- Zope-Dev - Zope lists

Bug in 2.4.1 final
by Joachim Schmitz 10 Sep '01

10 Sep '01

Hi, I run into a problem with ZPatterns, and XML-rpc. Steve Alexander discovered, that it was caused by a bug in Zope-2.4.1 final (see below). The bug was NOT in 2.4.1b1. So there must have been a code change between the beta and the final. I thought, that there are no codechanges between the last beta and the final version ? Mit freundlichen Grüßen Joachim Schmitz AixtraWare, Ing. Büro für Internetanwendungen Hüsgenstr. 33a, D-52457 Aldenhoven Telefon: +49-2464-8851, FAX: +49-2464-905163 ---------- Forwarded message ---------- Date: Sat, 08 Sep 2001 12:46:53 +0100 From: Steve Alexander <steve(a)cat-box.net> To: Joachim Schmitz <js(a)aixtraware.de> Cc: zpatterns <zpatterns(a)eby-sarna.com> Subject: Re: [ZPatterns] mystery with restrictedTraverse Joachim Schmitz wrote: > > > > Error Type: NameError > Error Value: global name \'has\' is not defined > > > The most strange thing is that worked with 2.4.1b1, after installing 2.4.1 > final it failed. > > I just tested it with 2.3.3 there it works too. > With a normal folder in a subfolder it works too. > > Any hint is apreacheated. It is a bug in 2.4.1 final. You need to alter lib/OFS/Traversable.py, line 144, and insert the line has=hasattr after the existing get=getattr -- Steve Alexander Software Engineer Cat-Box limited

1 0

zope variables!
by Stian Jenssen 10 Sep '01

10 Sep '01

Hi! Want to read the variable i pass from the url. eg: http://wap.test.com/test/test?id=287518 Works well with php.

2 1

Role Manager and permissions
by Petr Knapek 10 Sep '01

10 Sep '01

Hi Zopists, please can anybody explain (point to any documentation) why there is change in default permission setting for role 'Manager' when a new object is created? In older versions of Zope (2.2.x) when a new instance of any object was created (added) into ZODB role Manager had automatically set all permissions explicitly in addition of acquisition. Now (Zope 2.4.0 beta 3, Zope 2.4.1 - both from sources at FreeBSD) there is no explicit permission setting for role Manager when a new object instance is added into ZODB. I have also read very carefully Developer's guide and there is something what as I think is not working properly with setPermissionDefault method of SecurityInfo() object. I cite from from Capter 6: Security, subchapter Setting Default Roles For Permissions ---- As we saw earlier, the SecurityInfo interface provided a way to associate methods with permissions. It also provides a way to associate a permission with a set of default roles that should have that permission on instances of your object. To associate a permission with one or more roles, use the following: security.setPermissionDefault(permissionName, rolesList) The permissionName argument should be the name of a permission that you have used in your object and rolesList should be a sequence (tuple or list) of role names that should be associated with permissionName by default on instances of your object. Note that it is not always necessary to use this method. All permissions for which you did not set defaults using setPermissionDefault are assumed to have a single default role of Manager. Notable exceptions to this rule include View and Access contents information, which always have the default roles Manager and Anonymous. --- End of citation. Is it bug or feature? Thanks, Petr -- Petr Knápek Network Development NEXTRA Czech Republic s.r.o. http://www.nextra.cz/ V Celnici 10 / CZ - 117 21 Praha 1 / Czech Republic Tel: +420/2/96 355 111 / Mobile: +420/604-202 611 E-Mail: petr.knapek(a)nextra.com Contact address: Hlinky 114 / CZ - 603 00 Brno / Czech Republic Tel: +420/5/43 554 150 / FAX: +420/5/43 554 214 see Disclaimer http://www.nextra.cz/disclaimer/

1 0

argh - CoreSessionTracking
by Harry Wilkinson 10 Sep '01

10 Sep '01

Hi all :) I'm having some problems with CoreSessionTracking. The errors are occurring on some pretty simple DTML code and they seem to be caused by a failure to find the getSessionData() method :S Here's the code that's getting an error: <dtml-call "session.getSessionData().set('Type','Professional')"> I've tried splitting this up into three seperate calls like so: <dtml-let ses="session"> <dtml-let sesdata="ses.getSessionData()"> <dtml-call "sesdata.set('Type', 'Professional')"> </dtml-let> </dtml-let> The error occurs on the call to getSessionData() and I can't work out why. The same code works in a seperate area of my site, using a different session data manager (with a different name) and a different session ID manager. Is this likely to be an acquisition problem? The object 'session' is in the folder directly above this folder. I have checked and double checked the security settings of various objects but I'm not totally certain they're correct. I get an error when I try to change the security settings of the 'access session data' permission in the session data manager. Is that normal? I hope somebody can shed some light on this; thanks for your time! :) Oh yes, and here's the traceback:  Harry

1 1

UserFolder and xmlrpc
by Richard Jones 10 Sep '01

10 Sep '01

Are there any plans to "update" UserFolder to allow xmlrpc calls into it? The addition of manage_addUser/manage_editUser/etc that wrap _doAddUser/_doChangeUser/etc would probably suffice. The current manage_users interface is not xml-rpc friendly, unfortunately :) The point of this, BTW, is to allow a user-friendly "control panel" on the mac and windows to add (and possibly later edit) manager users. We find that the process of [remembering|setting] the admin password and then logging in, finding acl_users, adding a user, logging out (usually quitting the browser), logging back in is quite a problem for our users. Hence the control panel being able to add a manager user in one step. Richard ps. http://www.bizarsoftware.com.au/resource_centre/articles/open_source.html

4 11

Re: [Zope-dev] declarePublic and users
by Itai Tavor 10 Sep '01

10 Sep '01

Shane Hathaway wrote: >Chris McDonough wrote: >> seb bacon wrote: >> >>> * Chris McDonough <chrism(a)digicool.com> [010903 18:42]: >>> >>>> Yeah, this is due to a shortcut in authentication. I don't >>>> particularly like this behavior. It bites lots of people. I wonder >>>> if we could change it. >>> >>> >>> I think so, FWIW. As you say, this behaviour is a result of an > >> implementation shortcut, rather than by design; I doubt the >>> performance benefits outweigh the silliness of the resulting >>> behaviour. >>> I thought I remembered someone from ZC saying it was changed for 2.4, >>> though? >> >> >> Geez, I don't think so... maybe you mean the "Authenticated" role being >> added? >> >> I'd say ditch the current behavior if we can be reasonably certain that >> nothing important (especially in the ZMI) depends on it. >> >> Anybody want to write a fishbowl proposal? ;-) >> > >No, Seb is right. As of Zope 2.4.x, authentication always occurs now. >We did some tests with different configurations and nothing broke so we >fixed it for good. :-) > >Shane Is it Christmas already? This has been bugging people almost forever, and I'm sure caused a lot of wasted hours to a lot of people. It could have been changed at any time, but until now nobody cared. Same thing with the orphan=3 problem, which was one of the all-time greatest FAQs, and could have been fixed a long time ago, but was suddenly fixed a couple of weeks ago. Where is this new wind of cooperation and helpfulness coming from? Not that I'm complaining, but I get suspicious when an unusually high number of good things start to happen all at once. But hey, why not complain anyway. As I'm stuck with 2.3.x because of ZPatterns, I'm not going to get to enjoy these changes for quite a while. -- -- Itai Tavor -- "Je sautille, donc je suis." -- itai(a)optusnet.com.au -- - Kermit the Frog -- -- -- -- "If you haven't got your health, you haven't got anything" --

5 10

[Severe BUG] Memory corruption - SIGSEGV kills Zope
by Dieter Maurer 09 Sep '01

09 Sep '01

Because the Collector is down, here an bug report: Importance: very important Urgency: need in next revision Reported Version: Zope CVS (last updated shortly after Zope 2.4.1 announcement) Python: Python 2.1 on Linux2 Description: Just got an obvious memory corruption problem: Python 2.1 raises a "TypeError: argument list must be a tuple" exception for security= ClassSecurityInfo() When I tried again, Python died with a SIGSEGV: Program terminated with signal 11, Segmentation fault. #0 PyTuple_New (size=1) at Objects/tupleobject.c:47 47 free_tuples[size] = (PyTupleObject *) op->ob_item[0]; (gdb) bt 10 #0 PyTuple_New (size=1) at Objects/tupleobject.c:47 #1 0x805f46c in com_import_stmt (c=0xbfffefac, n=0x81e2370) at Python/compile.c:2658 #2 0x80608ca in com_node (c=0xbfffefac, n=0x8399bd8) at Python/compile.c:3430 #3 0x8060800 in com_node (c=0xbfffefac, n=0x8321c68) at Python/compile.c:3391 #4 0x8060d40 in com_file_input (c=0xbfffefac, n=0x82edaa8) at Python/compile.c:3620 #5 0x8061082 in compile_node (c=0xbfffefac, n=0x82edaa8) at Python/compile.c:3722 .... I am using Zope CVS, last updated shortly after Zope 2.4.1 has been announced. There are no C-modules other than that provided by Zope. I am using Python 2.1 (first official release, no patches applied) on Linux 2. I suspect an instance of the "py_malloc" or "BorrowedReference" issue recently reported on the mailing list to be responsible. Shortly before the crash, I got several (expected) "AttributeError: allowed" from File "/ext2/dieter/Zope/lib/python/AccessControl/SecurityManager.py", line 172, in checkPermission self._context) and called "AccessControl.SecurityManagement.noSecurityManager()" twice. Dieter

1 1

Re: [cadaver] cadaver and zope
by Patrick Collins 08 Sep '01

08 Sep '01

Mathieu, I may get into an argument with the Zope authors on this one, but in my opinion, they haven't implemented the <link> in the way most clients would expect. >From my reading of RFC2518, in order to edit "index_html" (in your example) the client (cadaver) should be able to GET AND PUT "index_html/document_src". It doesn't make sense to me that you'd read from "index_html/document_src" and then write back to "index_html". This is because index_html MAY actually be generated by multiple source files. The example in RFC2518 in section 13.10.1 seems to behave the way you, Mathieu, would prefer it to work. The spec states: "The source of the link (src) is typically the URI of the output resource on which the link is defined, and there is typically only one destination (dst) of the link, which is the URI where the unprocessed source of the resource may be accessed." I've tried to send this email to the appropriate Zope mailing lists but not sure if I got the right ones. I'f I'm wrong, I'd be happy for someone to explain it to me because I will have to implement this into PerlDAV's "dave" command-line client as well and would rather do it right once. Regards, Patrick. Mathieu Longtin wrote: > > Hi, > > I'm trying to use Cadaver with Zope (www.zope.org) and the connection goes > well and I can download page and post new one. > > However, if I use the straight "edit" command, the page I get to edit is not > the source code, but rather the generated html. > > Zope allows one to get the source document, by getting > "index_html/document_src" instead of just "index_html". > > Problem is, if I say "edit index_html/document_src", it saves it to that > location as well and Zope promptly ignores it (it wants it to be saved to > "index_html"). > > I know I would have to modify the cadaver code to make this work, but what > is the best way? > > - Have a cadaver options that says: if you want to edit file x, actually > download file x/document_src (or some other extensions for other type of > server) > > - Have cadaver look at the "source" property. Here is a typical zope > property set: > dav:/zope/QuickStart/> propget index_html > Fetching properties for `index_html': (reconnecting...done) > creationdate = 1970-01-01T12:00:00Z > displayname = index_html > resourcetype = > getcontenttype = text/html > getcontentlength = 1558 > source = <link> > <src>/zope/QuickStart/index_html</src> > <dst>/zope/QuickStart/index_html/document_src</dst> > </link> > > supportedlock = <lockentry> > <lockscope><exclusive></exclusive></lockscope> > <locktype><write></write></locktype> > </lockentry> > > lockdiscovery = > getlastmodified = Thu, 06 Sep 2001 18:22:57 GMT > > Any suggestion? > > -Mathieu > > _______________________________________________ > cadaver mailing list > cadaver(a)webdav.org > http://mailman.webdav.org/mailman/listinfo/cadaver

2 1

Lifting the profile of Zope - Down Under (ie Australia)
by Richard Volpato 08 Sep '01

08 Sep '01

Hi, I am looking for Australian Zope developers and would also like to get an estimate of the current state of the Zope developer base in Australia. I have gone to the new Australian Users group site OzZope.org but it's too new to give a good indication. A reasonably large organisation in Australia is currently exploring whether to fund a major Zope based application. It is probably the largest such Zope project in Australia. The key business units within that organisation need to manage complex documents whose schema changes at various times. Zope's distributed authoring, object database, role based delegations, LDAP adapter and, of course, zero license fee make it ideal. As the IT infra-structure at the periphery of this organisation is very uneven a web-based approach is particularly appropriate. A prototype has already revealed the power of Zope. However the enthusiasms of the users in these business units who need it, have generated disquiet and then resistance from others in the organisation particularly those in Head Office who have invested in a 'one-size fits all' platform based on Lotus Notes. The failure of this platform to deal with the complexities of the content management problem in the first place led to a Zope based solution appearing so compelling. Other, smaller Zope based applications in other organisations, are also generating similar 'divisions'. As an Australian Zope users group OzZope has been formed, it will help me and presumably other organisations, if developers in Australia, would go to OzZope.org and register. In this way, those interested in exploring Zope solutions can make contact with a developer base. If you are keen to offer services for Zope related work, please contact me. The more we can show that a developer community exists in Australia, the more likely I can convince corporate skeptics that Zope is part of something vibrant, growing and here for the long term. And, of course, if I can assist in getting this larger project running, then further spin off projects will emerge as well. Look forward to hearing from you - and see you over at OzZope.org. Richard Volpato

1 0

problems with python script and 'Version'
by Romain Slootmaekers 08 Sep '01

08 Sep '01

Yo, we seem to be having problems with python scripts while using versions: the python scripts are always considered to have changed, and the live site experiences VersionLockErrors. We are using Zope 2.3.0 binary release. is this a known problem, and what can we do about it ? TIA, Romain.

2 1