October 2000 - Zope-Dev

DataSkinAddons 0-0-2 released
by Steve Alexander 24 Oct '00

24 Oct '00

DataSkinAddons 0-0-2 http://www.zope.org/Members/stevea/DataSkinAddons Changes: DataSkinAddons 0-0-2, 24 October 2000 DataSkinAddons 0-0-2 works with ZPatterns-0-4-3b1 and Zope 2.2 only Various changes to CatalogTrigger to bring it in line with the new Expressions module from ZPatters 0-4-3b1, and to tidy up some cruft. Thanks to John Eikenberry for contributing to this. Note that CatalogTrigger does not cause a ZPatterns transaction to abort, but instead logs an error, if an object cannot be catalogued or uncatalogued. In some cases, this may be wrong behaviour. Some checkboxes might appear for this in the next release of DataSkinAddons. Until then, use SkinScript if you want to abort the transaction if there is a problem cataloguing or uncataloguing. -- Steve Alexander Software Engineer Cat-Box limited http://www.cat-box.net

1 0

Writing my own request-handler
by Thomas Weholt 24 Oct '00

24 Oct '00

Hi, I want to write my own request in Zope. I want a specially formatted request or a command to be intercepted and processed by my own modules. If the user tries to access a url like http://www.myserver.org/myhandler or using a specific port on the server Zope traps this and my request_handler sends data back to the user based on the url . Why? I got a PostgreSQL database as a backend for a huge information organization project. I want to serve xml using a fast and stable solution like Zope or Medusa to do this, since I also need ftp for object-uploads, allthough these are not stored in ZODB. A normal ftp-server is used, and hopefully I could set up a normal medusa kind of ftp-server on a given port to do this, and avoid all the files being stuffed into the ZODB. I got a lot of non-Linux ( therefore as far as a know, non-postgresql-python users ) so I want to give them xml to process using a know protocol like HTTP. How can I write my own class/handler that traps this and serves my data ? I really want to use Zope cuz I use it for the rest of the site. I cannot serve all the postgresql data using plain zope-database methods cuz I want to write several clients in other programming languages that can receive and process the xml-format I use. The thing I want isn't xml-served as html, it's xml served to non-browser apps using HTML and ZOPE as means of delivery. Of course all of this is to be written in old-fashioned python, no Zope-products. Any hints, tips or guides is highly appreciated. I've looked at the Medusa source and found a couple of things that nearly does what I want them too, especially in the script_handler_demo-folder, but I'd like to get the whole thing into Zope if I could. Thanks.

2 1

Re: [Zope-dev] Unit testing, ZUnit
by dan＠sol.control.com 24 Oct '00

24 Oct '00

Lalo Martins <lalo(a)hackandroll.org> writes: > Then I figured in the long run a Product isn't the best > sollution; instead, fiddling with App/Product* sounds more like > it, to allow developers to register tests just like they > register classes, ZClass superclasses, _misc and help. Of > course, just like the current registerHelp and others, it > wouldn't be mandatory and not using it wouldn't break anything. > > Then, in the Product's page in the Control Panel, there would > be a tab "Test", where you'd be allowed to run the unit tests. I like the idea a lot, but would like to suggest that unit tests ala PyUnit really have three parts that call for separate treatment. 1. Test environment setup: construct the data structure(s) a test needs to run against. This wants to be separate because different tests can frequently share the same data structures and data structure setup can be non-trivial in systems like Zope. Since Zope is a persistent object space, there would also need to be code to tear down a test environment. Let's just lump that in here since it will be automagically invoked by the unit test facility. 2. Test definition and execution: pretty obvious :-) 3. Test results reporting: a small number (1?) of standard reporters plus the ability to define and register new reporters. Given the above, the task of writing most tests would consist of: 1. Select test environment. 2. Select default reporter. Optionally list which other reporters can be selected at test execution time? 3. Write and test the test. 4. Register the test so that it appears on the Test page. Dan Pierson

1 0

Python 2.0 and Zope Status?
by tsarna＠endicor.com 24 Oct '00

24 Oct '00

What's the current state of Zope with Python 2.0? My current understanding of the issues is: - Problem with ExtensionClasses and 2.0's circular reference GC. Can someone elaborate on this? Is configuring python2.0 with the --without-cycle-gc flag a sufficient workaround for now? - Python 2.0's cPickle and cStringIO should be used instead of the Zope-supplied versions. Is that it? Anything else I'm missing? Thanks.

3 3

Using LoginManager with users stored in several Specialists
by Itai Tavor 24 Oct '00

24 Oct '00

Hi, I have two different types of users - Customers and Resellers. Each one is stored in a separate ZClass and managed by a separate Specialist. I need to be able to authenticate users from both user lists, as well as a third group for people working locally on the site - Managers, Customer Service, etc. So I thought I could store a 'LoginProperties' propertysheet in each of the two ZClasses, and use a separate UserSource to access each one. The local users will be handled by a PersistentUserSource. My questions are: - Is this a good idea? It seems better to me than storing all users in a PersistentUSerSource (from the Membership product) and mapping from it to the Customer and Reseller classes. Each type of user is created and managed in different ways so it won't make sense to manage all users from one place. - I'm not sure how to customize a UserSource to access the propertysheets on the Customer and Reseller classes. The easiest way seems to be to define userExists, userRoles and userAuthenticate methods in a GenericUserSource, but I don't think it's a good idea - I still wouldn't know how to make changes to the propertysheet from the LoginManager (for example, changePassword should be a method of acl_users, not of the user classes, because it does the same thing for all user types), and there is no caching. Should I write my own UserSource? Or can I do it with Data Plug-ins? I'd like to keep the solution simple, but I do want it to be efficient (fast and cached). TIA, Itai -- Itai Tavor "Je sautille, donc je suis." C3Works itai(a)c3works.com - Kermit the Frog "If you haven't got your health, you haven't got anything"

2 1

WriteLocking RiskFactors Updated
by Jeffrey P Shell 24 Oct '00

24 Oct '00

The WriteLocking RiskFactors artifact has had some new work done on it and I'm interested in some editorial comments and review before work begins on Architecture and UseCases. <http://dev.zope.org/Wikis/DevSite/Projects/WriteLocking/RiskFactors> Make any comments you have at: <http://dev.zope.org/Wikis/DevSite/Projects/WriteLocking/ProjectDiscussion>

1 0

Method binding
by Chris Withers 24 Oct '00

24 Oct '00

Maybe the Zope-Dev guys have comments on this.... > >From: Jim Fulton <jim(a)digicool.com> > > > >Michel, > > > >You have advocated that methods should always be bound to the objects they > >are accessed in. You argue that there should be no choice in the matter. > > > >I have to disagree strongly. I'll try to explain why. > > > >In Python, methods are bound to instances. Methods are part > >of an instance's core behavior. They are specific to the kind > >of thing the instance is. In my words, methods are part of > >the genetic makeup of an object. > > > >In Zope, we allow some methods to be bound to their context. > >This is done in a number of ways and is sometimes very useful. > >We have methods, like standard_html_header, which are designed > >to be used in different contexts. > > > >We have other methods, like manage_edit that are designed to > >work on specific instances. It would be an egregious error > >if this method was acquired and applied to it's context. > > > >We have some methods that are designed to bound to an instance > >(container, in your terminology) but that, because they are written in > >DTML, can be bound to other objects. This can cause significant problems. > >For example, methods defined in ZClasses almost always want to be > >bound to ZClass instances, not to other arbitrary objects. > > > ><aside>There's a bonus problem with DTML Methods. When > >a DTML Method is invoked from another DTML Method, it > >is bound to neither the object it was accessed in or > >to the object it came from. It is bound to the calling > >namespace. It turns out that this is a useful behavior > >if the DTML Method is designed to be used as a "subtemplate". > ></aside> > > > >There is no one "right" way to bind a method. There are good > >reasons to sometimes bind a method to it's context and > >sometimes bind a method to it's container (ie instance). > >There are even sometimes reasons to bind a method to a > >calling namespace. > > > >The principle of least surprise doesn't help here, because > >methods defined in Python classes don't behave the way > >methods defined through the web do currently. > > > >We *need* control over binding, as well as reasonable defaults. > > > >If we can agree that we need binding control, the question > >arises as to some details and default names. > > > >Should it be possible to do more than one binding at a time, > >using multiple names? If not, then I'd agree that the name > >'self' should be used for either the context or container binding. > >If both bindings are allowed at the same time, then 'self' should > >refer to container binding to be consistent with standard Python > >usage and some name like 'context' should be used (by default) > >for contextual binding. > > > >Jim

10 24

Re: [Zope-dev] Task, Job or Operation?
by mmillikan＠vfa.com 24 Oct '00

24 Oct '00

Pylet? Perlet? Xlet?

1 0

Adding Users in Python
by Andre Schubert 24 Oct '00

24 Oct '00

Hi, I'am using the following code in one of my Products. obj = Kunde.Kunde(id=row['name'],modem=row['modem'],db_id=row['id'],adress_id=row['adresse']) folder = AccessControl.User.UserFolder() obj._setObject('acl_users', folder) obj._addRole('Kunde') rechte = ['Access contents information','View'] for recht in rechte: p = AccessControl.Permission.Permission(recht, '', obj) p.setRole('Kunde', recht in rechte) obj.acl_users._addUser(name="test", password="passwort", confirm="passwort", roles=['Kunde'], domains=['']) I'am adding an obj of the Class Kunde in any Folder. The Class Kunde should consist of an UserFolder, and has a Role named Kunde with the Permissions Access contents information and View. This all works fine, but inside the UserFolder a should should be added with a name test and the password passwort. Now the problem is, the user will be added, but the password does not work. i have added a function test to User.py the returns the password of the current user object. def test(self): """ doc string """ return self.__ If i call the function test from a dtml document it returns "passwort" as the password, but when the browser opens the authentication request window and i write test as the username and passwort as the password i get the message returned that the username or password is wrong. But when i open the user-object in the acl_users and open the user test and fill in in the password and confirm field the value of "passwort" everything works fine. No where is the problem. is it in my _addUser() function or somewhere else? Please Help. as

1 0

Security Confusion :-S
by Chris Withers 24 Oct '00

24 Oct '00

If anyone can help me with this, it'd give me more faith in the new security model :-S Right, I have a Python Product Class (lots of bits left out ;-): > class MyProduct(OFS.SimpleItem.SimpleItem): > """... > """ > > __ac_permissions__=( > ('Use MyProduct' , ('a_method',),('Manager',)), > ) > > a_methodisDocTemp=1 > > def a_method(self,ignored,md): > list = [] > for name in self.get_contents(): > list.append(DisplayClass(name,self)) > > return list The important bits of DisplayClass look like: > class DisplayClass(Globals.Persistent): > """ """ > > __allow_access_to_unprotected_subobjects__=1 > > meta_type = 'CaseDisplay' > > __ac_permissions__=( > ('View', ('get_name',),('Anonymous',)), > ) ... > def get_name(self): > return self._name Now, I have a DTML method which goes like: > <dtml-with an_instance_of_MyProduct> > <dtml-in a_method> > <B><dtml-var sequence-item html_quote>:</B> > <dtml-var get_name><BR> > </dtml-in> > </dtml-with> Which _always_ throws up an authentication box when a_method returns anything except an empty list. no matter what username or password I use, that box still appears. What I would like is for the get_name and a_method methods to be mapped to permissions so I can manage access to them using the security tab. How should I do that? BTW, in an attempt to get the method accessible in _some_ way I have tried: - setting __allow_access_to_unprotected_subobjects__=1 in both the MyProduct and DisplayClass classes. - setting get_name__roles__=None in the DisplayClass. - giving every conceivable permission to both the Anonymous and Manager roles in the folder containing the MyProduct instance None of which feel like a good way to go, but nevertheless, none of them worked. The only way I coudl solve the problem was to give the DTML Method the 'Manager' proxy role, then everything worked fine. Why is that? What's _is_ going on? Confused and Frustrated (isn't that always the way with Zope security?!) Chris

2 2