Re: [Zope-dev] DCOracle2 Beta 3
Sorry, but there were some mistakes in my last posting... >... To solve the performance problem I´d suggest to cache the user > connections for a certain period of time. ... Of course I haven't meant to 'cache' the connections but to keep em alive while the respective user is active and shut it down after a timeout period has passed. >enhanced ZSQL-example: >##(new)connection_id=, >##arguments=ID,NAME I also know that this will hardly ever work ;-) Maybe this shot would do a better job: ##default_connection_id=(changed via ZSQL manage_main Interface) ##connection_type=[ standard | custom | optional ] ##connection_options=(individual Oracle Connection String) sql yada yada 'standard' = obvious 'custum' = forced custom connection - will raise error if connection_options dont' have a valid connection string 'optional' = try 'custom' and fallback to 'standard' if it fails btw: would be nice to have a drop box in the manage_main screen for this stuff in a _far future_ release of ZSQL-Methods ;-) I noticed that a SQL 'COMMIT' is hardcoded into (old) ZOracle/DCOracle1 code - this would'nt have any more sense if all mentioned is possible but surely you know this. Andy -- Andreas Repp [EMAIL PROTECTED] Leibniz Rechenzentrum Muenchen www.lrz.de -- ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] security question
Tim McLaughlin wrote: > root has a role called 'User' with 'View' permissions (anonymous is > disabled) and acl_users has a user called joe. joe can access objects in > folder2 according to the permissions set on the root by using acquisition > like this: > http://server/folder1/folder2/object1 > joe cannot however, access them directly: > http://server/folder2/object1 > > Does this seem strange to anybody else, or have I just been working too > long? What version of Zope? What OS? Are you using a user folder other than the "stock" acl_users? Shane ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] DCOracle2 Beta 3
> On the far-out front, a few people have asked how you might do > user-specific connections to the database (ie instead of pooling by a > common connection, you individually authenticate to Oracle with your > own password). Clearly, cloning the base Connection object would be > fairly straighforward, but authenticating it to Oracle would not be, > as the user password wouldn't be available. If anyone feels strongly > about that (ie you have a notion on how you would make it work and/or > you need it),feel free to write me. From a performance standpoint it > would be terrible, but security auditors would love it. Hello Matthew, I think this feature would be most useful ! Since I am no (not yet ;-) zope-product developer I can't help you integrating this kind of stuff but I think I can give you some thoughts about it: Of course it would be a great advantage from a security point of view but it would also make it possible to use Oracle's transaction machinery. This would make it much easier for users of OR-mapping products (ie ZPatterns) to wrap insert, update, delete SQL methods into an user Oracle transaction. (I don't know witch impact it would have on products like OracleStorage ...) That way several of above mentioned SQL methods can be aborted in the end without interfering with other users´ actions. Without user based connections this would only be possible, if at all, with a high coding effort. To solve the performance problem I´d suggest to cache new user connections for a certain period of time. To be at all able to transfer the DB-user connection string I´d propose to use a structure similar to Pythonscript for the ZSQL methods. enhanced ZSQL-example: ##(new)connection_id= ##arguments=ID,NAME insert into SAMPLE (ID,NAME) values ( , ) (I know that dtml inside the pythonscipt-header is not evaluated but the product developer should be able to make it work that way ...) I assume that this might be a backward compatible approach to solve the issue until some greater spirit has thought about it. A session based connection would be useful as well, but I guess that are dreams of the future ;-) as allways: any comment is very appreciated Andy -- Andreas Repp [EMAIL PROTECTED] Leibniz Rechenzentrum Muenchen www.lrz.de -- ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
RE: PossitionIndex (was: Re: [Zope-dev] ZCatalog phrase indexingrevisited)
A lot of folks who do "power searches," say, librarians or other trained researchers, familiar with the bells and whistles of more powerful search engines, will want a simple operator for proximity, with the ability to specify proximity depth: For example: Lexis-Nexis:Sean w/2 Upton (where w/2 is within 2 words) Also, lexis doesn't count stop-words in proximity indexes. Folio/Nextpage: "Sean Upton"@2 IMHO, the syntax is clean and very brief in the Lexis-Nexis case and should suppliment a more generic Sean ... Upton style search. Sean -Original Message- From: Chris McDonough [mailto:[EMAIL PROTECTED]] Sent: Saturday, June 16, 2001 2:59 AM To: Erik Enge Cc: [EMAIL PROTECTED] Subject: Re: PossitionIndex (was: Re: [Zope-dev] ZCatalog phrase indexingrevisited) Erik Enge wrote: > > On Fri, 15 Jun 2001, Chris McDonough wrote: > > > Once you're satisfied with the implementation, would you be willing > > submit the module to the collector? > > Will do. Have you thought about how users actually are to use > exact-phrase? What I'm thinking I will do here (currently I've only been > testing explicitly with "adjoinedby" in the query) is to insert > "adjoinedby" in phrased searches: > > "erik enge"-> erik adjoinedby enge > erik ... enge -> erik near enge > > What do you think? These both look like good spellings, and I think "erik near enge" would be a good alias for "erik ... enge" as well.. - C ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope ) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: PossitionIndex (was: Re: [Zope-dev] ZCatalog phrase indexingrevisited)
Erik Enge wrote: > > On Fri, 15 Jun 2001, Chris McDonough wrote: > > > Once you're satisfied with the implementation, would you be willing > > submit the module to the collector? > > Will do. Have you thought about how users actually are to use > exact-phrase? What I'm thinking I will do here (currently I've only been > testing explicitly with "adjoinedby" in the query) is to insert > "adjoinedby" in phrased searches: > > "erik enge"-> erik adjoinedby enge > erik ... enge -> erik near enge > > What do you think? These both look like good spellings, and I think "erik near enge" would be a good alias for "erik ... enge" as well.. - C ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Re: PossitionIndex (was: Re: [Zope-dev] ZCatalog phrase indexingrevisited)
On Fri, 15 Jun 2001, Chris McDonough wrote: > Once you're satisfied with the implementation, would you be willing > submit the module to the collector? Will do. Have you thought about how users actually are to use exact-phrase? What I'm thinking I will do here (currently I've only been testing explicitly with "adjoinedby" in the query) is to insert "adjoinedby" in phrased searches: "erik enge"-> erik adjoinedby enge erik ... enge -> erik near enge What do you think? I'll be submitting PositionIndex.py and ResultList.py in a day or two. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
