August 2003 - Zope - Zope lists

Auto password expiry based on time
by Exteam 16 Aug '03

16 Aug '03

Hi all, I have been trying to find a way to make the password to a zope site expire after a limited fixed time, unsuccesfully using python. I know I have to use acl_users but which file to modify in zope (which is used to log in the user)is the question. Also does this mean I have to recompile zope? Any help or direction would be highly appreciated. Regards Subhankar ________________________________________________________________________ Yahoo! India Promos: Win TVs, Bikes, DVD players & more! Go to http://in.promos.yahoo.com

2 1

RE: [Zope] Displaying a pdf file.
by Michael Guerrero 16 Aug '03

16 Aug '03

Thanks for your reply. Specifically I am trying to do the following: I have and existing application that does the following. 1) user enters data then hits save 2) data is stored in a oracle database 3) the data plus some calculates are displayed back to the user in html This works fine however I have a new requirement for #3. Instead of displaying the data back to the user in html, I am to take the data add disclamer pages (total 4-5 pages) and display it to the user in pdf format. To do this I plan to do the following after the user hits 'save': 1) save the data in the oracle database 2) call and external procedure that will run an oracle report to create the report, save it as a pdf file on the local unix file system (ex. 'myfile.pdf'). 3)?? THIS IS WHERE I NEED HELP ?? I now need some way of having the user view this pdf file. Am I over complicating this? From zope can I just call a url (even if its on another web server that displays) the pdf. I don't really need it in zope to view it, do !? Thanks. Mike -----Original Message----- From: J Cameron Cooper [mailto:jccooper@jcameroncooper.com] Sent: Friday, August 15, 2003 11:59 AM To: Michael Guerrero; Zope user list Subject: Re: [Zope] Displaying a pdf file. > > What is the best way to display a pdf file in a zope application. I > may select the file from an oracle database of get it from a file > system. I'm not sure at the moment. > > My Zope Bible book shows how to upload a pdf file from a filesytem > then view it. But in my case the pdf I want to view is based on an ID > entered by the user. There may be many different pdf and I can't > upload them all. > > I want to be able to > 1) if the the pdf is on server then > view (\docs\my.pdf) using the correct application type > > or > 2) if I select the pdf from an oracle table (stored as a BLOB) > <dtml-in sql-get_pdf> > somehow display the pdf > </dtml-in> You could write a script to automatically upload everything to Zope, use load_site.py, or copy your files using FTP or WebDAV. If you really want to get them from the FS, get LocalFS and make a LocalFS object that points to, say, /docs. That's probably the easiest way. Well, aside from FTP. If you want to grab it from a table, you'll want to write a Python script (with a .pdf extension!) that returns a single BLOB field, gotten by way of a ZSQL method. How that field is selected from the table can be determined by REQUEST variable parameters, acquisition context, or several other means. Obviously, this takes more work. Just remember that you *cannot* display the data inline. That will never work: you must return it looking like a single file. --jcc -- "My point and period will be throughly wrought, Or well or ill, as this day's battle's fought."

3 2

Re: [Zope] Zope application offline - how to apply a licenseptotection?
by Jaroslav Lukesh 16 Aug '03

16 Aug '03

> Odesílatel: Gabriel Genellina <gagenellina(a)softlab.com.ar> > >1. use dedicated server with crypted FS (eg., Linux), does not share ANY > >passwords. > >2. does not allow to users gone above specified hierarchy of folders. > >3. disable for all other access than "view" all DTML Methods and > >code-critical DTML documents. > >etc... > > Except 1) the other measures protect against thru-the-web access, but not > from local access. > Anyone who can read data.fs can see the user passwords, which the standard > UserFolder stores without encryption by default, and then can log in as > Manager and change anything. Use your own dedicated server with zope, crypted FS (you need solve problem with key :( or lock at computer case. > And anyone with write permission to the filesystem can create an emergency Nothing more than "root" will does not have access to that PC > user, log in as such, and modify all objects inside Zope (the emergency > user can do almost anything without restrictions, just can't create new > objects). > Zope may have a good shield from web attacks but I think it is very > vulnerable for local intrusion or sabotage. Zope is not responsible for that, you need solve these problems at system level and robust HW, as I shown you. Do you have access to local files in server at your bank office? Regards JL.

2 1

RE: [Zope] Performance requirements and ZEO
by BZ 15 Aug '03

15 Aug '03

Hey Bart, Here are some more recent benchmarks: http://zopeedge.com/benchmarks You can see that an 867 Mhz PIII box with 128 MB of Ram was still pulling 88 requests per second (over 7,500,000 requests a day) on a dynamic page. BZ > BZ, > > Thanks a bunch for the speedy reply. The machine I was looking at has a > RAID5 controller with 3 Ultra320 SCSI 10,000 RPM 36GB drives, 2 GB RAM, > and > 2 processors. From what I've read, I'm starting to think maybe I should > be > getting a fast single-processor machine with more memory, instead of > spending that money on two or three machines. > > Thank you for your help. > > -bart > >> -----Original Message----- >> From: BZ [mailto:bz@bwanazulia.com] >> Sent: Thursday, July 31, 2003 5:24 PM >> To: bart hubbard >> Cc: zope(a)zope.org >> Subject: Re: [Zope] Performance requirements and ZEO >> >> >> Bart.... >> >> I run 2/3 major sites that brings my zope up to about 100,000 >> hits a day and I can tell you you are going to have a lot of capacity. >> >> My set up: >> - 1.67 AMD >> - 1.5 GB DDR Ram >> - 2 x 36 GB SCSI in Raid >> - Tape backup, etc... >> >> I store everything in the ZODB (images, js, css) which totals >> 59,702 objects. The zope process is fine, it peaks up and >> down but there are also other sites (minor) running on Apache >> and mail server running on the machine (also logs, tools, etc >> etc..). I would say the machine runs at about 3-4% of >> capacity. I could easily bring this box up to 1,000,000 hits >> a day without worrying about expanding. >> >> Here is some suggestions: >> - Get lots of RAM. Zope (python) loves RAM (and RAM cache helps) >> - Up your zope threads (I run at 10) and cache size (10,000) >> - Get SCSI & RAID (7,200 - 10,000 RPM). Since Zope reads its >> ZODB from the drive you want this to be fast and reliable. >> >> I think you could easily start with one box and migrate up. >> If you are planning on a dual, look into Python and SMP. I >> remember reading it was not great, so what you could do is >> run two instances (your ZEOs) one on each processor. >> >> Cheers, >> BZ >> >> >> >> >> >> >> > I'm working on a project to build a public website using >> Zope, and am >> > in a position where I need to spec and order the hardware before >> > beginning the work on the site. We're going to plan for 500,000 >> > hits/day as a benchmark. I'm leaning towards a ZEO >> configuration, with >> > a dedicated ZEO Storage Server >> > and 2 ZEO Client machines, with a load-balancer up front. >> This way, the >> > worst case is the performance isn't up to par, and I can >> just toss another >> > machine at it as a ZEO Client. >> > >> > Here's the question: is there any benefit to having dual-processor >> > machines on any of these? I think we can afford 3 of them, if >> > necessary, but is it even needed? I was planning on going with >> > Dual-Xeon 2.8 GHz boxes running Linux. I'd rather not run >> more than >> > one instance of Zope on the clients, btw. >> > >> > Also, I'm having trouble finding info on getting SSL >> working in a ZEO >> > setup. Are there any docs out there I should read? >> > >> > much thanks, >> > bart >> > >> > >> > _______________________________________________ >> > Zope maillist - Zope(a)zope.org >> > http://mail.zope.org/mailman/listinfo/zope >> > ** No cross posts or HTML encoding! ** >> > (Related lists - >> http://mail.zope.org/mailman/listinfo/zope-> announce >> > >> http://mail.zope.org/mailman/listinfo/zope-dev ) >> > >> >> > > >

3 3

DTML generic table displayer
by Brad Dickerson 15 Aug '03

15 Aug '03

Hi, I am new to DTML and trying to write a general DTML code that when pass a table name, the page will return with all the data in that table. The problem I am having is that cannot make it general enough so that do not have to explicitely reference the table's column names in the DTML code as done below: <table> <dtml-in expr="list_of_rows(tablename=tablename_v)"> <tr> <td><dtml-var first_name></td> <td><dtml-var last_name></td> </tr> </dtml-in> </table> Is there a way to reference all the colnames without being explicit so that this script will work for any tablename that pass? thanks, Brad The information contained in this message is confidential and is intended for the addressee only. If you have received this message in error or there are any problems, please notify the sender immediately. The unauthorized use, disclosure, copying or alteration of this message is strictly forbidden.

3 2

Re: [Zope] Zope application offline - how to apply alicense ptotection?
by Jaroslav Lukesh 15 Aug '03

15 Aug '03

> Odesílatel: Dylan Reinhardt <zope(a)dylanreinhardt.com> > On Thu, 2003-08-14 at 13:15, J Cameron Cooper wrote: > > It is extremely difficult to protect against people with physical or > > root access to a machine. If I can sit down in front of it, I can get > > root > > Indeed. I am not as sure. If you have securitelly configured system and case with security lock, you could not get local access in any manner. > Hosting your system on the customer's LAN suggests that your best > defense may be a legal agreement. Set up the server to resist most > exploits but consider the legal system your primary protection. True, good agreement is needed. JL.

3 2

Displaying a pdf file.
by Michael Guerrero 15 Aug '03

15 Aug '03

Hello, What is the best way to display a pdf file in a zope application. I may select the file from an oracle database of get it from a file system. I'm not sure at the moment. My Zope Bible book shows how to upload a pdf file from a filesytem then view it. But in my case the pdf I want to view is based on an ID entered by the user. There may be many different pdf and I can't upload them all. I want to be able to 1) if the the pdf is on server then view (\docs\my.pdf) using the correct application type or 2) if I select the pdf from an oracle table (stored as a BLOB) <dtml-in sql-get_pdf> somehow display the pdf </dtml-in> Thanks for your help Mike Guerrero

5 4

ZPT can't find file id in from form
by Michael Bleijerveld 15 Aug '03

15 Aug '03

Hi, <tr tal:repeat="file batch" bordercolor="#0099FF" > <input type="checkbox" name="ids:list" value="file.id"> <a href="HOME_URL" tal:attributes="href python:container.getLink(file.id)" tal:content="file/id"></a> </tr> When selecting a file that must be deleted I receive the following error. Traceback (innermost last): a.. Module ZPublisher.Publish, line 98, in publish b.. Module ZPublisher.mapply, line 88, in mapply c.. Module ZPublisher.Publish, line 39, in call_object d.. Module OFS.DTMLMethod, line 126, in __call__ e.. Module DocumentTemplate.DT_String, line 474, in __call__ f.. Module DocumentTemplate.DT_Let, line 76, in render g.. Module DocumentTemplate.DT_With, line 76, in render h.. Module DocumentTemplate.DT_Try, line 140, in render i.. Module DocumentTemplate.DT_Try, line 149, in render_try_except j.. Module DocumentTemplate.DT_Util, line 201, in eval __traceback_info__: REQUEST k.. Module <string>, line 2, in f l.. Module Products.LocalFS.LocalFS, line 812, in manage_delObjects BadRequest: file.id does not exist What is wrong ? Regards. Michael

2 1

Fw: Re: [Zope] startup error
by Michael Long 15 Aug '03

15 Aug '03

I didn't know that was logic :) Now I am really confused. What part of the "try...except...else" logic is failing to get the error message. CODE SNIPPET: try: # Try to use custom storage m=imp.find_module('custom_zodb',[getConfiguration().instancehome]) except: # if there is no custom_zodb,use the config file specified # databases configuration = getConfiguration() DB = configuration.dbtab.getDatabase('/', is_root=1) Globals.BobobaseName = DB.getName() else: m=imp.load_module('Zope.custom_zodb', m[0], m[1], m[2]) if hasattr(m,'DB'): DB=m.DB else: storage = m.Storage DB = ZODB.DB(storage) RESULTING ERROR MESSAGE: Traceback (most recent call last): File "/opt/zope/lib/python/Zope/App/startup.py", line 52, in startup m=imp.find_module('custom_zodb',[INSTANCE_HOME]) ImportError: No module named custom_zodb > Michael Long wrote at 2003-8-13 18:27 -0400: > > > Isn't there a "try: ... except: " around this? > > > > It is actually a "try: ... except: ... else: " which I don't think is valid. > > Why not? > > The "else:" clause is executed when there is no exception. > > With the "try: ... except:", you should not see exceptions from "...". > > > Dieter > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > >

2 1

RE: [Zope] Re: More TextIndexNG at Plone
by larry_prikockis＠natureserve.org 15 Aug '03

15 Aug '03

-----Original Message----- From: Juan Manuel Ruiz Garcia [mailto:juanma@mailmadrid.com] Sent: Friday, August 15, 2003 11:55 AM To: larry_prikockis(a)natureserve.org Cc: zope(a)zope.org Subject: [Zope] Re: More TextIndexNG at Plone >>> I have several mssword docs uploaded to my plone site, but when I try to >>> make a search, no results are returned.. is there anything more I should >>> do? I've enabled converters when I define the TextIndexNG index, but I >>> don't know if this is enough. >> >> SearchableText as index + enabled converters should be enough. Of course >> you must have the necessary external converters installed (see wiki on >> zope.org) >> > >I have Indexed Attributes set to: "SearchableText,data" >Without specifically listing 'data' it wasn't picking up my Word, PDF, etc >docs either. Larry, are you running it under Windows? have you instaled wvware? -- I'm running on Linux (RedHat 9 to be exact). Yes, wvware is installed.

1 0