March 2000 - Zope - Zope lists

Need help with site structure
by Mitch Duvall 15 Mar '00

15 Mar '00

I'm setting up a Zope site, and would like to know if the approach described below makes sense. I imagine this is a no-brainer for the more experienced, but I'd appreciate some feedback so I don't go too far afield. Thank you! In a nutshell, the site will give customers the ability to run reports against application data that we're hosting for them. There will also be an area for developers to log on and tweak parameters of the hosted app. User Management --------------- To keep the user accounts organized, I'd like each customer organization (say, ABC Corporation) to have a folder that contains an acl_users folder. I'd merely prefer to look at a few users at a time instead of seeing them all together. When a users logs on, I'd like that user to have a role of custUser, custAdmin, or custDeveloper. I'd define these roles at the root. I'd also like the user to acquire (if that's the term) properties of the customer account, such as customer ID, so customer ID would be a property of the customer folder(?). So folder-wise there'd be; root/customers (containing...) root/customers/abc_corp /... root/customers/xyz_corp (each with an acl_users folder) Site Content ------------ This side of the site seems straightforward. The user's role will determine what's visible/accessible, and the user's acquired customer ID will determine which application data can be included in reports. root/mysite (will contain content sub-folders, such as...) root/mysite/eggs /spam /reports /developers (custDeveloper role required for access) (more content sub-folders) So the question is... --------------------- My main question is the user authorization / acquisition piece. How do I run username and password through the contents of the root/customers folder? If the folder layout described above makes sense, is this authorization piece a job for a ZSQL Method, for GUF, or for both? Last week's "virtual folders / url's" thread provided interesting info ZSQL Methods. Also, any comments about holes or vulnerabilities in this approach are welcome. Thank you. Mitch Duvall __________________________________________________ Do You Yahoo!? Talk to your friends online with Yahoo! Messenger. http://im.yahoo.com

1 0

Zope and enterprise data access
by James W. Howe 15 Mar '00

15 Mar '00

The company I work for is starting to get more requests for web sites which need to have access to enterprise data. We have several Java people on staff and most of these projects are currently being done (or planned to be done) using JSP/Servlets and Enterprise Java Beans. The problem that I have with this solution is that there is very little in the way of content management available in this environment, without rolling your own. What I would really like to be able to do is build the client interface using Zope, so I can easily blend static content, dynamic content and content management, with access to enterprise data. I know that Enterprise Java Beans are accessible via CORBA, so theoretically it should be possible to access this data through Zope/Python. My basic question is this, is there anything available (free or otherwise) which would make it fairly easy for Zope to interact with something like Enterprise Java Beans? Are other people trying to use Zope in an environment where access to enterprise data is important? If so, are there other solutions to this problem? What I would really like to be able to do is use Zope in combination with a DBMS to build smaller systems, but when the need arises, I would like to be able to scale things up to allow for distributed data object access. Any thoughts, suggestions or comments on this subject? Thanks. James W. Howe mailto:jwh@allencreek.com Allen Creek Software, Inc. pgpkey: http://ic.net/~jwh/pgpkey.html Ann Arbor, MI 48103

1 0

zserver restart
by Peter Sabaini 15 Mar '00

15 Mar '00

zopistas, during load testing i often see zope / zserver restart or exiting silently even if the loads are rather moderate. i'm doing my load testing with apache benchmark, concurrency level around 10. doing: ======================= > ab -n 500 -c 10 -v 2 -k http://mysite:8080/tstfolder/test This is ApacheBench, Version 1.3 Copyright (c) 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/ Copyright (c) 1998-1999 The Apache Group, http://www.apache.org/ Benchmarking druck.kleinezeitung.at (be patient)...INFO: POST header --- GET /tstfolder/test HTTP/1.0 User-Agent: ApacheBench/1.3 Connection: Keep-Alive Host: druck.kleinezeitung.at Accept: */* --- Broken pipe ======================= gets me a broken pipe on the one end, and on the other i can see zserver restarting, or just dying. /tstfolder/test is modeled after my real application, fairly expensive db stuff. /tstfolder/test is <dtml-in "_.range(1,50)"> <dtml-in some_simple_oracle_select> <dtml-var titel> </dtml-in> </dtml-in> "some_simple_oracle_select" being a simple zsql method. the system is zope 2.1.4 on a suse linux 6.1 we're going into production soon and we will have to support medium loads -- can anybody help? peter. -- _________________________________________________ peter sabaini, mailto: sabaini(a)niil.at -------------------------------------------------

2 1

<dtml-if>
by Alessandra Pessolano 15 Mar '00

15 Mar '00

I have some problems with <dtml-if> comand. It's possible to insert the following expression: <dtml-if "OUTPUT == 'PROENG' and 'MATRIX'"> OK </dtml-if> Is it right? Thanks in advance

5 4

MIMETools question...
by Dmitry Ishutkin 15 Mar '00

15 Mar '00

G'Day. I need sending mail with multiple file attachement... But really cool product MIMETools is not ready fully. Quotation from MIMETools Readme: "Currently, the MIMETools product's only function is to provide the  DTML tag." When expected implementing of  tag? Thanks, Dima.

3 2

RE: [Zope] sub-transaction in DTML?
by Jay, Dylan 15 Mar '00

15 Mar '00

> -----Original Message----- > From: Michel Pelletier [mailto:michel@digicool.com] > Sent: Wednesday, March 15, 2000 4:19 AM > To: Jay, Dylan > Cc: 'zope(a)zope.org' > Subject: Re: [Zope] sub-transaction in DTML? > > "Jay, Dylan" wrote: > > > > I have a method that takes a long time on a system that > uses a level 2 DA, > > therefore it blocks the entire site > > To be more specific, it blocks all other requests through > that and other > level 2 DAs. Non SQL related calls and level 3 DA calls will not get > blocked. > > > (it also uses UserDB so everything uses > > the DB). > > Yeah that kinda puts a damper on the whole site... but that's just > because every access is now an SQL related call. but having a DB manage my user data is not an unresonable requirement on a site. > > How can I put sub-transactions in my DTML to give others a chance > > to use the site? > > This is not what ZODB sub-transactions do. Even if you were using a > relational database that has a notion of sub-transactions (Oracle has why do I need a concept of a sub-transaction. Is there just something that I can call that will commit all changes up until a certain point and then begin the new transaction? I realize this will break the transaction model to some extent but if the method is long and each iteration is indepedent this seems a reasonable thing to do. > 'nested transactions' for example) that would not stop the > blocking (of > course if you were using Oracle you would be using a level 3 DA...). > ZODB sub-transactions allow changed objects to get flushed to a temp > filestorage so that you can accumulate more object changes > then can fit > in virtual memory. There is no mapping of sub-transaction > semantics to > any of the DAs. In fact, if I remember correctly using ZODB > sub-transactions with SQL methods is Not A Good Thing. I > don't remember > the exact details. > > Solutions? Execute a shorter query or upgrade to a concurrent DA. To do the work using a shorter query would mean breaking the method up into chunks and then having to call it multiple times which is pretty ugly. Tell me how to get a concurrent DA on NT without breaking the bank and I'll do it. So far I have: - MS SQL server - Apparently sybaseDA will work but havn't been able to compile it on NT. You need certain files from sybase I believe. - SQLAnywhere - same problem as above. - Oracle - too expensive. - MySQL - No transactions. - PostgresSQL - Got the NT binaries but can't get it working. Also can't compile the postgresDA. - ODBC - Not level 3. As far as I can tell the above represents all the options I have open to me. > -Michel >

2 1

pcgi2 and error
by - 15 Mar '00

15 Mar '00

hi all, managed to install pcgi2 and got it working. however, i got errors in apache log file. [Wed Mar 15 17:55:42 2000] [error] error during ap_rwrite of stdout [Wed Mar 15 17:59:15 2000] [error] error during ap_rwrite of stdout [Wed Mar 15 17:59:17 2000] [error] error during ap_rwrite of stdout [Wed Mar 15 18:00:07 2000] [error] error during ap_rwrite of stdout [Wed Mar 15 18:11:04 2000] [error] error during ap_rwrite of stdout [Wed Mar 15 18:11:09 2000] [error] error during ap_rwrite of stdout [Wed Mar 15 18:13:08 2000] [error] error during ap_rwrite of stdout [Wed Mar 15 18:14:10 2000] [error] error during ap_rwrite of stdout i think this is the same error i got if i use fastcgi ( connection refused). if i use pcgi, i still got this error but at a much lesser rate. can anything be done? which knob to turn? which bolt to tighten? anybody? tks. -- ------------------------------------------------------ http://www.kedai.com.my/kk Am I Evil?

2 1

RE: [Zope] dtml-in iteration over a string.split
by Daniel.Weber＠SEMATECH.Org 15 Mar '00

15 Mar '00

> On Tue, 14 Mar 2000, Daniel.Weber(a)SEMATECH.Org wrote: > > I've put the following in a SQL method, but can't figure > out where the count > > ends up... > > > > <dtml-in "_.string.split(tool_id)"> > > > > tool_id is a string (like 'EXP01 EXP02 EXP03'). For my > normal DB activities I > > use count-attribute name for the count total, but I can't > seem to find out where > > the count is stored in this example... I tried getting the key with > > sequence-key, which returned 1, but count-1 returns 0. > > > if you want the size of the list, just use sequence-size I can't get this to work at all: <dtml-if "sequence-size > 1"> zope complains about not being able to find 'sequence'. I had solved this issue before with a let tag <dtml-let size=sequence-size>, but it seems very wasteful and adds a lot of syntax overhead to the code. How can I access the sequence variable in an expression? > > > from this, it looks as though you want to check if you're at > the start of the > list, in which case you can test sequence-start Actually, I'm checking to see if I've got multiple elements. If I do, then I use IN () in my DB query, else I put in =. When I split the string, I don't know if I have multiple items.

4 3

WorldPilot folders
by Stuart Baird 15 Mar '00

15 Mar '00

I'm running WorldPilot 1.0.4 on Zope 2.14 with the stock IMAP server that comes with Mandrake 6.1 (I suspect this is the same as with RedHat). Everything works fine but I can't create or use new folders. WorldPilot properly displays the mail in my "Inbox" which is located at "/var/spool/mail/sbaird" on the server. I can create new mail foldersrs from within Worldpilot, but I can't access them from WorldPilot (I can from other IMAP clients). The mail folders created are placed in "/home/sbaird/" as "INBOX.personal" etc. I suspect this is just a directory mapping issue but after reading everything I can I can't figure it out. Any help would be appreciated. Stuart Baird ICLEI

1 0

acl_users and differing behaviour with Netscape/IE
by Alexander Limi 15 Mar '00

15 Mar '00

Hi. In our development, we stumbled over some behaviour that caused us quite a headache for a while. We managed to find a less than elegant solution, but it works for now. The case is this: We have the following structure (greatly simplified :) rootfolder | |-images | |-artists | | | |-acl_users | | | |-Artist1 | |-Artist2 | |-...etc As you can see, we have separated the "acl_users"-folder belonging to each of our artists into the "artists"-hierarchy. All images we use are located in "images", under the root folder. The problem appeared when we used DTML similar to the following inside the artists-folder: <dtml-with images> <dtml-var picture> </dtml-with> In IE, this would work just fine, Zope got the "picture" object from the "images" folder and displayed it - no problem. But with Netscape and Mozilla, we got authentication problems. It seemed as though Netscape insists on sending the authentication request no matter what, and is actually denied access to material that can be read by anybody (ie: the objects in our "images" folder). As far as we can see, this is a result of us having an extra "acl_users" folder in the "artists" folder. Thus the logged in artist is not a user in the root hierarchy, but only from "artists" and further into the tree. We've solved this problem temporarily by putting duplicates of the images in the "artists" folder. My questions are thus: 1. Should we move the "acl_users" folder to our root folder? If possible, we would prefer separating the artist users into their own folder, to avoid clutter. But they should be able to access the rest of the site, like any anonymous user. 2. Is this a problem with the way Zope authenticates users? Shouldn't users that don't authenticate correctly at least have access to the content readable by anonymous users? Or have I done something terribly wrong? :) You see, we plan on having a "listeners" folder too, where we are going to store individual listeners' preferences (what artists they want to be notified of, what music categories they prefer, etc) - and I assume we will run into the same problems here - users being authenticated only in the "listeners" folder and below. They should be able to browse the normal web, however, and add artists to their notify-list. Does this acl_users have to be in the root user folder too? Please CC me, as I don't have access to the list at the moment. Regards, Alexander Limi.

1 0