- Zope - Zope lists

Re: [Zope] Calling SQL from Python products
by Johan Carlsson 22 Sep '04

22 Sep '04

I'm "bounching" this thread back to the list :-) Dario Lopez-Kästen wrote: > Johan Carlsson wrote: >> >> I guess if your using ZSQL it's just easier to create ZSQLMethod >> object in the class? >> >> I just realized that I want ZSQL, to do escaping for instance... >> Passing string doesn't feel secure if there's ttw data in it. >> > > I think that there are some advantages of your solution that perhaps can > be of use - and I think it would be interesting with some testing too. > > Yes, you can create the ZSQL from inside the product (look at how > ExUserFodler does that for instance), and if you use FSbased ZSQL > methods it is even easier. One problem that I find with ZSQL Methods is that I need to delete the connection_id attribute from the ZSQLMethods I create at class level: class MyClass(BaseClass): connection_id="MyConnectionID" _zsql_meth=ZSQLMethod('','','', arguments, template) del _zsql_meth.connection_id #Now connection_id will be acquiried from MyClass #Well I noticed that I could override connection_id #by using a connection_hook def getConnectionId(self): return self.connection_id _zsql_meth=ZSQLMethod('','','', arguments, template) _zsql_meth.connection_hook ="getConnectionId" #Now connection_id will be looked up by calling getConnectionId #on MyClass. Quite similare solutions really. > You want to have ZSQL-merthods for the SQL-escaping, but also for the > dynamism it gives you. THe trick would be to render the ZSQL to a string > and then pass it on to your methods. > > If you are lookin for speed in processing the results, (apologies if you > know this allready) then perhaps there is an easier way. i.e. in a > Script(Python) (can be used in Product code as well, this is just to > illustrate): > > my_data_set = context.my_sql(param1='apa', ...).dictionaries() > > my_data_set will be a list of dictionaries, and most of the values in > the dictionary will be standard Python types - standard python types are > not checked for security, which makes traversing my_data_set a really > fast operation. > > If you use the > > for a in my_data_set: > print a.col_1 > > or > > <dtml-in my_data_set> > <dtml-var col_1> > </dtml-in> > > patterns then col_1 will be a Zope object and as such must be checked by > security. In the worst case this will give you rows*cols security checks > just to display the result-set! > > Was this the kind of speedup you where interested in? I hadn't thought about speed, so thanks for the tips :-) I'm using the Result object directly in Python as you describe, but mostly because I don't want to display tre result. I'm building a PluggableAuthenticationPlugin you see :-) The speed-up was a nice plus :-) Cheers, Johan -- Johan Carlsson Tel: + 46 8 31 24 94 Colliberty Mob: + 46 70 558 25 24 Torsgatan 72 Email: johanc(a)easypublisher.com SE-113 37 STOCKHOLM

1 0

Invitation To Brag, Boast, or Simply State Solutions with Zope
by Jonathan Cyr 22 Sep '04

22 Sep '04

Hello Everyone, As I finish my first project with Zope, I've benefited greatly from the folks on this discussion list... their Zope knowledge much greater than my own. As I leverage Zope's features to solve my application problems, I wonder what all of you folks have been building with Zope, knowing the resource this list is. As everyone attacks the various technical problems or questions of the moment, I think the nature of this list's problem-solving nature doesn't showcase Zope and its successes very well. I would like to propose the bragging, boasting, and/or summary of your Zope solutions. I believe it will help the community, those looking at Zope for the first time, and each other. My impression is... that as Zope succeeds as a platform... we all justify our time investment... and hearing about Zope solutions in a constantly evolving software development market could be very powerful. Success stories about your solutions with Zope, posts could simply be titled "Success Story: Project Title". Details such as... - Who uses them? How many users? - How important are the solutions to users? - How did you leverage Zope to get there? - What components or add-ons helped the most? - What industry do you support? Were they resistant to Zope? Has Zope penetrated conservative IT shops? - Who uses DTML, ZPT, ZEO, CMF, ZClasses, UserFolder X, Pound, etc, and how did it help? - Does your app churn numbers, transactions, views, etc... got some stats for us? - Including various levels of expertise... folks who author products, to those who apply them to specific needs. Best of all, letting your ego "out to play", once in a while, is a good thing... It is important that, if you let your ego out, you have an effective plan to capture it safely and return it to its work.... hehe If you think this idea has value, I'd love to know... I'm really tired of PHP, J2EE, .Net, or LAMP success stories in all these magazines. Not sure how this will fly, Jonathan Cyr cyrj(a)cyr.info http://www.WeddingWeblog.com ps- I will prepare a brag-session of my product as well... if deemed a good idea

7 9

Epoz from within ZMI only
by mark hellewell 21 Sep '04

21 Sep '04

Hello, I've only been using Zope for a few weeks, so I eventually hope to look back on my following questions with an affection usually reserved for patient owners of their slow-to-learn dogs. I need to provide content editors with some means of editing HTML-containing File objects from within the ZMI, but using Epoz. So from the management interface I would like to see an additional tab for the File object that, when clicked, shows the contents of the File object within the Epoz editing interface. Am I right in my hunch that I'd have to create some kind of Object that extends File in some way? Am I even on the right path? I really don't know how to start tackling this. I'm developing the website in straight Zope/ZPT/Python. I started down the Plone path with this but eventually decided that the design of the site didn't lend itself well to what I see as Plone's strengths. It seemed like overkill. If anyone could outline how something like this should work and point me in the right direction your assistance would be gratefully received! Thanks for your help, mark

2 2

Epoz locking up in Firefox 1.0rc (and others)
by Richard Jones 21 Sep '04

21 Sep '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Has anyone else seen an Epoz field stop accepting user input? Clicking the checkbox to switch to "source" view and back again fixes the field so it accepts input again - but this fix is hard to describe to my generally non-computer-savvy users :) Richard -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBUKHKrGisBEHG6TARAhuaAJ4/c4N/TUsKLnc9/EJu1M8aZO8OgACfTJjr oRrIl81WLEiwNpGSWMONs30= =Z2Yf -----END PGP SIGNATURE-----

1 0

new 2.7 redhat rpm and external method permissions
by Ed Colmar 21 Sep '04

21 Sep '04

Greetings! I recently installed a new zope 2.7 rpm on redhat. Everything went smooth and zope is running great. I have some external methods that do various tasks throughout the filesystem. In this case, the files are in a particular mysql directory. I have created a group for zope and mysql called "www" and changed ownership of this directory to that group. I can read and write to this directory as the zope user. My external methods fail with invalid permissions. I have verified that the setuid is zope, but I am not positive that zope is actually running under the zope user. How can I set/verify that this is the case? On all of my previous zope installs, I would log in as zope, and do ./start it appears that this convention has changed. Any clues? Thanks in advance! -ed -- EMAIL ed(a)greengraphics.net VOICE 510.923.0000 FAX 510.923.0001 AIM esc3d

2 2

Let Zope chec a internal / external link
by Martin Koekenberg 21 Sep '04

21 Sep '04

Hello, Is is possible tolet Zope check if a link is correct. Example: I've a Photoalbum an news items. These are connected with a link. But whem i move a news item to a archive, the link becomes broken. How can I prevent this error ? Is it also possible to check external links ? 'If a link doesn't exist anymore there stilis a broken link on the website. Question Can I preven zop displaying broken links ? I know this feature from tridion CMS (my seccond love ;-) Thanks for the help. Martin Koekenberg.

4 3

Syntax for zpt form and submitting to a dtml method
by Laura McCord 21 Sep '04

21 Sep '04

For learning purposes if I have a zope page tamplate form with a <select> using a dtml method as a action: <form action="dtml_method"> <select name="subject"> <option>Select</option> <option tal:repeat="result here/view_subject" value="" tal:attributes="value result/subject" tal:content="result/subject">data</option> </SELECT> <input type="submit" name="submit" value="submit"> </form> How would I access the value of subject in the dtml_method: <dtml-var subject> The above did not work. Any Ideas?

3 2

RE: [Zope] Syntax for zpt form and submitting to a dtml method
by Laura McCord 21 Sep '04

21 Sep '04

Perfect. <dtml-var "REQUEST['subject']"> worked. Thanks so much. -----Original Message----- From: Jonathan Hobbs [mailto:toolkit@magma.ca] Sent: Tuesday, September 21, 2004 3:38 PM To: Laura McCord; zope(a)zope.org Subject: Re: [Zope] Syntax for zpt form and submitting to a dtml method ----- Original Message ----- From: "Laura McCord" <Laura.McCord(a)doucet-austin.com> > For learning purposes if I have a zope page tamplate form with a > <select> using a dtml method as a action: > > <form action="dtml_method"> > <select name="subject"> > <option>Select</option> > <option tal:repeat="result here/view_subject" > value="" tal:attributes="value result/subject" > tal:content="result/subject">data</option> > </SELECT> > <input type="submit" name="submit" value="submit"> > </form> > > How would I access the value of subject in the dtml_method: > > <dtml-var subject> > > The above did not work. Any Ideas? Try: <dtml-var "REQUEST.get('subject', 'None')"> or <dtml-var "REQUEST['subject']"> Jonathan

1 0

zope and PYTHONPATH
by Kalyan Jammigumpula 21 Sep '04

21 Sep '04

All- I run Plone2 over zope2.7 on a linux box. We have multiple python intances on our linux box. As zope is very picky about the python version, we have a python instance only for a zope. Also, we have our own applications in python (unrelated to zope) which need 3rd party modules. For that we have a different python binary at a different location. From zope's python I want to use the modules we developed and installed on the other python intance. So, I added the /usr/lib/python2.2/site-packages, the python for our local use, to PYTHONPATH by exporting PYTHONPATH from bash_profile. Invoking the script from the command line with zope's python works without an import error. However, zope/Plone combo wont startup with zopectl if I use one of those modules in a basic zope product I am trying to develop. It throws an ImportError. Am I missing something? Isnt it supposed to work that way? I realized maybe I need to make that change to PYTHONPATH in zope's startup script. So, I have changed the "zopectl" used to start zope+plone now, and printed the PYTHONPATH by using "env | grep PYTHONPATH" in the zopectl script. It is being set to what I want. However, the ImportError persists from zope's startup. I am surprised why it works, when I run the script that does the import, from the commandline and why it wont from zope's startup although the same PYTHONPATH is being set. The error being thrown. 2004-09-20T10:03:36 ERROR(200) Zope Could not import Products.plots Traceback (most recent call last): File "/home/accts/zope/Zope-2.7.0/lib/python/OFS/Application.py", line 654, in import_product product=__import__(pname, global_dict, global_dict, silly) File "/home/accts/zope/srcczope/Products/plots/__init__.py", line 1, in ? import plots File "/home/accts/zope/srcczope/Products/plots/plots.py", line 3, in ? from mx import DateTime ImportError: cannot import name DateTime Traceback (most recent call last): File "/home/accts/zope/Zope-2.7.0/lib/python/Zope/Startup/run.py", line 49, in ? run() File "/home/accts/zope/Zope-2.7.0/lib/python/Zope/Startup/run.py", line 19, in run start_zope(opts.configroot) File "/home/accts/zope/Zope-2.7.0/lib/python/Zope/Startup/__init__.py", line 51, in start_zope starter.startZope() File "/home/accts/zope/Zope-2.7.0/lib/python/Zope/Startup/__init__.py", line 230, in startZope Zope.startup() File "/home/accts/zope/Zope-2.7.0/lib/python/Zope/__init__.py", line 46, in startup _startup() File "/home/accts/zope/Zope-2.7.0/lib/python/Zope/App/startup.py", line 45, in startup OFS.Application.import_products() File "/home/accts/zope/Zope-2.7.0/lib/python/OFS/Application.py", line 631, in import_products import_product(product_dir, product_name, raise_exc=debug_mode) File "/home/accts/zope/Zope-2.7.0/lib/python/OFS/Application.py", line 654, in import_product product=__import__(pname, global_dict, global_dict, silly) File "/home/accts/zope/srcczope/Products/plots/__init__.py", line 1, in ? import plots File "/home/accts/zope/srcczope/Products/plots/plots.py", line 3, in ? from mx import DateTime ImportError: cannot import name DateTime

3 6

Passing parameters to a dtml method from zpt
by Laura McCord 21 Sep '04

21 Sep '04

I have a dtml method, sendMail, that sends out an email: <dtml-sendmail smtphost="MailHost"> To: From: Subject: Email </dtml-sendmail> I need to pass a value to be used in the To: section of this sendmail. from the zope page template I have this: <a tal:attributes="href string:sendMail?email=email"....>email</a> Can anyone help me with this? Thanks, Laura

2 1