June 2000 - Zope-Dev

RE: [Zope] Please test this Zope 2.2 beta 1 ZSQLMethods fix...
by Brian Lloyd 25 Jun '00

25 Jun '00

> > I think that you have hit it on the head - we're trying *hard* to > > make Zope harder to fool :^) Try adding the following to your > > class statement, for example: > > > > class MyClass: > > > > __allow_access_to_unprotected_subobjects__=1 > > Just a question: Is this documented somewhere.. I've seen some more > of these things here and wonder if there's some explanation > what exactly > has changed in 2.2 and which constants can be used to control these > things.. I plan to publish a guide for Product authors Monday that captures the essence of what has changed about the security policy and what product objects need to do to play nicely within it. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

No feedback for SOAP patch ?
by Petru Paler 24 Jun '00

24 Jun '00

Hi, I received zero feedback on the SOAP support patch I sent a few days ago... I no one is interested I guess I should just forget about it and find something else more interesting ? -Petru

2 2

RE: [Zope] Please test this Zope 2.2 beta 1 ZSQLMethods fix...
by Brian Lloyd 24 Jun '00

24 Jun '00

> BUT, the BIG problem I'm having is still with the external method in > courseList.py. > > <snip> > > Any ideas? Now, it could just be my programming. With the > new 2.2 version > I may need to add security information to each object (which > I don't know > how to do). Right now I'm just starting with a blank class > and adding a few > properties to it. Zope may be looking at it and thinking, > "What the heck is > this thing?" The idea was to trick Zope into thinking it was > a Z SQL query; > perhaps 2.2 isn't so easily fooled...? I think that you have hit it on the head - we're trying *hard* to make Zope harder to fool :^) Try adding the following to your class statement, for example: class MyClass: __allow_access_to_unprotected_subobjects__=1 def __init(self, foo): ... ...You'll need to restart Zope for this to take effect. Hope this helps! Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

2 1

Zope 2.2.0b2 FTP server -- Cannot list directory?
by T.J. Mannos 23 Jun '00

23 Jun '00

I'm having a problem with the Zope FTP server in 2.2.0b2. If I try to get a directory listing, it gives an error saying it can't list the directory. If I try to change directories (even 'cd /'), it tells me it can't find the directory. However, if I know the exact name of the file I want to transfer, it will let me do it. Any ideas? - T.J.

1 0

Please test this Zope 2.2 beta 1 ZSQLMethods fix...
by Brian Lloyd 23 Jun '00

23 Jun '00

Hi all, Several folks have reported problems in beta 1 with SQLMethods having authentication problems when trying to call other SQL Methods. I'd like a few intrepid volunteers to try something for me to see if it fixes the problem. I'd like to make a 2.2 beta 2 release tomorrow but I want to make sure this issue is resolved first. Make a backup of the file: lib/python/Shared/DC/ZRDB/DA.py in your current (beta 1) installation and replace it with the DA.py attached to this email, restart and let me know if the problem goes away. Thanks! Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

5 4

RE: [Zope-dev] Another bug in DA.py?
by Brian Lloyd 23 Jun '00

23 Jun '00

> After trying this with version 2.2.0b2 I became the following > result: Error, Unauthorized, NoBrains > > If I try the following ZSQL method it displays de authorization > > window: > > <dtml-let Cl="get_Cliente(N_='22606')[0]"> > > select * from Cliente where N_='22606' > > </dtml-let> > > but if I try the next ZSQL method it displays the correct result (the > > difference is the > > > integer index in the first line): > > <dtml-let Cl="get_Cliente(N_='22606')"> > > select * from Cliente where N_='22606' > > </dtml-let> > > As you can see the "dtml-let" isn't usefull, but this is a simplified > > example. > > For reference here is the get_Cliente ZSQL method: > > select * from Cliente where <dtml-sqltest N_ type=string> > > Very simple. > > Thank you in advance. Juan - I'm not sure what's going on here. I can't reproduce this here no matter what I do :( I've tried using Gadfly and MySQL, and doing this works fine for me, both trying it anonymously and as a manager. I'm assuming that you did a fresh, from-scratch 2.2beta2 install and that if you are using source release you rebuild your binaries when you upgraded? Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

ZPatterns bug. Very serious.
by mike 23 Jun '00

23 Jun '00

Hi, look, Phillip, what I found. File Rack.py: def retrieveItem(self,key): # Retrieve an object, identified by key a = self.loadAttrib item = None if a: item = self._RawItem(key) if hasattr(item,a): return item else: # The block below is what you want to replace # if you're creating a non-ZODB storage. # In practice, from version 0.4.0 on, there's # no reason to do such a thing in the first place. slot = self._readableSlot(key) ################################################## # Add this to see what I mean try : print "%s 'self'=%s" % ( key, slot.values()[0].__dict__ ) except : pass # ################################################### if slot: item = slot[SelfKey] # XXX class remapping should go here?? item._setRack(self.aq_inner) item._setSlot(slot) return item ---------------------------------------- The output I have running this modified version (my comments starts with ##): [mike@gw zope]$ ./start ------ 2000-06-22T15:04:07 PROBLEM(100) ZServer Computing default hostname ------ 2000-06-22T15:04:07 INFO(0) ZServer Medusa (V1.13.4.1) started at Thu Jun 22 23:04:07 2000 Hostname: gw.if-site.local Port:8123 ------ 2000-06-22T15:04:07 INFO(0) ZServer PCGI Server started at Thu Jun 22 23:04:07 2000 Unix socket: /home/mike/zope/var/pcgi.soc ## Server just started Nothing to print Nothing to print ## newItem called 000000000025 'self'={'id': '000000000025', '_v_writeableSlot': <PersistentMapping instance at 864ae78>, '_v_readableSlot': <PersistentMapping instance at 864ae78>, '_rackMounted': 1} ## getItem called first time 000000000025 'self'={'_v_attrCache': {'a_': [], 'filtered_manage_optionsisDocTemp': [], '_Change_permissions_Permission': [], 'MANAGE_TABS_NO_BANNER': [], 'im_func': [], '__allow_groups__': [], '_Manage_properties_Permission': [], 'tabs_path_infoisDocTemp': [], '__roles__': [], 'target': [], '_View_Permission': [], 'Zope-Version': [], 'locked_in_versionisDocTemp': [], 'n_': [], 'PATH_INFO': [], 'AUTHENTICATED_USER': [], 'manage_tabs_message': [], 'tabs_path_info__roles__': [], 'SCRIPT_NAME': [], 'REQUEST': [], '__bobo_traverse__': [], 'URL': [], 'locked_in_version__roles__': [], '_isBeingUsedAsAMethod_': []}, 'id': '000000000025', '_v_dm_': <Rack instance at 8649988>, '_v_writeableSlot': <PersistentMapping instance at 864ae78>, '_v_readableSlot': <PersistentMapping instance at 864ae78>, '_v_currentSheets': (<PropertySheet instance at 864a240>,), '_rackMounted': 1} ## getItem called second time ------------------------------------------- Wow! _v_attrCache stores a lot of various junk, including REQUEST!!! This disables, by the way, all the security mechanisms on traversed items! Phillip, would you be so kind and fix this? ;-) Thanks, Mike

2 4

RE: [Zope-dev] Another bug in DA.py?
by Juan Carlos Coruña 23 Jun '00

23 Jun '00

After trying this with version 2.2.0b2 I became the following result: Error, Unauthorized, NoBrains > If I try the following ZSQL method it displays de authorization window: > <dtml-let Cl="get_Cliente(N_='22606')[0]"> > select * from Cliente where N_='22606' > </dtml-let> > but if I try the next ZSQL method it displays the correct result (the difference is the > > > integer index in the first line): > <dtml-let Cl="get_Cliente(N_='22606')"> > select * from Cliente where N_='22606' > </dtml-let> > As you can see the "dtml-let" isn't usefull, but this is a simplified example. > For reference here is the get_Cliente ZSQL method: > select * from Cliente where <dtml-sqltest N_ type=string> > Very simple. > Thank you in advance. Juan - This is due to a missing declaration in the Results and Record objects returned by SQL Methods. It is fixed in beta 2 (which I hope to release by tomorrow at the latest). Brian Lloyd brian@d... Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

Re: [Zope-dev] ZEO on NT? update
by julio dinis 23 Jun '00

23 Jun '00

Ok. :-) Continuing with the ZODB.POSException.Conflit... Now I know the problem with Zeo on NT is with the ClientStorage and not with the ServerStorage. You ask why? Because Ive tested different setup to come to this conclusion. ZSS - Zeo Storage Server ZCS - Zeo Client Storage 1- First setup: Machine 1: Running ZSS on NT Machine 2: Runninc ZCS on NT Machine 3: Running ZCS on NT Conclusion: with this setup clients ARE NOT able to view/write changes to objects changed by other clients. 2- Second Setup: Machine 1: Running ZSS on Linux Machine 2: Runninc ZCS on NT Machine 3: Running ZCS on NT Conclusion: with this setup clients ARE NOT able to view/write changes to objects changed by other clients. 3- third Setup: Machine 1: Running ZSS on NT Machine 2: Runninc ZCS on Linux Machine 3: Running ZCS on Linux Conclusion: with this setup clients ARE able to view/write changes to objects changed by other clients. 4- Fourth Setup: Machine 1: Running ZSS on NT Machine 2: Runninc ZCS on Linux Machine 3: Running ZCS on Linux Machine 4: Running ZCS on NT Machine 5: Running ZCS on NT Conclusion: with this setup ALL LINUX clients ARE able to view/write changes to objects changed by other clients. All NT clients ARE NOT able to view/write objects changed by other clients. NT clients can view/write objects that have never been changed. But cant viewchanges/change objects changed by other clients. However linux clients can viewchanges/change objects changed by other NT and Linux clients. So my conclusion is that there is a problem with Zeo Clients on NT. And I guess is related with the invalidator, the NT clients cant see changes others do to objects, or something is just a guess. I'm using cPickle.pyd which is cPickle.so on Linux. Maybe there is a diference with this shared object from Linux to Nt. I'm using the win32 version of Zope2.2.0b1, and ZEO-0.2. Ok, ./dig_resume Julio Dinis Silva >From: "julio dinis" <juliodinis(a)hotmail.com> >To: zope-dev(a)zope.org >Subject: [Zope-dev] ZEO on NT? update >Date: Thu, 22 Jun 2000 09:37:31 PDT > >Hi, > >I can see now that the problem is not per Data.fs but per object. >The problem isnt that 2nd Client to run cant write do Data.fs, I found >that its a per object conflict and not Data.fs, both clients can >write to the ZSS but once client B writes to object X, Client A will >never see the changes neither change the object X, but is capable of >changing other objects. > >Objects changed buy Client B become "locked" for client A and viceversa. > >Anyone testing ZEO? >Best Regards, >Júlio Dinis Silva >________________________________________________________________________ >Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > >_______________________________________________ >Zope-Dev maillist - Zope-Dev(a)zope.org >http://lists.zope.org/mailman/listinfo/zope-dev >** No cross posts or HTML encoding! ** >(Related lists - http://lists.zope.org/mailman/listinfo/zope-announce >http://lists.zope.org/mailman/listinfo/zope ) > ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

3 2

XMLDocument and ZDOM pages
by Chimezie Thomas-Ogbuji 22 Jun '00

22 Jun '00

Alot of work (scenarios, usecases, risks, documentation, etc) has been added to the zope-xml wikki. The focus is to push XMLDocument and ZDOM analysis to the next phase. Feedback would be appreciated. The Wikki pages are: http://www.zope.org/Wikis/zope-xml/ZDom (ZDOM) http://www.zope.org/Wikis/zope-xml/XMLDocument (XMLDocument) Chime

1 0