- Zope - Zope lists

Storing blobs in a RDB
by Marco Bizzarri 15 Mar '05

15 Mar '05

Hi all. We have a zope/zeo/postgres configuration. We need to store blob on the RDB, which is on a different machine from zope. When the RDB and zope were on the same machine, this was achieved via creating a temporary file, and then submitting the file to postgres, via the lo_import/lo_export interface. Now this can't be done anymore. Is there any viable solution? What I thought to do was to put a zeo on the same machine as postgres, create a file or some object like that on the zeo storage, and then instruct postgres to get the file from there. But is this feasible? I've tried with DirectoryStorage, but it is storing other infos with the file (of course). Any suggestion? Regards Marco

2 1

RE: [Zope] Re: Blocking Sibling inheritance
by Jay Zeemer 15 Mar '05

15 Mar '05

Greg, You just described my problem to the letter. This is the issue that is impacting me currently. The only way we have successfully blocked this is to add an object to every customer folder that represents every other customer. We have been trying to make a folder-ish object with Acquisition.Implicit but so far have had no success. Besides adding a customer# object for every customer to every customer can anyone tell me how I can block this from happening?? Jay -----Original Message----- From: Greg Fischer [mailto:retheoff@gmail.com] Sent: Thursday, March 03, 2005 3:36 AM To: zope(a)zope.org Subject: Re: [Zope] Re: Blocking Sibling inheritance Security issue? I think you are partially right about it not being a security issue because Zope does what it is supposed to do and look where it should. Here is a security issue relating to this acquisition: (IMHO) I have folder 1: /site/dev/customer1/folder/page And folder 1: /site/dev/customer2/folder1/folder2/page Eash customer level folder has acl_users with different/separate accounts. The security at the customer level folder is set to not acquire and no anonymous access. Now here is the problem I see, you type in your URL: someplace.com/site/dev/customer1/folder/page You are asked to authenticate. Then you change your url after authentication to: somplace.com/site/dev/customer1/folder/customer2/folder1/folder1/page And you get right in with no authentication! That should not be allowable. I understand that this would require someone to know the folder structures, but really, in a more simplistic example, all you would need to know is the other client folder name, and you would have access. So what can we do about this? If you dont have acl-users account in a folder you access, you should NOT be able to see the contents. Right? This may be a new subject, I dont mean to stray off topic. On Thu, 3 Mar 2005 01:20:32 -0700, kosh <kosh(a)aesaeion.com> wrote: > On Thursday 03 March 2005 1:06 am, Dario Lopez-Kästen wrote: > > Tres Seaver wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > > Hash: SHA1 > > > > > > Jay Zeemer wrote: > > > | Greetings all, > > > | I am in the process of examining Zope for some possible applications. > > > | Currently I am having an issue with Zope being a bit to smart. I have > > > | a directory \Dir1\ and under it I have 2 subdirectories \Dir1\SubA\ and > > > | \Dir1\SubB\. The problem I am having is I can go to \Dir1\SubA\SubB\ > > > | and gain access to things that are in \Dir1\SubB\, I need to be able to > > > | block sibling level inheritance. Is this possible in Zope?? Or are > > > | there any other ways to block this with out creating a SubB object in > > > > > > \Dir1\SubA\ ?? > > > > > > The "sibling inheritance" you are describing is Zope's "acquisition". > > > Folders derive from Acquisition.Implicit, which means they are willing > > > to acquire any "non-private" name from their parents. > > > > > > To prevent this behavior, place SubA with a Folder-like object which > > > derives instead from Acquisition.Explicit. > > > > I'd need this too. Would I be making a correct assumption when stating > > that no such folderish product, such as a "aq-blocking Folder", exists > > yet, but it has to be written (ie by me or anyonelse needing this > > functionality)? > > > > Thanks. > > > > I don't know of something like this existing and even more I don't know why > you would really want it. Eventually you will understand how and why > acquisition works and then you would have a fair bit of work to do to change > the stuff back. Zope is not publishing any object that the person viewing the > site would not normally have access to so it is not security issue. > > What you probably need to do is read the zope book and read about how > acquisition works. You can use it to make apps a lot faster and save yourself > a lot of work by learning how to use it. Acquisition is a major reason that I > use zope in the first place and have been using it for about 4 years now. > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > -- Greg Fischer 1st Byte Solutions http://www.1stbyte.com _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

8 13

Newbie - help with install in Suse 9.1 as root (and other questions)
by f2396576＠est.fib.upc.edu 15 Mar '05

15 Mar '05

Hello everyone, I am a zope-newbie and I'm trying to install zope from source as root. I install and compile python 2.3.3 and zope 2.7.4, creating a user for zope when I am asked, and I change .conf to effective-user myuser: but when I run zopectl, cannot found the user 'myuser' (and if I try as root, doesn't allow it to me). Of course, the browser don't find http://localhost:8080/ I need to install in linux because I have to create a collaborative editor in the web free source. Has also to be suse 9.1. Related to this: -To customize my own zope application, all the code to touch is the python code? - How exactly handles concurrency Zope? I mean, two people editing same page at the moment, how handles it? By database, by .py (what archive)...? - Can Zope call/integrate an application, like an external editor of .po files (also free software, probably KBabel)? Some people has said me that a wiki (Mediawiki) could be a good idea for this, but I am also trying Zope as it seems ascending and with much potential. I want to try both exhaustly before taking a decision. Thanks in advance Jordi

2 1

ENC: [Zope] LDAPUserFolder - Too many results for this query...
by Rodrigo Varela Simões 15 Mar '05

15 Mar '05

I´m having the same problem accessing Active Directory, through Plone/LDAPUserFolder/python-ldap. The AD´s size´s limit is 10.000 results, and I just have 2.500. When I try to view all users using the LDAPUserFolder interface I got the message "Too many results for this query". Do you have any idea how to fix it ? Best regards, ******************************************************************* Rodrigo Varela Simões Operações de TI Dedini S/A Ind. de Base (19)3403-3209 *******************************************************************

2 1

date/time woes
by tmc＠dreamcraft.com.au 15 Mar '05

15 Mar '05

Hi all Background: I am running a Linux system with Zope+Plone. My system clock is set to UTC(GMT) and my system knows the timeone its in - Australia Eastern Time (+1000 or +1100 for daylight saving). Problem: CMFcalendar isists in makeing all dates US/Eastern, and in fact sets many events forward or back in time. So do rest of Zope and Plone products. With all of this, I and my collegues are getting the jack of this behaviour and some dissenting voices argued for ditching zope as the framework in favour of somesthing "That can get the date right. Were not Americans." Question: How do I get Zope and its products to take account of my TZ settings? Is there a way to force ZOPE to live in my timezone instead opf some place in Eastern US, which is probaly a niceplace, is NOT where I am(!). Any advice? Regards Tomasz -- Tomasz M. Ciolek ******************************************************************************* tmc at dreamcraft dot com dot au ******************************************************************************* GPG Key ID: 0x41C4C2F0 GPG Key Fingerprint: 3883 B308 8256 2246 D3ED A1FF 3A1D 0EAD 41C4 C2F0 Key available on www.pgp.net *******************************************************************************

2 1

Reset admin password on zope 2.7.4 on windows platform
by Richard De Vriese 15 Mar '05

15 Mar '05

Is there any way to reset the admin account password on zope 2.7.4 on a windows XP installation. I read through the zopectl information but that only seems to work on a Unix platform. I've got a zope instance I'd like to reactivate, but don't remember the admin name or password. Thanks Rick

2 1

ZCatalog PathIndex Query
by Nathan Colgate Clark 15 Mar '05

15 Mar '05

In an 'advanced search' interface i would like to provide the ability to search using the path index of my catalog (index id: 'p', catalog id: 'Catalog'). A sample of my catalog: /site_root/publications /site_root/publications/newsletter /site_root/publications/newsletter/edition01/articleA /site_root/publications/newsletter/edition01/articleB /site_root/publications/magazine /site_root/publications/magazine/fall2003/articleC /site_root/publications/magazine/fall2003/articleD /site_root/publications/magazine/winter2003/articleE /site_root/publications/magazine/spring2003/articleF So that if the user were to type "magazine" into the field they would get the last 5 objects in my catalog. however, this does not work right now. currently i have to type "/site_root/publications/magazine" into the field. this is becuase the default level for pathIndex searches is 0 (line 154 of PathIndex.py). to change this I must pass the argument as a tuple (query,level) with the level set to -1. My question is this: how do I do that using the get method of a form? how do I pass the (query,level) tuple from the form in the URL? I have tried this: http://www.mysite.com/search?p=magazine&p=-1 which gives me a p variable of: ['magazine','-1'] but still does not give me any results.

2 1

Database not in sync for days ?
by Renfer Serge (EDU) 14 Mar '05

14 Mar '05

Hello again, I have some more info about my Data.fs not in sync for days. The person responsible for the Solaris server told me that he couldn't find more recent Data.fs from his incremental backup than the one from the 3rd of march (it should be daily backuped), it is as if the system (zope) hadn't touch the Data.fs file ??? Since this weekend crash, I restarted zope this morning, the instance was running for 7 hours and the Data.fs had not changed its size, whereas the Data.fs.tmp had grown to 147Mb (many persons importing backup, I guess) => I went to the "Control_Panel/Database/temporary/manage_main" it was mentionned to be 0.0K ! => I went to the "Control_Panel/Database/main/manage_main" it took a long time and the size of my 2.7Gb (this morning) had grown upto 3.0Gb => I went back to a term and found out that the Data.fs.tmp had shrunk to 0 byte and Data.fs had effectively grown over 3Gb. Does zope keep a buffer in Data.fs.tmp ? And could it be that one has to open (manually) the "Control_Panel/Database/main/manage_main" to flush this tmp buffer to the Data.fs ? Is the "Control_Panel/Database/temporary/manage_main" the one in relation with the Data.fs.tmp ? Thank you in advance! serge

3 2

Re: [Zope] receive a message whenever there is an update in a plone site through a pop-up/mail
by Reinoud van Leeuwen 14 Mar '05

14 Mar '05

On Mon, Mar 14, 2005 at 07:19:36PM +0530, Karthikeyan palani wrote: > Hi, > I am developing a content management system based on plone.I have a > requirement which is, > " whenever an update occurs in the plone site ,a message containing > the place of update should be sent to all the members of the site." > I have got two ideas,i don't know whether it works > 1>to query the Data.fs and retrieve data( i.e the object which has > been updated) from it and send it to all the members. > 2>go to ZMI and in the portal_skins/plone_form_scripts/ go to > content_status_modify(handles the workflow transitions of objects) > and include a code over here such that the objects which have been > updated should be found and a message should be sent to all the members. > > Now,my question is whether if any of the above can be done(i.e is it > possible to query Data.fs while the site is up) or is there any other > solution for my requirement?If anyone knows an answer to this please give > me an idea on how to do this and if possible send me a code example. A more logical approach might be sending a message from the workflow. This method is described in the Plone Book: See "Using Workflow to Track Changes" on http://docs.neuroinf.de/PloneBook/ch8.rst -- __________________________________________________ "Nothing is as subjective as reality" Reinoud van Leeuwen reinoud.v(a)n.leeuwen.net http://www.xs4all.nl/~reinoud __________________________________________________

2 1

sessions in zope
by Leticia Larrosa 14 Mar '05

14 Mar '05

Hi all: I want to create user sessions in zope with credentials taken from an authentication form and data about the user taken from a PostgreSQL database. I know that Zope2.5 and later bring with something to do this like CoreSessionTracking, and exist some extra products like: SQLSession, HappySession, FSSession (I don't know any else) In any case, Where I find any documentation about how use any of them in zope with ZPT? and which one use?. I review in the zope.org page the how-tos, the articles, the books, but i don't found nothing. If anybody can guide me to the research, or have any opinion about which one use (the most important issue) and how, I will appreciate. thanks in advance

3 2