- Zope - Zope lists

Re: [Crew] External Methods?
by Tres Seaver 02 Mar '99

02 Mar '99

Christopher G. Petrilli wrote: > > On Mon, Mar 01, 1999 at 07:43:04PM -0800, Greg Stein wrote: > > Christopher G. Petrilli wrote: > > > On Mon, Mar 01, 1999 at 09:32:07PM -0600, Tres Seaver wrote: > > > > As one who comes down firmly on the "weenie" side of the great "content manager" > > > > vs. "web weenie" divide, I am naturally inclined to code up Zopoids as > > > > ExternalMethods. The docs say to put them under the $ZOPEROOT/lib/python, but > > > > that seems icky for a "shared" Zope like the one on starship. > > > Well, right now that's the only way it's supported... it's not really > > > inteded for an ISP situation with hundereds of "untrusted" users, which > > > is kinda how we're using it right now. FOr now, unfortunately, I'm > > > makign the executive decision that ExternalMethods are verbotten until > > > we can figure out a way to isolate them from one-anohter. If someone > > > wants to develop a derived ExternalMethod that uses rexec or some such > > > to control it's access to the database, that'd be great. > > > > > > > Whither should such gems be placed? > > > > > > Well, unfortunatly all of them would run wit the permissions of "root" > > > as far as I understand it... someone else correct me, but this is how it > > > was explained to me... basically they'd be able to do anything. > > > > Can't you run Zope as another user? That could eliminate a number of > > issues. > > I'm sorry, I wasn't clear ;-) What I meant was that the method has > unlimited abilities to peruse the object database... it doesn't have any > abilities outside it that aren't avilable to the zope process itself > (which in this case runs as uid 'zope'). > > The concern is taht it would be able to circumvent other user's security > since it wouldn't be enforced against the ExternalMethod. I understand the security problems inherent in ExternalMethods; unfortunately, without them, Zope is merely an "also-ran" in the web applicaton race, from my perspective. DTML in isolation is not an "ASP-killer." I'm CC'ing the Zope list, in hopes that someone there can either allay or slay our fears. It seems to me that the security problem is that ExternalMethods can get access to "sibling objects" of the object on which they are invoked, right? I mean, if we could make the siblings inaccessible, and acquired properties read-only, then we should be ok, no? Ugh, I don't grok acquisition well enough to tackle that myself, I fear. -- ========================================================= Tres Seaver tseaver(a)palladion.com 713-523-6582 Palladion Software http://www.palladion.com

1 0

RE: [Zope] Access File (was: The Zope Starship (for Python PSA))
by Michel Pelletier 02 Mar '99

02 Mar '99

> -----Original Message----- > From: Anthony Baxter [mailto:anthony@interlink.com.au] > Sent: Monday, March 01, 1999 6:57 PM > To: Christopher G. Petrilli > Cc: zope(a)zope.org > Subject: Re: [Zope] Access File (was: The Zope Starship (for Python > PSA)) > > > > On Mon, Mar 01, 1999 at 02:41:17PM -0800, David Ascher wrote: > > > > > > ObZope: I'm having a hard time with the 'access' file -- > it looks as if my > > > Zope installation (w/ ZServer) only accesses the first > entry in the file. > > > What am I missing? > > > > > > > THis is completely correct. The access file is ONLY for the > > global-overall-uberuser :-) Everything else should be > defined in the > > database itself :-) > > Note that you could, pretty easily, write a new UserFolder type object > which worked off an access file. Could be useful for people > who are generating > the access file from an /etc/passwd file, or whatever. > You could also skip the generation step and write a UserFolder which works off of /etc/passwd. In fact, NotMail could use this as a helper too. Michel > Anthony > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope >

1 0

The Zope Starship (for Python PSA)
by Robert OConnor 01 Mar '99

01 Mar '99

I Followed the URL backward from: Michel Pelletier's "You've Not Mail !!!" Page, http://starship.python.net:9673/crew/furtrapper/NotMail Hey, this is neat, starship.python.net must be running ZOPE because the port is "9673" !!! therefore going to: http://starship.python.net:9673 "Welcome to Zope at the Starship Python!" So, to join the crew of the Starship and get your own ZOPE pages on the internet requires PSA membership. One can join now and pay for a half year $50/yr or $25 for half. Membership wouldn't be effective until April 1st (a Foolish day!) So, Zope is cool and so is Python. I am considering joining PSA on the strength of Zope and Elegance of Python but I'm concerned that Python doesn't seem to have much "MindShare" like Java or Perl. Ok so our local Borders has only one book on Python: "Programming Python" by Mark Lutz (Pub: O'Reilly) A great book that is dated 1996. The shelves are full of books on Java and there are quite a few Perl books. What is the BIG PICTURE here? Is Python so good that lot of programming tomes are unnecessary? Why is there so little press on Python and so much for the less Elegant and slower Java? Is Python a "secret weapon"? If so, the secret should get out to the world so Python gets more mind share and doesn't develop cobwebs. ***So, where are the rabid Python fans?*** Yes, a bunch of them are on the ZOPE list. Great answers to these questions will only help ZOPE! -bobo connor

5 4

Z Oracle Database Connection doesn't show up.
by mvoltchenko＠platinum.com 01 Mar '99

01 Mar '99

I have compiled and installed Python 1.5.1, Zope 1.10.2 - all works fine. I downloded and installed ZOracle DA, following all the steps in the README file. However, I can't get Z Oracle Database Connection to show up in the list of available item types in Zope mangement interface. Any suggestions would be greatly appreciated. Marina Voltchenko.

1 0

Re: [Zope] ANNOUNCE: FAQ Tool sample Zope app.
by Gary Stephenson 01 Mar '99

01 Mar '99

Amos Latteier wrote: > At 05:04 PM 3/1/99 +1100, you wrote: > >Amos Latteier wrote: > > > >> > >> Correct. This is what's supposed to be there. Does the FAQ Tool not work > >> when you install it? Are you using Zope 1.10.2? > >> > >> -Amos > > > >My Zope Zen seem to have gone negative (started at zero - and just got worse > >:( ) but HOW do you install it. > > I hate to tell you to RTFM, but did you try the "Installation Instructions" > on the page where you downloaded it? > A perfectly reasonable suggestion - and one that I have made many times myself! <g> I did, in fact, RTFM - but the FM makes absolutely zero mention of anything "leverish", to adopt a seemingly Zopish mode of Englishish. ;-) I followed your link given in another message, and realised that what I had been reading about in terms of Product Distributions was (I think) what you refer to as the "Lever". IAC, I followed the instructions given, and when it didn't work I went back, and worked my way through the Product Tutorial exercise - excellent! The POLL product works fine! But the levered faq product .DAT file apparently failed to unpickle - as described by others in this thread. My product management screen shows the FAQ product as installed, but the actual product directory still has just the three files from the tarball. In my case, however, it is on a Linux ZAP system - so the problem is not confined to Win32 as others have conjectured. Hope this helps, and apologies for the lack of specifics in my previous post. Can we please have the term "lever" clarified and documented a little better. -my-FAQ-product-having-FA-Q's-in-it-ly yours gary

1 0

Re: [Zope] Connecting Zope to Sybase: Linux or Irix ?
by Quinn Dunkan 01 Mar '99

01 Mar '99

philip wrote: > At 02:29 PM 3/1/99 -0600, Jeff Bauer wrote: > > > >Does this include the latest version of PCGI? > > > >FWIW, I'm willing to work with anyone getting PCGI > >to work on their platform of choice. > > The last version I tried was the one distributed with Zope 1.9.0 - it > exhibited the same fail-on-process startup behavior as previous versions, > so I went to ZServer as a stopgap until I could complete a FastCGI > replacement. I'm now using FastCGI, so it's no longer an issue. I'm using pcgi from 1.9.0 (README says it's 2.0a4) under Irix 5.3 (yes, I know, I keep bugging the sysadmin to upgrade :) ). Occaisionally, pcgi fails to start up, logging "Interrupted system call (116) unable to connect, fd=4". I also had the same problem when using FastCGI w/ threads: the application would hang and I'd get an "interrupted system call" in the log after a while. I have never experienced either of these problems under linux, so might this be an Irix problem? I remember that Philip also suspected an Irix "sockets-and-threads-don't-mix" problem, which appears to be what I have experienced as well. Philip, is theaded FastCGI still broken on Irix?

1 0

RE: [Zope] Zope and Apache - again
by Michel Pelletier 01 Mar '99

01 Mar '99

> -----Original Message----- > From: raver(a)box.dust.za.net [mailto:raver@box.dust.za.net] > Sent: Monday, March 01, 1999 2:04 PM > To: zope(a)zope.org > Subject: Re: [Zope] Zope and Apache - again > What I did: > > 1) Extract the Zap distro into my top level Zope dir. Entered > the Zap dir and > did ./startzap. > > This happened: > > './startzap /usr/local/Zope/Zap/bin/zap: No such file or directory' > I just did a fresh install and this works for me. Can you run bin/zap by hand from the shell prompt? Have you tried downloading a fresh copy of the Zap tarball? > 2) I figured the httpd equivalent 'zap' was broken and > replaced it with my > httpd (from apache 1.3.4). Again I fired up zap with ./startzap. > > This happened: > > No complaints this time. Apache (or rather zap) fires up > correctly, but when > I try to reach the server with netscape or lynx (http://localhost/, (I > changed port back to 80)) I get 'Document contains no data'. > > Same goes for trying: http://localhost/cgi-bin/Zope/manage - > I get 'zero > sized reply', 'The requested URL could not be retrived'. > Your own httpd binary might not be compiled properly for Zope use, check out the Zap FAQ at http://www.zope.org/Community/Projects/Zap. Doh, I just noticed that this is not an obvious link from the d/l page. I will make it so. > Now - seems like there are some settings missing from the > zap.conf file? > The conf file that comes with zap is ok. We and others tested it quite a bit. > Or if nothings wrong - then maby give the readme-file a facelift and > make it more clear to ppl like me what to do to get it running. > When we figure out your problem, it will get added to the docs. > Zope seems just too good to just let go!! It is that good. > > Hope to get it running soon > > Regards Sture Lygren > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope >

2 1

Is a JPython implemention within the realm of possibility?
by Bern McCarty 01 Mar '99

01 Mar '99

I am wondering if it is within the realm of possibility that the Zope project might eventually support operation as a Java program (under JPython) in addition to operation under traditional Python. I know it would probably be a large undertaking and that there may well be better places to spend precious energy, but I thought I'd register my interest in the prospect. In our case it is a given that a specialized JVM will be embedded in all of our products and more and more of our own source will be written in Java, so code which can integrate with Java easily is all the more interesting to us. We already have a product which uses traditional Python behind a web server to provide an entirely through-the-web user interface for product configuration/administration. My aim has been to replace the traditional Python with JPython since we'll have lot's of Java stuff we'll want to be using on the server going forward anyway. It looks like Zope would enable us to do what we are already doing more easily (and therefore better). So here's hoping we'll one day see Z-over-P-over-J. Yeah. I know it would have to be slower. Zope looks cool. Bern McCarty

4 3

Connecting Zope to Sybase: Linux or Irix ?
by pj＠sam.engr.sgi.com 01 Mar '99

01 Mar '99

I'm just beginning with Zope, and just beginning with a project to develop some new software product management (bug tracking and such) tools for use within Silicon Graphics (SGI). Zope appears to be an excellent fit for many of our needs. I will need to connect with an existing large Sybase database (the existing bug data). I can freely choose to use either Linux or Irix for the server side operating system. >From which server O.S. would it be easiest to get Zope connected to Sybase? Something I read on www.zope.org led me to suspect that I should use Irix, so that I can use our Sybase licensed library, and that Linux wouldn't work, because of a lack of the needed library. Is that so? Any other obvious factors that I should consider in this choice? ======================================================================= I won't rest till it's the best ... Software Production Engineer Paul Jackson (pj(a)sgi.com; pj(a)usa.net) 3x1373 http://sam.engr.sgi.com/pj

3 3

MailHost problems.
by Jose.Lacal＠icn.siemens.com 01 Mar '99

01 Mar '99

Folks: Error message when trying to send e-mail from a Zope-generated web-form. I did RTFM at http://www.zope.org/Documentation/HowTo/MailForm and I still get the following error message:  <HR> <P>Copyright 1999 Siemens I & CN. Maintained by <A HREF="mailto:jose.lacal@icn.siemens.com">Jose C. Lacal</A>. <A HREF="http://www.linux.org"> <IMG SRC="images/logosml2" ALIGN="TOP"></A></P> </BODY></HTML>  Platform: Red Hat 5.1 Zope 1.10.2 Both sendmail and DNS are properly installed since I was able to send e-mail using "sendmail -v jose.lacal(a)icn.siemens.com < letter" I'm no Zope expert, so any suggestions appreciated. Regards.

2 1