- Zope-Dev - Zope lists

RE: [Zope-dev] Some apparent limitations of the Zope security mod el
by Michel Pelletier 07 Jan '00

07 Jan '00

> -----Original Message----- > From: Ross Boylan [mailto:RossBoylan@stanfordalumni.org] > > > The 3rd reason is practical, rather than fundamental: > 3) If I do it myself, I don't have to worry about getting my > classes, which > I may want to do as simply python objects, to play in the > somewhat hard to > grasp Zope framework. The permission aspect is not difficult at all. One data structure, __ac_permissions__, defines all of the permissions for an object. It is a tuple of tuples: __ac_permissions__=( ('PermissionName', ['method1', 'method2', ...], ['Role1', 'Role2', ...],) ... ) Each permission tuple has three elements, a name, a list of methods that permission 'protects', and a list of Roles which have that permission by default. Of course, you can create new roles in the managment interface or programatically to map to permissions, this is a convinience that allows the object programmer to specify which methods are managment methods and which are accessable by other common roles like 'Anonymous'. Here is an example: __ac_permissions__=( ('Manage Vocabulary', ['manage_main', 'manage_vocab', 'manage_query'], ['Manager']), ('Query Vocabulary', ['query',], ['Anonymous', 'Manager']), ) -Michel

1 0

RE: [Zope-dev] ODMG compliance?
by Tres Seaver 07 Jan '00

07 Jan '00

Michel Pelletier <michel(a)digicool.com> wrote: > > > -----Original Message----- > > From: Kenneth Y.K. YOUNG [mailto:kyoung@kyoung.net] > > Sent: Wednesday, January 05, 2000 9:12 PM > > To: Zope-Dev Mailing List > > Cc: Hannu Krosing; Anthony Baxter > > Subject: RE: [Zope-dev] ODMG compliance? > > > > > > > > My understanding of ODMG standard is superficial, but the > > motivation of > > examining Zope's standard compliance are as follows: (pls > > correct me if I'm > > wrong) > > > > (1) how well it integrates with Corba - i.e. can I access > > Zope functions > > from programs written in perl/C/smalltalk/Java via corba, and > > have zope > > reuse Corba components written in these languages. > > Corba integration does not exist, but it would not be dificult to do. > As a corba client, you could take some third party python corba package > and integrate it into a Zope product to create "CORBA Methods" that > would word presumably like External Methods. I am working on a Zope product which will use Fnorb (a 99.44% pure Python CORBA 2.2 ORB) to browse the names and objects published in any compliant COSNaming server. Fnorb maps "normal" Python method calls onto CORBA method calls, so once you have the reference (and know the interface), making such calls should be straightforward. > > As a CORBA server you could create a new ZServer module. Remember, > ZPublisher, the 'heart' of Zope, is an Object Request Broker (ORB) that > maps quite cleanly onto CORBA. In the past when ZPublisher was Bobo, I > beleive there was even some work done to make Bobo corba aware, I'm not > certain. > > In any case there has been no demand on us for it for a while now, corba > is not a very active standard. XML-RPC seems to fill it's shoes quite > well. A CORBA server interface (probably using DSI) would be just another access path, like WebDAV or FTP; it would almost certainly have to live inside Medusa to avoid creating synchronization problems with the other protocols. The key problem (as with XML-RPC) is making the interface definitions available to the client -- marshalling the parameters is transparent. Zope's URL-traversal namespace is conceptually quite close to the graph used in COSNaming -- a CORBA client would, however, expect to "know" that some names were "objects", while others were "methods". <OQL discussion snipped due to my ignorance> > > I couldn't tell you, but you could take a hack at it. I belive there > are a couple Python corba packages. Fnorb: http://www.dstc.edu.au/Fnorb Uses C for parsing IDL and marshalling CDR; all else Python. ILU: ftp://ftp.parc.xerox.com/pub/ilu/ilu.html C core, Python bindings, along with Lisp, Perl, C++ -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

1 0

Zope (ZPublisher, ZODB) *.odm files
by Sascha Matzke 07 Jan '00

07 Jan '00

Hello, I design my zope python products with ObjectDomain. It would be very helpful to have an (readonly) zope modell to make my modells more understandable (e.g. where does this class Persistent come from??)... Are those available to the public ?? Sascha -- .-> Sascha Matzke - sascha(a)bespin.de - http://www.bespin.de -. | Alle Macht den Raeten gegen Staat und Kapital... | | Anarchist Academy | `-- On this earth for 24 years, 85 days <----------------'

1 0

ZCatalog abset id bug
by Jason Spisak 07 Jan '00

07 Jan '00

Zopsters, Can anyone recreate this bug. Zope 2.1.1, Intel RH 6.1, Python 1.5.2 Call CreateInObjectManager of a ZCatalog aware ZClass to create an instance. In the reation method call reindex_object. It gives you an Uncatalog of absent id error. All my best, -- Jason Spisak webmaster(a)hiretechs.com

2 1

Some apparent limitations of the Zope security model
by Ross Boylan 07 Jan '00

07 Jan '00

For some work I am doing I need to have a security model, and my initial take is that Zope's security model will not meet my requirements. So I should just implement my own, and bypass Zope's. I'd like to throw this out for discussion, since I could be overlooking something, or this could be a useful comment on the security model. My decision is driven by 3 concerns, 2 of which are fundamental to the architecture. 1) The concept of ownership I have seems different from Zope's. If I have a person object P with a part A, I want the owner of part A to be P. But I believe that the owner of A will in fact be whoever created A. So if an administrator, or an administrative program, creates A, the "owner" of A is the administrator. Obviously my premise is that I want some access controlled by person, rather than some larger group. 2) Also, I have some permissioning that I want to do in a way broader than person, but more narrow than a particular role I would think appropriate to create in Zope. Specifically, several people may be in the same family. I want the family to have certain access rights (not the same as those for an individual family member). This is easy to implement in code, but does not seem to fit the Zope security model. The only thing I can think of would be to create named family roles on the fly ("familySimpson", "familyFlintsone", etc) but--even if name collisions were finessed--this seems ugly. I also have my doubts that the Zope permission model would work will with the many roles such a scheme would produce. The 3rd reason is practical, rather than fundamental: 3) If I do it myself, I don't have to worry about getting my classes, which I may want to do as simply python objects, to play in the somewhat hard to grasp Zope framework. I welcome comments.

1 0

Calling a stored function with the Oracle DA
by Jim Cain 07 Jan '00

07 Jan '00

All, The "begin procedure (x, y, ..); end;" syntax works for procedures okay, but how do I call a function? The typical quick & dirty way in sqlplus is variable x number -- or whatever begin :x := function (a, b, ...); end; This function actually does updating, so I can't use the pragmas to make it acceptable in a select. Thanks, Jim

1 0

ODMG compliance?
by Kenneth Y.K. YOUNG 07 Jan '00

07 Jan '00

ODMG Compliance On June 14, 1994, the ODMG Board ( http://www.odmg.org/ ) approved a list of object databases as ODMG Compliant and ODMG Certified. ZODB doesn't appear on that list. Ditto for CORBA integration. Anyone knows how standards compliant we are and will be? I can't find any info on that in the FAQ. Kenneth Young

3 3

Showing the "SQL Used"
by David Symons 06 Jan '00

06 Jan '00

Hello. I have been trying to find the way to display the actual SQL query that has been run (in the same fashion as the "SQL Used" displayed while testing an SQL Method). Can anyone help? TIA, David. -------------------------------------------------------- David Symons email: david_symons(a)hotmail.com Canberra, Australia The message below is inserted by the mail provider ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

SybaseDAv2 and identity columns
by Bill Anderson 06 Jan '00

06 Jan '00

OK, so I have an identity column many of my tables. For osme of what I do, I need to select some stuff, and then provide links to search further, based upon this unique id field (identity is a numeric). Normally not a problem...however, the number is returned as: "1L" or "2L", as opposed to "1" or "2". FWICS, this is somehow being reported as a 'long' int, hence the 'L'. Unfortunately, the breaks things, since you cannot get a list of rows, and then serach on the database using the identity section form the result (The actual entry doesn't contain any alpha characters). I have encountered this on HPUX and Linux, and on multiple servers. Anyone have a workaround or fix? Preferable one that does not involve using DTML to strip out the 'L'? TIA, Bill -- In flying I have learned that carelessness and overconfidence are usually far more dangerous than deliberately accepted risks. -- Wilbur Wright in a letter to his father, September 1900

3 3

BTW on ZCatalog Bug
by Jason Spisak 06 Jan '00

06 Jan '00

Using this code: <dtml-in "Catalog(id=id)"> <dtml-var url> <dtml-var absolute_url> <dtml-var "getpath(data_record_id_)"> </dtml-in> I get this response: staff/Companies/19 http://superman:8080/Catalog /staff/Companies/19 Hope that helps. -- Jason Spisak webmaster(a)hiretechs.com

1 0