November 1999 - Zope

Re: [Zope] Zope and security.
by Jeff Rush 10 Nov '99

10 Nov '99

On Wed, 10 Nov 1999 01:46:13 -0500, Otto Hammersmith wrote: >So, my question is, does there exist a laundry list of common Zope >misconfigurations? Does there need to be one (Zope.org tips)? The >solution is rather obvious (settings on the security tab for the folder) >but how do new users know to catch that kind of thing? Yes, there badly needs to be one. I've run across a few slip-ups and I'm sure we all here know of many more. As far as I know, there isn't even a precise description of each of the permissions that an administrator can review to decide which he wants to grant (ZQR?). I'd break it into two parts -- one for sites w/o members who can write DTML and one for those with -- similar to Unix boxes that do or do not give out shell accounts. Insider attacks versus outsider attacks. -Jeff Rush

1 0

how to hide things from tree-tag ??
by Geir B Hansen 10 Nov '99

10 Nov '99

I have a tree-tag, making a tree over all DTML-docs and Folders in my site.. works nicely.. Now, i'd like to hide some folders from the tree, but i cannot make this work.. (i'm not to clever with python expressions) my tree tag looks like this..  i have assigned a boolean property called 'hidden' to the folders i'd like to not show up. If i do something like this : <dtml-unless hidden> <dtml-if expr="meta_type == 'Folder'"> <P><A HREF="/<dtml-var tree-item-url>/"><dtml-var title_or_id></A></P> </dtml-if> </dtml-unless> - the titles are hidden, but the little plus-signs show up. This just looks confusing, and is not what i want.. so, i guess what i have to do, is to make an evaluation of some kind inside the branches_expr="" Is this correct ?? how do i fix it ? thanks ------------------------------------------------ Geir B Hansen geirh(a)funcom.com Web-designer / Graphic artist Funcom Oslo http://www.funcom.com ------------------------------------------------

1 0

Exception ThreadLock.error: 'release unlocked lock'
by Teemu Yli-Elsilä 10 Nov '99

10 Nov '99

Hello Zope experts, First of all I must thank everyone involved in the Zope development effort for a fantastic system. Thank you so much! It seems I've become a Zope evangelist in the company I work for, and not entirely without success even :) Now, after playing a bit with Zope, I decided to use it as a base for two separate projects. I seem to be having problems (ZODB corruption, I'm afraid) with both of these setups. The first one was found to be due to the partition where zope/var resides becoming full (although there was no other indication of this problem than weird corruption of objects to a point where they can't even be removed anymore). This was on Zope 2.0.0 binary release on Debian 2.1. My real problem is my recent install of Zope 2.0.1 from the binary tarball onto another server running Red Hat 6.0. I use SOLID RDBMS with jrush's ZODBCDA. I have a top-level UserDb handling all access control from my custom user info table (has the four standard fields, but others too). I made a snapshot from my home system (which seems to work fine) and imported it into the production server (SOLID tools for SQL data and Zope Export for DTML and SQL methods). Things seemed to work fine for a few hours, but soon I could not log in to the system anymore (traceback showed a cookie/LoginRequired related error), I just kept getting the UserDb login page. Restarting Zope helped. The thing that worries me is that from the console where I start Zope from manually, I get this error e.g. whenever I refresh the management interface: Exception ThreadLock.error: 'release unlocked lock' in <method Transaction.__del__ of Transaction instance at 8529f20> ignored Exception ThreadLock.error: 'release unlocked lock' in <method Transaction.__del__ of Transaction instance at 8539ed0> ignored Exception ThreadLock.error: 'release unlocked lock' in <method Transaction.__del__ of Transaction instance at 850eb68> ignored ...etc, with just the address changing every time. Is this the reason to the login problem I saw? Does this mean that ZODB corruption might be occurring? I have no knowledge as to the innards of Zope. What should I think of this/what can I do to fix it? Finally, I apologize but I'd like to ask you to please cc any answers directly to me as well, as I am not subscribed to this list. Thank you in advance for any help, -- Teemu Yli-Elsila Oulu, Finland

4 7

Re: [Zope] What about Postgresql as a viable database?
by Thilo Mezger 10 Nov '99

10 Nov '99

Stuart 'Zen' Bishop <zen(a)cs.rmit.edu.au> wrote: > My impression was PostgreSQL was that its main acceptance problem > was lack of marketing. If I had to ship a product tied to an > no-cost RDBMS I'd go with PostgreSQL or possibly Gadfly (havn't looked > into its feature set). yep, IMHO postgresql is the best open-source database. ok, mysql is a lot faster but then it lacks important sql-features (triggers, transactions, etc.) and it's not even open-source/gpl. gadfly is a little bit too simple for as it only implements a very small subset of sql92. i can only recommend postgresql-6.5.2 if you need an open-source no-cost database for some projects. try to keep your sql as standard as possible because then you can switch to oracle by simple replacing the zpostgresda by zoracleda... thilo -- mezger(a)innominate.de innominate AG networking people fon: +49.30.308806-11 fax: -77 web: http://innominate.de pgp: /pgp/tm

1 0

Jon Udell (Byte) on Linux/ODBC and MySQLDA difficulties
by Darcy Clark 10 Nov '99

10 Nov '99

http://www.byte.com/column/BYT19991104S0001 wow...I feel a whole lot better about myself after reading that Jon Udell had difficulties linking Zope to MySQL on Linux ;) His experience sounds a lot like mine, except I was eventually able to get it working. yay ! Actually the article is mostly about his percieved need for ODBC support on Linux. Darcy -- --------------------------------------------------- Ph: (734) 764 3377 Email: darcyc(a)engin.umich.edu URL: http://www-personal.engin.umich.edu/~darcyc/ --------------------------------------------------- 'If you're not part of the solution, you're part of the precipitate' ..... Steven Wright

7 11

Word -> XML, XML/XSL translation
by phil＠philh.org 10 Nov '99

10 Nov '99

Hi all Following the interest in the scripts I use to convert Word->XML and using XSL to transform XML, I've put some scripts onto a web page. Take a look at http://awesum.ml.uwcm.ac.uk:8080/xml_xsl_share. I'll get some docs written soon, for the moment have a look at the scripts. See Ya Phil phil.harris(a)zope.co.uk

1 0

hmmm
by Sam Gendler 10 Nov '99

10 Nov '99

This is the body of a dtml method <dtml-if language_id> <dtml-if "language_id=='2'"> <dtml-var ngo_contact_info_fr> <dtml-elif "language_id=='3'"> <dtml-var ngo_contact_info_es> <dtml-else> <dtml-var ngo_contact_info> </dtml-if> <dtml-else> <dtml-var ngo_contact_info> </dtml-if> The ngo_contact_info object is a dtml document that displays just fine when viewed on its own or called from a form If I call this method with language_id set to any value, I get the following error, every time: Error Type: ValueError Error Value: Invalid Header (0): Traceback (innermost last): File /home/sgendler/Zope-2.0.1-src/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /home/sgendler/Zope-2.0.1-src/lib/python/ZPublisher/Publish.py, line 179, in publish File /home/sgendler/Zope-2.0.1-src/lib/python/Zope/__init__.py, line 201, in zpublisher_exception_hook (Object: ElementWithAttributes) File /home/sgendler/Zope-2.0.1-src/lib/python/ZPublisher/Publish.py, line 165, in publish File /home/sgendler/Zope-2.0.1-src/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: ContactInfo) File /home/sgendler/Zope-2.0.1-src/lib/python/ZPublisher/Publish.py, line 102, in call_object (Object: ContactInfo) File /home/sgendler/Zope-2.0.1-src/lib/python/OFS/DTMLMethod.py, line 156, in __call__ (Object: ContactInfo) File /home/sgendler/Zope-2.0.1-src/lib/python/OFS/DTMLMethod.py, line 370, in decapitate ValueError: (see above)

1 0

Re: [Zope] Summary of DB Discussion
by Anthony Baxter 10 Nov '99

10 Nov '99

>>> Karl Fast wrote > - There is an ODBC DA, but it works only on Windows because there isn't a > good ODBC implementation on Linux. This isn't Zope's fault. I'm not sure that this is true - there are a number of ODBC drivers on Unix, some are open source, and mxODBC interfaces them to Python. ODBC drivers for databases are available in some cases. > - There are DA's for MySQL and PostgreSQL, the two open source databases > (yeah, yeah, MySQL isn't truly open source--although one of the older > version is). They work, although both are still in development (is this > active?) and some people have had troubles getting them to compile. > This seems especially true of the MySQL DA judging from pleas for help > sent to the zope list, although this may be more of a reflection of > MySQL's popularity over PostgreSQL. There's also gadfly. :) -- Anthony Baxter <anthony(a)interlink.com.au> It's never too late to have a happy childhood.

2 1

db type conversion question
by Sam Gendler 10 Nov '99

10 Nov '99

Is there a way to get zope to automatically keep fields returned from a SQL query as the correct type. Currently. my int fields are converted to string, which I then wind up having to convert back to int for comparisons, etc. I thought I saw some mention of a type dictionary in the db connection string, but I couldn't find any examples. I could have been mistaken, too. Someone please illuminate me. I am using MySQL by the way. --sam

1 0

Re: [Zope] Summary of DB Discussion
by Ian Willis 10 Nov '99

10 Nov '99

Postgresql is an extensible ORDMS ( Object Relational DMS )rather than a simple RDMS, this is the fundamental difference between the databases. This may effect the degree of integration of Zope with the database? The other major difference is extensibility, you can create special types such as IP address and create operators and optimised indexes for these in the database. Karl Fast wrote: > > I thought it might be worthwhile to sum up the various points about > databases and zope and linux that were made today. Please correct any > mistakes and provide any comments you have. > > - Zope has strong database connections for Oracle and Solid, with DB2 in > the works. These are all officially supported DA's. > > - There is an ODBC DA, but it works only on Windows because there isn't a > good ODBC implementation on Linux. This isn't Zope's fault. > > - There are DA's for MySQL and PostgreSQL, the two open source databases > (yeah, yeah, MySQL isn't truly open source--although one of the older > version is). They work, although both are still in development (is this > active?) and some people have had troubles getting them to compile. > This seems especially true of the MySQL DA judging from pleas for help > sent to the zope list, although this may be more of a reflection of > MySQL's popularity over PostgreSQL. > > - The big criticism against MySQL is the lack of transaction support. > MySQL > is not popular with the DC folks because of this. Their customers use > DB's with transaction support (Oracle, Sybase, and DB2) and their main > concern is developing and supporting DA's for DB's their clients use. > > - DC is looking for someone in the zope community to take ownership of > the MySQL DA (what's the status of the PostgreSQL DA?) > > - Despite it's lack of transaction support, it was agreed that MySQL > (a) is popular > (b) is very fast and a good choice for sites that do high volume > queries, but relatively simple and low-volume updates > (c) will be getting transaction support "real soon now" according > to the web site > (d) should have a good, up to date, Zope DA > > - PostgreSQL, the other open source DB, does support transactions. There > is > a Zope DA. Some people suggested that PostgreSQL is a bit buggy. Other > said that it works great. Everyone agreed that it's a bit on the slow > side, especially when compared to MySQL. > > What am I missing? > > What did I get wrong? > > ----------------------------------------------------------------- > Karl Fast > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > No cross posts or HTML encoding! > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev )

1 0