February 2006 - Zope

webdav and PUT_factory
by Luca Dall'Olio 14 Mar '06

14 Mar '06

First of all, I would like to thank everybody for your accurate and fast answers. I am working with a small group of developers, each in different places and working at different times. According to my past experience in java, this means "cvs" ^_^ I have some doubts about how to synchronize Zope development with cvs or subversion. Should I stop using the ZMI? Should I develop a Zope Product instead? Should I use fsdump instead of webdav to export from zope ? Should I use webdav when deploying back to Zope? This is my actual state-of-the-art about team management in Zope : We develop inside locally installed Zope Instances, using the ZMI. At the end of the day, we export the work done using webdav, and this works for DTML documents, DTML methods and ZSQL methods. After that, we commit inside the source code repository, using the update, diff and merge features to synchronize with other developers' work. We need to deploy to a Zope server in order to test the integration of developers' code, so I wrote a little PUT_factory to re-create the right objects, this is a snippet: elif ext == 'zsql': from Products.ZSQLMethods.SQL import SQL return SQL(name, '', 'daticonvegno', '' ,'') elif ext == 'dtml': from OFS.DTMLDocument import DTMLDocument return DTMLDocument( '', __name__=name ) elif ext == 'dtmm': from OFS.DTMLMethod import DTMLMethod return DTMLMethod( '', __name__=name ) elif major == 'text': from OFS.DTMLDocument import DTMLDocument return OFS.DTMLDocument.DTMLDocument( '', __name__=name ) As you can see, it uses extensions to understand the type of the file. This has some minor drawbacks : 1) you have to use extensions to make it work, otherwise you will have trouble at deploy-time 2) some additional parameters such as the connectionIds for ZSQLMethods must be auto-magically chosen by the PUT_factory 3) what about more complex objects, such as Plone, Archetypes or Openflow? should I map them all in the PUT_factory? Is this the "right way" to do things in Zope? Is there any native solution for Source Code Versioning and Team Management? How do other team solve this issue? Any advice is welcome! Thank you very much in advance, Luca

3 3

[ANN] Zope 2.8.6 released
by Andreas Jung 10 Mar '06

10 Mar '06

Hi all, on behalf of Zope Corporation and the Zope community I am pleased to announce the release of Zope 2.8.6. You can download Zope 2.8.6 from http://www.zope.org/Products/Zope/2.8.6/ Some new features of Zope 2.8: - ZODB 3.4 with MVCC (multi version concurrency control) support. MVCC solves nearly every problem with ZODB read-conflict errors which is very important for high-traffic Zope sites. - Extension Classes were rewritten as Python new-style classes making all features of Python new-style classes available in Zope objects. This includes support for cyclic garbage collection. - Integration of Zope 3 technologies through Five (see http://codespeak.net/z3/five/) For more information on what is new in this release, see the CHANGES.txt files for the release: http://www.zope.org/Products/Zope/2.8.6/CHANGES.txt See also: http://www.zope.org/Wikis/DevSite/Projects/Zope2.8/OverView Please bring all the bugs you have found to the Zope bugtracker: http://collector.zope.org/Zope":http://collector.zope.org/Zope For more information on the available Zope releases, guidance for selecting the right distribution and installation instructions, please see: http://www.plope.com/Books/2_7Edition/InstallingZope.stx Please also keep in mind that Zope 2.8.6 requires Python 2.3.5. Zope 2.8.6 is not certified for any Python 2.4.x versions. So using Python 2.4 is neither recommended nor supported and any related questions or problems are likely to be ignored until 2.4 is an officially supported Python version for Zope. -- Andreas Jung (andreas at zopyx dot com)

3 4

Re: [Zope] Zope/Plone logon security strategy etc
by Dieter Maurer 01 Mar '06

01 Mar '06

michael nt milne wrote at 2006-2-28 15:51 +0000: >I'm probably missing something really obvious but am wondering how you >actually implement your product on a live plone site. I've got it installed. >Do you just customise the login form that comes with the product and use >that on the site? I fear you do not understand the essence of HTTP authentication: For any kind of HTTP authentication (whether "basic" or "digest"), it is the browser which gathers the login information. Therefore, you do not have a login form (you can customize on the server). Instead, the browser uses its login dialog (which you might customize, if you are using e.g. Mozilla or Firefox, but is usually out of the server's reach). As written in the documentation on my website, "DigestAuth" currently only contains a "DigestAuthCrumbler" which works similar to the "CookieCrumbler". More precisely: It takes digest auth information, verifies it and (if successful) presents it like basic auth information to the remaining parts of Zope. The "CookieCrumbler" works very similar: it takes the information from a cookie and presents it like basic auth information to the remaining parts of Zope. The "DigestAuthCrumbler" is a bit less transparent. It *MUST* know the user's password in order to verify the validity of the presented auth information (more precisely, a special hash would be sufficient, but usual user folders do not support such hashes). Therefore, it can only be used together with UserFolders providing access to the clear text password. -- Dieter

2 1

product security changes from 2.8 to 2.8.5 ?
by Ed Colmar 01 Mar '06

01 Mar '06

Hello I recently moved my zope product developed on a 2.8 server on to a 2.8.5 server, and all of my python code is no longer being published out. In the past I had been using a doc string """ doc """ to make methods accessible. I realize this is not the proper procedure, but it worked. Now, on the 2.8.5 server, all of these are refused. I've been going through and doing security.declarePublic('methodname') on everything I want to be public, but it does not appear to have any effect. Are there any other changes that I need to make to my product in order to get back the functionality I had previously? Am I even looking in the right place? Thanks for any tips -e-

3 5

Trapping exceptions
by Tony Middleton 28 Feb '06

28 Feb '06

Sorry if this is a silly question but I've not found anything via Google or zope.org. I am using a MailHost in a Python script. I need to trap error conditions. When I run without trapping I can get exception SMTPSenderRefused. I inserted trapping - eg try: context.mailman.send(vmessage,mto=vto,mfrom=vfrom,subject='Message from web site') except SMTPSenderRefused: vsenderok=False else: vsenderok=True This gave error global name 'SMTPSenderRefused' is not defined I tried importing smtplib and adding it to the except line and then got a permissions problem. You are not allowed to access SMTPSenderRefused in this context I'd appreciate any help with this. Regards Tony

2 1

RE: [Zope] ac_acquire error happens after inheriting from Folder
by Palermo, Tom 28 Feb '06

28 Feb '06

Hi Dieter, I figured it out after googling around for a few hours. In my manage_addContact method, I'm now getting the object after it's instantiated like so: #instantiate a contact object self._setObject(id, newContact) #get the new instance obj = self._getOb(id) #change permissions based on value of private if private==True: obj.manage_permission('View',['Authenticated','Content Manager','Manager']) else: obj.manage_permission('View',acquire=1) It's still kinda weird though, because when Contact was just a SimpleItem (ie. Not an ObjectManager) I did not need to do this. I was able to write the above as "newContact.manage_permission..." and it worked. At least that's how I remember it. Why is my Contact class considered an acquisition wrapper after inheriting Folder, when prior to this, it was not? Anyhow, for those of you who, like me, are somewhat new to writing Zope products, I've found this site to be pretty useful (particularly chapter 4): http://www.upfrontsystems.co.za/courses/zope/ One more question, when I get my object via self._getOb(id), is that any different than doing dispatcher.getOb(id). If there is difference, what is it and which way is better/worse? Thanks, Tom -----Original Message----- From: Dieter Maurer [mailto:dieter@handshake.de] Sent: Tuesday, February 28, 2006 1:54 PM To: Palermo, Tom Cc: 'zope(a)zope.org' Subject: Re: [Zope] ac_acquire error happens after inheriting from Folder Palermo, Tom wrote at 2006-2-28 11:25 -0500: >I have a class called Contact that is now inheriting from Folder. After >I did this, I get the following error when attempting to add a new Contact: > >Exception Type AttributeError >Exception Value aq_acquire Only acquisition wrappers have the "aq_acquire" method. Looks at if your object were not an acquisition wrapper... -- Dieter

1 0

ac_acquire error happens after inheriting from Folder
by Palermo, Tom 28 Feb '06

28 Feb '06

All, I have a class called Contact that is now inheriting from Folder. After I did this, I get the following error when attempting to add a new Contact: Exception Type AttributeError Exception Value aq_acquire Traceback (innermost last): * Module ZPublisher.Publish, line 101, in publish * Module ZPublisher.mapply, line 88, in mapply * Module ZPublisher.Publish, line 39, in call_object * Module Shared.DC.Scripts.Bindings, line 306, in __call__ * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec * Module Products.PythonScripts.PythonScript, line 323, in _exec * Module None, line 27, in validateContact <PythonScript at /validateContact used for /contacts> Line 27 * Module Shared.DC.Scripts.Bindings, line 306, in __call__ * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec * Module Products.PythonScripts.PythonScript, line 323, in _exec * Module None, line 39, in addContact <PythonScript at /addContact used for /contacts> Line 39 * Module Products.CMS.cmsContact, line 42, in manage_addContact * Module AccessControl.Role, line 172, in manage_permission * Module AccessControl.Role, line 82, in ac_inherited_permissions * Module OFS.ObjectManager, line 211, in _subobject_permissions AttributeError: aq_acquire I thought it might be due to not having an __ac_permissions__ in my class definition but that didn't seem to change anything and Folder already has this so my Contact class should pick up __ac_permissions__ from Folder. In the above traceback, line 42 in manage_addContact is this (the part inside the if statement is line 42): #change permissions based on value of private if private==True: self.manage_permission('View',['Authenticated','Content Manager','Manager']) else: self.manage_permission('View',acquire=1) Any ideas would be much appreciated. The error is clearly related to inheriting from Folder as it wasn't there before. I just don't know why the error happens. Thanks, Tom Palermo Senior Web Developer Constella Group, LLC

2 1

Memory Leak Debugging
by Jonathan Bowlas 28 Feb '06

28 Feb '06

Hi All, We're having serious problems with performance running Silva CMS on Zope 2.7.8-final, python 2.3.5, linux2 set up on a machine with 2.5GB RAM. There are currently only about 65 users and around 2000 documents in the CMS but it seems to run for a week, then the RAM fills up and crashes so we have to restart the server manually. The Zope logs aren't much help as I enquired on the Zope list and their response was we need more RAM. But surely 2.5GB is enough. I've also checked Control_Panel/DebugInfo for any refcounts with significant jumps and Products.Silva.Image.Image seems to be the culprit: 11.32am 11.36am Products.Silva.Image.Image 56203 58153 +1950 Acquisition.ImplicitAcquirerWrapper 44825 45151 +326 So we've tried to figure out which kind of request triggers these refcount jumps by creating a separate instance with a very small ZODB Cache (so it gets filled up soon), and clicked around a little, watching the refcounts but we cannot seem to replicate it. So basically this is a plea for help from an expert Zope debugger who can assist us in finding the source of the problem so we can resolve it. Or alternatively someone who can give us a set of instructions that we can follow that will enable us to locate the problem, I've googled it and there are no clear answers. FYI we have the following products installed on our Zope instance. Annotations 0.4.3 BTreeFolder2-1.0.1 DocFinderTab (0.5.2) External Method-1-0-0 FileSystemSite 1.4.2 Formulator 1.10 Groups 0.4 IssueTrackerProduct (0.6.13) LDAPUserFolder (2.3) MIMETools MailHost-1-3-0 OFSP-1-0-0 PageTemplates-1-4-0 ParsedXML 1.4 PlacelessTranslationService (1.0) PluginIndexes ProxyIndex 1.2 PythonScripts-2-0-0 Sessions Silva 1.4.1 SilvaBlog 0.4.2 SilvaCustomAutoTOC 0.9 SilvaDocument 1.4.1 SilvaDocumentPatches 1.3b6-1 SilvaExtETHLDAP 0.7 SilvaExternalSources 0.10.3 SilvaMetadata 0.10 SilvaNewsNetwork 2.0 SilvaReferenceChecker 0.2 SilvaStylesheets 0.6.2 SilvaUCLAttributes 0.7 - (A UCL product*) Silva UCL Gallery 0.1 - (A UCL product*) SilvaUCLSubjectAudienceFilters 0.6 - (A UCL product*) SilvaViews 0.11 SiteAccess-2-0-0 SiteErrorLog Sprout 0.6.2 StandardCacheManagers-1-1-0 TemporaryFolder Transience Tropos (1.9.12) XMLWidgets-Pluggable 0.13 (CVS/UNRELEASED) ZCTextIndex ZCatalog-2-2-0 ZGadflyDA ZMySQLDA 2.0.8 ZODBMountPoint ZOracleDA ZReST (1.1) ZSQLMethods Zope Tutorial 1.2 kupu 1.3.2 z3locales 0.1 If you require any further information do not hesitate to ask. Hope someone can help. Jon Bowlas University College London

2 3

ZOPE/Python Stellenangebote
by Sascha Ottolski 28 Feb '06

28 Feb '06

[Please excuse this job offer in german language] Gallileus GmbH (Erfurt) sucht Entwickler Wir suchen ab März 2006 einen ZOPE-/Python-Entwickler, sowie einen Webentwickler, beide zur Festanstellung in Erfurt. Zusätzlich suchen wir für die selben Bereiche Praktikanten und studentische Hilfskräfte. Weitere Informationen unter http://www.gallileus.info/about/jobs/ Mit freundlichen Grüssen, Sascha Ottolski -- Gallileus - the power of knowledge Gallileus GmbH http://www.gallileus.info/ Puschkinstraße 1 fon +49-(0)361/541 43 80 99084 Erfurt fax +49-(0)361/541 43 79 kontakt(a)gallileus.de

1 0

Squishdot on Zope 2.9.X with Python 2.4.2
by Dennis Allison 28 Feb '06

28 Feb '06

Are there any known compatibilty problems? -d --

4 5