November 2000 - Zope-Dev

Re: [Zope-dev] fixing security problems HOW?
by Dieter Maurer 29 Nov '00

29 Nov '00

Robin Becker writes: > How can I find out exactly what is causing my security permissioning to > fail. > > I have put extra stuff into ZPublisher\BaseRequest.py at line 463 so I > know that I'm failing on > > UnauthorizedYou are not authorized to access this resource. > URL='http://192.168.0.4:7080/live/index_html' No Authorization header > found. > > I am an anonymous user. Even when I make /live have the same permissions > as the manager I can't make it work. index_html is a dtml method of the > class of which live is an instance. > > How can I figure out what is blocking the anonymous access. The URL traversal in "ZPublisher.BaseRequest.traverse" led to a "roles" assignment with a non-"None" value. This triggers authentication checking. Annonymous did not have one of the necessary roles. I would probably check, what "roles" are determined during traversal. Apparently, your "live" is a Z instance. It is quite easy to forget the ZClass permission mapping (or get it wrong). This may lead to strange permission problems. Dieter

2 2

Re: [Zope-dev] objectValues performance
by Brett Carter 29 Nov '00

29 Nov '00

Ok, I'll bite. Why doesn't the standard folder scale? Seems like a design flaw to me - why doesn't the default folder use catalogs or BTrees? -Brett >>>>> "Casey" == Casey Duncan <cduncan(a)kaivo.com> writes: Casey> Brett Carter wrote: >>> I have a folder with greater than 5000 ZClass instances in it. It >>> takes > 5mins to do an objectValues for every object in the folder - >>> is there a higher perfomance call I could make? >>> -Brett Casey> Standard folder performance degrades pretty quickly once you get Casey> a lot of objects in it. There are two solutions to this: Casey> Subdivide your objects into multiple folders. Casey> Use a BTreeFolder which should be much faster. Casey> You can download the BTreeFolder product Casey> here: http://www.zope.org/Members/hathawsh/BTreeFolder/ Casey> hth, Casey> Casey Duncan

4 3

Re: [Zope-dev] objectValues performance
by Brett Carter 28 Nov '00

28 Nov '00

>>>>> "Michel" == Michel Pelletier <michel(a)digicool.com> writes: Michel> Because massive scale is not a requirment of folders, they Michel> are meant to organize content for humans, not to be Michel> large-collection containers. A folder with 5000 elements Michel> is not very useful to a human. Michel> On a similar note, create 5000 files in a linux directory on a ext2 Michel> (standard) filesystem and then type 'ls'. You'll notice they don't Michel> scale very well either, which is why there are filesystems like Michel> ReiserFS. Michel> -Michel Point taken, but in Zope where data and logic reside in the same place (ZODB) shouldn't we have some sort of effcient storage for large amounts of data? What happens when a site gets three or four thousand users? That won't fit well in an UserFolder. -Brett [...]

1 0

Re: [Geeks] Re: Interface Meta Data proposal
by Shane Hathaway 28 Nov '00

28 Nov '00

Chris McDonough wrote: > > Is security really a part of an object's interface? I thought this was more > of an implementation thing. When refactoring the PTK it became apparent that supplying security assertions on the interface rather than the implementation can be very useful. In fact, an interesting pattern emerged: "view" objects needed no security assertions as long as the "model" objects had all the necessary assertions. I'm not sure if there is any basis for this idea in current OO methodology, but I really think the concept has merit. It certainly clarifies Zope security IMHO. Shane > ----- Original Message ----- > From: "Michel Pelletier" <michel(a)digicool.com> > To: "Geeks Mailing List" <geeks(a)digicool.com> > Cc: <zope-dev(a)zope.org> > Sent: Tuesday, November 28, 2000 4:05 PM > Subject: [Geeks] Interface Meta Data proposal > > > > > I've added a sub-proposal to the Interface proposal for describing > > additional meta-data with Interface objects: > > > > http://www.zope.org/Wikis/Interfaces/ExtesableMetaData > > > > Please comment about this interesting possibility. > > > > -Michel > >

1 0

Re: [Geeks] Interface Meta Data proposal
by Christopher Petrilli 28 Nov '00

28 Nov '00

I notice you mention post/pre conditions (something that UML obviously talks about). I wonder if we want to do a bit of research on Eiffle and it's contractual description. The only thing I wonder is if some of this is actually useful programatically, if that makes sense? It's great info, but is it useful at runtime? Chris -- | Christopher Petrilli | petrilli(a)digicool.com ----- Original Message ----- From: "Michel Pelletier" <michel(a)digicool.com> To: "Geeks Mailing List" <geeks(a)digicool.com> Cc: <zope-dev(a)zope.org> Sent: Tuesday, November 28, 2000 4:05 PM Subject: [Geeks] Interface Meta Data proposal > > I've added a sub-proposal to the Interface proposal for describing > additional meta-data with Interface objects: > > http://www.zope.org/Wikis/Interfaces/ExtesableMetaData > > Please comment about this interesting possibility. > > -Michel >

1 0

Interface Meta Data proposal
by Michel Pelletier 28 Nov '00

28 Nov '00

I've added a sub-proposal to the Interface proposal for describing additional meta-data with Interface objects: http://www.zope.org/Wikis/Interfaces/ExtesableMetaData Please comment about this interesting possibility. -Michel

1 0

Re: PathHandler: bug, readme.txt
by Chris Withers 28 Nov '00

28 Nov '00

Willem and Zope-Dev'ers, Willem Broekema wrote: > > Hi Chris, > > PathHandler is a nice and really useful product! Thanks :-) > A question though: is it on purpose that it ignores spaces at the end of > the url, as in: > > http://site/ph/%20d%20 --> path_to_handle == [' d'] instead of [' d '] > > (%20 is the escape code for a space) > > Although it's really a minor minor thing, letting the user decide how to > deal with spaces might be a tiny improvement. Well, it's not PathHandler that's stripping spaces, so either Zope is, or maybe even your browser is. Anyone got any ideas? That said, handling of spaces and %20's in URLs isn't very well defined anyway, so I would avoid it if you can... > And in the README.txt file, please replace > <dtml-var path_to_handle> with <dtml-var path_to_handle> so it > won't be ignored in the browsers. Well, I think this is a bug with Zope. README.TXT is a text file, formatted so it will render nicely in structured text. It does this in the management interface for the PathHandler product, but the < and > aren't quoted properly. I wonder why that is? Hmmm... anyone know what happened to StructuredTextNG? Anyway, README.TXT is primarily designed as a text file, and <dtml-var path_to_handle> isn't very easy to read when viewing a text file ;-) So, I guess someone needs to fix Zope for at least one and maybe both of your problems to go away. Any ideas? cheers, Chris

2 1

objectValues performance
by Brett Carter 28 Nov '00

28 Nov '00

I have a folder with greater than 5000 ZClass instances in it. It takes > 5mins to do an objectValues for every object in the folder - is there a higher perfomance call I could make? -Brett

4 3

CVS down?
by Robin Becker 28 Nov '00

28 Nov '00

C:\Python\devel\Zope>cvs -z9 upd -A -P -d CVS.EXE [update aborted]: connect to zope.org:2401 failed: Connection refused Am I pointing at the wrong server or something? -- Robin Becker

2 2

UML reverse engineering on ZClasses - I need some help
by zope 28 Nov '00

28 Nov '00

Hi! I am currently developing a tool for reverse engineering ZClasses into UML using ObjectDomain and JPython. this tool connects directly to a Zope instance and queries the ZClass entities, methods and inheritance relations by calling a set of utility methods that I implemented as External methods. it works fine when reverse engineering ZClasses, their methods and inheritance relations. you can check out a sample result where I reversed a part of Maik Roeder's ZDP tools under http://zwork.bluedynamics.com/Tests/zdp/index.html If there is interest and time I'll document the reverse engineering tool and publish it on zope.org ------------- And now my questions: For documentation reasons I would like to get more information about the class methods (DTML,PythonMethods,PythonScript,ExternalMethods,ZSQL): doc strings (applies to PythonMethods,PythonScript,ExternalMethods) parameters applies also to ZSQL Methods As I have scanned the Zope sources I found out that methods are instances of ZClasses.Method.MWp but now I don't know how to query more information about a mthod. Can some DC guru give me some good hint how to get these further informations? thanks in advance phil

3 2