May 2003 - Zope - Zope lists

Zope and Sendmail,Squishdot Login Problems
by Zope＠Stylus 07 May '03

07 May '03

HI all I am working on MandrakeLinux8.2,Zope2.5.1, I am trying to use this example from ZOPELABS to send a mail .When I use this ,IF I am logged into the ZMI i am able to send mails.But if I am trying to access this same script from an application that I have built in Zope then the following Error (UNAUTHORIZED) is thrown after asking for logging into the ZMI.Bu then my applicatin is not actually logging in Users to Zope since all the back end USers validation is done with the RDBMS i am using(Postgres) tables.I am facing thi same Problem when I am using SQUISHDOT when i try to send a reply to a Forum message the application asks me to Log in.But the user is already logged in with cvalidation done frm Postgres.How should I go about resolving this issue?I want to add folders and upload Files and Images ,Use Squishdot and use SendMail form my application but I am not actually logged into Zope (I am logged into my application).But since these users do not exist in acl_users in Zpoe it is not allowing me to access any ofthese.Please guide me as to how I can go about this problem and get all these done. try: mailhost=getattr(context, context.superValues('Mail Host')[0].id) except: raise AttributeError, "cant find a Mail Host object" mMsg = 'a testful email message \n that contains a few line breaks. \n ~runyaga' mTo = 'runyaga(a)abc.com' mFrom = 'runyaga(a)xyz.com' mSubj = 'mail subject' mailhost.send(mMsg, mTo, mFrom, mSubj) ==================================================== Zope Error Zope has encountered an error while publishing this resource. Error Type: Unauthorized Error Value: You are not allowed to access send in this context Thanks in Advance for all Help. Best regards John --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.476 / Virus Database: 273 - Release Date: 4/24/2003

2 1

[ANN] TextIndexNG 2.0 alpha 1 released
by Andreas Jung 07 May '03

07 May '03

I am pleased to announce the release of TextIndexNG 2.0 alpha1 . What's new in TextIndexNG 2.0? - Relevance ranking of search results added. Searches are now ranked using an extended cosine measure. The cosine measure is based on a vector model and calculates the document "score" based on the frequency of the query terms inside the document result set. - Much faster phrase/near search: the old implementation of TextIndexNG had to perform a very expensive job at query time when phrase/near search was performed. Re-using the !WidCode module of !ZCTextIndex made this operation less expensive. - Left-truncation added: TextIndexNG can be configured creation-time time to support left-truncation (means you can search for "*suffix") - optional auto-expansion support: This optional feature also to get better search results when some of the query terms could not be found. The index expands a query term "foo" to "foo*" if there was no hit for "foo". This expansion is currently global for the index. This feature will be available on a per-query basis in a later version. (Auto-expansion will be extended in a later version to search for similiar terms) - improved HTML converter: now using Chris Withers "Strip-o-Gram" module instead of the Strip-Tag-Parser - added converter for text/sgml - Similarity search (soundex, metaphone, doublemetaphone) dropped and replace with a more general approach and language indepedant approach using the Levenshtein distance. - internal code cleanup, more unittests Not implemented yet - improved support for multilingual documents - range searches like "Fi..Foo" - substring searches "*substring*" - optional improved ranking for terms based on their relative positions inside a document Installation notes TextIndexNG 2.0 is *not compatible* with TextIndexNG 1.0 so there is currently no migration path for existing indexes. - **BACKUP YOUR Data.fs first!!!** - remove any existing TextIndexNG from your ZCatalog indexes - shutdown Zope - remove the old Products/TextIndexNG directory - untar the tarball in the Products folder - recompile and install extension modules (see InstallationInstructions) - restart Zope - re-create the indexes and re-index Download: http://sourceforge.net/project/showfiles.php?group_id=50052 Project Wiki: http://www.zope.org/Members/ajung/TextIndexNG/

2 2

Re: [Zope] Network Appliances NetCache vs. Squid
by Marc Burgauer 07 May '03

07 May '03

Hi Scott, thanks for the reply! This is going to be a bit lengthy, as I tried to fully describe the problem at hand. Interestingly enough, I started out asking this list how I can determine best usage of the cache mechanisms built into Zope. There are two bottlenecks in the site. 1.) Images We are only responsible for programming and hosting of the site. The customer has chosen to give the HTML coding part of the work to a design agency. All pages, images and data are stored in the ZODB! We have trained the HTML coders (2 years ago) and written some tip sheets explicitly telling them to use absolute referencing for images from the root-level images-directory. However in a recent re-design of the site, they have ignored this advice and all images are now referenced relatively. In any bog standard web server environment, those paths wouldn't work. (As they are simply wrong.) But thanks to Zope inheritance, it just climbs up the directory tree and ultimately finds the images. So the coders never spotted their mistake. Example: The images are all stored in a root-level image directory or subdirectories of it: /images/navigation/home.gif /images/mainlogo.gif /images/navigation/news/nextitem.gif The site contains 45 "microsites" which have identical page-structure, the y have all the same pages, but different data. So each microsite has a news page. On such a news page all three images above are required. The HTML code for these images reads: <img src=images/navigation/home.gif ...> or <img src=images/mainlogo.gif ... > or <img src=images/navigation/news/nextitem.gif> The microsites are all root level directories. The news pages are in subdirectories of each microsite. The templates use "includes" for most of the page components and these includes are in the root. For example: newslisting.dtml /newyork/news/list /london/news/list /paris/news/list /munich/news/list A browser or proxy trying to cache things will resolve any of the images to be "local" to the news directory and not identify them all being the same image. So caching will only work for pages within the same subdirectory, but not across all pages on the site, even they all use the same logo. Obviously, I could go and edit the 100+ include files and fix the false referencing. However, that would only fix about half of the image-caching problem, as some images are stored in image folders within each microsite. Obviously, this task is labour intensive and I look for a quicker fix. Also, the person responsible for the site within the customer has changed and the new guy wants to change the site's look and feel in around 6 months (when he has new budget) to be less image rich. At the moment each page contains at least 30 images, most being albeit small. But as they are mainly text links rendered to images using a not-so-common font (Stone) we (me and the customer) agree that making the real text links in the next revamp will improve usability and speed up page load time. Is Zope's RAM cache manger going to help delivering the images here? Most of them are under 10Kb in size. Obviously the times saved would be fetching them from the ZODB on disk. 2.) Zope responding to request Zope is responding slowly to any initial request. You can see in the browser's status bar the "connecting to site" message for about 15-20 seconds before anything happens, at peak usage time this can go up to nearly a minute. The site is "busy" from around 6am to 1am, with a peak usage between 4pm and 7pm. I believe that the issue here is how many requests can be served in parallel. The box itself could serve more, neither CPU, RAM nor network are maxed out. CPU load is usually around 30% even at peak usage. So I was wondering if running ZEO and 2 instances of Zope pointing at the same ZODB on the same machine would improve things. Content changes frequently overall, but many pages don't change for weeks. Most pages are truly dynamic (i.e. content managed). Packing the database every night has not improved performance. And because of the true dynamic nature of the site I wonder how well a cache like squid would improve the site. (I have never done any caching, although recently read a lot about this.) We're using Zope 2.3 on a Solaris 8 server (Compaq, 2 P2 450MHz CPUs, RAID Disk array, 1 Gig of RAM). The box and OS has been chosen by the customer and there's no room for play currently. (OS is company policy and no money for another box.) We have developed a few "light-weight - very easy to use" content management products for Zope and have run into a few problems when testing them against Zope 2.5/2.6, hence we still stick with 2.3 for production sites until all bugs are fixed. Cheers Marc > Date: Mon, 28 Apr 2003 10:41:36 -0700 > From: Scott Burton <scott(a)posplugin.com> > Subject: Re: [Zope] Network Appliances NetCache vs. Squid > To: zope(a)zope.org > > Why do you really need to accelerate the site? > If you have a highly dynamic site, no acceleration appliances will work. > There may be a few things you can do on your end first to see if there is > something easy to do to your instance of Zope. > > Have you run profiling to see what is the bottleneck? Are there some > expensive scripts that may need some reworking for better performance? > Profiling can help with that. Do you efficiently use Zope's caching > mechanisms like caching templates and images in ram, or increasing the size > of the ZODB cache? What OS is running Zope? Could you proxy Apache in front > of Zope on the same machine using mod_cache to speed up images etc.? Could > you build a simple 1u Linux box with ZEO and Squid on it as the accelerator > for less than a netappliance? > > I would look into those things(if you haven't already) before worrying about > a caching/accelerator.

3 2

strange behaviour of user.has_permission
by robert 07 May '03

07 May '03

Hi there, I have a freshly created plone portal. I added a user "schmid" with no roles at all I added a document "Doc" Then I created a script that tested for all permissions wheter user schmid has it. The following script returned true on every permission. This is very wrong. What is the problem ?? user = context.acl_users.getUserById('schmid') for p in context.possible_permissions(): print " %s, %s" % (,p, user.has_permission(p, context)) return printed mit freundlichen Grüssen Robert Rottermann www.redCOR.ch

2 3

Why does logout not work
by Andreas Pakulat 06 May '03

06 May '03

Hi, can somebody explain to me why the following doesn't work in a python script: request.AUTHENTICATED_USER.logout() I get an AttributeError from Zope Andreas -- It is so very hard to be an on-your-own-take-care-of-yourself-because-there-is-no-one-else-to-do-it-for-you grown-up.

2 2

Transfer directory from old Zope version to new Zope version.
by Tri Quach 06 May '03

06 May '03

Hello, I need help! I just installed Zope version 2.6.1. I would like to move my data from my old Zope 2.5.1 to new Zope. Please give me some hint how to move the data. Thank you for your help. Tri.

3 2

Multi-User File/Document Sharing
by Chris Cochella 06 May '03

06 May '03

Dear Zope Community, I am evaluating Zope for a particular purpose: Secure document sharing. Scenario: Lawyer wants to share documents (Word, Excel) with multiple clients. Thus, the lawyer (admin) needs the ability to upload/download files for multiple client "accounts". The client only needs to download/upload files associated with their account. In addition, we would need a "stamp" of the filename, show uploaded (downloaded) it, file size, file type, description, etc. The files are not Website "content" per se, so I am not sure if this fits into the scope of what Zope is capable of "out of the box". Any suggestions or comments are greatly appreciated. Best regards, Chris

2 1

RE: [Zope] Multi-User File/Document Sharing
by Meilicke, Scott 06 May '03

06 May '03

It sounds like the CMF (cmf.zope.org) or Plone (www.plone.org) would fit this role. The CMF rides on top of zope, and plone rides on top of the CMF. The CMF and Plone give you content types that can be binary (word, excel, etc), and you can code the templates to show various properties. -Scott -----Original Message----- From: Chris Cochella [mailto:chris@streamcapture.com] Sent: Tuesday, May 06, 2003 11:13 AM To: zope(a)zope.org Cc: Chris Cochella Subject: [Zope] Multi-User File/Document Sharing Dear Zope Community, I am evaluating Zope for a particular purpose: Secure document sharing. Scenario: Lawyer wants to share documents (Word, Excel) with multiple clients. Thus, the lawyer (admin) needs the ability to upload/download files for multiple client "accounts". The client only needs to download/upload files associated with their account. In addition, we would need a "stamp" of the filename, show uploaded (downloaded) it, file size, file type, description, etc. The files are not Website "content" per se, so I am not sure if this fits into the scope of what Zope is capable of "out of the box". Any suggestions or comments are greatly appreciated. Best regards, Chris _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient or any employee or agent responsible for delivering it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files.

1 0

restrictedTraverse() security problem
by Terry Hancock 06 May '03

06 May '03

Hi All, I have a call like this in restricted code: Home.restrictedTraverse(username).profile() which should call a method "profile" on a "UserPB" object (this method is public information, and should be visible to anyone). The catch is that UserPB is a wrapper on a database record, which I'm adding by using a __bobo_traverse__ method: class Home(Folder): meta_type = 'Narya-Home' __implements__ = HomeAPI security = ClassSecurityInfo() security.setDefaultAccess("allow") # ... def __bobo_traverse__(self, REQUEST=None, name=None): """Get a UserFolder if it exists, or a UserPB.""" try: return getattr(self, name) except: return self.getUser(name) def getUser(self, username): """Retrieve UserPB object from username.""" return UserPB(self.DB._getUser(username=username)[0]).__of__(self) class UserPB(Acquisition.Explicit, Item): """Basic wrapper for user data from database.""" __implements__ = UserPBI # ... def __init__(self, sqlres): """ Create a UserPB object by wrapping the SQL search result. """ for k in sqlres.__record_schema__.keys(): setattr(self, k, getattr(sqlres, k)) Accessing this causes an error """ Error Type: Unauthorized Error Value: You are not allowed to access foo in this context """ (where "foo" is the actual username). There is such a user, and the wrapper works perfectly when called from unrestricted code, so the problem is definitely the security. Here's the tail end of the traceback: """ File /usr/local/narya/z2.5.1/lib/python/DocumentTemplate/DT_Util.py, line 159, in eval (Object: Home.restrictedTraverse(username).post_score(nposts, nrecent, nmarkup, ndoc, nfaq, nlink, ngallery, nproj)) (Info: username) File <string>, line 0, in ? File /usr/local/narya/z2.5.1/lib/python/OFS/Traversable.py, line 163, in restrictedTraverse (Object: Home) File /usr/local/narya/z2.5.1/lib/python/OFS/Traversable.py, line 130, in unrestrictedTraverse (Object: Home) Unauthorized: (see above) """ Which indeed is the security check: [OFS/Traversable.py]: """ if (not securityManager.validate(object, container, name, o)): raise Unauthorized, name """ So it seems I need to do something to "call off the dogs" here. I've already set my default policy in "Home" to "allow" -- what's missing? Do I have to explicitly call a security method to do that, or is there an attribute or something needed? Also, is it really the Home or the UserPB object whose security is not right? I have not yet been able to figure out where "validate()" is actually defined -- it seems the securityManager object expects to inherit or acquire it from somewhere. I realize there's probably another way to do the large task here, but there are a number of reasons why it's more convenient to do this mimicry trick to make a database record look like a simple child object of Home -- not least of which is that I want to handle them in parallel with persistent Zope objects ("UserFolder") which implement an identical "UserPBI" interface. Any suggestions or ideas would be very much appreciated! Thanks, Terry -- Terry Hancock ( hancock at anansispaceworks.com ) Anansi Spaceworks http://www.anansispaceworks.com

1 0

using RevisionManager
by Fred Yankowski 06 May '03

06 May '03

I'm experimenting with RevisionManager 1.0.1 to see if it could help manage changes in a Plone-based portal project. So far it's not going well. I created a RevisionManager object at the top of a Plone site, and in the import tree selected the entire site (the top folder in the tree). That fails with an exception: Module ZPublisher.Publish, line 98, in publish Module ZPublisher.mapply, line 88, in mapply Module ZPublisher.Publish, line 39, in call_object Module Products.RevisionManager.RevisionManager, line 1126, in rm_import Module Products.RevisionManager.RevisionManager, line 592, in importModule Module Products.RevisionManager.RevisionManager, line 964, in writeToFS Module Products.RevisionManager.RevisionManager, line 244, in _get_source Module ZPublisher.mapply, line 89, in mapply Module Products.CMFCore.FSPythonScript, line 152, in document_src AttributeError: _source It looks like RevisionManager is confused by FSPythonScript objects, which seem to have a document_src attribute but no _source attribute. OK, fine, trying to slurp in the entire plone site was reckless. So then I deleted that RevisionManager object and created a new one, this time taking the other extreme and selecting for import only a single File object at the top of plone portal tree. That went OK: the RevisionManager object lists that imported object as being under CVS control, in the context of the portal folder. The corresponding CVS folders and files exist under $INSTANCE_HOME/var/RevisionManager/ and in the cvs repository. But now it seems to be impossible to add any more objects to be controlled by that RevisionManager. Its 'Add objects' tab lists no objects and reports "All objects that can be managed with RevisionManager are already being managed". Similarly, the 'Map files to objects' tab lists nothing. So, how _do_ I put more objects under CVS control? -- Fred Yankowski fred(a)ontosys.com tel: +1.630.879.1312 OntoSys, Inc PGP keyID: 7B449345 fax: +1.630.879.1370 www.ontosys.com 38W242 Deerpath Rd, Batavia, IL 60510-9461, USA

1 0