January 2000 - Zope-Dev

Re: [Zope-dev] feedback wanted on ZCatalog changes...
by Anthony Baxter 04 Jan '00

04 Jan '00

>>> Michel Pelletier wrote > It sounds pretty cool. The whole idea of a "query language" is one of > those open ended issues. Scott@codeit has come up with some interesting > stuff and so has Phillip Eby. I think the query language part should be > resolved before a UI for it is built. > > So I suggest that we table the issue for a bit WRT anyhting involving > queries. I like the idea of your screen and think it should be added as > feature to the next 'revision' of catalog. The query page I've added supports only _very_ simple queries. It's actually mostly useful for browsing the catalog objects to view their metadata. The queries can be 'search a single index for a single string' or 'list uniqueValueFor of an index'. It's not suitable for real use in developing queries, but is insanely useful for debugging and browsing the catalog. A proper query language would be nice, yes, but it's a bit beyond this particular idea - hm, what about if it's just called 'Browse Catalog Contents' rather than Query? > Well, one school of thought says that all indexes should conform to a > common interface. Indexes 'sort of' work this way, but text indexes > have a slightly diff interface and certain operations for various > indexes may or may make sense (like uniqueValuesFor). In that case, why doesn't UnTextIndex just support the hasUniqueValuesFor() method, and always return 0? I still think there's a benefit to being able to extract the index type from the instance of the index - no interface is going to be 100% common. If nothing else, being able to look at the management tab for the indexes and seeing what the types of the various indices are would make it easier to debug the 'oops' mistakes where you set it up wrong. > What really needs to happen is that this whole index snafu which I so > briliantly screwed Zope into needs to be fixed. The index interface > should be modeled, documented, and made consistent across types of > index. The problem with this is that the ideal solution would probably > not be (or require more work to be) backwards compatable with Confera, > Squishdot, Catalog and ZTables. Aie. didn't you have a model for zcatalog? or was that the one that got eaten by the modelling software? (bad software no donut) Anthony

1 0

Re: [Zope-dev] feedback wanted on ZCatalog changes...
by Anthony Baxter 04 Jan '00

04 Jan '00

>>> Michel Pelletier wrote > WRT the first bug, returning a list for uniqueValuesFor, I suspect this > would break alot of existing code, but I'm not sure. Perhaps a good > workaround would be an _.list() so that the tuple can be converted > outside the index instead of in? The alternative would be to allow any form of sequence as an argument to the ZCatalog search. Hm - though I guess someone _could_ want an attribute that's a tuple, I guess... > The second bug involving string.find I fixed and checked in. Thanks. Excellent. The other two changes in there were: make REQUEST and RESPONSE optional for the various manage_ functions, and fixing the "can't index attributes acquired from higher than the enclosing folder" from ZopeFindAndApply. The latter in particular is a complete pig when it bites. I've attached two patches, one for each of these, to this message. Anthony

1 0

SECURITY ALERT
by Christopher Petrilli 04 Jan '00

04 Jan '00

Ok, now that we've got your attention... Thanks to Kevin Littlejohn's sleuthing, a sizable problem in the security machinery in DTML has been brought to our attention and resolved. Without delving too deeply into the obtuseness of the problem, let me first say that this is 1) very critical, 2) has an urgent fix. This problem is of most concern to anyone who opens their Zope site up to the general public (a'la zope.org) as it could allow "anonymous" people to do things which are most definitely not allowed. Unfortunately it was introduced many releases ago, but to our knowledge this is the first time anyone has discovered this problem. Fixes are contained in the CVS repository as well as: Zope 2.1.2 http://www.zope.org/Products/Zope/2.1.2/ Patch to 1.10.3 http://www.zope.org/Products/Zope/2.1.2/1104_patch.html It is important to note that the patch to 1.10.3 has some performance impact on users of this release. Unfortunately, we are no longer able to provide equal levels of support for users of 1.x and 2.x implementations of Zope. If there are reasons that your site is unable to transition to 2.x, please let us know so that we can work to resolve them in future releases so that we can finally retire the old 1.x line of code. If you have any questions regarding the impact to your site of the changes, please send them to support(a)digicool.com Chris -- | Christopher Petrilli Python Powered Digital Creations, Inc. | petrilli(a)digicool.com http://www.digicool.com

1 0

odbc db connection question
by Philip Corp 04 Jan '00

04 Jan '00

Is there a way to pass SQL directly to an odbc database connection from an external method in Zope 2.1.1? I have tried the following: def someMethod(self): r = self.my_odbc_connection.query('select * from some_table') However, it just returns a generic server error. Any help would be really appreciated. Thanks. Phil

1 0

RE: how to get a URL-based session dictionary working with Extern alObjects? alObjects?
by Amos Latteier 04 Jan '00

04 Jan '00

Michel Pelletier wrote: > >I believe, possibly on the old site, that there is a Zope > produce that > >lets you plug bobo apps directly into the Zope space with no > >modification. > > > >http://www.zope.org:8080/Download/Contrib/ExternalObjects.tar.gz > > > >I think this is it. Someone probably needs to adopt this orphaned > >child. (I think maybe Amos wrote it, Amos?) Yes, it's my fault ;-) Michael Olivier wrote: > Belated thanks on this help with ExternalObjects, Michel. I got this > working with our ZPublisher/PCGI objects into zope, but I'm > stuck on one > issue: we encode the HTTP session in the URL, and have a > dictionary class > that is invoked to get the session object from a > __getitem__() call. It > works file with ZPublisher but isn't working with > ExternalObjects in Zope. > > A sample URL is: > > localhost/Zope/sess/Z8Q/home > > ...where sess is an external object declared in zope containing a > dictionary with an entry for Z8Q. I am using the old BoboDictionary, > subclassed to override __getitem__() with code to look up the > Z8Q key and > return a session object. > I also set __getattr__ = __getitem__ ... This all seems reasonable, though I don't think you need to set __getattr__ to __getitem__. > Michel, Amos, anyone -- ideas for what's going wrong, or what > else I need > to do? (Error output below.) Well this traceback indicates that when ZPublisher does a getitem on your object to find a subobject it's getting an exception. (See lines 330 and following of ZPublisher/BaseRequest.py) You should figure out what this exception is, and why it's being raised. Good luck! -Amos BTW, if your old bobo app uses BoboPOS, there could be problems incorporating it into Zope... -- Amos Latteier mailto:amos@digicool.com Digital Creations http://www.digicool.com

1 0

Contract position available - Please read
by mmurphy＠newmill.com 04 Jan '00

04 Jan '00

To whom it may concern: My name is Mike Murphy and I represent New Millennium Inc., a leading supplier of Software consultants and IT professionals to end clients across the country. We presently have a client that is looking for a consultant with solid ZOPE experience to work as the ZOPE lead on an e-commerce project. I've taken the liberty of outlining the requirement below. Please have a look at it and let me know if you have any interest in persuing this assignment. I can be reached at the numbers below. Location: Ashland, MA Duration: 3 months Employment requirement: MUST be a U.S. citizen or have current employment visa for the U.S. (New Millennium is not set-up to sponsor H1-B work visas.) Description: Our client seeks a web developer experienced with ZOPE (Z object publishing environment), an open market web contact management tool. Zope is the leading Open Source web application server. Zope enables teams to collaborate in the creation and management of dynamic web-based business applications such as intranets and portals. Zope makes it easy to build features such as site search, news, personalization, and e-commerce into your web applications. Project is a web application (financial services) being developed in house by a team utilizing VB 6.0, SQL SV 6.5 and 7.0, Visual Foxpro, and Perl Script. (however none of these skills are REQUIRED as this consultant will act as the ZOPE lead to implement the project and perhaps some knowledge transfer to 1 other individual). Work mostly independently. Prefer to do all or most of the work on site but open to taking some work home. Requirements: 6mo+ (minimal, the more the better) ZOPE experience (practical web development with it). Any Visual Foxpro and Perl big plus. VB, SQL Server and financial applications a plus. Need someone who knows ZOPE and can implement it into a project. Thanks for taking the time to read about this position. If you are not available for this assignment, perhaps you may know of a colleague or friend that can handle this assignment. We offer a referral bonus if you refer someone to us that we place in this position. Please make sure they mention your name to me so I can properly track the placement. Best regards. Mike Murphy New Millennium Inc. 800-381-9507(v) 800-381-8708(f) 401-792-0997 mmurphy(a)newmill.com

1 0

RE: [Zope-dev] feedback wanted on ZCatalog changes...
by Michel Pelletier 04 Jan '00

04 Jan '00

> -----Original Message----- > From: Anthony Baxter [mailto:anthony@interlink.com.au] > Sent: Wednesday, December 29, 1999 3:05 AM > To: zope-dev(a)zope.org > Subject: [Zope-dev] feedback wanted on ZCatalog changes... > > > At <URL:http://www.zope.org/Members/anthony/patches/index_html> > I've placed a number of changes/patches for ZCatalog. As well > as a couple of bug fixes (which are in the collector) there's a > new feature - I've added a new management tab 'Query'. from the above > page: Ok, I looked at your bug fixes (you had the diffs there, shoulda looked before opening my mouth and asking...) WRT the first bug, returning a list for uniqueValuesFor, I suspect this would break alot of existing code, but I'm not sure. Perhaps a good workaround would be an _.list() so that the tuple can be converted outside the index instead of in? The second bug involving string.find I fixed and checked in. Thanks. -Michel

1 0

RE: [Zope-dev] feedback wanted on ZCatalog changes...
by Michel Pelletier 04 Jan '00

04 Jan '00

> -----Original Message----- > From: Anthony Baxter [mailto:anthony@interlink.com.au] > Sent: Wednesday, December 29, 1999 3:05 AM > To: zope-dev(a)zope.org > Subject: [Zope-dev] feedback wanted on ZCatalog changes... > > > At <URL:http://www.zope.org/Members/anthony/patches/index_html> > I've placed a number of changes/patches for ZCatalog. As well > as a couple of bug fixes (which are in the collector) there's a > new feature - I've added a new management tab 'Query'. from the above > page: > > A new management tab 'Query', which allows you to query the > contents of > the ZCatalog. When building complex applications with ZCatalog (see my > 'dtml-tree from zcatalog' howto), you end up writing a lot of > tiny DTML > methods just to dump out the results of a particular query. This makes > it a lot easier. Note that this is pretty shiny and new, and > I'd really > like some feedback on this. It sounds pretty cool. The whole idea of a "query language" is one of those open ended issues. Scott@codeit has come up with some interesting stuff and so has Phillip Eby. I think the query language part should be resolved before a UI for it is built. So I suggest that we table the issue for a bit WRT anyhting involving queries. I like the idea of your screen and think it should be added as feature to the next 'revision' of catalog. Is it possible to get diffs of your bug fixes so that I can look over them and check them in? > There's two search methods - one takes an index and a search term, and > will return matching objects (and optionally display all metadata in a > table), while the other will take an index and do a uniqueValuesFor() > on it to return a list of index values. Clicking on a result in this > form will return matching objects for that value (as in the > first method) > > Note that this will only work for indexes of type FieldIndex and > KeyWordIndex. To detect TextIndexes, I had to check for the > presence of > a method called 'positions' in the index, since that's only present in > TextIndex. There appears to be no way to find out the type of an index > apart from diving into Python and examining it's __class__. > Should this > be fixed? Well, one school of thought says that all indexes should conform to a common interface. Indexes 'sort of' work this way, but text indexes have a slightly diff interface and certain operations for various indexes may or may make sense (like uniqueValuesFor). What really needs to happen is that this whole index snafu which I so briliantly screwed Zope into needs to be fixed. The index interface should be modeled, documented, and made consistent across types of index. The problem with this is that the ideal solution would probably not be (or require more work to be) backwards compatable with Confera, Squishdot, Catalog and ZTables. Aie. -Michel

1 0

RE: [Zope-dev] Possible bug in ZCatalog?
by Michel Pelletier 04 Jan '00

04 Jan '00

Fixed, thanks. -Michel > -----Original Message----- > From: Harry Henry Gebel [mailto:hgebel@inet.net] > Sent: Tuesday, December 21, 1999 10:32 PM > To: Zope-Dev(a)zope.org > Cc: amos(a)digicool.com > Subject: [Zope-dev] Possible bug in ZCatalog? > > > I am running Zope 2.1.1 on a Mandrake Linux 6.1 system with > the include > Python 1.5.2 . > > While going through the steps in the XML Document article at > http://www.xml.com/pub/1999/12/zope/index.html I got to the > "Configuring > a ZCatalog" section. When I typed > > getNodeName()=='entry' > > into the "expr" field I got two NameError exceptions > lib/python/Products/ZCatalog/ZCatalog.py . The names that > where unknown > where Eval and expr_globals. A quick look at the top of ZCatalog.py > revealed that they where not being being imported so I added the line > > from DocumentTemplate.DT_Util import Eval, expr_globals > > to the imports. After adding this line I no longer got an > exception when > pressing the "Find" button. > > The search came up with no results instead of the two predicted in the > article. I am not familiar with XML Documents or ZCatalogs, > so I do not > know if this is another problem with ZCatalog, a problem with XML > Document or the article, or if I have missed a step somewhere. > > ---------------------------------------------------------------------- > Harry Henry Gebel ICQ# 43675297 > West Dover Hundred, Delaware > John McCain for President in 2000 http://www.mccain2000.com > > _______________________________________________ > Zope-Dev maillist - Zope-Dev(a)zope.org > http://lists.zope.org/mailman/listinfo/zope-dev > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope ) >

1 0

Z SQL data retreival NO where clause
by Rey-luh Wang 04 Jan '00

04 Jan '00

Try to select * from table, do not have where clause, this failed. Do I miss something here... -------------------------------------------------------------- Jefferies archives and reviews outgoing and incoming e-mail. Such may be produced at the request of regulators. Sender accepts no liability for any errors or omissions arising as a result of transmission. Use by other than intended recipients is prohibited. This is neither an offer nor a solicitation of an offer to buy or sell securities. Opinions or estimates constitute our best judgment at this time and are subject to change without notice. Information upon which this material is based was obtained from sources believed to be reliable but has not been verified. Additional information is available upon request. Jefferies its affiliates and respective directors officers and employees may buy or sell securities mentioned as agent or principal. This is for use by professional or institutional investors only. No investments or services mentioned or described are available to "private customers" as defined by the SFA or to anyone in Canada not a "Designated Institution".

2 1