- Zope-Dev - Zope lists

Bug in User.py
by Brian Spilsbury 13 Apr '00

13 Apr '00

There's an insufficiently guarded operation in User.py def allowed(self, parent, roles=None): ... # This is a method, grab it's self. parent=parent.im_self if hasattr(parent, 'aq_inContextOf') and not parent.aq_inContextOf(self.aq_parent.aq_parent,1): if 'Shared' in roles: # Damn, old role setting. Waaa ... I've added the hasattr(parent, 'aq_inContextOf') to make sure that the second clause is reasonable. I'm not sure of the process of submitting fixes, etc, hopefully this will go to the right place.

2 1

Re:[Zope] Re: Zope hanging (poss. threads-related)
by Tres Seaver 13 Apr '00

13 Apr '00

I would *really* like for us to capture the information flowing through the list in some less ephemeral form, so I have set up a Wiki for discussing this and other availability/stability/reliability issues at: http://www.zope.org/Members/tseaver/Projects/HighlyAvailableZope/ I made a messy first stab at putting some of the current thread into a page under TwistingInTheWindProblems. Please feel free to edit, or tell me that this is a bad idea. Tres. -- ========================================================= Tres Seaver tseaver(a)digicool.com tseaver(a)palladion.com

1 0

Finding the transaction timestamp in ZODB
by Grakka 13 Apr '00

13 Apr '00

Hi there, Can enybody explain the format of the "byte serial" on the Data.fs? the FileStorage.py reads: "8 byte serial, type stamp that matches the transaction timestamp" When I u64() the read contents, I ger a string like this one (without the quotes): "230720283629242325L" I believe this reflects some sort of timestamp, but can't figure it out how to convert it to "readable" date/time value, anyone can help? Thanks in advance.

2 1

More on DCOracle and BLOB handling
by Cheuk Cheng 12 Apr '00

12 Apr '00

First I appreciated for those who responded to my original posting. So far I still haven't found a solution but yet learned a few new things and would like to share with everyone. For those who didn't read my previous message, my problem was trying to use a Zope external method and doing a blob insertion into Oracle (8.0.5 on Solaris). I'm using the DCOracle compiled with VC6 on a NT platform. With DCOracle I could create the connection and query the database without any problem for any kind of datatypes including blob. When trying to perform a insertion, it keeps reporting a "invalid hex string" error. Now here's what I found so far. When I was searching for a solution for my problem, I came across the mxODBC driver. I created a standalone Python script that makes use of mxODBC driver and successfully inserted data blobs of any size (>10M). So I thought that I could copy the mxODBC package from python\lib\ODBC to Zope (under Shared\ODBC\) and access it via an external method. Then I found a naming conflict with the Zope odbc driver. I went ahead and renamed the odbc.pyd to win32odbc.pyd. Next I tried to import the mxODBC driver in my external method as: import Shared.ODBC from Shared.ODBC import Windows dbc = Shared.ODBC.Windows.Connect('user','password','dsn',clear_auto_commit=1) When the external method is executed, I got an error message "Error Type:AttributeError ErrorValue: Connect". If I successfully imported the module, shouldn't I have access to the connection method? Anyone has any idea on what I've done wrong? Also I would like to find out if there's anyone successfully using DCOracle with Oracle 8.0.5 (on any platform) to insert blob. Please comment. Thanks -Cheuk

1 0

Invisible instance bug with Sub ZClasses
by Jason Spisak 12 Apr '00

12 Apr '00

Zopists, In the Collector, tickets [1178], [1175], [1161] all refer to the same bug. This seems to be a pretty significant set back to anyone using ZClass to create an application.(Which is probably a high percentage) Is this holding anyone else's process up majorly? It's only a problem with 2.1.6. I haven't checked it against CVS, has anyone else? Alexandre? All my best, -- Jason Spisak 444(a)hiretechs.com

1 0

Re: [Zope-dev] Import restriction?
by Tres Seaver 12 Apr '00

12 Apr '00

mindlace <mindlace(a)imeme.net> > I'm curious as to why "Import" is limited to the local file-system. > Would I be committing some sort of serious security error if I allowed > users to upload their own exported folders, etc, through that interface? I just rejected a patch which allowed through-the-web import. See http://classic.zope.org:8080/Collector/894/view for a discussion of the security issues. Tres. -- ========================================================= Tres Seaver tseaver(a)digicool.com tseaver(a)palladion.com

1 0

ZCatalog FieldIndex design problem
by Toby Dickenson 12 Apr '00

12 Apr '00

It is an invariant of the ZCatalog's FieldIndex that the items are sorted. However python does not guarantee that the sort order of differently-typed objects will not change. The language definition says: 'the choice whether one object is considered smaller or larger than another one is made arbitrarily but consistently within one execution of a program' http://www.python.org/doc/current/ref/comparisons.html Are FieldIndexes relying on undefined behavior? Toby Dickenson tdickenson(a)geminidataloggers.com

1 0

Wierdness in globbing TextIndex
by Itamar Shtull-Trauring 12 Apr '00

12 Apr '00

I was getting wrong results in a CVS-based ZCatalog (created when globbing was first checked in, then the code was updated from CVS to fix the horrid KeyError). So I deleted the Vocabulary, added a new one (globbing) and updated the zcatalog. The situation is much better, but I'm still getting a few weird results. For example, searching for "pear*" brings up an object, where the text that it is being cataloged and searched by is: The Best Brussels Sprouts The Best Brussels Sprouts bacon pine nut Brussels sprout garlic carrot kosher salt pepper Italian parsley is the "pars" in parsley causing this item to come up? I have other objects with parsley in the text that don't show up. -- Itamar S.T. itamars(a)ibm.net

1 0

Re: [Zope-dev] Collector #839: Zope, Include re module in _ namespace
by Tres Seaver 12 Apr '00

12 Apr '00

Duncan Booth wrote: > How long ago did I post that? I > thought from the discussion at the time that suggestion had been > thrown out. No need to resurrect it, I now fully accept that there > are good reasons not to permit regexps in dtml. The Collector says "November 10, 1999". I'll reject it then. Thanks! Tres.

1 0

Collector #839: Zope, Include re module in _ namespace
by tseaver＠digicool.com 12 Apr '00

12 Apr '00

Duncan Booth reported: > It would be very useful to have access to regular expression matching from DTML. Importing the re module into the _ namespace as is done for string, math and whrandom looks to me to be both safe and useful. > > with patch: > diff -r1.61 DT_Util.py > 205c205 > < import string, math, whrandom > --- > > import string, math, whrandom, re > 219a220 > > d['re']=re I am reluctant to Go There -- regexp's are notoriously hard to get right, and when they go south, they often take the family silver with them. It would be fairly trivial to write a back-tracking regexp, even inadvertently, the execution of which would be an effective denial-of-service attack on the server. DTML really isn't the right place for them, anyway: according to the prevailing wisdom of the zopemeisters, complicated logic belongs in Python, rather than in DTML. (However, PythonMethods won't have access to the re module either without some help) I'm CC'ing this reply to the zope-dev list for further feedback. Tres.

3 2