- Zope-Dev - Zope lists

Re: [Zope-dev] Accessing root object
by Tres Seaver 11 Feb '00

11 Feb '00

Robert Sander <gurubert(a)gurubert.de> wrote > On Thu, Feb 10, 2000 at 05:57:37PM -0600, Tres Seaver wrote: > > > You should be able to do the same:: > > > > OFS.Application.Application.theORB = CORBA.orb_init( sys.argv ) # or whatever > > Hm, that does not work. I fI do this in the __init__.py of my product, my > entire ZOPE system is not working any more. Should the object be pickable? > Or should that only be done when instantiating an object from my product? Ouch! My bad for proposing untested code, at least without labeling it. I don't think we *want* to pickle the ORB object. I guess we need to make it volatile: # Untested again -- I'm still wrestling with getting Fnorb to # import cleanly. OFS.Application.Application._v_theORB = \ CORBA.orb_init( sys.argv ) # or whatever -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

1 0

Handeling UserDB Authentication Error
by Stephan Richter 11 Feb '00

11 Feb '00

Hello, I am using UserDB to authenticate people. If someone types in the wrong password, Zope will throw it its standard error message. But I want to catch the error and bring up another screen. How can I do this? I am frustrated. I was trying to fix tat for hours and hours... Thanks for your help in advance. Regards, Stephan -- Stephan Richter srichter(a)cbu.edu Web Application Designer and Engineer CBU Physics, Chemistry and Electrical Computer Engineering

1 0

Critical Bug?
by Lars Hoss 11 Feb '00

11 Feb '00

hi all! today we found a critical bug in zope and we would like to know wether anyone knows a solution. it seems that zope crashes under heavy load (which means more than 15 hits/sec) and beeing authenticated against the zope server. try for example the following: authenticate against your zope server, e.g http://some.server.com/manage. afterwards view a page on this server with some dtml code. now reload this page very fast and very often by pressing F5 permanently. after a little while (between 30 seconds and 2 minutes) the connect may fail. on the server side we saw for example the following message: 2000-02-11T16:07:06 ERROR(200) ZServer uncaptured python exception, closing channel <zhttp_server listening :8080 at 860d2d8> (exceptions.TypeError:unpack non-sequence [/opt/shares/volume2/zope/Zope-2.1.4-src/ZServer/medusa/asyncore.py|poll|59] [/opt/shares/volume2/zope/Zope-2.1.4-src/ZServer/medusa/asyncore.py|handle_r ead_event|285] [/opt/shares/volume2/zope/Zope-2.1.4-src/ZServer/medusa/http_server.py|handl e_accept|609]) we tried to connect from another maschine and successed. but the maschine who failed before is in most cases not able to reconnect for a longer time. we were able to reproduce this behavior many times with IE 5.0. our python developer added the code self.close() to ZServer/medusa/asyncore.py at line 320 where self.close() is: def close (self): self.del_channel() self.socket.close() afterwards the zserver seems to work stable. we have to test out a bit more. cheers, lars

1 1

Execute Permission thoughts...
by Chris Withers 11 Feb '00

11 Feb '00

Hi, I mentioned this briefly on the Zope list but I think it sits better here... You can currently access things like standard_html_header, etc from any site url (www.zope.org/standard_html_header for example) along with withods like title_or_id and objectIds. This isn't nice. For starters, dtml methods that are used to display bits of pages probably won't display well on their own. Secondly, things like objectIds and perhaps more important methods probably shouldn't be available for security reasons. Finally, it doesn't give a 'user experience' of a nice tight, well engineered site if you can get at all this stuff. I know you can get around this with proxy roles and the like, but this is a real pain to do for a whole site. It also means you get an authorization error, whereas what I'd personally prefer is a 404 not found, so people don't even know it's there. The solution I'd suggest is very simple from a usage point of view: For every Zope object add a new 'execute' permission. Also, change the idea behind the 'view' permission to be more like it's name. So, if a user has 'view' rights on an object, they can access it through a URL or an FTP client. If a user has 'execute' rights on an object then if it's referenced in another object or method (like standard_html_header is), it can still be executed even if the user has no view rights. So, standard_html_header, for example, would have execute but not view permissions for the anonymous user. How do other people feel about this? I'd be more than happy to give coding this a crack if people could give me some pointers as to where to start. cheers, Chris

1 0

Re: [Zope-dev] Accessing root object
by Tres Seaver 11 Feb '00

11 Feb '00

Robert Sander <zope-dev(a)beteigeuze.cs.tu-berlin.de> wrote: > On Thu, Feb 10, 2000 at 03:40:38PM -0000, Phil Harris wrote: > > I think there's something called app? > > > > It's declared in <zopedir>/lib/python/Main.py. > > > > That may be what your looking for?? > > I don't know, the object app is not in the global namespace when __init__.py > of my Product is called. > > It may be the same problem with the discussed scheduler product when creating > another thread, b ut I don't know. Here is a snippet from the ZopeStudio product, which munges the top-level application object (actually, its *class*) to add the RDF stuff that the Mozilla front end uses:: # Shove the above method in the Application class OFS.Application.Application.zsTreeRoot = zsTreeRoot You should be able to do the same:: OFS.Application.Application.theORB = CORBA.orb_init( sys.argv ) # or whatever -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

2 1

Zope 2.1.4 released...
by Brian Lloyd 11 Feb '00

11 Feb '00

Hi all, Zope 2.1.4 has been released. It can be downloaded from Zope.org at: http://www.zope.org/Products/Zope/2.1.4/ This update prevents the REQUEST object from being traversable by web clients. While this feature was useful for debugging, Evan Simpson noted a potential security issue that could allow web authors to play client scripting tricks and make them appear (to the user) to be coming from a Zope site. While we know of no instances of this happening and the actual security of the Zope site's data is not affected by this, we do recommend that you upgrade to 2.1.4 to avoid any problems. Also (I know many of you are already thinking it :), we are working on a way to distribute "patch" releases for things like this to make updates easier. Until then, for those who _really_ just want to patch your installation you can replace the file lib/python/ZPublisher/BaseRequest.py in your installation with the one from the 2.1.4 distribution and restart your Zope instance. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

3 2

Zope keeps crashing on me!
by Dave Blasby 11 Feb '00

11 Feb '00

Zope keeps crashing on me. It started happening after I installed the ZOracle Product. I upgraded to Zope-2.1.4 but it still keeps crashing one me. Here's a trace: Traceback (innermost last): File "/opt/local/Zope-2.1.4/z2.py", line 583, in ? asyncore.loop() File "/opt/local/Zope-2.1.4/ZServer/medusa/asyncore.py", line 107, in loop poll_fun (timeout) File "/opt/local/Zope-2.1.4/ZServer/medusa/asyncore.py", line 55, in poll (r,w,e) = select.select (r,w,e, timeout) select.error: (4, 'Interrupted system call') Any ideas? It happens very often immediately after an external method completes, but it also happens in other cases like when you press the "change" button while editing a DTML file.

1 0

WebDAV
by Kristjan Sander 10 Feb '00

10 Feb '00

Hello I have to write something to integrate a remote document management system with client PC (Windows). I consider using Web Folders added to Win by IE5 that supports FrontPage Extension and WebDAV. What about WebDAV in Zope? It seems that I have to write something that sends my data to specific port in WebDAV. Any suggestions? I am a newbie in Python. Thanks. Kristjan

1 0

Pickle confuses ZClass Instance for Python Method?
by Loren Stafford 10 Feb '00

10 Feb '00

I just created a ZClass "TimedEventClass" Now I'm trying to add an instance of that class programmatically, and this error pops up. It makes no sense to me. I have no Python Methods in my code. Can anyone suggest where to look next?  Traceback (innermost last): File C:\Zope213\lib\python\ZPublisher\Publish.py, line 214, in publish_module File C:\Zope213\lib\python\ZPublisher\Publish.py, line 179, in publish File C:\Zope213\lib\python\Zope\__init__.py, line 202, in zpublisher_exception_hook (Object: ElementWithAttributes) File C:\Zope213\lib\python\ZPublisher\Publish.py, line 169, in publish File C:\Zope213\lib\python\ZODB\Transaction.py, line 237, in commit File C:\Zope213\lib\python\ZODB\Connection.py, line 325, in commit (Info: (('*a/6lgOdxYOKuB7ddzBaPRQ==', 'TimedEventClass'), '\000\000\000\000\000\000\002\374', '')) cPickle.PicklingError: (see above)

1 0

Re: [Zope-dev] Accessing root object
by Robert Sander 10 Feb '00

10 Feb '00

On Thu, Feb 10, 2000 at 03:40:38PM -0000, Phil Harris wrote: > I think there's something called app? > > It's declared in <zopedir>/lib/python/Main.py. > > That may be what your looking for?? I don't know, the object app is not in the global namespace when __init__.py of my Product is called. It may be the same problem with the discussed scheduler product when creating another thread, b ut I don't know. Greetings -- Robert Sander www.gurubert.de

1 0