- Zope - Zope lists

Re: [Zope] Local Roles and Acquisition
by Jaroslav Lukesh 10 Sep '03

10 Sep '03

> Odesílatel: nwingfield(a)che-llp.com > I am developing the security model for a ZODB-based document management > Product (with a capital P). I am only using two primary local roles: > 'Viewer' and 'Owner.' Because I wish to mimic the security model in a > Linux/UNIX environment, I would like to grant everyone at least the > 'Viewer' local role on the root of the folder/document tree, but have the > option to lock down particular folders at a lower point in the tree. For > example: > > Home (Everyone = 'Viewer') > | > -------------------------- > | | > Joe's stuff Sam's stuff > (Joe = 'Owner') (Sam = 'Owner') > > In this situation, I do not wish for local roles to be acquired from above. > In other words, I don't want Joe to acquire the local role of 'Viewer' when > attempting to look at Sam's stuff. Disable "Viev" rights in "authenticated_User" group via ZMI REgards JL.

1 0

Re: Zope Digest, Vol 2, Issue 8
by Gabriel Genellina 09 Sep '03

09 Sep '03

At 9/9/2003 11:08, you wrote: >Error Type: IOError >Error Value: [Errno 2] No such file or directory: 'chr1/CDS.htm'" > >The external method is in a folder called database, inside that folder are >14 folders called chr1, chr2, chr3 etc..., and inside any folder is a DTML >document called CDS.htm. Please help me with this because I don't know >what's the problem. Don't confuse the Zope hierarchy stored in the ZODB with folders in the filesystem. You can't use open() to access a DTML document inside a folder stored in Zope, because it's not a file contained in a directory. To enumerate all folders use objectValues('Folder'); you can get the DTML Document using folder['CDS.htm'] and you can get the raw document source with document_src(). And you can use a python script instead of an external method. See the API Reference in the Zope Book. And try to learn regular expressions, those boring string searches are really very much simpler. Gabriel Genellina Softlab SRL

1 0

Local Roles and Acquisition
by nwingfield＠che-llp.com 09 Sep '03

09 Sep '03

I am developing the security model for a ZODB-based document management Product (with a capital P). I am only using two primary local roles: 'Viewer' and 'Owner.' Because I wish to mimic the security model in a Linux/UNIX environment, I would like to grant everyone at least the 'Viewer' local role on the root of the folder/document tree, but have the option to lock down particular folders at a lower point in the tree. For example: Home (Everyone = 'Viewer') | -------------------------- | | Joe's stuff Sam's stuff (Joe = 'Owner') (Sam = 'Owner') In this situation, I do not wish for local roles to be acquired from above. In other words, I don't want Joe to acquire the local role of 'Viewer' when attempting to look at Sam's stuff. Because Zope makes the bold assertion that security should always get more permissive the deeper one traverses the object hierarchy, is there no way to do this short of hacking the 'getRolesInContext()' method? I have no interest in tweaking the permission-to-role grid on every particular folder and document, as this system will contain an indefinite depth of folders and a large volume of documents (hundreds of thousands). Thanks! Nathaniel Wingfield

3 2

Zope 2.6.2 Release Announcement
by Matthew T. Kromer 09 Sep '03

09 Sep '03

Zope 2.6.2 Now Available Zope 2.6.2 represents a development step in the next Zope release formed with a large number of community contributions. You may download Zope 2.6.2 from Zope.org: http://www.zope.org/Products/Zope/2.6.2/ Users of the Zope source release should note that Python 2.1.3 is now the required platform. Python 2.1.3 includes a fix to an issue that could cause crashes in Zope. Users who upgrade from source MUST RUN a make clean and make command to build the proper binaries correctly; distutils will skip compilation of the library modules needed for Zope and will cause errors if they are not up to date. Particular features of interest in Zope 2.6.2: * Fixed an error where ZClasses that subclassed ObjectManager would not load. * Fixed a case where objects trying to check access rights on behalf of another user were unable to do so. * Fixed memory leak with Page Templates * Python 2.2 compatibility fixes * Back ports of BTrees fixes * Back ports of ZODB fixes relating to the packing of storage, where a packed database could contain an UNDO transaction which referred to data which had been discarded by the pack * A fix for fsrecover.py which prevented it from recovering any data * Fixes for collector issues 256, 514, 683, 814, 816, 823, 875, 882, 892, 902, 928, 937, 939, 954, 956, 959, 964 For more information on what is new in this release, see the CHANGES.txt and HISTORY.txt files for the release: * http://www.zope.org/Products/Zope/2.6.2/CHANGES.txt * http://www.zope.org/Products/Zope/2.6.2/HISTORY.txt For more information on the available Zope releases, guidance for selecting the right distribution and installation instructions, please see: http://www.zope.org/Documentation/Misc/InstallingZope.html -- Matt Kromer Zope Corporation http://www.zope.com/

1 0

RE: [Zope] MAILBOXER questions
by Meilicke, Scott 09 Sep '03

09 Sep '03

Can you grep through the Mailboxer directory for a phrase below to try and find where it is located? grep -r "This is the ezmlm program. I'm managing the" or similar -Scott -----Original Message----- From: Paul Resnikoff [mailto:paulr@stanfordalumni.org] Sent: Tuesday, September 09, 2003 11:32 AM To: zope(a)zope.org Subject: [Zope] MAILBOXER questions I have successfully started using Mailboxer in a Zope installation, but am having great difficulty customizing the email messages that are sent to users when they subscribe, unsubscribe, or do other actions. I thought that I would be able to easily alter some DTML documents, but they seem hidden somewhere. For example: After a user subscribes, they get this message which I cannot seem to alter: "Hi! This is the ezmlm program. I'm managing the example(a)example.com mailing list. I'm working for my owner, who can be reached at example-owner(a)example.com. Acknowledgment: I have added the address paul(a)example.com to the interviews mailing list." Has anyone run into the same problem? Paul ____________________________________________________________________ _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient or any employee or agent responsible for delivering it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files.

1 0

Re: [Zope] Local Roles and Acquisition
by nwingfield＠che-llp.com 09 Sep '03

09 Sep '03

Dylan, I'm sure if we're on the same page or not. Perhaps it would help to more fully explain the situation. I spoke of 'Viewer' and 'Editor' (actually I'm recycling 'Owner') roles. On my root folder, these are loosely mapped to the 'View' and 'Edit' privileges, respectively. Almost all of my methods are restricted to one of these two privileges using declareProtected(). In order to granularly assign permissions to particular users on particular objects, I add local roles to each object, mapping a particular user to a role. The problem comes in when Zope combines the explicit local roles with any local roles granted on all parent objects, effectively granting a user more roles than it ought. I understand that you can assign default privileges to a particular role programmatically. Concerning setPermissionDefault(), the documentation says "Note that it is not always necessary to use this method. All permissions for which you did not set defaults using setPermissionDefault are assumed to have a single default role of Manager." This said, I'm not sure how adding this into my product code will prevent the "trickle down" local role effect. Nathaniel Dylan Reinhardt <zope@dylanreinha To: nwingfield(a)che-llp.com rdt.com> cc: Zope Users <zope(a)zope.org> Subject: Re: [Zope] Local Roles and Acquisition 09/09/2003 11:36 AM Please respond to zope On Tue, 2003-09-09 at 07:59, nwingfield(a)che-llp.com wrote: > In this situation, I do not wish for local roles to be acquired from above. > In other words, I don't want Joe to acquire the local role of 'Viewer' when > attempting to look at Sam's stuff. OK. That's easy enough to specify. > > Because Zope makes the bold assertion that security should always get more > permissive the deeper one traverses the object hierarchy, It does? Maybe we have different definitions of "deeper" but I think that standard practice is exactly the opposite of what you describe. > is there no way > to do this short of hacking the 'getRolesInContext()' method? Sure. Use security assertions in your product code to limit viewing-related privileges to owner and manager by default. Unless I'm grossly misunderstanding the question, you should be able to accomplish everything you need right in your product code. Check out this link for more info on security assertions. http://zope.org/Members/mcdonc/PDG/chap5zdg.stx HTH, Dylan

2 1

(no subject)
by zhimin＠iss.nus.edu.sg 09 Sep '03

09 Sep '03

>From nobody Tue Sep 9 12:22:33 2003 Received: from unknown (HELO mail.python.org) (12.155.117.29) by zulu.avenirsolutions.com with SMTP; 9 Sep 2003 07:33:14 -0000 Received: from localhost.localdomain ([127.0.0.1] helo=mail.python.org) by mail.python.org with esmtp (Exim 4.22) id 19wdy4-0005Kz-Qa; Tue, 09 Sep 2003 04:35:20 -0400 Received: from webmail.iss.nus.edu.sg ([137.132.244.144] helo=kingfisher.iss.nus.edu.sg) by mail.python.org with esmtp (Exim 4.22) id 19wdxy-0005IJ-EC for zope(a)zope.org; Tue, 09 Sep 2003 04:35:14 -0400 To: zope(a)zope.org X-Mailer: Lotus Notes Release 5.0.8 June 18, 2001 Message-ID: <OF5F2C902E.2D048996-ON48256D9C.002DF7D5(a)iss.nus.edu.sg> From: zhimin(a)iss.nus.edu.sg Date: Tue, 9 Sep 2003 16:26:26 +0800 X-MIMETrack: Serialize by Router on kingfisher/ISS(Release 5.0.8 |June 18, 2001) at 09/09/2003 04:35:28 PM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii X-Spam-Status: OK (zopelist 0.000) Subject: [Zope] running Zope with python -O option X-BeenThere: zope(a)zope.org X-Mailman-Version: 2.1.2 Precedence: list List-Id: Users of the Z Object Publishing Environment <zope.zope.org> List-Unsubscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=unsubscribe> List-Archive: <http://lists.zope.org/pipermail/zope> List-Post: <mailto:zope@zope.org> List-Help: <mailto:zope-request@zope.org?subject=help> List-Subscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=subscribe> Sender: zope-bounces(a)zope.org Errors-To: zope-bounces(a)zope.org Hi, Is it ok to run Zope with python -O option? e.g. python -O z2.py This will run Zope with optimized bytecode .pyo files instead of .pyc files. How's the performance gain? Any potential problem? Thanks and regards, _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

(no subject)
by gitte＠mmmanager.org 09 Sep '03

09 Sep '03

>From nobody Tue Sep 9 12:22:17 2003 Received: from unknown (HELO mail.python.org) (12.155.117.29) by zulu.avenirsolutions.com with SMTP; 9 Sep 2003 07:12:15 -0000 Received: from localhost.localdomain ([127.0.0.1] helo=mail.python.org) by mail.python.org with esmtp (Exim 4.22) id 19wdc7-0000Uw-Ae; Tue, 09 Sep 2003 04:12:39 -0400 Received: from main.gmane.org ([80.91.224.249]) by mail.python.org with esmtp (Exim 4.22) id 19wdbq-0000PU-Vp for zope(a)zope.org; Tue, 09 Sep 2003 04:12:23 -0400 Received: from list by main.gmane.org with local (Exim 3.35 #1 (Debian)) id 19wdcB-0006B6-00 for <zope(a)zope.org>; Tue, 09 Sep 2003 10:12:43 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: zope(a)zope.org Received: from sea.gmane.org ([80.91.224.252]) by main.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 19wdcA-0006Aw-00 for <gmane-comp-web-zope-general(a)m.gmane.org>; Tue, 09 Sep 2003 10:12:42 +0200 Received: from news by sea.gmane.org with local (Exim 3.35 #1 (Debian)) id 19wdbo-0003b4-00 for <gmane-comp-web-zope-general(a)m.gmane.org>; Tue, 09 Sep 2003 10:12:20 +0200 From: "Gitte Wange" <gitte(a)mmmanager.org> Date: Tue, 09 Sep 2003 10:12:20 +0200 Lines: 77 Message-ID: <bjk214$dg4$1(a)sea.gmane.org> References: <5.2.1.1.0.20030909074232.02ca0f08(a)mail.wange.dk> <pan.2003.09.09.07.30.25.674741(a)mmmanager.org> <3F5DA946.4040605(a)wildenhain.de> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 X-Complaints-To: usenet(a)sea.gmane.org User-Agent: Pan/0.13.0 (The whole remains beautiful) X-Spam-Status: OK (zopelist 0.000) Subject: [Zope] Re: Re: CorruptedDataError! Please help asap X-BeenThere: zope(a)zope.org X-Mailman-Version: 2.1.2 Precedence: list List-Id: Users of the Z Object Publishing Environment <zope.zope.org> List-Unsubscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=unsubscribe> List-Archive: <http://lists.zope.org/pipermail/zope> List-Post: <mailto:zope@zope.org> List-Help: <mailto:zope-request@zope.org?subject=help> List-Subscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=subscribe> Sender: zope-bounces(a)zope.org Errors-To: zope-bounces(a)zope.org On Tue, 09 Sep 2003 12:19:50 +0200, Tino Wildenhain wrote: > Hi Gitte, > > Gitte Wange wrote: >> Hello again, >> >> On Tue, 09 Sep 2003 07:42:38 +0200, Gitte Wange wrote: >> >> >>>Hello, >>> >>>This morning I woke to an email from a customer, saying he got this error >>>everytime he went to a specifik folder: >>> >>> * Module Products.PageTemplates.ZRPythonExpr, line 48, in __call__ >>> * __traceback_info__: here.listFolderContents() >>> * Module Python expression "here.listFolderContents()", line 2, in f >>> * Module Products.CMFCore.PortalFolder, line 230, in listFolderContents >>> * Module Products.CMFCore.PortalFolder, line 221, in contentValues >>> * Module Products.CMFCore.PortalFolder, line 194, in _filteredItems >>> * Module Products.CMFCore.PortalFolder, line 591, in __call__ >>> * Module Products.CMFCore.PortalFolder, line 572, in <lambda> >>> * Module ZODB.Connection, line 509, in setstate >>> * Module ZODB.FileStorage, line 650, in load >>> * Module ZODB.FileStorage, line 630, in _load >>>CorruptedDataError: ????????????????????? >>> >>>I have looked at the archives and saw something that Dieter Maurer wrote about: >>>" >>>Looks like a case for "fsrecover" (make a backup copy of your "Data.fs"!)." >>> >>>fsrecover ??? >> >> >> I have tried running fsrecover on the corrupted Data.fs now - and it >> skipped everything saying it was corrupted ? >> Now I can enter the portal and browse everything except the folder >> containing the corrupted portal - then everything in the Data.fs file >> can't be corrupted ??? >> > I see 2 posibilities: > > 1) restore your most current backup (preferred) I'm working on that :-) I just contacted the customer and asked for the nightly backup. The have some sort of network system that logs in to the machine and fetch all data. An interesting thing in this context is, that the backup is from 02:24 (local time) and the they discovered the problem 02:37. Maybe Zope doesn't like their backup system ?? > 2) export/import your objects tree-wise. What do you mean ? export/import all the objects I can get access without errors ? The problem is that all there newest content is inside the folder where the corrupted object also is so I cannot access the folder at all :-( Does objectsIds() load all the objects ? Maybe I can create some script that lists the ids of the objects in the folder and access them manually and find the corrupted object that way .... -- Gitte Wange Technical Manager Email: gitte(a)mmmanager.org Web: http://www.mmmanager.org Tlf: +45 36 46 20 02 Old Zopistas never die, they just lose their Persistence Wrappers. -- The Jester: ZopeLabs. _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

(no subject)
by gitte＠mmmanager.org 09 Sep '03

09 Sep '03

>From nobody Tue Sep 9 12:21:55 2003 Received: from unknown (HELO mail.python.org) (12.155.117.29) by zulu.avenirsolutions.com with SMTP; 9 Sep 2003 06:37:57 -0000 Received: from localhost.localdomain ([127.0.0.1] helo=mail.python.org) by mail.python.org with esmtp (Exim 4.22) id 19wd6U-00016p-W5; Tue, 09 Sep 2003 03:39:58 -0400 Received: from main.gmane.org ([80.91.224.249]) by mail.python.org with esmtp (Exim 4.22) id 19wd6P-00016f-BQ for zope(a)zope.org; Tue, 09 Sep 2003 03:39:53 -0400 Received: from root by main.gmane.org with local (Exim 3.35 #1 (Debian)) id 19wd6i-0005rS-00 for <zope(a)zope.org>; Tue, 09 Sep 2003 09:40:12 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: zope(a)zope.org Received: from sea.gmane.org ([80.91.224.252]) by main.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 19wcjZ-0005Yw-00 for <gmane-comp-web-zope-general(a)m.gmane.org>; Tue, 09 Sep 2003 09:16:17 +0200 Received: from news by sea.gmane.org with local (Exim 3.35 #1 (Debian)) id 19wcjE-0002DC-00 for <gmane-comp-web-zope-general(a)m.gmane.org>; Tue, 09 Sep 2003 09:15:56 +0200 From: "Gitte Wange" <gitte(a)mmmanager.org> Date: Tue, 09 Sep 2003 09:15:55 +0200 Lines: 49 Message-ID: <bjjunc$89o$1(a)sea.gmane.org> References: <5.2.1.1.0.20030909074232.02ca0f08(a)mail.wange.dk> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 X-Complaints-To: usenet(a)sea.gmane.org User-Agent: Pan/0.13.0 (The whole remains beautiful) X-Spam-Status: OK (zopelist 0.000) Subject: [Zope] Re: CorruptedDataError! Please help asap X-BeenThere: zope(a)zope.org X-Mailman-Version: 2.1.2 Precedence: list List-Id: Users of the Z Object Publishing Environment <zope.zope.org> List-Unsubscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=unsubscribe> List-Archive: <http://lists.zope.org/pipermail/zope> List-Post: <mailto:zope@zope.org> List-Help: <mailto:zope-request@zope.org?subject=help> List-Subscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=subscribe> Sender: zope-bounces(a)zope.org Errors-To: zope-bounces(a)zope.org Hello again, On Tue, 09 Sep 2003 07:42:38 +0200, Gitte Wange wrote: > Hello, > > This morning I woke to an email from a customer, saying he got this error > everytime he went to a specifik folder: > > * Module Products.PageTemplates.ZRPythonExpr, line 48, in __call__ > * __traceback_info__: here.listFolderContents() > * Module Python expression "here.listFolderContents()", line 2, in f > * Module Products.CMFCore.PortalFolder, line 230, in listFolderContents > * Module Products.CMFCore.PortalFolder, line 221, in contentValues > * Module Products.CMFCore.PortalFolder, line 194, in _filteredItems > * Module Products.CMFCore.PortalFolder, line 591, in __call__ > * Module Products.CMFCore.PortalFolder, line 572, in <lambda> > * Module ZODB.Connection, line 509, in setstate > * Module ZODB.FileStorage, line 650, in load > * Module ZODB.FileStorage, line 630, in _load > CorruptedDataError: ????????????????????? > > I have looked at the archives and saw something that Dieter Maurer wrote about: > " > Looks like a case for "fsrecover" (make a backup copy of your "Data.fs"!)." > > fsrecover ??? I have tried running fsrecover on the corrupted Data.fs now - and it skipped everything saying it was corrupted ? Now I can enter the portal and browse everything except the folder containing the corrupted portal - then everything in the Data.fs file can't be corrupted ??? -- Gitte Wange Technical Manager Email: gitte(a)mmmanager.org Web: http://www.mmmanager.org Tlf: +45 36 46 20 02 After 1.5 years of Python, I'm still discovering richness (and still unable to understand what the hell Jim Fulton is talking about). -- Gordon McMillan, 13 Mar 1998 _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

RE: [RESOLVED] ZODB or MySQL for form data?
by paulporter＠buffalotalks.com 09 Sep '03

09 Sep '03

First my thanks to everyone that responded to my question. I received some very thought provoking responses. I am totally new to object oriented databases; never even saw one before Zope, that I know of. So I think I can be forgiven for being a little stand-offish when it comes to the thought of trusting one with my data. At the same time I can see where an OODB might have some advantages, in certain situations, over a RDBMS. You have all given good arguments for both sides of this question. I think, however, the most appropriate answer was "use the best tool for the job". With that thought in mind I think I'll just have to look at each situation individually and make my decision from there. Thank you everyone for your input. I can tell that some of you put alot of thought into your responses and I really appreciate it very much. You have all been very helpful. Paul

1 0