November 2001 - Zope-Dev

ZCatalog - hiding query results
by Igor Stroh 02 Apr '02

02 Apr '02

Hi all, I don't know if it's the right list to post to, but I have the following problem: I have several objects (documents, folders etc) that are accessible only by a certain user role, this objects are cataloged. Now if I query the catalog the brains of these objects are returned correctly, but to _all_ users that issue a query. That means, users that don't have the permission to "View" or "Access Content Information" can see the brains as well... I tried to filter the result set by converting the brains into real objects (brain.getObject) in an external method (I thought, this way I should be able to exclude unauthorized users by adding the "skip_unauthorized" to the dtml-in), but that doesn't work since there are "brains" that are actually NoBrainer instances... Does anyone have an idea of how I could solve this problem? Actually I thought this kind of "information hiding" is supported by basic ZCatalog machinery, but now it looks like I'll have to hack a workaround... Any help greatly appreciated. Greetings, Igor

5 4

ZCatalog: hiding search results from unauthorized users - hack
by Igor Stroh 02 Apr '02

02 Apr '02

Hi all, in case someone have same problem as me (see "ZCatalog - hiding query results" thread for more info) - I got a solution: - create a product that subclasses ZCatalog - in this product overwrite ZCatalog.getobject with def getobject(self, rid): """foo""" obj = self.aq_parent.unrestrictedTraverse(self.getpath(rid),\ restricted=1) return obj - create a python script in your catalog (e.g. "filterCat") with a parameter that reoresents the catalog itself ("brains" here): retval = [] for brain in brains: try: obj = container.getobject(brain.getRID()) retval.append(brain) except: pass return retval - adjust your catalog query reports, so that they call "filterCat(_['<catalogname>'])" instead of <catalogname> Now your users see only those hits in a query which apply to objects they are allowed to "View". greetings, Igor

3 3

Shallow copies/links/references
by Mario Valente 08 Mar '02

08 Mar '02

Hi: OK everyone, I've managed to get object links to work. As discussed previously by others (re: object references) and asked by myself: I had the need to be able to refer to objects from different points of the folder hierarchy without duplicating those objects. Yes I know that can be done *programatically*. That is not the idea. The idea is to have a folder with differente widgets/components and to be able to copy and paste references to those widgets throughout the folder hierarchy. Of course that the usual copy/paste is not OK, since that *duplicates* the objects and as such further changes to the original object wont be reflected in the copies. With something like this + Ordered Folders you are able to have an index_html that just renders the objects within a folder and you can then drop objects/widgets into the folder to produce a page. What I did: - edited CopySupport.py - copied the manage_pasteObjects method to a manage_pasteMonikers method - commented the #ob=ob._getCopy(self) line (the duplicate object part) - added a "Paste Ref" button to the lib/python/OFS/dtml/main.dtml file that calls the pasteMonikers method """ <input class="form-element" type="submit" name="manage_pasteMonikers:method" value="Paste Ref." /> """ It works. It does what I want/need. When you change a reference, the original also changes. When you change the original, the references change. You can delete either the reference or the original and all is OK. Issues/TODO - find a way to distinguish references from the original (tried to change the meta_type at paste time but no luck). At least the meta_type/icon should change to provide a visual cue. - provide tool(s) to find impact of changing a reference. Provide a link from a reference object to the original. Provide a link from an object to its several references. Comments and experiences are welcome. C U! -- Mario Valente

2 2

Merhabalar;
by Can Canbilek 13 Dec '01

13 Dec '01

Öncelikle rahatsýz ediyorsak özür dileriz ama bu maili okursanýz sanýrým bize teþekkür edeceksiniz. Sizlere, hiçbir masraf yapmadan yalnýzca internete girerek para kazanacaðýnýzý iddia ediyoruz. Hiçbir yalan dolan, hile olmadan.... Üstelik kredi kartý numaranýzý bile vermeniz gerekmiyor. Ufak bir formu dolduruyorsunuz, dünyaca ünlü bir þirket olan ve dünyanýn heryerine ( Türkiye dahil olmak üzere ) para yollayan bu þirketin küçük bir programýný download ediyorsunuz. Daha sonra her internete giriþinizde bu programý açýyorsunuz ve program nete ne kadar girdiðinizi hesaplýyor. Nete girdiðiniz her saat baþý 50 cent alýyorsunuz ve bunu karþýlýðýnda ekranýnýzýn küçük bi bölümünde reklamlar görünüyor... Ayda yalnýzca 60 saat internete girerek 30$ kazanýyorsunuz tabii daha fazla kazanmak isterseniz arkadaþlarýnýzý üye ediyorsunuz. Ýster saadet zinciri, isterseniz zeka kullanýmý deyin, bence bundan daha iyi bir yöntem yok.... Ayrýntýlý bilgi gelen çeklerimizin resimleri ve olasý sorularýnýzýn cevaplarý için aþagýdaki sitelerden herhangi birine giriniz(hepsi aynýdýr): http://www25.brinkster.com/firsatlar/index.htm http://www25.brinkster.com/hizmetlerimiz/index.htm http://www25.brinkster.com/spediainc/index.htm http://www25.brinkster.com/sendekazan/index.htm Saygýlarýmla... !!!!!!!SORULARINIZ ÝÇÝN LUTFEN cancanbilek2(a)hotmail.com ADRESÝNE MAÝL ATINIZ, BU MAÝLE REPLY YAPMAYINIZ!!!! ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- BU MAILI YANLISLIKLA ALDIGINIZA INANIYORSANIZ, YADA BIRDAHA BIZDEN MAIL ALMAK ISTEMIYORSANIZ http://www21.brinkster.com/dogangoko/index.htm ADRESÝNE GÝRÝN VE SAYFADAKÝ MAÝLLÝSTÝMÝZDEN ÇIKMAK ÝÇÝN BURAYA EMAÝLÝNIZÝ YAZINIZ BOLUMUNE EMAÝLÝNIZI YAZINIZ... ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- EGER BU MAILI 2CÝ KEZ ALIYORSANIZ LÜTFEN DÝKKATE ALMAYINIZ.... ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

4 3

More signal 11 restarts....
by Daniel Duclos 11 Dec '01

11 Dec '01

I have a zope that is dumping signal 11 every 40 minutes or so. I have tried recompile python 2.1.1 with-threads without-pymalloc, recompile Zope with it, recompile ZPAtterns, recompile and instal MYSQL for Python 0.9.1, upgraded to Zope 2.4.3, all this on a Debian Linux box. Nothing changed... still restarting... Anybody, please, has any ideia on this matter? Please, let me know if there's any relevant info that I forgot to mention abot my case! Thanks in advance!! -- daniel lobato duclos -- daniduc(a)hiper.com.br -- http://www.hiperlogica.com.br -----------------------------------------------------------------------------

14 37

Open Letter to zope-dev
by Andrew Kenneth Milton 07 Dec '01

07 Dec '01

Since I seem to be the cause of all hell breaking loose over here, I thought take the opportunity to respond, since I haven't really been given an opportunity to do that. Since this probably going to be my only ever posting to zope-dev, I don't feel constrained to be brief in exercising my right of reply. I'm not going to apologise for the comments I made, or the manner in which I made them. Those comments were made on a list run by me, basically for my own amusement. If I had posted either of those emails to someone else's list, I'd quite rightly deserve to be fried. I don't make money from Zope Development (I don't make money), I don't run a website, in fact, I don't actually use any of the products I have released. So it's not like I have a vested interest in Zope. My fortunes don't rest on the success or failure of Zope or any one of its components. I live in a country the size of the USA that has the approximate population of New York State. Even if I stood on a busy street corner with a loud hailer, the number of people I could actually influence would be small. This makes me one of the people in the trenches. It is the people who are in the trenches who are increasingly being disaffected by Zope Corp, it seems as if you're not subscribed to zope-dev, you have no voice, and for most people zope-dev is not an appropriate forum for them to be subscribed to. As some of you know, I was hounded off of the zope@ mailing list for suggesting that there be some other mailing list for more technical discussion. People were very upset, because, they already have a hard time getting any support. Noone from Zope Corp seems to monitor the list to help out. The zope list was manned by people like me volunteering expertise and time to help more of the little people. A lot of those people come to the irc channel, which is also rarely if ever visited by anyone from Zope Corp. Most people know that #zope is the place to go when all else fails. The major irony of this is, that most of the people seeking help on #zope are working with it, or consulting with it, and are supported by me and others for free. We are the ones that deal with the 'general zope public.' We are the defenders of the faith. The Zope Weekly News, which turned into Zope Monthly News, which now has not been updated since October is a joke. It shows Zope Corporation's attitude towards their community. It says "We don't care about our community." I'm sure that's not the feeling of the *individuals* inside Zope Corp, I'm sure it is (or I hope it is) a source of great embarassment to those individuals that work for Zope Corp. Letting your community showpiece atrophy doesn't show any great passion towards us, it certainly doesn't endear new users to Zope. New users are the only way Zope Corp is going to make more money, unless of course zope.org is just for us non-revenue generating little fish, an inconvenience associated with having Open Source software, not something that promotes and supports the non-paying community. Noone wants a standardised User Management API more than me. I *want* to have confidence that someone can replace any User Folder with XUF, and it will just work. So when I come across something that says there is a New User Management API, I get excited. I prepare to roll up my sleeves and make the necessary changes to make software I contributed to the community continue to work. I think we all know by now my opinion on what I found, the harshness of the expression of that opinion is directly related to the way that these days Zope Corp seems to be an Ivory Tower and the way they seem to treat the community at large. There are approximately 450 products released by just over 200 people on Zope.org. There are approximately 1000 'entities' subscribed to this list (more to the main list), I represent 0.1% of this community, but, am responsible (but, not soley) for 3% of the total product space available. If people want to form an opinion of me based on one email, that's your right. You don't have the right to tell me, that *I* don't have the right to say the things I'm saying. I have earned the right to make these comments, I have contributed time, effort, and code, and I put my money where my mouth is. I'm not some backseat political observer, I am in the trenches I deal with the disaffected, the confused, and the generally pissed off every day. In my efforts, I try to help to make Zope a better product. You would be hard pressed to find a more stalwart supporter of Zope than me. This doesn't mean that I have to think that everything that leaves the holy temple of Zope Corp is the panacea of web development. My opinions might be wrong, but, they're not wrong simply because something was released by Zope Corp, or written by some person you have attached some god like status to. I will continue to do my thing, but, the way Zope Corp deals with us, the little fish had better change, or there's not going to be much of a community left. Those of you who subscribe to zope-dev who think that your time is too valuable to be spent helping others, well, words fail me. -- Totally Holistic Enterprises Internet| | Andrew Milton The Internet (Aust) Pty Ltd | | ACN: 082 081 472 ABN: 83 082 081 472 | M:+61 416 022 411 | Carpe Daemon PO Box 837 Indooroopilly QLD 4068 |akm(a)theinternet.com.au|

29 81

RAMCacheManager and gzip
by JanStiller＠t-online.de 06 Dec '01

06 Dec '01

Hi, Is it possible to marry the RAMCacheManager and gzip? I'm just working on a little shop and - for speed's sake - do 'ram-cache' the article-listings and push all the Zope-Content through mod_gzip. With this combination, I'm getting it 3x faster in Zope and 5x faster over the wire (normally 64k). That's great so far. But I don't see any sense in zipping cached content over and over, so I tried to zip the cached data in RAMCacheManager. In my first attempt, i replaced: ZCache_get (RAMCacheManager.py): entry.access_count = entry.access_count + 1 return entry.data with: entry.access_count = entry.access_count + 1 ob.REQUEST.RESPONSE.setHeader('Content-Encoding','compress') return zlib.compress(entry.data) The results: 1. This works with Mozilla 0.96 only for very small entry.data. When I set entry.data to 'XX', it works, but any real page gets '<html><body></html></body>' as the result. 2. This doesn't seem work in IE alltogether. (with 'Content-Encoding: gzip' - zlib.compress != gzip!?) I'm willing to spend some days of work for this feature, but although I have 2 years experience in Python I'm quite new to Zope and Internet-RFCxxxx's and this is definitely a point, where I would appreciate some hints from more experienced Zope-programmers (or a product, of course -- or the statement, that this won't be possible... ;o) regards Jan Stiller P.S. sorry, if my words seems a bit confused, I'm more used to reading than writing english...

3 2

Integrating mailman with Zope?
by Fred Wilson Horch 06 Dec '01

06 Dec '01

Hi everybody, After a hiatus on our project to integrate Mailman and Zope 2.3.x here at EcoAccess, we're about to tackle it again. Has anyone out there tried this already? Last we heard, Mailman was a standalone CGI program, and in order to make it work with Zope you had to run both Mailman and Zope behind another web server (such as Apache). What we're planning to do is write a CGI product for Zope 2.3.3 so that we can run CGI programs with ZServer under Zope, eliminating the need to set up and configure Apache or any other web server. If you've already written a CGI Zope product (i.e., a product that lets you run CGI programs from any Zope folder), please let me know! Otherwise, I'll continue the experiments. ;-) Best regards, Fred -- Fred Wilson Horch mailto:fhorch@ecoaccess.org Executive Director, EcoAccess http://ecoaccess.org/ P.O. Box 2823, Durham, NC 27715-2823 phone: 919.419-8567

3 3

Re: [Zope-dev] Searching/Indexing/ZODB/SQL/BerkleyDB
by Chris Withers 06 Dec '01

06 Dec '01

Casey Duncan wrote: > > I'm not sure I want to store the indexes in the ZODB, just index ZODB data at > a low level. Ah, okay, and yes, in that case, I am in complete agreement ;-) (the level I'm aiming at is just to be able to index python objects, I'll leave plugging that into the ZODB architecture up to someone who understands it better...) > Yup, I think I have a solution, but it'll involve some coding ;^) Ooo...care to explain? :-) > I would rather avoid having to use a relational database unless I have to. > Perhaps the index pluggability could be made to support different backends > (like FileStorage et al does). Yeah, unfortunately, the difficult bit is combining queries: gimme the results where index1=='fish' and index2 is between 2 and 5kg. if index1 is in SQL and index2 is in ZODB, for example, how would you go about efficiently combining results? > > That said, I wasn't aware of Matt's work up until very recently. I'd love > > to see an Indexer that didn't require an RDB (or BerkleyDB :-P) and scaled > > to GigaBytes of Data... > > Yup, me too. Well, I'm just purchasing my copy of Managing Gigabytess now ;-) > OK, I'm available all this week, but I'm not as available the next two weeks. > Lets find a good time. I'm available any time and date, just as long as I get a coupla days notice... cheers, Chris

6 19

Wild and crazzzzy idea: Hierarchial permissions
by Lennart Regebro 05 Dec '01

05 Dec '01

The list of permissions is getting quite long. It's the basic permissions of Zope, plus the ones for our CM system. And we haven't even integrated CMF with it (which we may or may not do in the future). To make things easier to find we have names all our permissions "Easy <something>". I then got the idea that the permission list could be hierarchial or filtered or grouped or something. All permissions would have another setting to specify it group. That way the Zope base permissions could be grouped together into a "Zope Base" persmission group. We could group our in an "Torped Easy Publisher" permission group, and so on. Good idea or stupid?

6 6