August 2001 - Zope-Dev

Help on Zope security needed ...
by Joachim Werner 03 Aug '01

03 Aug '01

Hi! I am trying to get into understanding the Zope security machinery (Zope 2.4), and it seems to not quite do things as expected: I have a Folder hierarchy like this: ROOT --FOLDER - In ROOT I have a method "title" and the "index_html" method - I have a user "Charly" that has ther role "TitleViewer" in a user folder in FOLDER - the method "title" has View permissions linked to "TitleViewer" and "Manager" - the "index_html" method contains a string "<dtml-var title missing>" Now I go to http://.../ROOT/FOLDER/index_html. My user is "Charly". I would expect to see the title now, but I don't. If I remove the "missing" from the <dtml-var title>, I will get a key error for "title". The funny thing is: http://.../ROOT/FOLDER/title will work fine ... Also, if the user is in the ROOT folder, everything works fine. But then I can't really do what I want, i.e. restrict permissions to the FOLDER folder ... What is wrong there? I don't have a clue what Zope protects why and how. I always thought I knew about Zope security. But as soon as I add local roles or local user folders, things become very strange. I mean, if the idea is that the user must have the "TitleViewer" role in ROOT to see title, then http://.../ROOT/FOLDER/title should not work (but it does). But if the idea is that objects are acquired first and then user roles are checked against them, http://.../ROOT/FOLDER/index_html should display the title stuff (but it does not). Cheers Joachim

2 4

ZODB Mounted storage - links gone
by Brad Clements 03 Aug '01

03 Aug '01

I'd like to mount (graft) multiple ZODBs into Zope so I can store some folder data in it's own .fs file. Searching Zope for "mounted storage" returns http://www.zope.org/Members/jim/ZODB/MountedDatabases Which doesn't exist, even on classic.. Any ideas where to go, or is this term no longer used? Brad Clements, bkc(a)murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax netmeeting: ils://ils.murkworks.com AOL-IM: BKClements

2 1

fixupZClassDependencies broken in 2.4.0?
by Chris Withers 03 Aug '01

03 Aug '01

Hi, I uninstalled some ZClass-based products while migrating a Zope instance from 2.3.2 to 2.4.0, however, I get the following disturbing log entries: ------ 2001-08-03T13:22:59 INFO(0) Zope A broken ZClass dependency was found in the global class registry. This is probably due to a product being uninstalled. The registry has successfully been rebuilt. ------ 2001-08-03T13:22:59 ERROR(200) Zope A problem was found in the global product registry but the attempt to rebuild the registry failed. Traceback (innermost last): File /usr/local/zope/2.4.0_base/lib/python/OFS/Application.py, line 472, in initialize (Object: ApplicationDefaultPermissions) File /usr/local/zope/2.4.0_base/lib/python/ZODB/Transaction.py, line 302, in commit File /usr/local/zope/2.4.0_base/lib/python/ZODB/Connection.py, line 420, in commit (Info: (('BTree', 'BTree'), '\x00\x00\x00\x00\x00\x85\r\xf4', '')) File /usr/local/zope/2.4.0_base/lib/python/ZODB/FileStorage.py, line 663, in store (Object: Data.fs) ConflictError: ('\x00\x00\x00\x00\x00\x00\x00\x00', '\x03>9\xad\xb73\x9cU') What does this mean? Why is it happening? what should I do? cheers, Chris

1 0

RE: [Zope-dev] Problems with zclass and instances!!!
by Tim McLaughlin 03 Aug '01

03 Aug '01

Edgardo, Have you tried accessing the __dict__ attribute of the instance in an External Method. This should let you know if the attribute in question is being inherited or not. Try something like this... def isOnInstance(self, name): if self.aq_base.__dict__.has_key(name): return "I've got it" else: return "My parent has it" Note: if you ever call manage_editProperties, all properties on that sheet will be set on the instance and not inherited. Use manage_changeProperties to only set a those specified... Tim > Message: 4 > From: "Edgardo Zulian" <ezulian(a)elsitio.com.ar> > To: <zope-dev(a)zope.org> > Subject: [Zope-dev] Problems with zclass and instances!!! > Date: Thu, 2 Aug 2001 11:17:34 -0300 > > Hi there: > > I have created a product 'X' with a zclass call 'X1'. This X1 > zclass in the > propertysheet has a Common Instance Property Sheet called 'section' > (/Control_Panel/Products/X/X1/propertysheets/common/section), > with some > properties with default values: > ie. one of it's property is call ed 'section1' with the > default value 'left > side', the type of this property is 'string': > section1 'left side' string > > Then in the views of the zclass I 've added a method > "propertysheets/section/manage", > so when I create an instance I can enter to this propertysheet. > > > So the problem is here: > > When I create an instance of this 'X1' zclass an I enter to this > propertysheet/section , I can change the default value of > 'section1' which > was 'left side' to 'center side' for example. > > But then if i change the original default value of my zclass > 'X1' to 'right > side' let say. The change will not be reflected in my > instance, which is > okey because i have change d the value to 'center side' before. > > Another case is when I create another instance of 'X1' > zclass without > making any change to the value of 'section1' and click on > save changes, > then if I change the default value in the zclass, the change > will not be > reflected in this instance. > > So the question is: > > There is a way to recognize when an instance will not take > the changes that > are make to the default values of a propertysheets (in this case > thepropertysheet 'section' ) of a zclass from which they inheritance? > > I try with this lines in an external method, but nothing: > > self=self._getOb('instanceTest') # instanceTest is > the name of > the instance of the 'X1 Zclass' > a=getattr(self,'meta_type') > b=getattr(self.__class__,'meta_type') > # in this example the answer was the same: X1 > > a=eval('self.__class__.propertysheets.section._propertyMap()') > b=eval('self.propertysheets.section._propertyMap()') > # the answer was again the same: {'id': 'section1', 'type': > 'string','meta': {}, 'mode': 'w'} > > #I try acceding to the zclass to know if it was different from > theinstance... > > a=eval('self.Control_Panel.Products.X.propertysheets.common.se > ction.property > Map()') > # the answer not help: {'id': 'section1', 'type': > 'string', 'meta': {}}, > > I cannot found any property or something that help me... > > I don't know where to look or what to try next....if anybody > can help me > with this....... > > Thanks in advance > Edgardo >

2 1

SOAP support: request for comments
by ppetru＠ppetru.net 03 Aug '01

03 Aug '01

Hi, Almost a year ago I did a quick hack which added SOAP support to Zope. It really was something I played with in order to understand what this whole SOAP thingie is about. To my surprise, though, my web server access logs show that people have actually downloaded it :) Now, one year later, the situation is different (a couple Python SOAP libraries, as opposed to only one) so I'm looking into actually finishing (or redoing) the SOAP support for Zope. For this, I would very much apreciate comments -- especially from those guys who already used my patch, or think they are going to use Zope and SOAP in the future. Thanks, Petru

7 9

PropertySheets.
by Erik Enge 03 Aug '01

03 Aug '01

Hi, why can't I do this, on an instance of a ZClass: self.__class__.propertysheets.get('common').properties.propertyItems() Any hints highly appretiated! :)

1 2

make_request
by Erik Enge 03 Aug '01

03 Aug '01

Hi, a couple of months ago, Chris McDonough tipsed me about a script called make_request.py that set up a fake request. I need this now to be able to write unit tests for CMF applications (which isn't trivial, me don't think - maybe a quasi-framework would be cool?). Does any one know where I can find this script?

3 5

GlobbingLexicon and Support for single-letter terms
by sean.upton＠uniontrib.com 02 Aug '01

02 Aug '01

I figured I would post this to this list, for whoever it might be useful for... I needed to have ZCatalog searches support single letter words in Globbing text indexes in an online classified ad system. I had a need to do searches like 'C programmer' which would need to have the letter C indexed. I had to edit Splitter.c to support this without treating them as stop-words (in addition to supporting numbers, by changing isalpha to isalnum). On top of that, though, I had to make a change to GlobbingLexicon.get() as well. If you try to search on a single letter word, it tries to create a second digram that uses an index of i+1, which doesn't exist, and an 'index out of range' exception occurs. If you have compiled Splitter.c to support words of a length of 1, the following change to GlobbingLexicon.py will actually allow you to search without error. My line number is based upon source from the 2.3.2 source release and may not reflect current source in current releases and/or CVS: Previously line 224 is: digrams.append((pattern[i] + pattern[i+1])) Replacing line 224 with: if (len(pattern) != 1): digrams.append((pattern[i] + pattern[i+1])) Also, if anyone is interested, I parse and extend queries to auto-add wildcards before passing the query to Catalog. This allows me to add wildcards to the end of words appropriately according to their length. I want 'tech' to match 'biotechnology' but I don't want 'C' (as in programmer) to match every word with the letter C in it or even every word with the letter C as it's first character, so I have to be careful about the length. I have it set up so that: - terms with len > 3 --> *[term]* - terms with len of 2 or 3 --> [term]? - terms with len of 1 --> [term] (don't get re-written) def queryExtender(self, query): """ Takes, as input, query for Text index of ZCatalog, and makes it more intelligent by parsing it and rewriting it to include wildcards at the end of words so that we can search sub-words; in other words, a search for something like "engineer" should yield results for "engineer*" so that terms like "engineers" and "engineering" also are Obviously, we have to be careful not to incorrectly parse the query, and we don't want to mess with words that already have wildcards at the end, because you don't want to end up with something like "engineer**" """ ### Define Character Patterns to Strip Out and Split Upon everythingButSearchTerms = '[^A-Za-z0-9*]+' #Regex Pattern ### Create the word list result = re.split(everythingButSearchTerms, query) ### Get rid of empty string elements in the word list try: for i in range(result.count('')): result.remove('') except: pass ### Get rid of boolean operators i=0 #count variable, used for indexing for item in result: if re.search(booleanops, item): result.pop(i) i = i + 1 ### Now, result is a list of just the words that are ### meaningful to the search, but we need to eliminate ### any entries that have wildcards in them, because ### they are likely more specific than our rewrite here asteriskinterm = '(^[*])|([*]$)$' #asterisk at start or end of term i=0 #count variable, used for indexing for item in result: if re.search(asteriskinterm, item): result.pop(i) i = i + 1 ### Now, the list of words in the query we need to modify is ### final, so we can start modifying the queries, one word ### at a time... for item in result: #query = re.sub(item, '*'+item+'*', query, count=1) if (len(item) > 3): query = re.sub(item, item+'*', query, count=1) else: if (len(item) != 1): query = re.sub(item, item+'?', query, count=1) return query Sean ========================= Sean Upton Senior Programmer/Analyst SignOnSanDiego.com The San Diego Union-Tribune 619.718.5241 sean.upton(a)uniontrib.com =========================

1 0

ANNOUNCE: Component architecture chat with Jim and project details
by Brian Lloyd 02 Aug '01

02 Aug '01

Hello all, As some of you know, over the past few months some folks within Zope Corp. have been working on a new Zope component architecture. The new component architecture seeks to make developing for Zope easier by clarifying and simplifying the task of extending Zope. Enough of the preliminary thinking on the new architecture has now been written down to start sharing those ideas and soliciting the input of the community. You can find the materials for this project at: http://dev.zope.org/Wikis/DevSite/Projects/ComponentArchitecture/FrontPage Specifically, the following pages of the project wiki are key to understanding what is being contemplated: - VisionStatement - ComponentArchitectureApproach - ComponentArchitectureOverview - Glossary We are very excited about the possibilities of this approach, but to consider changing Zope development in such a fundamental way we absolutely need meaningful feedback and input from the Zope developer community on this. If you are a Zope developer, please check out the project above and let us know what you think. Additionally, Jim Fulton will be hosting an IRC chat on Friday, August 3rd at 12:00pm EST on the #zope channel of irc.openprojects.net to answer your questions on the proposed component architecture (please be sure to have read the above pages first!). We hope to see many of you there! Brian Lloyd brian(a)zope.com Zope Corporation www.zope.com

1 0

are the print statements in zdaemon.py wise??
by Chris Keyes 02 Aug '01

02 Aug '01

Hi Guys Been looking through zdaemon.py zope_base/lib/python/zdaemon.py There are some print statements left in here and I just thought I would ask if these need reporting or not? Cheers Chris K

3 2