February 2002 - Zope

BUG? Non-manager can't edit ZPT with WebDAV or FTP; can with ZMI
by Joel Burton 19 Feb '02

19 Feb '02

Synopsis: A highly-privileged non-manager user can edit all content types through WebDAV or FTP *except* PageTemplates. If user is changed to a manager, they can now edit PageTemplates through WebDAV/FTP. Demonstration/Walkthrough: 1) in folder "/foo", create local role "test" 2) in "/foo", give role "test" *all* permissions (in theory, this person would only need a few privileges; to remove any possibility that we're guessing the wrong privileges, select them all) 3) add user "bob" w/role=test 4) create a ZPT document "test.pt" in "/foo" 5) create a DTML DOcument "test.dtml" in "/foo" 5) see that bob can edit both documents using ZMI w/o problem. (therefore, it's not privileges per se that's causing the problem) 6) see that using WebDAV/FTP, bob can edit "test.dtml" (therefore, it's not WebDAV setup per se that's causing the problem) 7) see that using WebDAV/FTP, bob *cannot* edit "test.pt" (!) 8) add manager role to bob 9) now bob can edit "test.pt" through WebDAV/FTP (therefore, it's not simply ZPT+WebDAV that's causing the problem) Notes: I've tried FTP and 3 WebDAV clients (cadaver, WebDrive, Dreamweaver); all return an unauthorized message. This isn't a firewall, client, or locking problem: I can't do it from the server using cadaver; I've tried different client machines; using cadaver, I can't even GET the file (which makes no attempt to lock it.) WebDAV editing of ZPT is a critical feature for my clients. I can't give the editors "manager" role w/o opening huge security holes. Using cadaver w/debug settings, I can get detail on the requests and responses: the forbidden edit request (step #7 above) just re-requests authentication twice and fails. Happy to send the cadaver log to anyone who might find it helpful. Can anyone edit ZPT through WebDAV or FTP with non-managers? Can anyone shed any light on this problem? I do read zpt(a)zope.org, but a cc to me directly would be appreciated. Thanks in advance! -- Joel BURTON | joel(a)joelburton.com | joelburton.com | aim: wjoelburton Independent Knowledge Management Consultant

1 0

Re: [Zope] Priority of processes in Zope
by oliver.erlewein＠sqs.de 19 Feb '02

19 Feb '02

Hi Matthew Thanx for your answer. I'm still batteling furiously with Solaris and Zope. As opposed to Win NT / MacOS X / Linux Solaris seems to be running Zope in a single thread. For details see the zope-news-thread on "threading, dtml and performance". You can check this by running a complex dtml-method and trying to access anythin else on that site at the same time. My system freezes for as long as the huge task takes. My Solaris servers: Zopeserver 1 (Sun R280/4GB Ram/4 CPU's/ Solaris 2.8 - I think /not dedicated) Pystone(1.1) time for 10000 passes = 2.03 This machine benchmarks at 4926.11 pystones/second Zopeserver 2 (PIII 1Ghz DELL 19"/512Mb Ram/1 CPU/ Solaris 2.7/dedicated Zope) Pystone(1.1) time for 10000 passes = 0.85 This machine benchmarks at 11764.7 pystones/second That sortof justifies your hunch on what is cheaper (the sun is about 15 times the price of the DELL rack). If you use the server for other programs aswell then the Intel looses the cutting edge due to the one processor. Oliver Erlewein > Hi Oliver, > > Threading priority is a dynamic computation by the Solaris > scheduler -- > the thread with the lower priorities are dispatched first -- but once > you get dispatched your priority raises if you finish your timeslice > without entering a wait state (well, that may be a simplification). > > Because Python is controlled by a large central lock, only one thread > can be doing any useful work most of the time. There are > exceptions to > this rule, but most of Zope is compute-bound, not IO-bound. The net > effect is that you rarely see more than a few threads in Zope > doing work. > > More interesting to note is that the performance of Zope is > pretty much > linear with the results of the "pystone" benchmark. So, if you run > > python /usr/local/lib/python2.1/test/pystone.py > > you might get a number like > > blade(3)$ python /usr/local/lib/python2.1/test/pystone.py > Pystone(1.1) time for 10000 passes = 1.77 > This machine benchmarks at 5649.72 pystones/second > > That's my results on a SunBlade 100 (500 Mhz UltraSPARC IIe). > > Its worthwhile noting that I get the following result on a > 500 Mhz Intel > Celeron: > > djinn(12)$ python2.1 > /usr/local/python-2.1.2/lib/python2.1/test/pystone.py > Pystone(1.1) time for 10000 passes = 1.47 > This machine benchmarks at 6802.72 pystones/second > > from which you may draw two conclusions: 1) Gcc on SPARC > doesn't emit > the best bytecodes, and 2) Intel CPUs run Python more > cost-effectively > than SPARC chipsets do. > > -- > Matt Kromer > Zope Corporation http://www.zope.com/ > > >

2 1

AW: [Zope] Priority of processes in Zope
by oliver.erlewein＠sqs.de 19 Feb '02

19 Feb '02

Hi Oleg Thanx for your answer but...please do a "ps -efljL" (the L stands for LWP - Lightweightprocess) otherwise you don't see the threads! Oliver Erlewein

2 1

Priority of processes in Zope
by oliver.erlewein＠sqs.de 19 Feb '02

19 Feb '02

Hi all Me again with my Solaris problems (threading, dtml and performance)... I've now checked on my threads. I've got 8 of them. Most have differing priorities and the same nice level. <snip> 8 S webuser 422 1 422 422 1 3 0 78 20 ? 764 ? 04:34:55 ? 0:00 /usr/local/bin/python /portal/ 8 S webuser 422 1 422 422 2 3 0 68 20 ? 764 ? 04:34:55 ? 0:00 /usr/local/bin/python /portal/ 8 S webuser 422 1 422 422 3 3 0 68 20 ? 764 ? 04:34:55 ? 0:00 /usr/local/bin/python /portal/ 8 S webuser 423 422 422 422 1 8 0 41 20 ? 2777 ? 04:34:55 ? 0:47 /usr/local/bin/python /portal/ 8 S webuser 423 422 422 422 2 8 0 46 20 ? 2777 ? 04:34:55 ? 0:00 /usr/local/bin/python /portal/ 8 S webuser 423 422 422 422 3 8 0 41 20 ? 2777 ? 04:34:55 ? 1:09 /usr/local/bin/python /portal/ 8 S webuser 423 422 422 422 4 8 0 46 20 ? 2777 ? 04:35:05 ? 0:31 /usr/local/bin/python /portal/ 8 S webuser 423 422 422 422 5 8 0 99 20 ? 2777 ? 10:24:42 ? 1:18 /usr/local/bin/python /portal/ 8 S webuser 423 422 422 422 6 8 0 41 20 ? 2777 ? 10:24:50 ? 0:19 /usr/local/bin/python /portal/ 8 S webuser 423 422 422 422 7 8 0 41 20 ? 2777 ? 10:24:50 ? 0:00 /usr/local/bin/python /portal/ 8 S webuser 423 422 422 422 8 8 0 41 20 ? 2777 ? 10:24:55 ? 0:00 /usr/local/bin/python /portal/ </snip> Can somebody on a Solaris Zope please call "ps -eflLj | grep python" and tell me if they have a similar result? I'm wondering about the thread with the PRIO=99. That's the thread doing all the work. Is that correct?? I don't suppose so. The other threads don't seem to work. Thanx a lot! Oliver Erlewein

3 2

(n00b question) Passing variables to dtml methods
by Matt Gregory 19 Feb '02

19 Feb '02

How do you pass variables to DTML methods? I attempted to enclose in a dtml-let block but that had no effect.

3 3

RE: [Zope] Custom 404 html message
by Richard Barrett 19 Feb '02

19 Feb '02

At 09:19 14/02/2002 -0800, Chris A. Bruce wrote: >I know about that, but what if I want a error message specifically for 404 >and nothing else? > Taking the basic standard_error_message and changing like this might work: <dtml-if "error_type == 'NotFound'"> <dtml-comment> Add special handling for 404 Not found here </dtml-comment> <dtml-else> <dtml-comment> Put the contents of the default standard_error_message DTML method here </dtml-comment> </dtml-if> >-----Original Message----- >From: Richard Barrett [mailto:R.Barrett@ftel.co.uk] >Sent: Thursday, February 14, 2002 9:17 AM >To: Chris A. Bruce; zope(a)zope.org >Subject: Re: [Zope] Custom 404 html message > > >At 09:04 14/02/2002 -0800, Chris A. Bruce wrote: > >Is there a way to customize a page not found error? > >I found editing or creating a dtml method called standard_error_message >worked just fine. You should have one (the basic default) lurking somewhere >in your zope database. > > > >Chris Bruce > >Director of Information Technology > >The Sleeter Group > >925-416-6300 > >cbruce(a)sleeter.com > > > > > >_______________________________________________ > >Zope maillist - Zope(a)zope.org > >http://lists.zope.org/mailman/listinfo/zope > >** No cross posts or HTML encoding! ** > >(Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev )

5 7

RE: [Zope] Please help newbie access her control manager/panel
by Jeffrey Robinson 19 Feb '02

19 Feb '02

(Forgot to post back to the list!) Hithere; When starting a new install on the couple Windows machines that I worked with, the first time to start often took a few minutes. I'm assuming that it is compiling all the associated Python modules (forgive me if my terminology isn't correct). At one point it took upwards of 5-10 minutes (for the initial start). Once Zope starts it should show you some additional information such as what port and address Zope will be running at. The screenshot looks very much like it is still working on starting up, to me. Jeff > -----Original Message----- > From: J. Stuff [mailto:junkystuph@hotmail.com] > Sent: Tuesday, February 19, 2002 8:54 AM > To: lennart(a)regebro.nu; zope(a)zope.org > Subject: Re: [Zope] Please help newbie access her control > manager/panel > > > Hello! > > When I try the following: > http://localhost:8080 > http://127.0.0.1:8080 > http://joplop-alpha:8080 > the browswer says "page cannot be displayed." > > If the server is not started, how do I start it? I have > already run the > start.bat. I put a screenshot of what opens when i run it online: > http://lunamanium.com/startbat.gif > I don't see any port information on the start.bat command > window, so my next > question is, if it is started, how do I find out what port it > is using? > > I am glad there is somewhere for me to ask these questions. > Thank you very > much. > > Jessica Robinson > junkystuph(a)hotmail.com > > >From: "Lennart Regebro" <lennart(a)regebro.nu> > >To: "J. Stuff" <junkystuph(a)hotmail.com>, <zope(a)zope.org> > >Subject: Re: [Zope] Please help newbie access her control > manager/panel > >Date: Tue, 19 Feb 2002 10:48:38 +0100 > > > >Can you access it with http://localhost:8080/ ? If not, then > the server is > >either not started, or started on another port. The -D > setting is good, > >because that means that you will see what port is used when > the server is > >started. It prints that in the DOS box. > > > >----- Original Message ----- > >From: "J. Stuff" <junkystuph(a)hotmail.com> > >To: <zope(a)zope.org> > >Sent: Tuesday, February 19, 2002 8:08 AM > >Subject: [Zope] Please help newbie access her control manager/panel > > > > > > > Dear Zope Group, > > > > > > I am trying to use Zope at home and am wondering if > someone might be > > > willing to help me get started. I have installed Zope > 2.4.3 on my new > > > windowsXP machine, but I can't access the control > manager. I've tried > > > the following URLs: > > > http://localhost:8080/manage > > > http://127.0.0.1:8080/manage > > > and was told by my browser (IE 6.0) the "page cannot be > displayed." > > > Since those didn't work, I looked up my computer's hostname: I > > > typed "hostname" in a command prompt and found it is > "joplop-alpha." > > > So then i tried: > > > http://joplop-alpha:8080/manage > > > Still, "page cannot be displayed." I don't know how to change the > > > hostname or where it is even located as I am very unfamiliar with > > > windowsXP. > > > > > > When I run start.bat (as the online zope book instructs) > a dos prompt > > > opens containing the following information: > > > C:\Program Files\WebSite>"C:\Program > Files\WebSite\bin\python.exe" > > > "C:\Program Files\WebSite\z2.py" -D > > > I have read mentions of the -D being a default debugging > setting which > > > may need to be turned off. How do I turn it off? When I > put any of those > > > strings into the address area of my web browser, windows > wants to know > >what > > > program it should use to view it. > > > > > > I also ran across an article which suggested one may need > to create a > > > HOSTS file in the windows directory. I don't know how to > do that, but I > > > follow directions very well. > > > > > > During my latest installation of Zope I told it to run as a win32 > >service, > > > if that matters at all. I uninstalled Zope and > reinstalled it twice to > >try > > > to get it to work - once choosing the manual option > instead of the win32 > > > service option. I have a DSL connection and I don't have > any firewall > > > programs running (I did have Zone Alarm enabled, but > turned it of so it > > > wouldn't interfere). I've looked around on zope.org and > egroups' message > > > archives for hours and hours now, but have found very > little relating to > > > this problem. > > > > > > I may sound like a person who has no business trying to > use Zope, but I > > > use it at work everyday and love it. I can't wait to get > it going at > > > home. Any help will be unbelievably appreciated. > > > > > > THANK YOU!!!!!!!!!!!!!!!!! > > > > > > Jessica Robinson > > > junkystuph(a)hotmail.com > > > > > > > > > _________________________________________________________________ > > > Join the world's largest e-mail service with MSN Hotmail. > > > http://www.hotmail.com > > > > > > > > > _______________________________________________ > > > Zope maillist - Zope(a)zope.org > > > http://lists.zope.org/mailman/listinfo/zope > > > ** No cross posts or HTML encoding! ** > > > (Related lists - > > > http://lists.zope.org/mailman/listinfo/zope-announce > > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > > > > > > > > > >_______________________________________________ > >Zope maillist - Zope(a)zope.org > >http://lists.zope.org/mailman/listinfo/zope > >** No cross posts or HTML encoding! ** > >(Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > _________________________________________________________________ > Send and receive Hotmail on your mobile device: http://mobile.msn.com > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

Re: [Zope] Please help newbie access her control manager/panel
by J. Stuff 19 Feb '02

19 Feb '02

Hello! When I try the following: http://localhost:8080 http://127.0.0.1:8080 http://joplop-alpha:8080 the browswer says "page cannot be displayed." If the server is not started, how do I start it? I have already run the start.bat. I put a screenshot of what opens when i run it online: http://lunamanium.com/startbat.gif I don't see any port information on the start.bat command window, so my next question is, if it is started, how do I find out what port it is using? I am glad there is somewhere for me to ask these questions. Thank you very much. Jessica Robinson junkystuph(a)hotmail.com >From: "Lennart Regebro" <lennart(a)regebro.nu> >To: "J. Stuff" <junkystuph(a)hotmail.com>, <zope(a)zope.org> >Subject: Re: [Zope] Please help newbie access her control manager/panel >Date: Tue, 19 Feb 2002 10:48:38 +0100 > >Can you access it with http://localhost:8080/ ? If not, then the server is >either not started, or started on another port. The -D setting is good, >because that means that you will see what port is used when the server is >started. It prints that in the DOS box. > >----- Original Message ----- >From: "J. Stuff" <junkystuph(a)hotmail.com> >To: <zope(a)zope.org> >Sent: Tuesday, February 19, 2002 8:08 AM >Subject: [Zope] Please help newbie access her control manager/panel > > > > Dear Zope Group, > > > > I am trying to use Zope at home and am wondering if someone might be > > willing to help me get started. I have installed Zope 2.4.3 on my new > > windowsXP machine, but I can't access the control manager. I've tried > > the following URLs: > > http://localhost:8080/manage > > http://127.0.0.1:8080/manage > > and was told by my browser (IE 6.0) the "page cannot be displayed." > > Since those didn't work, I looked up my computer's hostname: I > > typed "hostname" in a command prompt and found it is "joplop-alpha." > > So then i tried: > > http://joplop-alpha:8080/manage > > Still, "page cannot be displayed." I don't know how to change the > > hostname or where it is even located as I am very unfamiliar with > > windowsXP. > > > > When I run start.bat (as the online zope book instructs) a dos prompt > > opens containing the following information: > > C:\Program Files\WebSite>"C:\Program Files\WebSite\bin\python.exe" > > "C:\Program Files\WebSite\z2.py" -D > > I have read mentions of the -D being a default debugging setting which > > may need to be turned off. How do I turn it off? When I put any of those > > strings into the address area of my web browser, windows wants to know >what > > program it should use to view it. > > > > I also ran across an article which suggested one may need to create a > > HOSTS file in the windows directory. I don't know how to do that, but I > > follow directions very well. > > > > During my latest installation of Zope I told it to run as a win32 >service, > > if that matters at all. I uninstalled Zope and reinstalled it twice to >try > > to get it to work - once choosing the manual option instead of the win32 > > service option. I have a DSL connection and I don't have any firewall > > programs running (I did have Zone Alarm enabled, but turned it of so it > > wouldn't interfere). I've looked around on zope.org and egroups' message > > archives for hours and hours now, but have found very little relating to > > this problem. > > > > I may sound like a person who has no business trying to use Zope, but I > > use it at work everyday and love it. I can't wait to get it going at > > home. Any help will be unbelievably appreciated. > > > > THANK YOU!!!!!!!!!!!!!!!!! > > > > Jessica Robinson > > junkystuph(a)hotmail.com > > > > > > _________________________________________________________________ > > Join the world's largest e-mail service with MSN Hotmail. > > http://www.hotmail.com > > > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > > > > >_______________________________________________ >Zope maillist - Zope(a)zope.org >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com

1 0

Re: [Zope] Supported platforms and versions of Python
by Jens Vagelpohl 19 Feb '02

19 Feb '02

do you have the developer tools installed? jens p.s.: PCGI is a really outmoded way of using zope. use simple apache proxying or rewrite rules instead. On Tuesday, February 19, 2002, at 04:55 , Wayne Pascoe wrote: > On 19/2/02 4:51 am, "Jens Vagelpohl" <jens(a)zope.com> wrote: > >> http://www.zope.org/Members/jens/docs/zope_osx > > Thanks for that. > > After reading the document, I am able to build Zope without the pcgi > server. > I would like to use Zope with a fastcgi connector from an Apache webserver, > so according to the docs, I need to build w_pcgi.py, not wo_pcgi.py > > Doing python2.1 w_pcgi.py produces the following output: > Building the PCGI Wrapper > . > . > Configure stuff > . > . > creating ./config.status > creating Makefile > make > cc -c -I. -I. -g -O2 -DPCGI_WRAPPER_MAIN -DVERSION=\"2.0a5\" > -DSTDC_HEADERS=1 -DHAVE_SYS_WAIT_H=1 -DHAVE_UNISTD_H=1 -DRETSIGTYPE=void > -DHAVE_PUTENV=1 -DHAVE_SOCKET=1 -DHAVE_STRERROR=1 -DUNIX -DOPT_NO_STDERR > -DCLOSE_FDS ./pcgi-wrapper.c > ./pcgi.h:61: header file 'sys/sem.h' not found > cpp-precomp: warning: errors during smart preprocessing, retrying in basic > mode > make: *** [pcgi-wrapper.o] Error 1 > Traceback (most recent call last): > File "/usr/local/Zope-2.5.0/w_pcgi.py", line 39, in ? > if __name__=='__main__': main(sys.argv[0]) > File "/usr/local/Zope-2.5.0/w_pcgi.py", line 32, in main > import build_pcgi > File "/usr/local/Zope-2.5.0/inst/build_pcgi.py", line 25, in ? > do('make') > File "/usr/local/Zope-2.5.0/inst/do.py", line 32, in do > if i and picky: raise SystemError, i > SystemError: 512 > > Building using python2.1 wo_pcgi works fine. It looks like I am missing a > header file (sys/sem.h). Is there any way to build Zope with pcgi support > on > OSX ? > > Thanks, > > -- > Wayne Pascoe <wayne.pascoe(a)ehsrealtime.com>

2 2

Big Downloads via Python Script
by Jens Fellenberg 19 Feb '02

19 Feb '02

Hi, I have the following problem. I want to manage Downloads trough a python script, that checks, if the user has permissions to download this file and then reads this file and returns it to Zope. But when I want to download files, that are bigger than 5 MB it tells me, that the file does not exist. Here's the part of the python script that reads the file. Name is the path to the desired file and the filename: def readfile(Name): if os.path.isdir(Name): return 0 if not os.path.exists(Name): return 0 f=open(Name, "rb") d = f.read() f.close() return d And that's the part of the zope DTML document: <dtml-let Download="here is the call for the python function that at first checks the users permissions and then reads the file"> <dtml-if "Download!=0"><dtml-call "RESPONSE.setHeader('Content-Type', guessMimeType(_['Desire']))"><dtml-var Download><dtml-else> <dtml-var standard_html_header> <center> <font color="#FF0000">Sorry, no such File (<dtml-var "_['Desire']">) in <dtml-var "_['area']"> Area</font> <form name=dummy> <input type=button name=back value="back" onClick="document.location='DownloadArea'"> </form> </center> <dtml-var standard_html_footer> </dtml-if> </dtml-let> Hope you can help me. Jens Fellenberg

1 0