June 2005 - Zope - Zope lists

Objects loosing persistency
by Max M 14 Jun '05

14 Jun '05

I have a Plone web app where the users are complaining that they can create objects, edit titles etc. But when they return to the objects a little later, they are gone. The same behaviour as when an object doesn't have its _p_changed = 1 set, it seems to me. So I just wonder if anybody knows what can be causing this? It is not programming error as it happens with stable products. It is only this particular site that has the problem. There are reletively many objects in the system, so I suspect it to be some kind of conflict with a lot of reads blocking for the writing to the ZODB? -- hilsen/regards Max M, Denmark http://www.mxm.dk/ IT's Mad Science

2 1

Zope quotes cookie values...
by Oscar Figueiredo 14 Jun '05

14 Jun '05

Hello, I wonder why ZPublisher/HTTPResponse.py adds double quotes to cookie values when creating the Set-Cookie HTTP header (see function _cookie_list) ? Browsers (Firefox at least) seem to consider these quotes as part of the value which can be problematic. Recently I had to patch HTTPResponse.py to remove the quotes because I wanted to set a session cookie for PHP from Zope (if someone's interested I'll explain why ;-) and PHP would not understand the cookie with the double quotes... Should I submit a patch to the maintainers ? Oscar Figueiredo

2 1

ANNOUNCE: Zope Foundation
by Rob Page 14 Jun '05

14 Jun '05

Zope Corporation has begun the process of creating a Zope Foundation. The Zope Foundation will provide a mechanism for managing the various Zope projects (e.g., Zope 2, the Zope CMF, Zope 3, and other Zope community projects) in a vendor neutral way. The Foundation will have global copyrights over the Zope source code (to include Zope 2, Zope 3, and any other projects managed by the Foundation) as well as a limited, world-wide, non-exclusive, irrevocable, perpetual license to use the Zope trademarks (i.e., "Zope" and the "Circle Z") to brand its software releases. In addition, zope.org will be operated and maintained by the Foundation. The Foundation's governance mechanisms are being developed by taking the most appropriate ideas from other leading open source projects. These mechanisms are being developed and legally reviewed. We will launch the Foundation by or before the end of October 2005. We have scheduled an IRC session to answer questions from the community about the Foundation. IRC Session Summary: - Who: Zope Corp and Zope Community - What: IRC session to discuss the Zope Foundation - When: Tue, 21 Jun 2005 10a - 12p (US EDT) - Where: irc.freenode.net #zope Please send specific questions to: mailto:irc_agenda_topics@zope.com We hope to see you there! Regards, Rob -- Rob Page V: 540.361.1710 Zope Corporation F: 703.995.0412

1 0

ZEO recommended for single-cpu?
by gabor 14 Jun '05

14 Jun '05

hi, i understand that you need to use ZEO when running ZOPE on a multi-cpu machine (or when you want to cluster ZOPE). but from mails on this forum it seems that people are also using ZEO when they're running ZOPE on a single-cpu machine. why? gabor

3 2

RE: [Zope] ZEO recommended for single-cpu?
by Pascal Peregrina 14 Jun '05

14 Jun '05

Also, concerning multi-cpu, I think it's the other way around. Because python processes only use one CPU, it's useless to run one Zope instance on a multi-cpu system, as only one CPU will be used. That's why on multi-cpu system lots of people run at least Zeo + one instance of Zope (and often one Zope instance per CPU). But Zeo is really lightweight, so it's worth trying to use Zeo+Zope on a single cpu system, to take advantage of what Chris describes below. Pascal -----Original Message----- From: zope-bounces(a)zope.org [mailto:zope-bounces@zope.org]On Behalf Of Chris McDonough Sent: 14 June 2005 10:46 To: gabor Cc: zope(a)zope.org Subject: Re: [Zope] ZEO recommended for single-cpu? Typically it's because: - Zope starts faster in a ZEO setup. - You can use "zopectl debug" to get into a debugger session without shutting down Zope first if you use ZEO. - C On Tue, 2005-06-14 at 11:03 +0200, gabor wrote: > hi, > > i understand that you need to use ZEO when running ZOPE on a multi-cpu > machine (or when you want to cluster ZOPE). > > but from mails on this forum it seems that people are also using ZEO > when they're running ZOPE on a single-cpu machine. > > why? > > gabor > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

1 0

Re: Zope Digest, Vol 13, Issue 15
by Bert Vanderbauwhede 14 Jun '05

14 Jun '05

> Date: Mon, 13 Jun 2005 10:27:07 -0400 > From: Paul Winkler <pw_lists(a)slinkp.com> > Subject: Re: [Zope] ACTUAL_URL vs. VIRTUAL_URL > > On Mon, Jun 13, 2005 at 02:37:44PM +0200, Bert Vanderbauwhede wrote: > > > > What's the difference between ACTUAL_URL and VIRTUAL_URL in the REQUEST object? > > VIRTUAL_URL only appears in the REQUEST when VirtualHostMonster does its > thing. So if you are not using virtual-hosting, VIRTUAL_URL does not > appear in the request. This is inconvenient; we wanted something > that would always be available and would always mean > "the URL originally sent by the client". This is what ACTUAL_URL is. OK, thank you. So ACTUAL_URL is safe to use in all cases. > Having said that, I'm not clear on the difference between > ACTUAL_URL and URL :-) <drzoidberg>Hurray! I'm useful!</drzoidberg> I think I can answer that one. I have created a product to redirect authenticated users to HTTPS, using a pre-traversal hook. In the hook, it turned out that URL is the url to the folder with the pre-traversal hook, and not the requested url. I think that URL is modified during the traversal process, so that it contains the url for the current object. Only when the last object is reached does URL contain the full requested url, and is it equal to ACTUAL_URL. Bert...

1 0

DiskBased products and security
by Haim Ashkenazi 13 Jun '05

13 Jun '05

Hi I'm following the example of "The Zope Bible" on how to create disk based products. after adding the imports, 'InitializeClass(class)' statement and the 'security = ClassSecurityInfo()' statement he recommends two other statements: 1. __roles__ = () - I didn't understand exactly why but with this statement I can't access the product either from the ZMI or directly from the web. 2. security.setDefaultAccess("deny") - I think I understand why we changed that, but it's causing a lot of problems. If I add 'delareProtected' for all my methods, I can access certain pages , but with some pages (maybe ones that's calling methods form base classes or acquisition like 'title_or_id') I still get errors ("Unauthorized: You are not allowed to access 'title_or_id' in this context"). trying to solve this I started adding 'declareProtected' for every method I got error for. I gave up after 3 methods, but it seem to help. so, I was wondering if something was changed in the security model since 2.5 (the version that the book is about) until 2.7, and is there a place where it's documented (the zope developer guide is versioned 2.4)? also, If I'll make sure that every method I have in my module is also declared as protected, or public, is there a problem with living the default access as any? thanx -- Haim

2 3

ACTUAL_URL vs. VIRTUAL_URL
by Bert Vanderbauwhede 13 Jun '05

13 Jun '05

Hi, What's the difference between ACTUAL_URL and VIRTUAL_URL in the REQUEST object? Bert...

3 3

Problem with manage_FTP...
by Thierry FLORAC 13 Jun '05

13 Jun '05

Hi, I'm actually building with Zope (2.7.6) , through the development of a custom product, a small file server, available through FTP, HTTP or WebDAV with access controlled by an LDAP server (with LDAPUserFolder). Everything works fine with every protocol concerning access rights. The only thing that I don't manage to do is, in FTP or WebDAV, to restrict a user view (a directory listing) to the only files that he can effectively download (for these files, they can be effectively downloaded, but they are actually seen in the list !). I've tried to play with "manage_FTPlist" and "manage_FTPstat" methods, both on my folderish product and on my custom folder items (by returning exceptions or returning None values), but didn't manage until now to get a good result (the list is often completely empty when access is forbidden even for a single file !). Any help would be welcome !! Thanks, Thierry

2 1

Product architecture question (long)
by Nikko Wolf 13 Jun '05

13 Jun '05

I've been using Zope (w/Plone) for some time now and am still trying to understand how best to architect the solution for my site. I'm presuming I need to create a Product for the new types of objects/files I want, but even on that topic I'm not completely convinced. My objectives and constraints are: - The primary purpose for the site's existence is to manage some content files (text/ml) and allow a workflow process on those. The workflow will likely change and hopefully will have minimal programming changes when it does. - Users will have one of several roles: Author, Reviewer (of which there are currently two types), and Editor. - I do not want ANY access by unauthorized users. Obviously they must be able to reach a login page, and get instructions on how to request an account, password reset, etc. - Here's the complication -- each file will have potentially multiple versions in process at once. Each version of a file may have a different state, and I'd like to have a history of all changes to each version as they go through the workflow. - Once a file/version is submitted for review, any of the reviewers may work on it, it is not necessary that one role preceded the other, but it is required that a user in each role approve the file. - The workflow is subject to change (the real one that the humans use), so this could precipitate changes to the Zope workflow: - The users' roles may change (easy), - There might be another type of Reviewer created that gets grafted into the review process, - There might be other steps ("states") added to the workflow, and corresponding changes to the process. - We need to have good automated backup solution for the content (as in mirroring the content on another host). - And, of course, I'm under pretty extreme time pressure. =============== So my questions are: 0) Is DCWorkflow and a new Product [document type(s)] the way to go? 1) Is there a product that does something similar that I could use or adapt? 2) Barring that, is there a product that would be a good starting point? 3) Is there something that manages a file history (like CVS, etc.) that can be easily used within Zope? 4) How does one secure a Zope+Plone site? I'm running on FC3, Zope 2.7.6-final, Plone 2.0.5, Python 2.3.4 Thanks in advance! Nikko

5 9