June 1999 - Zope - Zope lists

RE: [Zope] RE: What method do I use to check access? (and how do I do 'getitem' in an external method?)
by Jay, Dylan 08 Jun '99

08 Jun '99

> -----Original Message----- > From: Howard Clinton Shaw III [mailto:shawh@sths.org] > Sent: Thursday, May 27, 1999 21:45 > To: Jay, Dylan > Cc: 'zope(a)zope.org' > Subject: Re: [Zope] RE: What method do I use to check access? > > > On Wed, 26 May 1999, Jay, Dylan wrote: > > The problem with your solution is that it doesn't take into > account aquired > > permissions. > > > > >for i in AUTHENTICATED_USER.getRoles(): > > > if i in SomeObject._View_Permission.getRoles(): > > > return 1 > > >return 0 > > Oops. Think I just sent a message to the list which you had > already answered. > OK, with respect to acquisition, the Permission object > explicitly abandons > (assuming I understand this right) acquisition by setting the > obj it gets equal > to obj.aq_base if such exists. Now this would be a severe > kludge, but since > encapsulation in python is largely imaginary, you could try this: > > SomeObject._View_Permission=obj > for i in AUTHENTICATED_USER.getRoles(): > obj=SomeObject._View_Permission.obj > if i in SomeObject._View_Permission.getRoles(): > SomeObject._View_Permission=obj > return 1 > SomeObject._View_Permission=obj > return 0 > > Or conceivably: > > P = Permission('View','',SomeObject) > P.obj=SomeObject > for i in AUTHENTICATED_USER.getRoles(): > if i in P.getRoles(): > return 1 Ok, I'm still working on the problem. I've come upon a snag however. If I pass in SomeObject above I will get an "You are not authorized to access SomeObject" error. So instead I need to pass in the object id and get the object myself. However I have had no luck working out how to do this. What I need is the getitem method in an external method. Searching through all the code as left me none the wiser. Here's the closest I have. from AccessControl.Permission import Permission def hasPermission(self, pname, objName, AUTHENTICATED_USER): SomeObject = self.__getitem__(objName) P = Permission(pname,'',SomeObject) P.obj=SomeObject for i in AUTHENTICATED_USER.getRoles(): if i in P.getRoles(): return 1

2 1

FYI: Portal Toolkit Demo updated
by Amos Latteier 08 Jun '99

08 Jun '99

I just wanted to let you know that I've added a new animated GIF to the Portal Toolkit Demo. http://www.zope.org/Products/PortalToolkit/Tour/CollaborationAndTheDeskt op The new animated GIF shows off Zope's WebDAV and FTP integration. If you've never personally experienced the magic of using WebDAV or FTP to edit your Zope objects, be sure to check this out and start salivating. -Amos P.S. I can't wait for some more cool WebDAV clients! -- Amos Latteier mailto:amos@digicool.com Digital Creations http://www.digicool.com

1 0

RE: [Zope] Recursive aquisition: good or bad?
by Michel Pelletier 08 Jun '99

08 Jun '99

> -----Original Message----- > From: Tom Schwaller [mailto:Tom.Schwaller@linux-magazin.de] > Sent: Monday, June 07, 1999 5:19 PM > To: zope(a)zope.org > Subject: [Zope] Recursive aquisition: good or bad? > > > Hi all, > > during the last 2 weeks I faced a massive > performance problem with Zope because of > a mistake I made setting relative links > instead of absolute ones. I got things like: > > /change/change/all/update/search/change > > (different menu items clicked one after the other). > Zope caches all this paths (is that correct?), > so after a while Zope was very slow Hmm.. this was a performance problem? I would guess it wouldn't be that much of a problem unless your paths got REALLY big. > (many people working with the pages quite a lot, > during a hot production phase, so I got many > different paths. Clearing the cache or restarting > Zope "fixed" the problem) > > After that I detected machines calling objects like > > /issue1/article1/issue2/article3/news/index_html?newsid=500 > > although this kind of links do not appear when just surfing around > (looks like search engines doing bad things) > > So my question is: Is a link like > http://www.zope.org/Documentation/Information/Community/Information/QA > (which works) a feature or a bug of Zope? It's 'featurish'. This kind of thing falls under the feature/bug anti-duality law. It's not a bug, because it's doing exactly the right thing, it's not a feature, because it's generally not very useful. I can imagine a situation somewhere in which it is useful (don't call my bluff) but I can also easily immagine situations in which it's not very useful at all (below). > The problem is, that nobody can forbid people to call such links, > which is the problem I am facing right now (They just do it!). > At least things like > > /Documentation/Documentation/Documentation/Documentation You can't forbid people, no, but you can prevent such paths from being constructed from *your* code. I don't think there is any kind of Denial of Server attack possible from this, a mild annoyance at best. > should not be allowed or did I miss some Zope Zen? I think it should be allowed, and that the Zen be elaborated on a bit. You shouldn't design your site so that these things occur unless you really want it. -Michel

6 8

MySQL DA with Sun Solaris 2.6
by Joachim Schmitz 08 Jun '99

08 Jun '99

Hi, I'm trying to install the MySQL-DA under Solaris 2.6. After successfully compiling and linking, doing: > python Python 1.5.2 (#6, Jun 4 1999, 08:31:43) [GCC 2.8.1] on sunos5 Copyright 1991-1995 Stichting Mathematisch Centrum, Amsterdam >>> import MySQL Traceback (innermost last): File "<stdin>", line 1, in ? ImportError: ld.so.1: python: fatal: relocation error: file ./MySQLmodule.so: symbol __moddi3: referenced symbol not found I tried to use the linker-option -lgcc, but that results in a linker error. I put this already on the collector. Mit freundlichen Grüßen Joachim Schmitz ------------------------------------------------------------------------------ P R O F I . N E T A G * Joachim Schmitz * Senior Network Consultant ------------------------------------------------------------------------------ profi.net | Aindlinger Str. 7 | Voice +49 821 27062-0 Hassler & Mair AG | 86167 Augsburg | Fax +49 821 27062-99 | Germany | Email js(a)profi.net

1 1

RE: [Zope] Alpha version of mod_pcgi
by Michel Pelletier 08 Jun '99

08 Jun '99

> -----Original Message----- > From: Andrew M. Kuchling [mailto:akuchlin@mems-exchange.org] > Sent: Monday, June 07, 1999 5:10 PM > To: zope(a)zope.org > Subject: Re: [Zope] Alpha version of mod_pcgi > > > Amos Latteier writes: > >At 06:12 PM 6/6/99 -0400, you wrote: > >>I've been wanting to learn how to write Apache extensions > for a while, > >>and have written a mod_pcgi module. > > A note on the current status of the code: if you grabbed the > code as of sometime last night, mod_pcgi can happily talk to a > long-running PCGI process. I put up two updates after sending my > message, so if you grabbed it early, check that you have the latest > copy. > BTW Andrew this is a very essential piece. You win the Zope Hero of the month award. Jeff can crown you since he's the reigning PCGI hall of famer. We discussed mod_pcgi alot a day ago, and we want you and everybody to know that mod_pcgi will be a DC supported piece of software. Not to say that we will just rip it out of your hands and take it over, but if you feel like you've spent too much time on it or you're not interested in developing anymore, it won't die, we'll keep it alive (We need it!). That aside, we would still, of course, like someone in the community to be the mod_pcgi shepard. Although possibly a good bit of your time in the future could be taken up with mod_pcgi issues (Jeff, did you ever think PCGI would take up the amount of time it does for you?) we hope whomever shepards the mod_pcgi project will feel the warm heart glowing feeling of knowning that thousands of people are using your code everyday (get out the hankerchiefs). And of course, you can also feel the warm glowing feeling of wearing a Zope t-shirt! be the envy of your neighborhood! So let us know what you think about mod_pcgi, how much time (if any) you want to continue to put into it, how far along it has to go etc. And if there is anyone out there interested in helping contribute to what will be one of *the* most popular Apache modules in the near future, chime in. -Michel the mod_php3 but kicker > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

2 1

That Gadfly adapter.... *grin*
by Sean McGerty 08 Jun '99

08 Jun '99

Bugger. I've been using the following construct with ODBC SQL dbs for years... There's also matching examples in the Gadfly documentation, but Gadfly through Zope doesn't seem to like it: :select * :from A, B :where A.recNum = B.recNum And both recNum fields are of the same type. Simple you say? I thought so. Except it's coming back as blank and if I change the = to a <> all rows and columns are returned - including those which an eyeball search says have matching recNum values. Which makes one wonder if I'm missing something significant. It's almost 3am and I've been on this particular problem for a few hours now... Has anyone had a similar experience? Is there a difference in bahavior in Gadfly under Zope that could effect it? Sean. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= _ /\= ___ Sean McGerty aka DrBob C++::Java::Delphi::Web Developer / \ <*,-> mailto:DrBob@speednet.com.au m+61-412336990 Sydney Australia\_- _* [`-'] new address "Democracy: Four wolves and a lamb voting on lunch" v. -"-"-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

2 1

optional integer arguments
by Daniel M. Drucker 08 Jun '99

08 Jun '99

I'm still very unclear on how to construct a SQL Method that has optional integer arguments. For example: Document1:    Document2:    GetStuff: arguments: foo:int bar:int ??? is this correct? SELECT theanswer FROM some_table WHERE some_value=3 . . ??? what do I put here ??? . I want foo and bar to both be optional. . If they are both provided, they should be joined with AND .

1 0

announce: zope dataminer (dmc) version 0.1 - "the bleeding lizard release"
by Anthony Baxter 08 Jun '99

08 Jun '99

following the interests of the whole 'release often' school of development, I'm rather pleased to announce that version 0.1 of the zope dataminer is available for release, from http://www.interlink.com.au/anthony/dmc-0.1.tgz features of this release: Bugs. No documentation as yet, but it ships with a sample application which has a tutorial in it. ok, ok, some info about it - cribbing from the post I sent out just before: what is this? The data miner came about because I hate writing one off SQL queries for marketing people. It allows non-SQL-speakers to build up queries(*) interactively, viewing that query as a HTML table, a CSV file (can be read into Excel) or as a pretty graph (for the managers out there). What's more, the query, once complete, can be bookmarked, or if it's a graph, included in an <img src=""> tag. (*) once someone who speaks a small amount of SQL has set the dataminer up, of course. here's some example text, but the easiest thing to do is to get it, unpack it, follow the instructions in the Readme.txt to set up the sample one (shipped as a zope export.bbe file), and start playing. The system builds up a URL of the datamine contraints (DMCs) to apply. This might look like this: http://burswood:9080/ekorp/datamine_tnt/cons_day/opge1999.05.25/cons_day/co… or indeed might just look like this: http://blah/datamine/cons_day/data_minutes/showcsv The latter is the easier one, so I'll talk about it first. cons_day and data_minutes are both DMCs. When applied in a chain like this, they will produce SQL of: SELECT billing.date date, sum(billing.quantity) minutes FROM billing GROUP BY billing.date and then show the output as a CSV file. All well and good, and pretty easy. Each DMC has configured into it what to insert in a select clause, in the from clause, and in the group by clause. So for cons_day, it has a select clause of 'billing.date date', select_from of 'billing', and group_by of 'billing.date'. data_minutes is select: sum(billing.quantity) minutes, select_from: billing, and no group_by. (yes it will insert join clauses if the DMCs span multiple tables) Now, back to the first, more complex example (the one that's causing me pain) http://burswood:9080/ekorp/datamine_tnt/cons_day/opge1999.05.25/cons_day/co… Say we don't just want to get all the dates in the system, but want to only get the ones greater than a certain number? A DMC has a __bobo_traverse__ function, so that a URL fragment of: cons_day/opge1999.05.25/ will cause the cons_day fragment to apply "op"eration of "ge" (greater or equal) to 1999.05.25. Unfortunately in doing this, it modifies 'self', so it writes something to the ZODB each time. What I need is a way to say 'hey, don't pay any attention to me for a minute, I'm just fiddling some stuff, but I don't want it to be persistent'. So that example again, broken down a bit: http://blah/datamine/ -- folder containing all this. cons_day/opge1999.05.25/ -- constrain where date > 1999.05.25 cons_day/ -- but also group by, and select date cons_item/opeqTIME%20USED/ -- pick entries where the 'item' is 'TIME USED' cons_refcode/ -- group by refcode data_minutes/ -- select sum(quantity) showgraph -- display it as a graph this produces SQL of: SELECT billing.date date, accounts.account_group refcode, sum(billing.quantity) minutes FROM billing, accounts WHERE billing.account = accounts.account AND billing.date >= '1999.05.25' and billing.item = 'TIME USED' GROUP BY billing.date, accounts.account_group and then gives me back an image of a graph with the x-axis of dates, y-axis of 'minutes' and multiple lines, (one for each refcode) and a little legend in a box on the left-hand-side. This is about a moderate-complexity query - there's some here that span 5 tables and do all sorts of interesting joins. anyway, it's way way way way way way too late at night, and I'm about to fall asleep - which would be a bad thing to do in the car. Feedback to me - although if there's any obvious 'doh!' mistakes, feel free to send them to zope(a)zope.org as well - I won't be on email for 8-10 hours. Anthony -- Anthony Baxter <anthony(a)interlink.com.au> It's never too late to have a happy childhood.

1 0

RE: [Zope] (sort of teaser) Re: [Zope] Recursive aquisition: good or bad?
by Michel Pelletier 08 Jun '99

08 Jun '99

> -----Original Message----- > From: Anthony Baxter [mailto:anthony@interlink.com.au] > Sent: Tuesday, June 08, 1999 5:57 AM > To: Tom Schwaller > Cc: zope(a)zope.org > Subject: [Zope] (sort of teaser) Re: [Zope] Recursive aquisition: good > or bad? > > In more detail, the problem I have is that in the > bobo_traverse method, if > I get a constraint, I want to store this. The way I do this > is to instantiate > a new DMC - but one that's non-persistant, populate it, then > return it. > Unfortunately to get it to acquire everything else it needs, > I need to > attach it to the 'self' object with something like > > self.new = DMC_nonP(self.id, self.name, ....) > ... set the magic in the new object ... > return self.new > > Unfortunately this self.new assignment makes an entry in the > ZODB. Blah. > You could call it self._v_new and the persistence machinery will never store it in the database. Attributes starting with _v_ are 'volitile'. Do you want your new DMC_nonP objects to acquire from 'self' as their parent? You can do this without an assignment (I think this is right, never atctually put it to the test): x = DMC(...) return x.__of__(self) x must inherit ExtensionClass.Base to get this machinery. This returns an Acquisition wrapped object whose ac_parent is 'self'. -Michel the Acquired inherit at least ExtensionClass.Base to do this. > Anyway, I plan to fling a release of some sort out tonight, bug or no > bug. > > Anthony > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

3 2

Re: [Zope] Doing Python-ish things in Zope...
by Zope on a Rope 08 Jun '99

08 Jun '99

Thanks for the zippy reply. At 04:03 PM 6/7/99 -0400, Pavlos Christoforou wrote: >On Mon, 7 Jun 1999, Zope on a Rope wrote: > Now that worked like a charm. Cheers! >> That works well until I try to stay tidy and add subdirectories. I renamed >> my resource directory 'zzz' but when I put, say, an 'img' folder in it, the >> 'zzz' directory doesn't show up on the tree but the 'img' folder does. >> >> Any clues? > >I am not sure I understand what the problems is. I have a similar structre >as yours and I basically do: > > > >and it works fine. As it did for me. Good tip and thank you! >If this is of no help can you give us some more info? Please have a squint at the small graphic I've attached. Hopefully that'll explain it a bit better. I've temporarily renamed the title to show up. If I do change it back to start with 'zzz', it's hidden but the problem is the tree +/- still shows up. Thinking NT-like or -- gasp! -- Lotus Domino-like, is it possible to set an access control entry on a folder like this so anonymous users won't see it at all? A better solution maybe? Thanks! Jules

4 3