July 2004 - Zope-Dev

Log procedure
by Egon 27 Jul '04

27 Jul '04

I have a Zope server behind a proxy server ( http://www.apsis.ch/pound ), in Zope, I am configured zope.conf ( trust-servers and cgi-environment). But in the log file, I can see only the ip of the proxy, when I want to see the client ip. HTTP-FORWARDED-FROM is set. But Zope logs REMOTEADDR in place of FORWARDED-FROM. I think that I may modify any python file in order to log FORWARDED-FROM , but I cannot find the py file that I may modify. Could anybody help me? I want to log the forwarded-from value. Thanks. ______________________________________________ Yahoo! lanza su nueva tecnología de búsquedas ¿te atreves a comparar? http://busquedas.yahoo.es

3 2

Announce: June Zope Bug Day!
by Chris Withers 27 Jul '04

27 Jul '04

Hi All, Another month has scarily quickly passed us by, and so I'm pleased to announce the second monthly bug day, although on much shortner notice this time: What? Zope Bug Day working from http://collector.zope.org/Zope When? Friday 25th June (tomorrow) - from when you wake up until when the day ends! Where? #zope-dev on irc.zope.org Come along and help if you've got a chance! Read this if you want to know how: http://dev.zope.org/CVS/BugDays cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

2 2

[Zope Enhancement Proposal] Sanitizing local roles
by Dieter Maurer 27 Jul '04

27 Jul '04

Local roles are "acquired" from ancestors. While this is not bad for e.g. a "Manager" local role, its conceptual usefulness is in great doubt for e.g. the "Owner" role. It is very unclear why an "Owner" of a folder should automatically be an "Owner" of all its content. I therefore propose to make "acquisition" of local roles customizable. I see two potential variants: 1. objects get a boolean flag "__ac_acquire_local_roles__" with default value "True" which allows "acquisition" of all local roles. 2. objects get a dictionary "__ac_acquire_local_roles__" mapping role names to a boolean which allows acquisition for the respective role. Of course, the second variant provides more fine grained control and will require a more complex UI. The change would affect the methods "allowed" and "getRolesInContext". of "AccessControl.User.BasicUser" and would require new methods in "AccessControl.Role.RoleManager" to read and modify the new "__ac_acquire_local_roles__". Moreover, I propose to change the local role management pages. When setting local roles, information about "acquired" local role definitions is very helpful. I therefore propose to display this information on the local role edit page. I even would prefer a much more drastic change for both local role management and permission-role-map management: a compact look only overview mapping roles to users and permission to roles, respectively, with links to a page to edit the association of a single role or permission, respectively. Something like: Role | acquire | locally assigned users| ancestor assigned users ------------------------------------------------------------------------- Owner | no | dieter | admin, dieter ------------------------------------------------------------------------- Manager | yes | dieter | admin ------------------------------------------------------------------------- The "Role" column is a link to a page to edit "acquire" and "locally assigned users" for the respective role. Advantages: * more natural behaviour for roles like "Owner" * access restricted sub-sites would be much easier to implement * more informative management pages Risks: * Classes deriving from "AccessControl.BasicUser" may have overridden "allowed" and "getRolesInContext". Such overridden methods would not interpret "__ac_acquire_local_roles__" until adapted. Fortunately, it is not very likely that these two methods are overridden. * Local roles get a bit more complex. However, explicit "acquisition" control is already used for the permission role mapping. Thus, users could recognize the same concept. * The 2.8/2.9 edition of the Zope Book would need to be adapted. If there is interest, I could implement the changes and provide patches against the Zope SVN version. However, I do not have write permissions to the repository. This means, someone else would need to make the actual checkins. BTW: Almost surely, I will implement the proposed change in our "private" Zope copy and use it in one of our projects. This means, I could provide "production experience" for the change in some months. -- Dieter

4 5

Announce: August Zope Bug Day!
by Chris Withers 27 Jul '04

27 Jul '04

Hi All, July has flown by, and so I'm pleased to announce the third monthly bug day: What? Zope Bug Day working from http://collector.zope.org/Zope When? Friday 30th July - from when you wake up until when the day ends! Where? #zope-dev on irc.zope.org Come along and help if you've got a chance! Read this if you want to know how: http://dev.zope.org/CVS/BugDays cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

1 0

Re: [Zope-dev] ERROR(200) ZODB Couldn't load state for... Memory problem?
by Russ Ferriday 26 Jul '04

26 Jul '04

Thanks Chris, looks like I may have been bouncing messages. I did not see your earlier reply. Your comments regarding file locations seem dead on. Sorry for the noise on that topic. I'll try the naming change. I've had to go back to 2.7.1 due an another error, below. (Yes, I did rmpyc on all Products before running this version. Going back to 271 worked fine again. And the problem is repeatable) 2004-07-26T01:57:04 ERROR(200) SiteError Traceback (most recent call last): File "/usr/local/zope/zope/lib/python/ZPublisher/Publish.py", line 101, in publish request, bind=1) File "/usr/local/zope/zope/lib/python/ZPublisher/mapply.py", line 88, in mapply if debug is not None: return debug(object,args,context) File "/usr/local/zope/zope/lib/python/ZPublisher/Publish.py", line 39, in call_object result=apply(object,args) # Type s<cr> to step into published object. File "/usr/local/zope/zope/lib/python/Shared/DC/Scripts/Bindings.py", line 306, in __call__ return self._bindAndExec(args, kw, None) File "/usr/local/zope/zope/lib/python/Shared/DC/Scripts/Bindings.py", line 343, in _bindAndExec return self._exec(bound_data, args, kw) File "/usr/local/zope/instances/prodZope/Products/CMFCore/ FSPageTemplate.py", line 191, in _exec result = self.pt_render(extra_context=bound_names) File "/usr/local/zope/instances/prodZope/Products/CMFCore/ FSPageTemplate.py", line 124, in pt_render result = FSPageTemplate.inheritedAttribute('pt_render')( File "/usr/local/zope/zope/lib/python/Products/PageTemplates/ PageTemplate.py", line 88, in pt_render raise PTRuntimeError, 'Page Template %s has errors.' % self.id PTRuntimeError: Page Template login_form has errors. I'll get back with confirmations once I have more. Thanks again! --r On 26 Jul 2004, at 09:12, Chris McDonough wrote: > Russ, I posted a message today about this at about 2pm with a solution. > > See http://mail.zope.org/pipermail/zope-dev/2004-July/023538.html . > > HTH, > > - C > > > On Mon, 2004-07-26 at 03:42, Russ Ferriday wrote: >> This thread's not over 'til the fat lady sings. >> > > ————————————————————— Russ Ferriday Solution Workshops for Plone (+44) (0) 7789 338868 http://www.solutionworkshops.com

1 0

ERROR(200) ZODB Couldn't load state for... Memory problem?
by Russ Ferriday 26 Jul '04

26 Jul '04

Hi all, On OSX 10.3 (Pahter), Python 2.3.4, Zope 2.7.1, I'm frequently seeing this.. 2004-07-22T14:00:24 ERROR(200) ZODB Couldn't load state for 00000000000016ad Traceback (most recent call last): File "/usr/local/zope/zope271/lib/python/ZODB/Connection.py", line 559, in setstate p, serial = self._storage.load(oid, self._version) File "/usr/local/zope/zope271/lib/python/ZEO/ClientStorage.py", line 755, in load self._cache.store(oid, p, s, v, pv, sv) File "/usr/local/zope/zope271/lib/python/ZEO/ClientCache.py", line 601, in store self._store(oid, p, s, version, pv, sv) File "/usr/local/zope/zope271/lib/python/ZEO/ClientCache.py", line 631, in _store f.seek(self._pos) AttributeError: 'NoneType' object has no attribute 'seek' It's intermittent at first, then back-to-back. Following thread leads me to look for memory shortage. But I'd expect a different message in that case. http://www.mail-archive.com/zope-dev@zope.org/msg15039.html This thread seems to suggest such messages (in different context) can be ignored. But I can't do that. This is a symptom of a bigger problem. http://mail.zope.org/pipermail/zope/2001-August/097300.html Has anyone seen this in these circumstances? --r. ————————————————————— Russ Ferriday Solution Workshops for Plone (+44) (0) 7789 338868 http://www.solutionworkshops.com

6 20

Reporting X-FORWARDED-FOR into the log ( REMOTE_ADDR )
by Egon 23 Jul '04

23 Jul '04

I have a Zope server behind a proxy server, this proxy enables de X-FORWARDED-FROM that contains the real ip of the client that is connected. I want to log this variable but I cannot find the way to do it. Can anyone to help me? Thanks. ______________________________________________ Yahoo! lanza su nueva tecnología de búsquedas ¿te atreves a comparar? http://busquedas.yahoo.es

2 3

Re: [Zope-dev] [Zope Enhancement Proposal] Sanitizing local roles
by Richard Jones 23 Jul '04

23 Jul '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 23 Jul 2004 03:30 am, Dieter Maurer wrote: > Moreover, I propose to change the local role management pages. > When setting local roles, information about "acquired" > local role definitions is very helpful. > I therefore propose to display this information on the local > role edit page. I have implemented a "security information" page that details this and more info. I've always found the default security edit pages to be less than useful since they inherently use acquisition, but don't tell you what would be or is currently acquired. The code is attached. We mix it in with every object. A sample output is also attached. I have found it invaluable when debugging permissions problems. Would this be a useful thing to add to 2.8? Richard -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBAKsMrGisBEHG6TARAiwuAJ9n7wLGWzhDa7kGyr/5q8zwi3SV0QCfXX1f JAcHE9s71y9N/4oyNgRiRg4= =ATJ2 -----END PGP SIGNATURE-----

1 0

Re: [Zope-dev] [Zope Enhancement Proposal] Sanitizing local roles
by robert rottermann 23 Jul '04

23 Jul '04

I agree with you, technically it is not in line with Dieter's proposal. But locically. Whenever I come accross one I have to deal with the other. And I never said, that we have to add all the information to one single table.. As you said, it is not really hard to write the code for a task as I propoaed. It is the fact that there is no easy way to get at this (badly needed) information that is anoying. Robert Andreas Jung wrote: > > > --On Donnerstag, 22. Juli 2004 21:35 Uhr +0200 robert rottermann > <robert(a)redcor.ch> wrote: > >> I would like to see where a role was assigned. >> And If I can express yet an other wish: >> I would very much like to have a way to see what the settings for a >> particular User is. And where the settings for a given permissions have >> come from. >> > > Your problem is mainly a problem of visualization. and at least not > directly related to Dieters proposal. > For a project I wrote a UI where you can see for a given object in the > ZODB hierarchy which permission/role > settings are defined above in the tree and which subobjects override the > settings. The code for doing this > is not really a problem. The problem is how to put these informations in > a UI. Given the nature of the problem > one would really need a 3D display..maybe 4D :-) > > Andreas Jung > zopyx.com - Software Development and Consulting Andreas Jung > >

1 0

Re: [Zope-dev] Troubles with hotfix20040714
by Cliff O. 21 Jul '04

21 Jul '04

Ok, so I just finished loading up 2.7.2rc1 and all seems well using the same products and database as before. I can probably migrate the site once 2.7.2 final is released but, of course, it would be great to apply the hotfix in the meantime. Cliff > > On Mon, 19 Jul 2004 09:48:00 -0700 (PDT), C. Olmsted wrote: > > Not sure if this is quite the correct list to post to, but I'm having > > trouble with Hotfix20040714. We're running zope 2.7, plone 2.0.3, and > > zwiki 0.32.0. > > On Mon, 19 Jul 2004, Fred Drake wrote: > > Can you test with the 2.7.2 release candidate? This very much sounds > similar, but all occurances of TAL_VERSION in the Zope 2.7.0 and 2.7.1 > sources are corrected in the 20040714 hotfix. The only ways I can > think of to trigger this problem with the hotfix installed is to > import compile templates containing macros before the hotfix is loaded > during product initialization (reasonably possible), or for someone > else to import TAL_VERSION before the hotfix is loaded and generate > TAL bytecode themselves (highly unlikely!). > > It would be interesting to know if the macros are from a > PageTemplateFile instance. > > > -Fred > >

2 1