September 2001 - Zope-Dev

Re: [Zope-dev] declarePublic and users
by Itai Tavor 10 Sep '01

10 Sep '01

Shane Hathaway wrote: >Chris McDonough wrote: >> seb bacon wrote: >> >>> * Chris McDonough <chrism(a)digicool.com> [010903 18:42]: >>> >>>> Yeah, this is due to a shortcut in authentication. I don't >>>> particularly like this behavior. It bites lots of people. I wonder >>>> if we could change it. >>> >>> >>> I think so, FWIW. As you say, this behaviour is a result of an > >> implementation shortcut, rather than by design; I doubt the >>> performance benefits outweigh the silliness of the resulting >>> behaviour. >>> I thought I remembered someone from ZC saying it was changed for 2.4, >>> though? >> >> >> Geez, I don't think so... maybe you mean the "Authenticated" role being >> added? >> >> I'd say ditch the current behavior if we can be reasonably certain that >> nothing important (especially in the ZMI) depends on it. >> >> Anybody want to write a fishbowl proposal? ;-) >> > >No, Seb is right. As of Zope 2.4.x, authentication always occurs now. >We did some tests with different configurations and nothing broke so we >fixed it for good. :-) > >Shane Is it Christmas already? This has been bugging people almost forever, and I'm sure caused a lot of wasted hours to a lot of people. It could have been changed at any time, but until now nobody cared. Same thing with the orphan=3 problem, which was one of the all-time greatest FAQs, and could have been fixed a long time ago, but was suddenly fixed a couple of weeks ago. Where is this new wind of cooperation and helpfulness coming from? Not that I'm complaining, but I get suspicious when an unusually high number of good things start to happen all at once. But hey, why not complain anyway. As I'm stuck with 2.3.x because of ZPatterns, I'm not going to get to enjoy these changes for quite a while. -- -- Itai Tavor -- "Je sautille, donc je suis." -- itai(a)optusnet.com.au -- - Kermit the Frog -- -- -- -- "If you haven't got your health, you haven't got anything" --

5 10

[Severe BUG] Memory corruption - SIGSEGV kills Zope
by Dieter Maurer 09 Sep '01

09 Sep '01

Because the Collector is down, here an bug report: Importance: very important Urgency: need in next revision Reported Version: Zope CVS (last updated shortly after Zope 2.4.1 announcement) Python: Python 2.1 on Linux2 Description: Just got an obvious memory corruption problem: Python 2.1 raises a "TypeError: argument list must be a tuple" exception for security= ClassSecurityInfo() When I tried again, Python died with a SIGSEGV: Program terminated with signal 11, Segmentation fault. #0 PyTuple_New (size=1) at Objects/tupleobject.c:47 47 free_tuples[size] = (PyTupleObject *) op->ob_item[0]; (gdb) bt 10 #0 PyTuple_New (size=1) at Objects/tupleobject.c:47 #1 0x805f46c in com_import_stmt (c=0xbfffefac, n=0x81e2370) at Python/compile.c:2658 #2 0x80608ca in com_node (c=0xbfffefac, n=0x8399bd8) at Python/compile.c:3430 #3 0x8060800 in com_node (c=0xbfffefac, n=0x8321c68) at Python/compile.c:3391 #4 0x8060d40 in com_file_input (c=0xbfffefac, n=0x82edaa8) at Python/compile.c:3620 #5 0x8061082 in compile_node (c=0xbfffefac, n=0x82edaa8) at Python/compile.c:3722 .... I am using Zope CVS, last updated shortly after Zope 2.4.1 has been announced. There are no C-modules other than that provided by Zope. I am using Python 2.1 (first official release, no patches applied) on Linux 2. I suspect an instance of the "py_malloc" or "BorrowedReference" issue recently reported on the mailing list to be responsible. Shortly before the crash, I got several (expected) "AttributeError: allowed" from File "/ext2/dieter/Zope/lib/python/AccessControl/SecurityManager.py", line 172, in checkPermission self._context) and called "AccessControl.SecurityManagement.noSecurityManager()" twice. Dieter

1 1

Re: [cadaver] cadaver and zope
by Patrick Collins 08 Sep '01

08 Sep '01

Mathieu, I may get into an argument with the Zope authors on this one, but in my opinion, they haven't implemented the <link> in the way most clients would expect. >From my reading of RFC2518, in order to edit "index_html" (in your example) the client (cadaver) should be able to GET AND PUT "index_html/document_src". It doesn't make sense to me that you'd read from "index_html/document_src" and then write back to "index_html". This is because index_html MAY actually be generated by multiple source files. The example in RFC2518 in section 13.10.1 seems to behave the way you, Mathieu, would prefer it to work. The spec states: "The source of the link (src) is typically the URI of the output resource on which the link is defined, and there is typically only one destination (dst) of the link, which is the URI where the unprocessed source of the resource may be accessed." I've tried to send this email to the appropriate Zope mailing lists but not sure if I got the right ones. I'f I'm wrong, I'd be happy for someone to explain it to me because I will have to implement this into PerlDAV's "dave" command-line client as well and would rather do it right once. Regards, Patrick. Mathieu Longtin wrote: > > Hi, > > I'm trying to use Cadaver with Zope (www.zope.org) and the connection goes > well and I can download page and post new one. > > However, if I use the straight "edit" command, the page I get to edit is not > the source code, but rather the generated html. > > Zope allows one to get the source document, by getting > "index_html/document_src" instead of just "index_html". > > Problem is, if I say "edit index_html/document_src", it saves it to that > location as well and Zope promptly ignores it (it wants it to be saved to > "index_html"). > > I know I would have to modify the cadaver code to make this work, but what > is the best way? > > - Have a cadaver options that says: if you want to edit file x, actually > download file x/document_src (or some other extensions for other type of > server) > > - Have cadaver look at the "source" property. Here is a typical zope > property set: > dav:/zope/QuickStart/> propget index_html > Fetching properties for `index_html': (reconnecting...done) > creationdate = 1970-01-01T12:00:00Z > displayname = index_html > resourcetype = > getcontenttype = text/html > getcontentlength = 1558 > source = <link> > <src>/zope/QuickStart/index_html</src> > <dst>/zope/QuickStart/index_html/document_src</dst> > </link> > > supportedlock = <lockentry> > <lockscope><exclusive></exclusive></lockscope> > <locktype><write></write></locktype> > </lockentry> > > lockdiscovery = > getlastmodified = Thu, 06 Sep 2001 18:22:57 GMT > > Any suggestion? > > -Mathieu > > _______________________________________________ > cadaver mailing list > cadaver(a)webdav.org > http://mailman.webdav.org/mailman/listinfo/cadaver

2 1

Lifting the profile of Zope - Down Under (ie Australia)
by Richard Volpato 08 Sep '01

08 Sep '01

Hi, I am looking for Australian Zope developers and would also like to get an estimate of the current state of the Zope developer base in Australia. I have gone to the new Australian Users group site OzZope.org but it's too new to give a good indication. A reasonably large organisation in Australia is currently exploring whether to fund a major Zope based application. It is probably the largest such Zope project in Australia. The key business units within that organisation need to manage complex documents whose schema changes at various times. Zope's distributed authoring, object database, role based delegations, LDAP adapter and, of course, zero license fee make it ideal. As the IT infra-structure at the periphery of this organisation is very uneven a web-based approach is particularly appropriate. A prototype has already revealed the power of Zope. However the enthusiasms of the users in these business units who need it, have generated disquiet and then resistance from others in the organisation particularly those in Head Office who have invested in a 'one-size fits all' platform based on Lotus Notes. The failure of this platform to deal with the complexities of the content management problem in the first place led to a Zope based solution appearing so compelling. Other, smaller Zope based applications in other organisations, are also generating similar 'divisions'. As an Australian Zope users group OzZope has been formed, it will help me and presumably other organisations, if developers in Australia, would go to OzZope.org and register. In this way, those interested in exploring Zope solutions can make contact with a developer base. If you are keen to offer services for Zope related work, please contact me. The more we can show that a developer community exists in Australia, the more likely I can convince corporate skeptics that Zope is part of something vibrant, growing and here for the long term. And, of course, if I can assist in getting this larger project running, then further spin off projects will emerge as well. Look forward to hearing from you - and see you over at OzZope.org. Richard Volpato

1 0

problems with python script and 'Version'
by Romain Slootmaekers 08 Sep '01

08 Sep '01

Yo, we seem to be having problems with python scripts while using versions: the python scripts are always considered to have changed, and the live site experiences VersionLockErrors. We are using Zope 2.3.0 binary release. is this a known problem, and what can we do about it ? TIA, Romain.

2 1

_setName issue (was declarePrivate doesn't)
by Chris Withers 07 Sep '01

07 Sep '01

Hi Shane, I remember you raising the issue requiring _setName, so I geuss you're the man to ask when it doesn't work ;-) >From the SQL class in SQL.py: manage=manage_main=DTMLFile('dtml/edit', globals()) manage_main._setName('manage_main') __ac_permissions__=( ('Change Database Methods', ('manage', 'manage_main')), ) Now, I subclass this to make my FS ZSQL Method and haev the following in the subclass: # Make mutators private security.declarePrivate('manage','manage_edit','manage_advanced') security.declareObjectProtected(View) security.declareProtected(ViewManagementScreens, 'manage_main') manage_main = Globals.DTMLFile('custzsql', _dtmldir) So, manage_edit and manage_advanced have indeed become private.. ..but '/manage' still brings me up the edit form on my FS ZSQL Method. Why? I wondered... Well, in SQL.py, there's a _setName to make manage use the manage_main name, which in my subclass is protected by ViewManagementScreens. So, this seems to take precendence over the declarePrivate. That feels like a bug to me, what do otehr people think? cheers, Chris

2 2

[Fwd: [Zope-dev] declarePrivate doesn't?!]
by Chris Withers 07 Sep '01

07 Sep '01

Chris Withers wrote: > > Chris Withers wrote: > > > > (this is whilst trying to write an FS ZSQL Method for the CMF, I can't post code > > to anyone interested...) > > Actually, I can post code, I just can't type... ...and I'll never get the hang of this Reply All thing ;-) Chris

1 0

declarePrivate doesn't?!
by Chris Withers 07 Sep '01

07 Sep '01

Hi, My understanding is that: security.declarePrivate('manage') ...should make the manage method no longer accessible TTW? Well, it doesn't :-( What could I be doing to trip this up? (this is whilst trying to write an FS ZSQL Method for the CMF, I can't post code to anyone interested...) cheers, Chris

1 0

Errors in ZDG intentional or is my copy just old and buggy?
by Dario Lopez-Kästen 07 Sep '01

07 Sep '01

Hello! After muchos problemas understanding how to use and apply the poll product example, I have found several other errors and omissions. Using Zope 2.4.1 I have done the example halfway, and have finally understood how to call the damned thing :-) using dtml. This makes me wonder: are there intentional errors in the ZDG examples or is it just so that I have an buggy version? If I have a buggy version how do I download the latest? I assume I have to do it from CVS but what module do I have to download (spoken like a true cvs newbie :-)? If I find stuff that I'd like to correct and/or elaborate and would like to be considered as corrections to the existing documents, where do I send it for approval? Any help is appreciated. /dario - -------------------------------------------------------------------- Dario Lopez-Kästen Systems Developer Chalmers Univ. of Technology dario(a)ita.chalmers.se ICQ will yield no hits IT Systems & Services

2 3

Re: Errors in ZDG intentional or is my copy just old and buggy?
by Dario Lopez-Kästen 07 Sep '01

07 Sep '01

> If I have a buggy version how do I download the latest? I assume I have to > do it from CVS but what module do I have to download (spoken like a true cvs > newbie :-)? [Note to self: "investigate first, act later!"] It turns out that I need stronger glasses: there is a link to cvs in the htmlpages of the ZDG at zope.org, that I completely failed to see. duh. /dario - -------------------------------------------------------------------- Dario Lopez-Kästen Systems Developer Chalmers Univ. of Technology dario(a)ita.chalmers.se ICQ will yield no hits IT Systems & Services

1 0