January 2001 - Zope-Dev

Zope max script execution time?
by J�lio Dinis Silva 12 Jan '01

12 Jan '01

Is there a way to define a timeout for zope methods, documents? Thanx, Júlio Silva _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0

Security Machinery doesn't work on some objects?
by Chris Withers 12 Jan '01

12 Jan '01

Hi there, I'm slightly confused by a class I have: class X(Persistent, Acquisition.Explicit): This class has no __roles__, no __ac_permissions__, no nothing... Instances of this class are stored within a special folderish class, Y. This folderish class has a __bobo_traverse__ which returns X objects, wrapped in context, from it's self._xs BTree using something along the lines of: def __bobo_traverse__(self, REQUEST, name): ob = getattr(self, name, _marker) if ob == _marker: ob = return self._xs[name].__of__(self) Now, it appears no methods or other attributes of this class are protected by the security machinery, even though the instances involved are wrapped. The DocString stuff still applies but, once a method has a docstring, any anonymous user who can traverse to one of these objects, can execute any method (attributes whinge about a missing docstring, how bizarre, attepting to traverse to __init__ complains the method starts with a _ ;-) of that instance which is more than a little disturbing ;-) I thought Zope's security policy had changed to be disallow by default, but that really doesn't seem to be the case here :-S What am I missing out on? Is there some mixin class I need or something I need to acquire to make the security machinery check these objects? confusedly and worriedly, Chris

1 1

Management interface tree menu
by richard＠bizarsoftware.com.au 12 Jan '01

12 Jan '01

I added something to the Management Interface Quick Fix wiki item, but it seems to have vanished. My proposal was that the tree not automatically sort the items alphabetically. It should be up to the ObjectManager class and its ilk to sort those items in its tpValues method. That way, when I extend ObjectManager, or provide any other ObjectManagerish object, I have the option to order the items in a sequence that makes more sense than by the alphabet. It would appear to be a simple enough change - add the sort to ObjectManager, ZClass and HelpSys and remove it from manage_menu.dtml Richard -- Richard Jones richard(a)bizarsoftware.com.au Senior Software Developer, Bizar Software (www.bizarsoftware.com.au)

1 0

How does a subclass call its ancestor's method in zope?
by Dirksen 12 Jan '01

12 Jan '01

Here is a ZClass testa, with a dtml method 'do'. Its subclass testb overrides do. How does testb call its ancestor's 'do'? In python, it can be done as 'testa.do()', but what's the equivallent in zope? Dirksen __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/

1 0

RE: [Zope-dev] New UI for 2.3
by Casey Duncan 11 Jan '01

11 Jan '01

I agree that it looks better. The addition of another whole frame for this though is my main beef with it. Perhaps this could be integrated some other way. Frames should only be added when there is no other option. It's just that browsers waste so much space up there anyway, and the extra 32 pixels are in addition to that "waste". I personally don't care how it "looks" so much as how efficient it is. All of the other aethestic changes I feel enhance both looks and efficiency. The top frame does not IMHO. Form should definitely follow function here. BTW: I have been know to use Zope on an old machine with a 640X480 screen. Although I generally eschew the frames altogether then and open manage_main by itself. It's not really fun, but it works. --- Brian Lloyd <brian(a)digicool.com> wrote: > Are you guys working on 486's with 13in. monitors at > 640x480 > or > something? :^) > > Seriously - Zope has been criticized for a very long > time > for > being, ah, aesthetically challenged :) It is a valid > criticism > - we have been (and quite honestly, will continue to > be) > more > concerned with function over form. But is it really > so bad > to > make a 32 pixel-high concession to a small pittance > of > branding? > > I know that "branding" isn't important for those who > are > already > believers, but Zope has grown enough that its > reasonable to > put > some effort into "first impression factor". It > doesn't help > the > community for reviews to come out that waste words > on the > visual appeal shortcomings of the UI and totally > miss the > point. A better first impression is a Good Thing. > > The top frame is also a place where we might want to > put > more > "placeless" operations like logout in the future. > You can > only > jam so much into the tree pane without it looking > very much > like way too much is being jammed into the tree pane > :) > FWIW, > one of the things we may put there later is a way to > do > "browser > preferences" via cookies to control things like > default text > area sizes. That could also have a "hide top frame" > option > for > those who really can't spare the 32px. :^) ===== | Casey Duncan | Kaivo, Inc. | cduncan(a)kaivo.com `-----------------> __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/

1 0

Delete users in Membership acl_users
by Kamon Ayeva 11 Jan '01

11 Jan '01

Hi, Has anyone been able to use the delUserForm to delete users added within a PersistentUserSource in the PortalMembershipSystem object ? I am not sure if this piece of code in delUserForm preceding the HTML form snippet does the right job: <dtml-let idList="[]"> <dtml-in "UserSource.getPersistentItemIDs()" sort> <dtml-call "idList.append(getItem(_['sequence-item']))"> </dtml-in> <dtml-in idList sort=Importance reverse> ... I can view the users but when I click on the form button to delete some users, I get I get Error Type: NotFound Error Value: None In the view I get, the user url points to .../acl_users/userid (for example /acl_users/david) and cannot be used to check the user object. Thanks for any usefull answer. Regards, Kamon __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/

1 0

Re: [Zope-dev] _v_ variables
by Martijn Pieters 11 Jan '01

11 Jan '01

On Thu, Jan 11, 2001 at 10:26:18AM +0000, Chris Withers wrote: > Martijn Pieters wrote: > > > > But because _v_* variables don't get pickled, another thread will never > > see them. > > Hmm, is there any situation where a single request can be handled by > more than one thread? Nope. -- Martijn Pieters | Software Engineer mailto:mj@digicool.com | Digital Creations http://www.digicool.com/ | Creators of Zope http://www.zope.org/ ---------------------------------------------

1 0

first zope-2.3.0a2 bug :-)
by Jephte CLAIN 11 Jan '01

11 Jan '01

well, this one is easy. ----------------------------8<------------------------------------------ --- lib/python/Shared/DC/ZRDB/Aqueduct.py.orig Thu Jan 11 10:59:42 2001 +++ lib/python/Shared/DC/ZRDB/Aqueduct.py Thu Jan 11 10:58:01 2001 @@ -272,7 +272,7 @@ custom_default_report_src=DocumentTemplate.File( - os.path.join(dtml_dir,'customDefaultReport.dtml')) + os.path.join(dtml_dir,'dtml/customDefaultReport.dtml')) def custom_default_report(id, result, action='', no_table=0, goofy=regex.compile('[^a-zA-Z0-9_]').search ----------------------------8<------------------------------------------ without this patch, sql methods cannot we tested because customDefaultReport cannot be found (it moved in the dtml subfolder)

2 1

Re: [Zope-dev] Re: ComputedAttribute
by Dieter Maurer 11 Jan '01

11 Jan '01

Chris Withers writes: > Martijn Pieters wrote: > Now I think I know the answer to this one, but I'll ask just to be sure: > > class MyClass(Persistent Acquisition.Explicit): > > def _set_your_attribute (self,value): > self._v_your_attribute = value > > def _get_your_attribute (self): > return self._v_your_attribute > > your_attribute = ComputedAttribute(_get_your_attribute) > > ....with this class, your_attribute isn't going to play in Persistence, > is it? (so I can update it lots without worrying about ZODB size > growing... :-) But, as I understand it, it is only updated in the thread that did the update. Your next request may get a different thread and see a different value. Dieter

4 4

Re: [Zope-dev] AUTHENTICATION_USER in standard_error_message cause by NotFound error
by Tim Ansell 11 Jan '01

11 Jan '01

Oppps, just realised i've been replying only to myself :) Umm okay here is the diff, it is from version 2.2.4 but should apply to most versions.... I have removed all the "print" debugging and cleaned up the formatting. Could people look it over and tell me if there are any hidden problems with it? Is it done the right way? There seems to be a lot of repeated code between zpublisher_exception_hook and ZPublisher.BaseRequest, maybe you want to put the auth stuff into it's own function and work that way? Just an idea... Mithro > Tim Ansell wrote: > > > No further investigation i have found out that the part i really want to > > modify is > > > > zpublisher_exception_hook, which gets called when the error occurs > > > > Inside this functions there is a > > > > if REQUEST.get('AUTHENTICATED_USER', None) is None: > > REQUEST['AUTHENTICATED_USER']=AccessControl.User.nobody > > > > which seems to explain why i'm getting the anonymous user for the errors. > > > > Is there anyway to add to this function the authentication routines so that > > is AUTHENTICATED_USER is none it authentication is check with > > standard_error_message being the object checked against? > > > > Am i making any sense? > > > > I'm going to give it a go and see what happen... > > > > Mithro > > > > Tim Ansell wrote: > > > > > <newbie alert> > > > > > > Hello. > > > > > > I've been using zope for a couple of months, i have found zope to be a > > > great product and thank you for creating it. Currently i have run into a > > > problem, i need to access the AUTHENTICATED_USER in a > > > standard_error_message called by notFoundError in BaseRequest. > > > > > > I was wondering if the authentication routine can be added before the > > > authentication routine in BaseRequest? Or if this is not possible it > > > could be split into a function and and call it before the notFoundError > > > call as well? > > > > > > There are many reasons you might want to do this, i have listed some > > > below: > > > > > > * You want list possible urls the reader could have meant but don't want > > > to show let Anonymous users see possible privileged urls > > > > > > * You want to provided different error messages for different people, > > > i.e. a more advanced error for coders, a simple error for html writer, a > > > special error for normal people > > > > > > * You wanted errors to only be reported it they where caused by certain > > > users > > > > > > and the list could go on.... > > > > > > Mithro > > > > > > </newbie aler> > > > > > > _______________________________________________ > > > Zope-Dev maillist - Zope-Dev(a)zope.org > > > http://lists.zope.org/mailman/listinfo/zope-dev > > > ** No cross posts or HTML encoding! ** > > > (Related lists - > > > http://lists.zope.org/mailman/listinfo/zope-announce > > > http://lists.zope.org/mailman/listinfo/zope )

1 2