June 2001 - Zope-Dev

Where did DocumentTemplate/VSEval.py go in 2.4.0a1?
by Morten W. Petersen 18 Jun '01

18 Jun '01

Hia guys, one of my products landed flat on its face when an ImportError was raised trying to import VSEval from DocumentTemplate; is there a new class / function of some sort or simply another name for the class? Cheers, Morten

3 4

Re: [Zope-dev] replicating storages
by J�lio Dinis Silva 18 Jun '01

18 Jun '01

Hi, Someone once posted info about a 500MB Data.fs running over FiberOptic NT NTFS Cluster Network Name,and another Data.fs of 500MB running over a scsi Linux NFS mount with no major problems for about 2 years. You can also Pack your Data.fs on a daily basis and backup the Data.fs.old to another storage device. http://www.it.uc3m.es/~ptb/nbd/ this his in fact very promising. But the best of the world would be to have Zope Storage Server Replication, which what I know is in the forge. Best Resgards, Julio Dinis Silva >From: Toby Dickenson <tdickenson(a)devmail.geminidataloggers.co.uk> >Reply-To: tdickenson(a)geminidataloggers.com >To: Zope-Dev(a)zope.org >Subject: [Zope-dev] replicating storages >Date: Mon, 18 Jun 2001 16:45:10 +0100 > >We are considering storing some mission-critical data inside a ZODB, >but are worried about data loss if the ZEO server should be destroyed. > >Has anyone looked at solving this problem? > >Replicated-ZEO looks like it will eventually be ideal solution; the >use case is documented at ><http://www.zope.org/Wikis/DevSite/Projects/ZEOReplicatedStorage/SurviveTota…> > >Until then, http://www.it.uc3m.es/~ptb/nbd/ looks promising. Has >anyone tried FileStorage over a network block device? > > > > >Toby Dickenson >tdickenson(a)geminidataloggers.com > >_______________________________________________ >Zope-Dev maillist - Zope-Dev(a)zope.org >http://lists.zope.org/mailman/listinfo/zope-dev >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope ) _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0

replicating storages
by Toby Dickenson 18 Jun '01

18 Jun '01

We are considering storing some mission-critical data inside a ZODB, but are worried about data loss if the ZEO server should be destroyed. Has anyone looked at solving this problem? Replicated-ZEO looks like it will eventually be ideal solution; the use case is documented at <http://www.zope.org/Wikis/DevSite/Projects/ZEOReplicatedStorage/SurviveTota…> Until then, http://www.it.uc3m.es/~ptb/nbd/ looks promising. Has anyone tried FileStorage over a network block device? Toby Dickenson tdickenson(a)geminidataloggers.com

1 0

Zope/z2 security issues
by Ivo van der Wijk 18 Jun '01

18 Jun '01

Hi All, We're currently working on some security issues when running zope in a INSTANCE_HOME (multiple instances running as different users) setup. The first issue is tightening of the current security. We introduced the ability to set the groupid under which the server runs, so you can put zope users in a zope group, not give non-group members read/execute permission (o-rwx) to the instance homes, zope directories, product directories, etc. These patches (along with a zopectl patch) can be found on: http://www.zope.org/Members/maurice The second issue, if z2.py is started as root, it will either setuid() to nobody, or to the username supplied with -u. However, z2.py initializes logging while still runing as root by importing/ using ZLogger. This means that the logfiles will be owned (if they did not yet exist) by root in INSTANCE_HOME/var, while you would want these to be owned by nobody or the user the instance should be running as. z2.py setuid()'s to the non-root user after (optionally) opening privileged ports. If you symlink the logfiles in INSTANCE_HOME/var to /etc (or worse, /etc/passwd or /etc/shadow), you might even be able to destroy these files or insert data into them. The correct solution would probably be something like: - run as root - seteuid(non-root-user) - intialize logging -\ - seteuid(root) } optional (only if privileged ports are required) - open priviliged ports -/ - setuid(non-root-user) (note both the setEuid and setuid calls) However, python 1.5.2 does not have seteuid() so this can/will only work with 2.0/2.1 or zope 2.4 (which requires 2.1) We don't want to run our production zope servers with python > 1.5.2, so our current patch consists of a setuid() at the top of z2.py, we don't run zope on privileged ports anyway. If anyone wants a patch for this, please mail me. Cheers, Ivo -- Drs. I.R. van der Wijk -=- Brouwersgracht 132 Amaze Internet Services V.O.F. 1013 HA Amsterdam -=- Tel: +31-20-4688336 Linux/Web/Zope/SQL Fax: +31-20-4688337 Network Solutions Web: http://www.amaze.nl/ Consultancy Email: ivo(a)amaze.nl -=-

1 0

what transaction does get_transaction().commit() really commit?
by Jephte Clain 18 Jun '01

18 Jun '01

hello, I have a method that reads: ------------8<---------------- def do_something(self): from Zope import DB conn = db.open() conn.root()['name'] = 'value' get_transaction().commit() conn.close() ------------8<---------------- the method can be called from everywhere, and that's the reason why I have to open a connection, in case one is not available. the question is: what transaction is commited with get_transaction().commit() ? It is only the one associated with the connection, or also the transaction in which is the caller? I mean, if my method is called from within Zope, is the transaction of the caller commited? thanks for any response regards, jephte.clain(a)univ-reunion.fr ______________________________________________________ Boîte aux lettres - Caramail - http://www.caramail.com

2 1

SI prefixes and Zope
by Petr Knapek 18 Jun '01

18 Jun '01

Hi, I suggest to make Zope prefixes of object sizes be consistent with SI binary prefixes - see http://physics.nist.gov/cuu/Units/binary.html Using SI binary prefixes for object size will avoid any misunderstanding of real object size. Petr -- Petr Knápek Network Development NEXTRA Czech Republic s.r.o. http://www.nextra.cz/ V Celnici 10 / CZ - 117 21 Praha 1 / Czech Republic Tel: +420/2/96 355 111 / Mobile: +420/604-202 611 E-Mail: petr.knapek(a)nextra.com Contact address: Hlinky 114 / CZ - 603 00 Brno / Czech Republic Tel: +420/5/43 554 150 / FAX: +420/5/43 554 214 see Disclaimer http://www.nextra.cz/disclaimer/

1 0

Re: [Zope-dev] DCOracle2 Beta 3
by Andreas Repp 18 Jun '01

18 Jun '01

Sorry, but there were some mistakes in my last posting... >... To solve the performance problem I´d suggest to cache the user > connections for a certain period of time. ... Of course I haven't meant to 'cache' the connections but to keep em alive while the respective user is active and shut it down after a timeout period has passed. >enhanced ZSQL-example: >##(new)connection_id=<dtml-var "'username+','+password' or default_connection_id">, >##arguments=ID,NAME I also know that this will hardly ever work ;-) Maybe this shot would do a better job: ##default_connection_id=(changed via ZSQL manage_main Interface) ##connection_type=[ standard | custom | optional ] ##connection_options=(individual Oracle Connection String) sql yada yada 'standard' = obvious 'custum' = forced custom connection - will raise error if connection_options dont' have a valid connection string 'optional' = try 'custom' and fallback to 'standard' if it fails btw: would be nice to have a drop box in the manage_main screen for this stuff in a _far future_ release of ZSQL-Methods ;-) I noticed that a SQL 'COMMIT' is hardcoded into (old) ZOracle/DCOracle1 code - this would'nt have any more sense if all mentioned is possible but surely you know this. Andy ---------------------------------------------------------------------- Andreas Repp andreas.repp(a)lrz-muenchen.de Leibniz Rechenzentrum Muenchen www.lrz.de ----------------------------------------------------------------------

2 1

html_quote in CVS
by kent sin 18 Jun '01

18 Jun '01

Formulator is broken by the Zope cvs version. It can not import html_quote from DocumentTemplate.DT_Util I found html_quote being moved to DT_Var.py, but after change the Widget.py from DocumentTemplate.DT_Var import html_quote it still report can not import. What should I make this? Does the new 2.4 break many products similarly? Rgs, Kent Sin __________________________________________________ Do You Yahoo!? Spot the hottest trends in music, movies, and more. http://buzz.yahoo.com/

3 2

How to aquire from Context?
by Matt Hamilton 17 Jun '01

17 Jun '01

Dear All, I have been trying to work out how to acquire a DTML method first by context rather than by containment. According to the ZDG (Great read, thanks guys!): -- snip -- Containment Before Context If in the example above suppose both a and b have an color attribute: a=C("a") a.color="green" a.b=C("b") a.b.color="red" a.x=C("x") print a.b.x.color # prints green Why does a.b.x.color acquire color from a and not from b? The answer is that acquisition acquires from the containment before context. -- snip -- Now that makes perfect sense to me and I can see why it happens as such. However what if I want print a.b.x.color to return red? The scenario is this: I have a directory structure: / standard_html_header side_bar folderA foo bar side_bar index_html index_html calls standard_html_header which in turn calls side_bar. If I access this via /folderA/index_html I still get the side_bar in the root not the one in folderA. This makes sense in respect to the above ZDG stuff. But how can I get it to work the way I want (/folderA/index_html uses folderA/side_bar)? I've searched zope.org and found plenty of explainaintions why this is so, but no good examples or workarounds as how to get around it :( Any ideas? -Matt -- Matt Hamilton matth(a)netsight.co.uk Netsight Internet Solutions, Ltd. Business Vision on the Internet http://www.netsight.co.uk +44 (0)117 9090901 Web Hosting | Web Design | Domain Names | Co-location | DB Integration

3 2

RE: PossitionIndex (was: Re: [Zope-dev] ZCatalog phrase indexingr evisited)
by sean.upton＠uniontrib.com 17 Jun '01

17 Jun '01

A lot of folks who do "power searches," say, librarians or other trained researchers, familiar with the bells and whistles of more powerful search engines, will want a simple operator for proximity, with the ability to specify proximity depth: For example: Lexis-Nexis: Sean w/2 Upton (where w/2 is within 2 words) Also, lexis doesn't count stop-words in proximity indexes. Folio/Nextpage: "Sean Upton"@2 IMHO, the syntax is clean and very brief in the Lexis-Nexis case and should suppliment a more generic Sean ... Upton style search. Sean -----Original Message----- From: Chris McDonough [mailto:chrism@digicool.com] Sent: Saturday, June 16, 2001 2:59 AM To: Erik Enge Cc: zope-dev(a)zope.org Subject: Re: PossitionIndex (was: Re: [Zope-dev] ZCatalog phrase indexingrevisited) Erik Enge wrote: > > On Fri, 15 Jun 2001, Chris McDonough wrote: > > > Once you're satisfied with the implementation, would you be willing > > submit the module to the collector? > > Will do. Have you thought about how users actually are to use > exact-phrase? What I'm thinking I will do here (currently I've only been > testing explicitly with "adjoinedby" in the query) is to insert > "adjoinedby" in phrased searches: > > "erik enge" -> erik adjoinedby enge > erik ... enge -> erik near enge > > What do you think? These both look like good spellings, and I think "erik near enge" would be a good alias for "erik ... enge" as well.. - C _______________________________________________ Zope-Dev maillist - Zope-Dev(a)zope.org http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )

3 2