- Zope-Dev - Zope lists

[ZConfig] elementary function framework and "env" function
by Dieter Maurer 16 Jan '04

16 Jan '04

We often have the need to use the same configuration value both in a ZConfig configuration as well as in other non-ZConfig based "components". Prominent examples are the "INSTANCE_HOME" in the Zope/ZEO startup scripts and the "INSTANCE" definition in the corresponding configuration files. Moreover, configuration values are sometimes arithmethically related, but ZConfig lacks arithmetic capabilities. An example is the ZEO port which should (under some conditions) be derived from "PORT_BASE". Giving "ZConfig" access to the environment, allows configuration setup to use the arithmetic capabilities of the shell and communicate configuation values via the environment between "ZConfig" based components and components that use different configuration schemes. The attached patch gives "ZConfig" an elementary function framework. An application can register functions with "ZConfig". These functions can be called through "substitution". Its syntax is similar to "gmakes" function call: $(f) calls function "f" with no arguments $(f a1,a2,...) calls function "f" with arguments "a1", "a2", ... Arguments are "," separated, stripped and substitution expanded before they are passed to the function. "," can be escaped through duplication, "(" is not allowed in the "ai" (although they can come up after substitution). Functions are called with "mapping" as additional first argument (such that they can do fancy things; e.g. implement Bash's "default" interpolation ("${name:-default}"). The patch uses the framework to implement a single function "env": env(name, default=None) returns the value of "name" in the environment or "default". If the result it "None", a "KeyError" is raised. -- Dieter

1 0

[ZConfig] "redefine" extension
by Dieter Maurer 16 Jan '04

16 Jan '04

It is often favorable to have a set of site wide defines that can occasionally be redefined for special purposes. The attached patch adds a "%redefine" directive to ZConfig's "cfgparser". "%redefine" behaves exactly like "define" but does not check whether the name is already defined. -- Dieter

1 0

Re: 2.7 assertion with CVS of that morning two days ago
by Clemens Robbenhaar 15 Jan '04

15 Jan '04

Hi Robert, > Hi Tres, > Adding 'guarded_hasattr' to the list of items wrapped items did not help. > I guess You have taken Tres too literally. I did the same (i.e. adding the string 'guarded_hasattr' to the _NEED_WRAPPING list) and could reproduce Your issue. After wandering through the code a while I think Tres meant the function "guarded_hasattr" to be registered under the name "hasattr" ... > I do not really understand what happens. > I don't either, but the follwing works for me :) diff -w -u -r1.1.2.2 Implementation.py --- AccessControl/Implementation.py 12 Jan 2004 23:58:39 -0000 1.1.2.2 +++ AccessControl/Implementation.py 15 Jan 2004 18:38:34 -0000 @@ -92,7 +92,7 @@ from DocumentTemplate import DT_Util from ZopeGuards import safe_builtins -_NEED_WRAPPING = ('max', 'min', 'iter', 'enumerate', 'sum') +_NEED_WRAPPING = ('max', 'min', 'iter', 'enumerate', 'sum', 'hasattr') for k, v in safe_builtins.items(): if k in _NEED_WRAPPING: Chers, Clemens

2 1

Re: [Zope] Zope Patterns
by Lennart Regebro 15 Jan '04

15 Jan '04

Douwe Osinga wrote: > Do other people recognize this pattern? Other solutions? With DTML this is indeed the way to go. The other solution with be to use ZPT.

1 0

Re: [Zope] Converting a web site
by Lennart Regebro 15 Jan '04

15 Jan '04

John Poltorak wrote: > I woulde be interested in converting an existing web site with numerous > fairly static pages into one managed by Zope. > > How would I go about doing this? > > It seems pretty tedious having to upload each file individually, which is > the only way I have found of doing it so far. In all cases but one where I have been involved in converting one site to a Zope managed site, the people have scrapped the old site completely, and made a new one from scratch, with a new, improved structure and layout. It involves a lot of copy/pasting text from the old site, sure, but the end resul is better. If you are just to have a bunch of static files, you can just as well just use Apache anyhow. :) And if you don't, there are products that let you store the files on the harddisk, where they are now, accessing them through Zope, but not needing to import them. LocalFS is the most common one, I think.

1 0

2.7 assertion with CVS of this morning
by robert 14 Jan '04

14 Jan '04

I refreshed my 2.7 from CVS this morning (7.30 MEZ) and get the following traceback: Robert Site Error An error was encountered while publishing this resource. TypeError Sorry, a site error occurred. Traceback (innermost last): * Module ZPublisher.Publish, line 163, in publish_module_standard * Module Products.PlacelessTranslationService.PatchStringIO, line 45, in new_publish * Module ZPublisher.Publish, line 127, in publish * Module Zope.App.startup, line 203, in zpublisher_exception_hook * Module ZPublisher.Publish, line 100, in publish * Module ZPublisher.mapply, line 88, in mapply * Module ZPublisher.Publish, line 40, in call_object * Module Shared.DC.Scripts.Bindings, line 261, in __call__ * Module Shared.DC.Scripts.Bindings, line 292, in _bindAndExec * Module App.special_dtml, line 175, in _exec * Module DocumentTemplate.DT_Let, line 75, in render * Module DocumentTemplate.DT_Util, line 201, in eval __traceback_info__: _ * Module <string>, line 0, in ? TypeError: guarded_hasattr() takes exactly 2 arguments (3 given) (Also, an error occurred while attempting to render the standard error message.)

3 7

_.min and _.max still used by ZMI
by Travis Miller 14 Jan '04

14 Jan '04

hi Dirk, i just (configure/make/make install)ed Zope-2.7.0-b4 and i immediately ran into the .min/.max/... security changes when i tried to rename an object through the ZMI. i tried your patch but after the change, zopectl errors when run: zope@travis-desktop:~> ./InstanceHome27b4/bin/zopectl start Error: The object named by "DBTab.ClassFactories.autoClassFactory" could not be imported (line 822 in file:///opt/Zope/InstanceHome27b4-2/etc/zope.conf) For help, use /opt/Zope/SoftwareHome27b4/lib/python/Zope/Startup/zopectl.py -h when i rollback the patch zopectl runs again, but ofcourse the max call still fails. any ideas? thanks, travis

2 1

Security audit introduced problem in PageTemplates/Expression.py
by Stuart Bishop 13 Jan '04

13 Jan '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The 'security audit work for the 2.7 branch' commit on 8th Jan made the following change in PageTemplates/Expression.py: *************** *** 312,318 **** # Skip directly to item access o = object[name] # Check access to the item. ! if not validate(object, object, name, o): raise Unauthorized, name object = o continue - --- 307,313 ---- # Skip directly to item access o = object[name] # Check access to the item. ! if not validate(object, object, None, o): raise Unauthorized, name object = o continue *************** *** 367,373 **** raise else: # Check access to the item. ! if not validate(object, object, name, o): raise Unauthorized, name object = o - --- 362,368 ---- raise else: # Check access to the item. ! if not validate(object, object, None, o): raise Unauthorized, name object = o This has the side effect of not passing the name attribute to my security assertion methods registered via ClassSecurityInfo.setDefaultAccess: class Foo(blah, blah, blah): security = ClassSecurityInfo() def _checkAccess(self, name, value): if name.startswith('CG'): return 1 return 0 security.setDefaultAccess(_checkAccess) def __getitem__(self, key): ''' Access via dictionary interface, with security provided via _checkAccess ''' return 'example' Reversing the changes to Expression.py seems to break lots of things (including SiteErrorLog), so I'm sure this is much more involved. Can anyone shed light onto what is going on? - -- Stuart Bishop <stuart(a)stuartbishop.net> http://www.stuartbishop.net/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (Darwin) iD8DBQFAA4AFAfqZj7rGN0oRArWMAJ96sb9wKkx9qqstiB+78cZ1LrtW8ACggNX8 +uCQkzQGvbgIzW8Sb4C9kAE= =7xyW -----END PGP SIGNATURE-----

1 0

RE: [Zope-dev] ESI support
by Bjorn Stabell 13 Jan '04

13 Jan '04

Jens: > > Zope does not need "ESI support" - You can write ESI statements in > > your templates without specific support from Zope. Yes, but I think they were planning to make it easier from DTML/ZPT, a la JSP's ESI library.

3 2

Problem in tar.py
by Jonas Thor 12 Jan '04

12 Jan '04

There seems to be a problem in the functin oct12() in file Packages/App/tar.py. The problem appears if you tries to add a file to a tar archive which mtime is newer than Sat Jan 10 14:37:04 2004. Current version of oct12() in tar.py: <-- snip --> def oct12(i): i=oct(i) return '0'*(11-len(i))+i+' ' <-- snip --> Suggested changes: <-- snip --> def oct12(i): i=oct(i) if len(i) < 12: return '0'*(11-len(i))+i+' ' else: return i[1:12]+' ' <-- snip --> I've posted a issue to Zope Collector, 1177. Cheers, /jonas

1 0