- Zope - Zope lists

Making some DTML Documents catalog aware
by Christian Couder 12 Sep '00

12 Sep '00

Hi everybody, I have a Zope site with many DTML document and I would like to make them catalog aware because I want the web site users to be able to search the site. The web site users are already able to modify the site themselves and this functionality must be kept. I use the debian zope package version 2.1.6-5.2. My first thought was to create a new ZClass that inherit from both the CatalogAware and the DTML Document class but it seems to be quite difficult. First the How-To: DTML Zclass ID Bug Workaround helped a little, but when I try to map some DTML methods to some views in the "Views" tab of my class, no tab for the view are displayed for the class instance. I also searched the news and the documentation and it seems that many people faced some problems when inheriting from both CatalogAware and DTML Document. So now I suppose this is not the best way to solve my problem. Do some people have succeeded in something like this ? Thanks in advance for your answer. -- Christian COUDER christian(a)alcove.fr Ingénieur Informatique Libre Alcôve - http://www.alcove.fr/

1 0

Re: [Zope] How to Pass values to a DTML method ??
by Dieter Maurer 12 Sep '00

12 Sep '00

Stuart Foster writes: > I have a DTML method that is called from a document. I need to pass a value > to it like a parameter would be passed to a function. > > <dtml-var some_method(param=value)> That does not look too bad, but you forgot the "..." around the call. You should include two positional parameters as well: <dtml-var "some_method(_.None,_,param=value)"> Otherwise, you cut the namespace propagation. Dieter

4 6

ZSQL
by Tom Deprez 12 Sep '00

12 Sep '00

Hi, I use an ZSQLMethod to query a database. In the result report I try to insert the results of another ZSQLMethod per each record of the first result report. The problem is that the first record shows the correct result of the second result, but that the following records all show the second result report of the first record. Here follow some code snippets: This query (contact_lookup) is called from the second report : select * from CONTACTPERSON <dtml-sqlgroup where> <dtml-sqltest ADDRESS.CENTRE_NO column=CONTACTPERSON.CENTRE_NO type=int optional> </dtml-sqlgroup> Here is the second report (tabular_contact_report) : <dtml-in contact_lookup size=50 start=query_start> <dtml-if sequence-start> <table border=0> </dtml-if sequence-start> <tr> <td><dtml-var CONTACT_NO null=""></td> <td><dtml-var CENTRE_NO null=""></td> <td><dtml-var CONTACT_NAME></td> <td><dtml-var CONTACT_TYPE></td> <td><dtml-var PHONE_NO></td> <td><dtml-var EMAIL_ADDRESS></td> </tr> <dtml-if sequence-end> </table> </dtml-if sequence-end> <dtml-else> None </dtml-in> And here is a piece of the first report ( tabular_address_report): <dtml-in address_lookup size=5 orphan=0 start=query_start>  <tr> <td colspan=2> <table width="100%"> <tr> <td width="3%"> </td> <td bgcolor="#EEEEEE" border="0"> <dtml-var CENTRE_NO null=""> <small><b>Contactpersons</b></small><BR> </td> </tr> <tr> <td width=30> </td> <td> <dtml-var tabular_contact_report> <<<<<<<<<<< </td> </tr> </table> </td> </tr> </table> </dtml-in> It looks like the query is only done with the first request (ie record no 1) and not with the following record. Because the second query returns always the same results (although I call the query with a different where parameter). What am I doing wrong? Tom.

1 0

are there any known memory leaks in Zope 2.2.1?
by Skip Montanaro 12 Sep '00

12 Sep '00

I'm experiencing bad memory leaks in my ZServer-based system. I recently upgraded from 2.0.0 to 2.2.1. I didn't have leakage using 2.0.0 - certainly nothing like I'm seeing it now. When I call the same method (same parameters as well) over and over, I pretty significant leakage via isolate methods exposed through ZServer to test scripts that don't use ZServer, no leakage occurs, so I'm beginning to think there's something amiss with ZServer or DocumentTemplate (the two pieces I use most heavily) or the parts they use. Unfortunately, even disconnected from ZServer, my code is still pretty dependent on my own environment so I can't easily post a script for people to gaze at. One simple method (just executes a DocumentTemplate and returns the resulting HTML) seems to be growing at a rate of about 16kbytes every five to ten times it's called. A search method that calls an XML-RPC server to do the work is much worse, growing at a rate of 85kbytes to 100kbytes per call. It's certainly possible that I'm creating some garbage that Python's reference counting can't reclaim, but when I run my server under Python 2.0b1 with the new garbage collector enabled (and collecting at each call) it never finds anything to collect, so it would appear that the garbage is either being created at a lower level (non-Python heap allocations in C code) or Python objects are getting appended to lists or dicts that are visible to some part of the system (just not obvious to me). What tools are available to try and detect memory leaks in Zope-ish applications? What input can I provide to DC or other interested experts to help track this down? Thx, -- Skip Montanaro (skip(a)mojam.com) http://www.mojam.com/ http://www.musi-cal.com/

2 1

Defining a session idle timeout value using FSSession...
by Aaron Bostick 12 Sep '00

12 Sep '00

Would anyone on the list have a solution to implementing idle timeouts using FSSession? I know you can cron up a simple job to delete the FSSession hierarchy based on date and time, but how do you know which sessions are still being used if you want to delete stuff say every 10 minutes or so? I logged on this morning to find out my session was still active from last night! Oh boy! Thanks folks! Aaron Bostick

1 0

Re: [Zope] Re: Session support (was: Object serialization between different pages)
by Chris McDonough 12 Sep '00

12 Sep '00

Hi Tom, > I just read your proposal and I think it would be nice to have such a > standard product in Zope. Certianly since lot's of these 'shopping carts' > websites are popping up on the internet. > I've however one question, which is more generally to e-commerce products > and which perhaps give this product this little extra then others. At the > moment all? these e-commerce products need 'cookies'. To which ecommerce products are you referring? > This implies that the > user needs to have this feature enabled. People who don't want cookies or > just don't know how to set it, will not be able to 'shop'. > Now, isn't there a possible solution for? Yes, url-rewriting. I even saw one product that went as far as too hook into DNS to dynamically create "fake" hosts on-the-fly to use as a session key. > Perhaps not that good as cookies, > but it can be a solution. I believe cookies are placed on the client > computer and that they can stay alive or be removed after a certain time. > So, isn't it possible to mimic these cookies on the server site (while the > session is active)? Mimic, no... not permanently, unless a rewritten URL is bookmarked. The server needs some indication on a request as to what session the client belongs to. Cookies provide this more or less transparently, while URL-rewriting is slightly more intrusive. > The only problem I see is that we need to be sure to > connect the correct server-file with the correct user. But isn't this > possible with information out of the HTTP request? Yes, a cookie or a URL (or POST variables) with a session key embedded somewhere. > This way we create a > file on the server (with a name which uniquely identifies the client) or > zope-object (but this gives the problem that the Zope database will rapidly > grow) A session manager which directly writes files onto the filesystem isn't a scalable solution (sessions cannot be shared across ZEO clients). This is why a nonundoable storage is a related deliverable in this proposal, as it can be shared from ZEO and mounted by several ZEO clients. > when the user starts shopping. When shopping is finished the file is > removed (and eg some information is send to another place sop that people > know something is ordered). The session manager itself checks if certain > session are abandoned and if one is not active (for 20 minutes) it deletes > the file). Yep, there are a few different kinds of garbage collection schemes we can use, this is one. > The contents of the file are the same as what you would place in > cookies. A cookie will almost always hold a session id, and maybe other metadata, but probably never any data used directly by the app. The app will go through the session manager, and won't need to know anything about the contents of the cookie. > If the product would have the possibility to have something like this extra > (ie. you can manually choose to have a client or server cookie (or you let > the product decide it automatically ie cookies on -> client cookie > otherwise server cookie)) this would be a nice thing for Zope againts is > competitors. There is no such thing as a server cookie, but a similar failover-to-URL-rewriting scheme can be made available to developers.

1 0

Re: [Zope] Looking for Zope vs. Others at-a-glance comparison
by Richard Moon 12 Sep '00

12 Sep '00

I've enjoyed the contributions on this thread. Some time back I mentioned that what hooked me on Zope was the Relational Database access "out of the box". I liked the way Zope generated a simple database query form and result - so I agree strongly that Zope could hook more people if it did even more useful things without coding. I even suggested others submitted their favourite ideas for a "Wizards of Zope" beauty contest. I've been supplying solutions to clients for xx years now and my philosophy has always been to code at the highest possible level. Don't code in machine code if you can code in assembler, don't code in assembler if you can code in C, don't code in C if you can code in a 4GL, don't code at all if you don't have to :-) Zope offers the potential to be the perfect development environment with tons of really good solutions off the shelf - these can be customised if they have to, we can drop down to Python if we really need to. Perfect. Unfortunately its been difficult to get discussions like this going on zope.org as its mainly devoted to coding problems, while zope-dev is to do with deep and complex zopezen. I know usability is high on Paul Everitts list, 'cos he said so in Paris. Perhaps we need zope-usability.org as a forum for non-technical discussions about Zope development ?

1 0

RE: [Zope] Important Security Concerns
by Coleman, Bryan 12 Sep '00

12 Sep '00

That would cause another whole set of problems, unless apache is inherity more secure than Medusa. I was really wondering what the risks are associated with those two options. - Bryan Patrick Coleman Questcon Technologies (336)273-2428 ext-416 bcoleman(a)questcon.com > -----Original Message----- > From: Phil Harris [SMTP:phil.harris@zope.co.uk] > Sent: Tuesday, September 12, 2000 5:15 AM > To: Coleman, Bryan; zope(a)zope.org > Subject: Re: [Zope] Important Security Concerns > > Another option might be to proxy the Zope server through Apache on port > 80. > > > ----- Original Message ----- > From: "Coleman, Bryan" <bcoleman(a)questcon.com> > To: <zope(a)zope.org> > Sent: Tuesday, September 12, 2000 12:43 PM > Subject: [Zope] Important Security Concerns > > > > I almost have my company convinced that Zope is the technology to use > for > > our Intranet/Extranet. However they are very concerned with security. I > have > > proposed two security schemes that I would like zope community feed back > on > > for potential holes. > > > > Option A: Poke a hole through our firewall on the primary http port or > on > > port 8080 to allow Zope pages through and then require authentication on > the > > first page. > > > > Option B: Set up a DMZ off the firewall to allow the same as the above. > > > > Any feed back would be welcome. > > > > - Bryan Patrick Coleman > > Questcon Technologies > > (336)273-2428 ext-416 > > bcoleman(a)questcon.com > > > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev )

3 2

Important Security Concerns
by Coleman, Bryan 12 Sep '00

12 Sep '00

I almost have my company convinced that Zope is the technology to use for our Intranet/Extranet. However they are very concerned with security. I have proposed two security schemes that I would like zope community feed back on for potential holes. Option A: Poke a hole through our firewall on the primary http port or on port 8080 to allow Zope pages through and then require authentication on the first page. Option B: Set up a DMZ off the firewall to allow the same as the above. Any feed back would be welcome. - Bryan Patrick Coleman Questcon Technologies (336)273-2428 ext-416 bcoleman(a)questcon.com

3 2

ZSQL and database locking
by Arjan de Knegt 12 Sep '00

12 Sep '00

Dear all, I'm a happy Zope user (in a private environment), experienced in client-server application development but still quite green regarding to Zope. I'm trying to figure out how I can use database locking using ZSQL and MySQL. What is the case? I would like to implement a multi-user update function avoiding the obvious concurrency pitfalls. I usually implement this as follows: 1. Add a "counter" column to every table 2. With every record update, raise the counter for that record with 1 3. Before an update, first read the actual value of the counter in the database. Compare the counter in the database with the counter value of the record currently being edited. 4. If the values are not the same, another user has obviously edited the database in the meantime. The changes will not be updated to the database but the current database record will be redisplayed on the screen (with a message to the user of course). 5. If values are the same, update the database. To avoid concurrency problems, the table has to be locked before step 3 and unlocked after step 5. Because a ZSQL database connection is a permanent connection, the database will see it as 1 single session. All (anonymous) user of the web-update form will use the same session and database locking will have no effect. Now finally my question: Does anyone see a (simple) solution for this? Okay, I could create a seperate MSQL database connection for every user, but that doesn't look very Zope-ish to me. Didn't find a comparable issue in the Zope Mailing lists. Thnx in advance, Arjan.

1 0