February 2002 - Zope-Dev

acquisition, traversal, __roles__(, and zpt?)
by Gary Poster 06 Feb '02

06 Feb '02

Hi everyone. OK. I'm stumped. I'm doing funky tricks here to create an alias functionality somewhat similar to a transparent folder. In the belief that brevity begets more possibility for answers, I won't tell you more, but just get straight to the chase: Zope 2.5, CMF 1.2 (but I'm using the dev list rather than the ptk or zpt lists because it has to do with internals more, I think) During traversal, I have (intentionally) created an acquisition chain like this: <pageTemplate> <OBJECT X> <CMF root> <Zope root> <request> in which <OBJECT X> is an "alien" object inserted after the CMF root. By alien I mean it is not an actual child of the CMF root, nor the actual parent of the pageTemplate. The pageTemplate itself is arbitrarily stored *outside* of the CMF, and also inserted during traversal. <OBJECT X> was unwrapped (aq_base) and then wrapped __of__(<CMF root>), and the pageTemplate also unwrapped and then wrapped __of__(<OBJECT X>). Everything seems mostly fine with this with basic DTML stuff, even so far as the DTML using CMF skins. However, ZPT pages give me security errors if I try to use a skin. I have traced this down, through the Products.PageTemplates.Expressions.RestrictedTraverse function, through security validation, to the fact that if the page template asks for an object like "nocall here/portal_url", and then traverses to get the portal_url, the portal_url is found but has no __roles__. __roles__ appear to be deep magic (AccessControl.PermissionRole). I don't quite understand how this property exists: I figure it must also have functional elements in the C acquisition code somewhere (which I have not worked through). <OBJECT X> has both __allow_access_to_unprotected_subobjects__ and security.declareObjectPublic(). I've tried not removing the "real" wrappers of <OBJECT X> and the page template, to no avail. Heh. Any ideas? Thanks Crazy Gary

2 2

Re: [Zope-dev] aq_parent not available in __setattr__
by Brian Oliver 06 Feb '02

06 Feb '02

Yep... Certainly isn't. Aquisition isn't available for either __getattr__ or __setattr__. So the fundamental question remains... How does one receive a callback/create a hook that is called when an attribute is changed, especially changed via the default property editor for Zope objects (such that aquisition still works)? If this type of feature isn't already planned for Zope 3 (I'll take a look and get active), I'm sure it should be. My suggestion would be to provide Java Beans like get and set methods for all properties, so custom handlers could easily be created. -- Brian >From: Dieter Maurer <dieter(a)handshake.de> >To: "Brian Oliver" <beef005(a)hotmail.com> >CC: zope-dev(a)zope.org >Subject: Re: [Zope-dev] aq_parent not available in __setattr__ >Date: Tue, 5 Feb 2002 23:08:13 +0100 > >Brian Oliver writes: > > ... >Share reported for "__getattr__" (--> mailing list archives) >that the self passed in is not acquisition wrapped. >Maybe, this is also the case for its companion "__setattr__"... > > >Dieter _________________________________________________________________ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com

3 2

hiding tabs in manage view
by Joachim Werner 06 Feb '02

06 Feb '02

Hi! I remember that someone posted that question before, but I didn't find it. So here it is again: In the latest Zope versions, if a user has no rights to see a certain management tab in the ZMI, it is shown anyway. If he clicks on it, he'll get an authentication request, so the method behind the tab IS secured. Is that a new feature or a bug? I know that I can use filters to control which tabs are shown, but that one is a bit painful compared with the old approach. E.g., instead of being able to include all tabs from ObjectManager by adding ObjectManager.manage_options to the manage_options, I'd have to add them one by one and put filters in place for each tab. Joachim

2 1

aq_parent not available in __setattr__
by Brian Oliver 05 Feb '02

05 Feb '02

1. I need to track changes to particular attributes of an object in a python based product. 2. I redefine __setattr__ to perform the necessary operations. def __setattr__(self, name, value): "some nice comments" #pre-processing #store the specified attribute self.__dict__[name] = value self._p_changed = 1 #post-processing 3. All works fine until I need to access the aq_parent attribute. 4. When I attempt use self.aq_parent, I get an AttributeError exception. Any ideas? -- Brian _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx

2 1

Call Profiler
by Richard Jones 04 Feb '02

04 Feb '02

I've just announced our Call Profiler product on zope.org and the zope announce list (waiting for people in different timezones to authorise them :) ( http://www.zope.org/Members/richard/CallProfiler/ for the impatient) In a nutshell, it patches the rendering guts of DTMLMethod, ZSQL, etc. and the ZPublisher so that we can get timing marks for requests as the calls are made. The patching is quite simple (once I got the hang of it ;) and reversible, and means that there's no changes required to the Zope core to enable the testing (which our initial versions did). It does pose a question though: would it be better to have support for this stuff in the core, or is it OK for a product like this to dynamically patch the call methods when it needs to? On one hand, the performance hit when dynamically patching the methods is zero when the product is not "active", but it does mean diddling with methods that really probably should be left alone. On the other hand, having changes to the core code to test for profiling being enabled introduces a small performance hit even when profiling is not activated. Any comments? Richard

4 7

authenticating over XML-RPC to implement the Blogger API
by Nathan Sain 04 Feb '02

04 Feb '02

Hello Everyone, I've got a problem and was wondering if anyone on this list my have some insight as to howto solve it. I want to implement a the Blogger XML-RPC API to allow users to add content toa Zope site (the API is here http://plant.blogger.com/api/index.html) It requires that theusername and password be sent as parameters in each function call. is it possible to hookinto Zopes authentication scheme via a external method or python script? I've also noticedthat it could be possible to grab the username and password from the XML-RPC call whenZPublisher calls request.processInputs(), but I don't know how Zope authenticates the userthis may be to late in the process to try and fudge with the request object. Has anyone elsedone user authentication via parameters? Any help would be appreciated -- Nathan Sain

4 6

Zope under cygwin
by Tony Goodwin 04 Feb '02

04 Feb '02

Hi, I'm trying to get Zope working under cygwin. I have read thread related to this last October/November, but without luck cygwin version - 1.3.9-1 (cygwin engine) Have installed python separately (2.2-1) and built with threads Done thing with FCNTL.h then >> cd Zope-2.5.0-src >> python wo_pcgi.py and get following output below The contents of usr/local/lib/python2.2 ceratinly dont contain any Makefile info. It appears to be trying to rebuild the python within Zope? There is a makefile.pre.in within Zope..src/lib/python, but poiting to it just gives error of form no target boot in MAkefile Any help much appreciated. Tony <snip> bash-2.05a$ python wo_pcgi.py ---------------------------------------------------------------------------- -- Deleting '.pyc' and '.pyo' files recursively under /usr/src/Zope-2.5.0-src... Done. ---------------------------------------------------------------------------- -- Compiling python modules ---------------------------------------------------------------------------- -- Building extension modules cp ./lib/python/Setup20 ./lib/python/Setup ------------------------------------------------ Compiling extensions in lib/python cp /usr/local/lib/python2.2/config/Makefile.pre.in . cp: cannot stat `/usr/local/lib/python2.2/config/Makefile.pre.in': No such file or directory Traceback (most recent call last): File "wo_pcgi.py", line 45, in ? File "wo_pcgi.py", line 33, in main File "/usr/src/Zope-2.5.0-src/inst/build_extensions.py", line 30, in ? make('lib','python') File "/usr/src/Zope-2.5.0-src/inst/do.py", line 61, in make do("cp %s ." % wheres_Makefile_pre_in()) File "/usr/src/Zope-2.5.0-src/inst/do.py", line 32, in do if i and picky: raise SystemError, i SystemError: 256 </snip>

4 4

User Groups
by Florent Guillaume 04 Feb '02

04 Feb '02

I've just released NuxUserGroups 0.6. This is the first release and is still alpha-quality code pending further testing, so I'm only announcing it here. This product adds the notion of groups of users. For now, the groups are only used in the local roles, where you can define an additionnal mapping of groups -> roles. This gives the users who belong to these groups additionnal local roles. The product: - defines a new UserFolder, called UserFolderWithGroups, where you can define the groups and what users belong to what groups, - patches BasicUser to add group support methods, - patches the the local roles management pages of the ZMI to define what groups have what local roles, - patches the local role machinery in BasicUser to take into account the groups when computing local roles. TODO - CMF catalog support. CAVEATS This product is not compatible with other products that may patch local roles support in BasicUser, for instance LRBlacklist. Do not use them together. http://www.zope.org/Members/nuxeo/Products/NuxUserGroups/ Awaiting your comments and feedback, Florent -- Florent Guillaume, Nuxeo (Paris, France) +33 1 40 33 79 10 http://nuxeo.com mailto:fg@nuxeo.com

1 1

Load balancing over FastCGI
by Andy Sydelko 04 Feb '02

04 Feb '02

Has anyone actually used multiple FastCgiExternalServer directives within apache, each pointing to a separate ZEO client, to load balance? We had this set up and doing round-robin between 2 ZEO clients, but there are _big_ problems with it. For a page with lots of images, we are getting images/objects returned from seemingly random places. Apparently the request coming in from one browser doesn't necessarily go back out to that browser. If someone wants proof of this, we are able to fairly reliably reproduce the problem. I've sent mail to the fastcgi-developers list, but not yet gotten a response. --andy.

2 1

¿Sabias que podés ganar dinero en internet viendo publicidad?
by Pedro Luro 04 Feb '02

04 Feb '02

-------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- (This safeguard is not inserted when using the registered version) -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- (This safeguard is not inserted when using the registered version) -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- --------------------------------------------------------------------

1 0