July 2001 - Zope-Dev

Modifying Splitter.c to search on '+' & '#', and single letter words
by Harry Wilkinson 26 Jul '01

26 Jul '01

I have two problems with getting ZCatalog to search for what I need: 1) Need to be able to search for words like 'J++' and 'C#' - this is relatively simple to do by editing Splitter.c a little and recompiling 2) Need to be able to search for single-letter words like 'C' - this is easy to modify Splitter.c to accomodate, but causes errors in GlobbingLexicon.py, even though the vocabulary is standard So far I have solved problem (1) by changing the contents of Splitter.c, but that's a bit messy. Currently I don't know of an alternative though. I have modified Splitter.c so it indexes the extra characters, and reduced the mimimum word length to 1, which works fine when indexing, and I can see all the symbol-inclusive words and single-letter words in the vocabulary. Unfortunately, any search on a single-letter word gives an IndexError, "String out of range". I am stuck on problem (2) and don't know how to avoid the errors arising in GlobbingLexicon.py without editing in some kind of hack to get around it. I don't even know why GlobbingLexicon is getting involved in the search process since I am not trying to use wildcards and haven't elected to use a globbing vocabulary (AFAIK). Can anyone explain why GlobbingLexicon is involved? Better yet, has anyone faced this problem (2) before, or come up with a more elegant solution to (1) ? Thanks for your help :) Harry

6 13

UserFolder
by Magnus Heino (Rivermen) 26 Jul '01

26 Jul '01

Hi! If I want to keep the user password in Active Directory, and roles in a postgresql db, are there any options for UserFolders to use? LoginManager seems to work if you upgrade to latest ZPatterns, but it throws a few warnings and I'd like to use something more supported for future zope versions... Suggestions? Or should I look at the source and write something myself that solves the problem? /Magnus

1 0

UPDATE: cgi.py vulnerability hotfix for Zope...
by Evan Simpson 26 Jul '01

26 Jul '01

The reported problem with this hotfix and Zope 2.4 has been resolved, and the file has been updated on www.zope.org at the URL mentioned in the original announcement: Brian Lloyd wrote: > This hotfix addresses a potential denial-of-service vulnerability > in applications that use the Python cgi module (cgi.py) for parsing > of "multipart" Web form data (Zope uses this functionality internally). > > More detailed information is available in the Python bug tracker at > SourceForge: > > > http://sourceforge.net/tracker/?group_id=5470&atid=105470&func=detail&aid=4… > > While we are not aware of any instances of abuse of this > vulnerability, we *highly* recommend that any Zope site running versions > of Zope up to and including 2.4.0 have this hotfix product installed > to mitigate this issue. (Zope 2.4.1 will not require the > installation of a separate hotfix). > > http://www.zope.org/Products/Zope/Hotfix_2001-07-25/README.txt > > http://www.zope.org/Products/Zope/Hotfix_2001-07-25/Hotfix_2001-07-25.tar.gz

1 0

declarative security scope question
by Joseph Wayne Norton 26 Jul '01

26 Jul '01

I'm trying to setup a template for defining declarative security assertions for a set of classes. Here is an example method that is not working as I expected: def MyInitializeClass(klass,priviledge): klass.security.declareProtected(priviledge, 'listMessages') Globals.InitializeClass(klass) Python is complaining about the 'security' attribute not existing. It appears that the attribute 'security' for a class is not accessible even though it is assigned within the class. Does anyone have an experience with this? regards, - joe n. p.s. Here's the full code sample: ------------------------------------------------------------------- from AccessControl import ClassSecurityInfo import Globals class MailboxBase(BaseObject): """A mailbox base class.""" # Create a SecurityInfo for this class security = ClassSecurityInfo() security.declareProtected('View Mailbox', 'listMessages') def listMessages(self): """Return a sequence of message objects.""" return self._messages[:] security.setPermissionDefault('View Mailbox', ('Manager', 'Mailbox Owner')) def MyInitializeClass(klass,priviledge): klass.security.declareProtected(priviledge, 'listMessages') Globals.InitializeClass(klass) # call this to initialize framework classes, which # does the right thing with the security assertions. Globals.InitializeClass(MailboxBase) class MyMailbox(MailboxBase): """A mailbox subclass, where we want the security for listMessages to be public instead of protected (as defined in the base class).""" # Create a SecurityInfo for this class security = ClassSecurityInfo() security.declarePublic('listMessages') # call this to initialize framework classes, which # does the right thing with the security assertions. MyInitializeClass(MyMailbox, 'View Mailbox')

1 0

Upper case/lower case problems with Webfolders (WebDAV) on Windows98
by Joachim Werner 26 Jul '01

26 Jul '01

Hi! I've just come across a very strange problem with regard to folder or object names and Webfolders (WebDAV) on Windows98: I had a folder called "HOME" in Zope. In the Windows WebDAV folder it appeared as "home". As soon as I added one or more lower-case letters, Windows did the right thing, so "Home" is "Home" in Windows. Windows seems to use lower-case for all names that are either only lower-case or only upper-case. This is probably a flawed Microsoft-style compatibility hack (DOS doesn't know about upper/lower case). As I see it, there is no way for us to "fix" this on the Zope part. So it might be necessary to write some documentation on this. Basically: "Do not use names that are upper-case only if you want to use WebDAV from Windows98!" Cheers Joachim

1 0

PythonScript errormessages in 2.4
by Chris Withers 26 Jul '01

26 Jul '01

Hi, Is it just me or are the errormessages from parse and syntax errors in PythonScripts from Zope 2.4 next to useless? > Script line 1 > REQUEST = context.REQUEST > ^ > SyntaxError: invalid syntax This isn't where the error is, reminds me of the helpful parse errors from DTML... Any ideas? cheers, Chris

4 5

How long below the radar?
by jimbo 26 Jul '01

26 Jul '01

Case in point. I'm at my local technical college library looking for material. No books on UML or Python. Ok fine they don't teach either one. They don't plan on carring a copy of the Zope book when it comes out. btw wondering when do the people that won *free* copies get theirs. I should be on that list. I made suggestions on what I could do to petition/campaign them to carry the book, and they said write something up. Personally when I think of *library* I think of a respository of tidbits of information stored in some manner for me to conviently access. Zope is free for anyone to access and use. It is a tool and it is knowledge. Something must be wrong if the library is skewed towards closed source commercial products because students aren't getting the *big* picture. If you asked me and I were in charge of and the leader of OSS I would go after half. If commercial products are going to be in public schools like Cisco, and Microsoft, then so should OSS. This way if you shoot for half you'll end up with something. Doing my part, -Jimbo

3 2

Re: [Zope-dev] OpenFlow workflow engine
by Vincenzo Di Somma 26 Jul '01

26 Jul '01

Chris Withers wrote: Vincenzo Di Somma wrote: ** No cross posts or HTML encoding! ** Hi Chris, Sorry for the misundertand, maybe there`s been problems with the mailing list since I don`t recall to have written anything like that... However the main difference between our product and the DC one is the more general purpose orientation of OpenFlow, we`re tryng to do a WfMC compliant workflow engine. I will release as soon as possible some examples to show clearly the difference, maybe this afternoon. -- Vincenzo Di Somma - Responsabile Ricerca e Sviluppo - Icube S.r.l. Sede: Via Ridolfi 15 - 56124 Pisa (PI), Italia E-mail: e.disomma(a)icube.it WWW: www.icube.it Tel: (+39) 050 97 02 07 Fax: (+39) 050 31 36 588

2 1

ZServer uncaptured python exception
by Simon Eisenmann 25 Jul '01

25 Jul '01

when i access a directory with many files (about 2200 in our case (phpmanual for testing)) through the manager, i get an internal server error with fastcgi and apache access. If i connect directly to zserver everything very works well. This happens with the released zope 2.4.0 and with beta 3. i didnt try any older versions. In debug mode the following python error ist dumped out: 2001-07-25T14:18:35 ERROR(200) ZServer uncaptured python exception, closing channel <FCGIChannel connected at 94961e4> (socket.error:(32, 'Broken pipe') [/usr/local/lib/python2.1/asynchat.py|initiate_send|213] [/usr/local/lib/python2.1/asyncore.py|send|330]) Is there a data limit via fcgi? -- Simon Eisenmann simon(a)struktur.net System Administrator, struktur AG (www.struktur.net)

3 2

RE: manage_after* with Copy/Cut/Paste
by Tim McLaughlin 25 Jul '01

25 Jul '01

Matt, The manage_afterAdd is called after a paste, because essentially, the object has just been added. And likewise, manage_beforeDelete is called before on the object being Cut (if it is cut). Tim > > Message: 11 > Date: Tue, 24 Jul 2001 12:07:06 +0100 (BST) > From: Matt Hamilton <matth(a)netsight.co.uk> > To: <zope-dev(a)zope.org> > Subject: [Zope-dev] manage_after* with Copy/Cut/Paste > > Dear All, > I have been looking at the CopySupport.py file to try and > work out why > when I move an instance of a product I have created in the ZMI, the > ZCatalog is not updated (the class subclasses CatalogAware). > From what I can see when you do a paste after copy the > manage_afterClone > hook is called, but when a paste after cut is done, no hook is called. > This means there is no hook for CatalogAware (or anything > else) to hook > into. Is this a design oversight, or is there a reason for > this, or am I > missing something completely? > > -Matt > > -- > Matt Hamilton > matth(a)netsight.co.uk > Netsight Internet Solutions, Ltd. Business Vision on > the Internet > http://www.netsight.co.uk +44 > (0)117 9090901 > Web Hosting | Web Design | Domain Names | Co-location | > DB Integration >

3 3