- Zope-Dev - Zope lists

is an object in a folder
by Florent Guillaume 31 Aug '04

31 Aug '04

I'd like to add a method like def hasObject(self, id): """Test if an object is in the current object.""" for o in self._objects: if o['id'] == id: return 1 return 0 to ObjectManager. This would bring it in line with BTreeFolder2 (who already has an hasObject method) and we could then always use the most efficient method to test if a folder has a given subobject id. Opinions ? Florent -- Florent Guillaume, Nuxeo (Paris, France) +33 1 40 33 71 59 http://nuxeo.com mailto:fg@nuxeo.com

6 7

closed collector issues 1252 and 1308
by yuppie 31 Aug '04

31 Aug '04

Hi! Just want to let you know that I'm not happy with the way these two collector issues were "resolved": <http://zope.org/Collectors/Zope/1252> <http://zope.org/Collectors/Zope/1308> Hope at least one of them will be re-opened. Cheers, Yuppie

4 11

Questions and suggestions for PAS and BasicRequest.
by Lennart Regebro 31 Aug '04

31 Aug '04

Background for zope-dev: Me, Tino and Zach has been discussing and working a bit on PAS, to fix the problems I had last week. Most have now been fixed. Some new ones arrived instead. :) The two first have to do with both Zope and PAS: 1. The challenge() currently requires you to either raise a Redirect or and Authenticated exception, to go to a login-page or get a login-box. This is because if you just return from challenge without any exception BasicRequest will later raise unauthorized. This means you can not do response.setBody() or even response.redirect(). One possible solution for this is to NOT provoce the challenge from the user folders verify() method, but challenge from Response.unauthorized(). 2. I would assume that a redirecting challenge will redirect a webdav client too. That is a bad idea, and needs to be taken care of (by PAS I assume, but not 100% sure how). These further two are more PAS specific: 3. If you have a PAS in the Zope root, and you have a broken challenge plugin, you may not be able to log in at all. This also needs to be taken care of in one way or another. One way could be to always allow username:password@url authentication for emergency user. Other ideas could be to have some setting to disable challenges and restart the server, or something like that. 4. The only plugin to actually do any proper challenges as of today, is my newly created CAS-plugin. Question: Do you want that as a part of PAS? I can simply check it in there. Otherwise it will become a separate product. //Lennart

1 0

New function for error log
by Christian Theune 29 Aug '04

29 Aug '04

Hi. I'm continuing to improve my small nagios plugin for Zope. I started to include error messages in the sensor. Therefore I was missing a way to get error messages out of the error log to signal nagios that everything is fine. I have a working patch attached (it references an image that is ready to be added as well). Due to the fact that this is a feature and the code provides no unit test infrastructure (and I don't have the time to start doing that for the error log) I'd like to know what the general rule for Zope 2 is, If I want to make improvements to existing code that isn't covered by unit tests at all. I'd check this in to the svn trunk if you like. Cheers, Christian -- Christian Theune <ct(a)gocept.com> gocept gmbh & co. kg

3 8

Protected session items?
by Lennart Regebro 27 Aug '04

27 Aug '04

In TransientObject __guarded_setitem__ is just set to __setitem__. This means, that everything you set in the session dictionary is changeable through user code. Is there a good reason for this? I think it would be nice if I could set secret things in the session, mainly authentication information. If i do this currently, any user code can change it, which isn't exactly safe. REQUEST.SESSION['__ac_username'] = 'root' Ooops! :) This change: def __guarded_setitem__(self, k, v): if k[0] == '_': raise SomeThingOrAnotherError self.__setitem__(k, v) Fixes that. Then you can only set it from protected code. Is there some reason why this is NOT a good idea? //Lennart

4 6

APE leaving SQL transactions open
by Paolo Bizzarri 26 Aug '04

26 Aug '04

Hi all. We're making our first experiments with APE. The environment is Zope 2.7.1 on Linux. We're using APE 0.8.1. A problem we encountered is that APE leaves the final db transaction neither commited nor aborted, in the normal behaviour. I mean, this is what is going on here: 1) I create a new object under the /sql folder 2) all the required SQL transaction is done, and data is commited on the DB 3) a new SQL transaction begins (corresponding to the new zope transaction) for the new page but this last SQL transaction is never closed. The short story is that you can see the (in)famous "idle in transaction" message on a ps axf on the box Since we had very bad experience with the "idle in transaction" in the past, we would like to know if this is a known behaviour, if it is safe, and why. Thank you all. Regards Paolo -- Paolo Bizzarri - President - Icube S.r.l. Address: Via Ridolfi 15 - 56124 Pisa (PI), Italy E-mail: p.bizzarri(a)icube.it Web: http://www.icube.it Phone: (+39) 050 97 02 07 Fax: (+39) 050 31 36 588

2 4

how to start workflow instance on another zope serverwith SOAP?
by Aruna Kathiriya 25 Aug '04

25 Aug '04

Hi, I am very new to open source. I am trying to start an instance of a workflow on a Zope server from another Zope server. I did successfully with XML-RPC call but I need to do it with SOAP. I am note sure weather I can do it or not. I am running two Zope servers on my local m/c on 2 different ports. One is 8080 and 2nd one is 8090. On 8080: Page_template : SoapTest2 <html> <body> Activate instance at other server: <span tal:define= " l_user python:request.get('AUTHENTICATED_USER');"> <form action="SubmitNewSoapTest2" method="post" enctype="multipart/form-data"> <input type="file" name="p_file"><br> <input type="hidden" name="user" tal:attributes= "value python:l_user;"> <input type="hidden" name="password" value="Aruna"> <input type="submit" value="Submit"> </form> </span> </body> </html> SubmitNewSoapTest2 is external method. the python script for that is testTrigger as follow. from SOAPpy import SOAPProxy import xml.sax def startTestInstance2(self,p_file,user,password): myFile =p_file.read() # parser = xml.sax.make_parser() # parser.parse(myFile) url = 'http://localhost:8090/' namespace = 'urn:xmethods-testInstance' server = SOAPProxy(url, namespace) return server.SoapTestInstance(p_file,user,password) On 8090: I have a python script SoapTestInstance having 3 parameters (p_file,user,password) and following code. wf = context.TestFlow i_id = wf.addInstance('TestProcess', '', '', '', 0) instance = wf.getInstance(i_id) instance.manage_addFile(id="theFile", file=p_file, title="") wf.startInstance(i_id) wf.activateWorkitem(i_id, '0', user ) wf.completeWorkitem(i_id, '0') return "created new instance with code %s" % i_id It gives me following error. Error Type: SAXParseException Error Value: http://www.w3.org/TR/REC-html40/loose.dtd:31:2: error in processing external entity reference Any help will be appriciated. I already stucked here.. Thanks Aruna Kathiriya Sr.Consultant CIGNEX Technologies, Inc T: 408.501.0455 x 306 F: 408.273.6785 C: 408.896.1330 E: harish(a)cignex.com U: www.cignex.com "Implement IT Right"

1 0

Preventing scripts from being called directly
by Dario Lopez-Kästen 25 Aug '04

25 Aug '04

Hello, I am trying to prevent PythonScripts from being called directly TTW. Is there a better way of doing this than the following code being called at the very begining of the script? if script.getPhysicalPath() = context.REQUEST.PUBLISHED.getPhysicalPath(): raise "UnAuthorisedOrSimilar" Thanks, /dario -- -- ------------------------------------------------------------------- Dario Lopez-Kästen, IT Systems & Services Chalmers University of Tech.

3 5

Transaction problems and publisher
by Florent Guillaume 24 Aug '04

24 Aug '04

I've reopened bug 789 (http://collector.zope.org/Zope/789) because we observed problems in Zope 2.7.2 with transaction abort by the publisher. The problems can make objects disappear or provoke POSKeyErrors. Florent -- Florent Guillaume, Nuxeo (Paris, France) +33 1 40 33 71 59 http://nuxeo.com mailto:fg@nuxeo.com

2 1

Re: [Zope-dev] Patch: let non-seekable streams be input for ZPublisher (updated)
by Ames Andreas (MPA/DF) 24 Aug '04

24 Aug '04

Hello, Leonardo Rochael Almeida wrote: > Yes, if you file a feature request on the bug collector, which can > be found at: I've put the most recent version of the patch to http://collector.zope.org/Zope/1472. cheers, andreas

1 0