 
distribution. And supposing we can recompile all code if neccessary:

How large can a Data.fs grow until it breaks ?
We need to be able to store about 7.5 GBytes (note: Gigabytes) in the ZODB.
I 
would rather use the ZODB than a LocalFS 

Thanks in advance 
- Holger


Am Donnerstag, 31. Mai 2001 22:55 schrieb Brian Lloyd:
 Hello all,

   Zope 2.4.0 alpha 1 has been released - you can download it from
   Zope.org:

 http://www.zope.org/Products/Zope/2.4.0a1/


   Highlights of what is new in Zope 2.4:

 - Zope 2.4 supports (and requires) Python 2.1

 - New restricted execution architecture

 - WebDAV Level 2 locking support

 - New WebDAV Access permission

 - A new built-in 'Authenticated' role

 - Product refresh without restart during development

 - New Drop-in indexes support for ZCatalog


   Be sure to see the Zope 2.4 Migration Guide:

http://www.zope.org/Products/Zope/2.4.0/Zope24MigrationGuide.html

   which outlines the new features and provides other important
   information for users of Zope 2.4.

   For more information on what is new in this release, see the
   CHANGES.txt and HISTORY.txt files for the release:

 http://www.zope.org/Products/Zope/2.4.0a1/CHANGES.txt

 http://www.zope.org/Products/Zope/2.4.0a1/HISTORY.txt

   For more information on the available Zope releases, guidance for
   selecting the right distribution and installation instructions,
   please see:

   http://www.zope.org/Documentation/Misc/InstallingZope.html

   Note that this is an alpha release, so it is available as a source
   distribution only. We will make binary releases available with the
   first beta release.


 Brian Lloyd[EMAIL PROTECTED]
 Software Engineer  540.371.6909
 Digital Creations  http://www.digicool.com




 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope )

-- 
---
catWorkX GmbH
Dipl.-Ing. Holger Lehmann
Stresemannstr. 364
22761 Hamburg
Tel: +49 (0700) catWorkX
Tel: +49 (40) 890 646-0
Fax: +49 (40) 890 646-66
mailto:[EMAIL PROTECTED]
http://www.catworkx.de
http://www.catbridge.de



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] ANNOUNCE: Zope 2.4.0 alpha 1 released

2001-06-01 Thread sean . upton

Perhaps I was looking at old docs, as the docs had indicated that
filestorage uses 32-bit position pointers; I'm guessing that this has since
changed...

Sean

-Original Message-
From: R. David Murray [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 01, 2001 9:54 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: [Zope-dev] ANNOUNCE: Zope 2.4.0 alpha 1 released


On Fri, 1 Jun 2001 [EMAIL PROTECTED] wrote:
 My impression is that FileStorage implements a 32-bit id-type-thingy
 somewhere (look at ZODB docs, I think there is something about this
 somewhere), which limits it (in addition to the Linux kernel ext2 fs
limit),
 to  2GB.  With 7.5 GB, I'd use a more advanced storage like the new -
well,
 not quite released ;) - Berkeley (libdb3 based) storages, though I haven't
 tried anything like that myself...  

FileStorage does *not* have a 2GB limit.  The only 2GB limit is the old
Linux filesystem limit.  I know this, because I've had 2GB Data.fs
files on FreeBSD.

--RDM

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )