December 2000 - Zope-Dev

IMPORTANT! Zcatalog path handling changes in 2.3
by Christopher Petrilli 30 Dec '00

30 Dec '00

Gang, In order to resolve untold number of situations where the Catalog does "stupid" things and returns less than useful information, we have heavily modified the information stored in the Catalog (and generated by CatalogAware). You can read about this here: http://dev.zope.org/Wikis/DevSite/Projects/ZCatalogVirtualHostFix/ You can find a tarball that contains everything updated here: http://www.zope.org/Members/petrilli/zcatalog-pathsupdate.tgz If you untar this in the root of your Zope installation you should get a new Zcatalog that has all the new code in it. Please read and test... This is especially important for people who are using Squishdot/etc. We hope to make a full code release with 2.3a2 sometime very soon. PLEASE take a look at this, and provide feedback ASAP. Chris -- | Christopher Petrilli Digital Creations | petrilli(a)digicool.com Where Zope comes from

5 7

HiperDom-0.4.0-DC released
by Martijn Pieters 29 Dec '00

29 Dec '00

Hi all, I created a special release of HiperDom 0.4.0 (versioned as 0.4.0-DC), with fixes and additional features. This release is ment for experimentation with new features added by Digital Creations, and we'd appreciate feedback on these. The README attached to this email lists all differences. You can download the release from: http://www.zope.org/Members/mj/HiperDom Note that all fixes to HiperDom problems have been checked into the HiperDom CVS tree, a future release of HiperDom will include these fixes. -- Martijn Pieters | Software Engineer mailto:mj@digicool.com | Digital Creations http://www.digicool.com/ | Creators of Zope http://www.zope.org/ ---------------------------------------------

1 0

DTML Documents == DTML Methods that are anchored?
by The Doctor What 29 Dec '00

29 Dec '00

What are the differences between DTML Documents and Methods internally? I was just thinking about the problems every new user (and experienced users, every so often) have regarding DTML Documents vs DTML Methods. Aren't they really the same except that Documents are anchored (ie, don't allow aquisition from the caller, but only from the location of the Document)? If that is true, couldn't they be simplified as a (example name) DTML Object that had an "anchor" flag? Just a thought. Ciao! -- So Buddha walks into a pizza parlor and says: "Hey, make me one with everything." The Doctor What: Need I say more? http://docwhat.gerf.org/ docwhat(a)gerf.org KF6VNC

2 1

PythonScripts
by Dieter Maurer 29 Dec '00

29 Dec '00

I looked at ZopeCVS's PythonScripts. I mostly like it -- with the following exceptions: * Namespace binding It does not yet work, apparently: In DTML, I have: <dtml-call "REQUEST.set('a','a')"> <dtml-var pyscript> in PythonScript "pyscript": return _['a'] and I get: "KeyError: a" * Try it It is very nice, that such a "try it" exists! However, as I am in Python, I would like to use Python expressions as argument values. Currently, the values are treated as strings. Default argument values are displayed as part of the argument name. If the values in the "try it" tab were Python expressions, the default values should be used to preset the value fields. * Preventing creation of large sequences Apparently, you try hard to prevent the creation of large sequences. For a malicious user, it is however quite easy to counter you measures: either with a "while" loop or with a nested sequence repetition. To make it safe, you would probably need to limit the total complexity of all objects (together) that are created in the script (or other scripts called by this one). Alternatively, you could document that various security issues remain, if PythonScripts are made editable through the web. * Import control I know that I can control what modules (and names) can be imported in PythonScripts by providing an __access_to_unprotected_subobjects__ definition *in the* module. However, this is a global control affecting all PythonScripts in an installation. I see the demand for more localized control, e.g. that a script not editable through the web should import modules that are not safe for use by anonymous users. Dieter

1 0

Re: zPoPy oid issues
by Casey Duncan 27 Dec '00

27 Dec '00

thierry(a)nekhem.com wrote: > > Hi, > > The problem is inside postgresql ! They use OID type for LOB and for table'oid, PoPy (to simplify LOB handling) detect automagically LOB and returns them to the end user who can handle them easily. > I study the postgresql sources on the CVS and they haven't resolv this problem. > We have to write this in the BUGS file we plan to add soon in our release. > > If you have any proposals to resolv this BIG problem ? > > I'm sorry for this but postgresql types are very confused. > > Best regards. > So, if I understand correctly, oids are handled as large binary objects? >From what I see, oids are 6 bytes in length (using SELECT length(oid)...) since they have a max value of 4 billion, that leads me to believe that only 4 bytes are used as a numeric value. So, they are really just a glorified int4 with 2 extra bytes tacked on for some reason. Anyhow, why exactly does this cause PoPy to crash? I can surely work around this problem for now, but I can certainly see cases where returning an oid would be an essential function, especially if you are working on a generalized database tool. I am certainly willing to help get this fixed. Any additional information you (or anybody) has regarding this would be greatly appreciated. Thanks for your help. -- | Casey Duncan | Kaivo, Inc. | cduncan(a)kaivo.com `------------------>

1 1

RE: SQL Alias leak....
by Brian Lloyd 27 Dec '00

27 Dec '00

> Making the corresponding change in Results.py appears to have > corrected the SQLAlias problem. > > I'm not exactly sure why the SQLAlias solution is any better than > doing it this way. Seems less obfuscated to me. The SQLAlias is better because otherwise Record allocates 3x the memory for each record (thinking that the aliased names are distinct fields). In any case, Jim tracked this down to a subtle bug in ExtensionClass that is fixed for 2.2.5 b1 (which I'm uploading the zope.org now). Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

zPoPy oid issues
by Casey Duncan 26 Dec '00

26 Dec '00

On my Zope instance (2.2.4) using zPoPyDA (0.7) and PoPy (1.4.1) any select query trying to return an oid from postgres (7.0.3) crashes Zope. i.e. SELECT oid FROM foo; After doing some digging around, trying to do the same query directly in Python using the PoPy module results in a seg fault. So the problem would seem to be with PoPy and not the DA. -- | Casey Duncan | Kaivo, Inc. | cduncan(a)kaivo.com `------------------>

1 0

Re: [squishdot] Squishdot site did not setup Tiny Tables
by Chris Withers 26 Dec '00

26 Dec '00

> the three Tiny Tables for the left,right, and bottom box. I have > Tiny Table installed and can add a Tiny Table to a directory, but > can't seem to get a Squishdot site to create the tables. What am I > doing wrong? This is a bug which will get fixed soon. However, it's partly due to the fact that there's no nice reliable way to check whether a product is installed, what version of a product is installed and whether the current user has the permissions needed to add objects of that product's type that I know of. If anyone knows different, please let me know :-) cheers, Chris

1 0

oops-reverse engineering
by Philipp Auersperg 26 Dec '00

26 Dec '00

sorry, I provided the wrong link: http://magnix.bluedynamics.com:8080/BlueDynamics/products/ZClassReverse phil

1 0

Reverse engineering ZClasses into ObjectDomain
by Philipp Auersperg 26 Dec '00

26 Dec '00

Here as a late Christmas present a tool to reverse engineer ZClasses into a ObjectDomain model: you need Zope 2.2.2 or 2.2.2 and ObjectDomain R3. check it out at http://magnix.bluedynamics.com:8080/BlueDynamics/products/ZClassReverse/ins… one question, that I ve asked several times: ??does anybody know what happened to the ObjectDomain people (no release for months)?? greetings phil

1 0