March 2005 - Zope - Zope lists

Zope config : cache-size and Zeo
by Pascal Peregrina 08 Mar '05

08 Mar '05

Hi, I would like to know if, for a Zeo Storage, increasing the <zodb_db></zodb_db> cache-size param value (per connection target number of cached objects) is useful, specially if I already have a high cache-size param value in the <zeoclient></zeoclient> subsection (global Zeo objects target cache size in bytes). Thanks. Pascal ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

4 3

RE: [Zope] Re: Blocking Sibling inheritance
by Jay Zeemer 08 Mar '05

08 Mar '05

Cliff The only issue with this is there are still global items that exist one level up that I want to appear in those folders (\site\item needs to appear in \site\cust1\item and \site\cust2\item). The issue can still happen where you can get an object to appear for \site\cust1\cust2\item (since item needs to be accessable to both cust1 and cust2), and item will pick up the look and feel from cust2.. I would also prefer that if you went to \site\cust1\cust2 you get a 404 type message, but that is secondary to the not showing anything for the cust2 object unless its called from \site\. I understand this is pretty much the exact opposite of the way this product is designed to function. Jay -----Original Message----- From: Cliff Ford [mailto:Cliff.Ford@ed.ac.uk] Sent: Thursday, March 03, 2005 11:35 AM To: Jay Zeemer Cc: zope(a)zope.org Subject: Re: [Zope] Re: Blocking Sibling inheritance Something to ponder: What if each customer folder had its own local role, such as manager1 for customer1, manager2 for customer 2, etc, and the local role was the only role granted access in its own folder. That would be easy to set up and has to beat adding an "object to every customer folder that represents every other customer". Cliff Jay Zeemer wrote: > Greg, > You just described my problem to the letter. This is the issue that is > impacting me currently. The only way we have successfully blocked this is > to add an object to every customer folder that represents every other > customer. We have been trying to make a folder-ish object with > Acquisition.Implicit but so far have had no success. Besides adding a > customer# object for every customer to every customer can anyone tell me how > I can block this from happening?? > > Jay > > -----Original Message----- > From: Greg Fischer [mailto:retheoff@gmail.com] > Sent: Thursday, March 03, 2005 3:36 AM > To: zope(a)zope.org > Subject: Re: [Zope] Re: Blocking Sibling inheritance > > > Security issue? I think you are partially right about it not being a > security issue because Zope does what it is supposed to do and look > where it should. > > Here is a security issue relating to this acquisition: (IMHO) > > I have folder 1: /site/dev/customer1/folder/page > And folder 1: /site/dev/customer2/folder1/folder2/page > > Eash customer level folder has acl_users with different/separate > accounts. The security at the customer level folder is set to not > acquire and no anonymous access. Now here is the problem I see, you > type in your URL: > someplace.com/site/dev/customer1/folder/page > > You are asked to authenticate. Then you change your url after > authentication to: > somplace.com/site/dev/customer1/folder/customer2/folder1/folder1/page > > And you get right in with no authentication! That should not be allowable. > > I understand that this would require someone to know the folder > structures, but really, in a more simplistic example, all you would > need to know is the other client folder name, and you would have > access. > > So what can we do about this? If you dont have acl-users account in a > folder you access, you should NOT be able to see the contents. Right? > > This may be a new subject, I dont mean to stray off topic. > > > On Thu, 3 Mar 2005 01:20:32 -0700, kosh <kosh(a)aesaeion.com> wrote: > >>On Thursday 03 March 2005 1:06 am, Dario Lopez-Kästen wrote: >> >>>Tres Seaver wrote: >>> >>>>-----BEGIN PGP SIGNED MESSAGE----- >>>>Hash: SHA1 >>>> >>>>Jay Zeemer wrote: >>>>| Greetings all, >>>>| I am in the process of examining Zope for some possible > > applications. > >>>>| Currently I am having an issue with Zope being a bit to smart. I > > have > >>>>| a directory \Dir1\ and under it I have 2 subdirectories \Dir1\SubA\ > > and > >>>>| \Dir1\SubB\. The problem I am having is I can go to > > \Dir1\SubA\SubB\ > >>>>| and gain access to things that are in \Dir1\SubB\, I need to be able > > to > >>>>| block sibling level inheritance. Is this possible in Zope?? Or are >>>>| there any other ways to block this with out creating a SubB object > > in > >>>>\Dir1\SubA\ ?? >>>> >>>>The "sibling inheritance" you are describing is Zope's "acquisition". >>>>Folders derive from Acquisition.Implicit, which means they are willing >>>>to acquire any "non-private" name from their parents. >>>> >>>>To prevent this behavior, place SubA with a Folder-like object which >>>>derives instead from Acquisition.Explicit. >>> >>>I'd need this too. Would I be making a correct assumption when stating >>>that no such folderish product, such as a "aq-blocking Folder", exists >>>yet, but it has to be written (ie by me or anyonelse needing this >>>functionality)? >>> >>>Thanks. >>> >> >>I don't know of something like this existing and even more I don't know > > why > >>you would really want it. Eventually you will understand how and why >>acquisition works and then you would have a fair bit of work to do to > > change > >>the stuff back. Zope is not publishing any object that the person viewing > > the > >>site would not normally have access to so it is not security issue. >> >>What you probably need to do is read the zope book and read about how >>acquisition works. You can use it to make apps a lot faster and save > > yourself > >>a lot of work by learning how to use it. Acquisition is a major reason > > that I > >>use zope in the first place and have been using it for about 4 years now. >>_______________________________________________ >>Zope maillist - Zope(a)zope.org >>http://mail.zope.org/mailman/listinfo/zope >>** No cross posts or HTML encoding! ** >>(Related lists - >> http://mail.zope.org/mailman/listinfo/zope-announce >> http://mail.zope.org/mailman/listinfo/zope-dev ) >> > > > _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

3 4

How to know if a Zeo connection is read-only ?
by Pascal Peregrina 08 Mar '05

08 Mar '05

Hi, Another product developpment problem ;) I've got 2 kind of Zope instances : 1/ "RO Zopes": - / is a local FileStorage - /somefolder is a ZeoStorage mounted read-only 2/ "RW Zopes": - / is a local FileStorage - /somefolder is a ZeoStorage mounted read-write I would like to know, inside a Zope product, how I can know if I am in a RO or RW Zope instance. Thanks for your help. Pascal ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

3 2

Question on traceback/readconflicterror
by Marco Bizzarri 08 Mar '05

08 Mar '05

Hi all. I know ReadConflictError should be normal inside Zope Transactions. However, I've 4 or 5 of this errors each day: 2005-03-08T10:01:51 ERROR(200) KeywordIndex unindex_object could not remove documentId -895169661 from index workitems_from. This should not happen. Traceback (most recent call last): File "/home/zope/zope-2.7.4/lib/python/Products/PluginIndexes/common/UnIndex.py", line 185, in removeForwardIndexEntry indexRow.remove(documentId) File "/home/zope/zope-2.7.4/lib/python/ZODB/Connection.py", line 599, in setstate invalid = self._is_invalidated(obj) File "/home/zope/zope-2.7.4/lib/python/ZODB/Connection.py", line 628, in _is_invalidated raise ReadConflictError(object=obj) ReadConflictError: database read conflict error (oid 0x317235, class BTrees.IIBTree.IISet) Is there something I should worry? Regards Marco

2 1

LocalFS 1.3 and PDF Mime Types
by Edward Pollard 08 Mar '05

08 Mar '05

We're having problems with PDF files server via Zope and LocalFS 1.3 (andreas). Mime types for the PDFs come back with surprising irregularity. Given a directory of PDFs, returned Mime types are one of: text/html text/plain application/pdf (only a few come back as application/pdf) If I explicitly add: .pdf application/pdf File to the type_map property, it will change the Mime types for a few - but only a few - of the PDFs that were coming back wrong. For the most part, the PDFs still get served with the wrong Mime type. Thoughts? --- Edward J. Pollard, B.Sc Webmaster, University of Lethbridge

2 1

Is Zope copiable without installation ?
by fowlertrainer＠anonym.hu 08 Mar '05

08 Mar '05

Hi ! I have a Zope site in Windows. I want to create an automation installer that copy Zope, set some things in ODBC/filesystems, and after start zope. Because by hand installation is very hard: I want to do many things. So: I want to copy Zope (system), and my instance lib, and some python libs (like win32all). May I do it without problems ? Thanx for help: ft

2 1

Python String Method
by Asad Habib 08 Mar '05

08 Mar '05

Is there a python function that I can use to detect if a substring exists anywhere within another string? I did not come across anything in the Python string module that would allow me to do this. Any help would be appreciated. - Asad

3 2

RE: [Zope] using DTML-tree within formulator
by Somhorst JJT 08 Mar '05

08 Mar '05

I didnt look @ the zopetree project yet but I experimented with some tales (zpt?). I created an page template witht he following code: <select> <option tal:repeat="sales_tree here/sales_tree/objectValues" tal:attributes="value sales_tree/getId" tal:content="sales_tree/getId"></option> </select> this renders an select box with the objects in the sales_tree folder. But when i try to add this template to the form using the tales tab it gives some errors... or i dont understand the meaning of this tab or the form doesnt understand what i want... -----Original Message----- From: David Convent [mailto:david.convent@naturalsciences.be] Sent: dinsdag 8 maart 2005 13:28 To: Somhorst JJT Cc: 'zope(a)zope.org' Subject: Re: [Zope] using DTML-tree within formulator I personnaly use ZopeTree for that purpose http://www.zope.org/Members/philikon/ZopeTree HTH, Somhorst JJT wrote: >Hello All, > >For a project i need to use formulator. I created a form and used the >exported XML in my own silva extension that works. But now i need to have >some logic into my form :). >I need to retrieve a list of the contents from a certain folder and put this >information into a listfield. But how can I do this? > >I didnt find a good tutorial on how to accomplish this with tal > >Yours sincerely, > >J.somhorst > >_______________________________________________ >Zope maillist - Zope(a)zope.org >http://mail.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > >. > > > -- David Convent

1 0

using DTML-tree within formulator
by Somhorst JJT 08 Mar '05

08 Mar '05

Hello All, For a project i need to use formulator. I created a form and used the exported XML in my own silva extension that works. But now i need to have some logic into my form :). I need to retrieve a list of the contents from a certain folder and put this information into a listfield. But how can I do this? I didnt find a good tutorial on how to accomplish this with tal Yours sincerely, J.somhorst

2 1

setting up apache redirects
by Zope User 08 Mar '05

08 Mar '05

Hello, I have set up 2 instances of websites on 2 different ports on one single server. Anyone familiar with setting up apache redirects for the second instance which is not on port 8080? I'm new to zope and will really appreciate any help in this matter. I have successfully created 2 instances. I am also able to log in to it using ZMI. Many Thanks rt

2 1