Re: [Zope-dev] Re: ZCatalog getObject broken

2005-03-18 Thread Florent Guillaume
Chris Withers  [EMAIL PROTECTED] wrote:
  A, B and C are folders nested in each other i.e. A/B/C. A user does not
  have access to A and B but he does have access to C. If getObject uses
  restrictedTraverse it returns None immediately when traversing A, even
  though the user is allowed to access C. If getObject was working
  properly it would have returned C.
 
 Ah, okay, I thought that's what you meant, but I hoped it wasn't.
 The fact that you expect this to work is a bug in Zope's security 
 machinery, IMHO, but sadly only IMHO it appears.

Huh? That's fundamental to Zope's security model.

 I would have no problem with the above behaviour if getObject raised 
 Unauthorized rather than returned None.
 
 Your patch still had it returning None, IIRC, why did it do that?
 
  The rest of the discussion basically boils down to figure out if the
  user is allowed to access C or not.
 
 Yep, personally I reckon EVRYTHING should behave like 
 restrictedTraverse, but as I said, that appears to just be me...

Well, you must be the only one who never had a need for security
restrictions elsewhere than at the root of the site.

Florent

-- 
Florent Guillaume, Nuxeo (Paris, France)   CTO, Director of RD
+33 1 40 33 71 59   http://nuxeo.com   [EMAIL PROTECTED]
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Re: [Zope-Checkins] SVN: Zope/trunk/ - Applied patch for

2005-03-18 Thread Martijn Faassen
On Thu, Mar 17, 2005 at 10:34:10AM -0500, Tim Peters wrote:
 [Sidnei da Silva]
 
  Humm... we are trying to push a Zope 2.8 beta out, do you have or know
  of plans to use ZODB 3.4 with Zope 2.8?
 
 Yes.  Jim needs to fix ZClasses for 2.8 too.  ZODB 3.4 requires some
 Zope(3) features, like zope.interfaces and zope.testing.  Jim is
 adding those on his ZClasses branch.  When the ZClasses work is merged
 (but not before), it becomes possible to move to ZODB 3.4.  Zope3
 already uses ZODB trunk (3.4 development).  We can't afford to
 maintain a separate ZODB just for Zope 2.8, so view moving to ZODB 3.4
 as a requirement for Zope 2.8.

Oh, also please note that we're merging zope.interfaces and zope.testing
into Zope 2.8 already. So once we merge that branch (today, we expect),
ZODB 3.4 could be merged in. But I'm worried that there are other
factors involved with ZODB 3.4 that will hold up release even further.

For instance, there is no ZODB 3.4 release yet; how much work would that
entail?

Regards,

Martijn

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Brian Lloyd
Hi all,

There have been a number of threads going on today re: 
Zope X3.1 feature freeze and the 2.8 effort. I'd like to 
clarify some decisions re: Zope 2.8

Jim is the product mgr for Zope 3 and I'm it for Zope 2, so 
hopefully this can be considered authoritative and end part 
of this thread ;)

  - Zope 2.8 will include X3.0 (not X3.1)

  - The Z3 developers will have *no* extra burden or 
responsibility to support X3.0 beyond what they 
would normally do in the normal course of maintaining 
it for Z3-only applications. In other words, it is not 
the responsibility of Z3 devs to make sure Z2 tests 
pass, etc. 

  - It *will be* the responsibility of the Zope 2 devs to 
make sure Z2 works with the version of Z3 bundled at the 
time.

  - In the next few days at most, after a few loose ends are 
wrapped up, we'll ask Andreas to make a 2.8 beta 1 release. 
While Jim still has a few things to do, people will be able 
to start using the beta for real work.

  - Anyone who cant wait for that can use the five-integration 
branch in SVN

  - As a community, we will work out how best to adapt the 
Zope 2 release process and schedule to that of Zope 3 going 
forward. We don't need to decide this immediately to continue 
to make progress on 2.8. I suggest an IRC meeting sometime 
soon to draft a proposal.


Brian Lloyd[EMAIL PROTECTED]
V.P. Engineering   540.361.1716  
Zope Corporation   http://www.zope.com

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Zope 2.8 + Five post-sprint status

2005-03-18 Thread Martijn Faassen
Hey everybody,

We're wrapping up here at a very pleasant and productive Zope 2/3/Five
sprint here in Paris. We've accomplished quite a lot, and we'll let you
hear what this is in more detail soon.

We've spent a lot of time with Zope 2.8, integrating Zope X3.0 and
Five into it.

Our work is on two branches:

The five-integration branch:

svn://svn.zope.org/repos/main/Zope/branches/five-integration

The trunk, which has synchups with Zope 2.7 fixes:

svn://svn.zope.org/repos/main/Zope/trunk

The Five integration branch contains Five, and a version of Zope X3.0
made for integration with Zope 2.8 (as a svn:external). We hope that this 
branch can be merged into mainline Zope 2.x trunk soon.

I hereby want to thank everybody here at the sprint who worked so
hard on this. It's really your work, guys, I just kept the todo list. :)

Regards,

Martijn

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Andreas Jung

--On Freitag, 18. März 2005 11:22 Uhr -0500 Brian Lloyd [EMAIL PROTECTED] 
wrote:
  - In the next few days at most, after a few loose ends are
wrapped up, we'll ask Andreas to make a 2.8 beta 1 release.
While Jim still has a few things to do, people will be able
to start using the beta for real work.
I think that the following outstanding to-dos for Zope 2.8 should be 
completed before a
beta release:

  - Renable C permission roles by implementing recent Python
changes in C, brining the Python and C implementations back in
sync.  See lib/python/AccessControl/PermissionRole.py.
  - Add cyclic-garbage collection support to C extension classes,
especially to acquisition wrappers.
  - Change acquisition wrappers to implement the descr get slot
directly, thus speeding the use of the slot.
  - Renable C Zope security policy by implementing recent Python
changes in C, brining the Python and C implementations back in
sync.  See lib/python/AccessControl/ZopeSecurityPolicy.py.
Andreas

pgpripUiYaasx.pgp
Description: PGP signature
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Martijn Faassen
On Fri, Mar 18, 2005 at 11:22:26AM -0500, Brian Lloyd wrote:
[snip]
   - Zope 2.8 will include X3.0 (not X3.1)
 
   - The Z3 developers will have *no* extra burden or 
 responsibility to support X3.0 beyond what they 
 would normally do in the normal course of maintaining 
 it for Z3-only applications. In other words, it is not 
 the responsibility of Z3 devs to make sure Z2 tests 
 pass, etc. 
 
   - It *will be* the responsibility of the Zope 2 devs to 
 make sure Z2 works with the version of Z3 bundled at the 
 time.
 
   - In the next few days at most, after a few loose ends are 
 wrapped up, we'll ask Andreas to make a 2.8 beta 1 release. 
 While Jim still has a few things to do, people will be able 
 to start using the beta for real work.
 
   - Anyone who cant wait for that can use the five-integration 
 branch in SVN

Which is now as ready as we'll make it at this sprint. There are
still a few loose ends (in particular we may want to synch up a
few packages like zconfig and restructured text if it isn't too
difficult), though those ends are not strictly necessary for Five
support.

   - As a community, we will work out how best to adapt the 
 Zope 2 release process and schedule to that of Zope 3 going 
 forward. We don't need to decide this immediately to continue 
 to make progress on 2.8. I suggest an IRC meeting sometime 
 soon to draft a proposal.

Thanks on behalf of the sprinters here working on this! I hope we
can all gather in the IRC meeting.

Regards,

Martijn

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Lennart Regebro
Brian Lloyd wrote:
Hi all,
There have been a number of threads going on today re: 
Zope X3.1 feature freeze and the 2.8 effort. I'd like to 
clarify some decisions re: Zope 2.8
Very much excellent! This, Jims announcement of the April 2 feature 
freeze datem and Stephans statement that he was mostly finished wih 
thhis X3. work makes this a day of many promising emails. ;)

I was a bit surprised at seeing a feature freeze I had assumed had 
happened being announced, but after pondering it I realize it's fine. 
And with Pycon coming up, April 2 is probably a good date as well.

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Martijn Faassen
On Fri, Mar 18, 2005 at 05:42:05PM +0100, Andreas Jung wrote:
 --On Freitag, 18. M?rz 2005 11:22 Uhr -0500 Brian Lloyd [EMAIL PROTECTED] 
 wrote:
   - In the next few days at most, after a few loose ends are
 wrapped up, we'll ask Andreas to make a 2.8 beta 1 release.
 While Jim still has a few things to do, people will be able
 to start using the beta for real work.
 
 I think that the following outstanding to-dos for Zope 2.8 should be 
 completed before a
 beta release:
 

[snip todos]

I understand that Jim won't have time to do these until mid-april. Is
it absolutely impossible to ship a beta which is 'non optimized' or
something? I mean, we got Silva and Plone running on Zope 2.8..

Do some of these have something to do with a change to Python 2.4, by
the way? It's a bit unclear to me what version of Python this release is
targetting.

Regards,

Martijn

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Andreas Jung

--On Freitag, 18. März 2005 18:03 Uhr +0100 Martijn Faassen 
[EMAIL PROTECTED] wrote:

On Fri, Mar 18, 2005 at 05:42:05PM +0100, Andreas Jung wrote:
--On Freitag, 18. M?rz 2005 11:22 Uhr -0500 Brian Lloyd [EMAIL PROTECTED]
wrote:
  - In the next few days at most, after a few loose ends are
wrapped up, we'll ask Andreas to make a 2.8 beta 1 release.
While Jim still has a few things to do, people will be able
to start using the beta for real work.
I think that the following outstanding to-dos for Zope 2.8 should be
completed before a
beta release:
[snip todos]
I understand that Jim won't have time to do these until mid-april. Is
it absolutely impossible to ship a beta which is 'non optimized' or
something? I mean, we got Silva and Plone running on Zope 2.8..

A beta release should be feature-complete means it should contain
everything that will be part of the final release. A beta should not
development release where things are subject to change in some way.
We can do an alpha 2 of course with everything you want but as long
as there is longer list of outstanding issues I won't consider the current
SVN trunk as beta quality.
Andreas


pgpJjW0QpGB5V.pgp
Description: PGP signature
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Jim Fulton
Martijn Faassen wrote:
...
Do some of these have something to do with a change to Python 2.4, by
the way?
No.
 It's a bit unclear to me what version of Python this release is
targetting.
2.3
Jim
--
Jim Fulton   mailto:[EMAIL PROTECTED]   Python Powered!
CTO  (540) 361-1714http://www.python.org
Zope Corporation http://www.zope.com   http://www.zope.org
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Jim Fulton
Andreas Jung wrote:

--On Freitag, 18. März 2005 18:03 Uhr +0100 Martijn Faassen 
[EMAIL PROTECTED] wrote:

On Fri, Mar 18, 2005 at 05:42:05PM +0100, Andreas Jung wrote:
--On Freitag, 18. M?rz 2005 11:22 Uhr -0500 Brian Lloyd [EMAIL PROTECTED]
wrote:
  - In the next few days at most, after a few loose ends are
wrapped up, we'll ask Andreas to make a 2.8 beta 1 release.
While Jim still has a few things to do, people will be able
to start using the beta for real work.
I think that the following outstanding to-dos for Zope 2.8 should be
completed before a
beta release:
[snip todos]
I understand that Jim won't have time to do these until mid-april. Is
it absolutely impossible to ship a beta which is 'non optimized' or
something? I mean, we got Silva and Plone running on Zope 2.8..

A beta release should be feature-complete means it should contain
everything that will be part of the final release. A beta should not
development release where things are subject to change in some way.
We can do an alpha 2 of course with everything you want but as long
as there is longer list of outstanding issues I won't consider the current
SVN trunk as beta quality.
I don't think we have new features on the to do list.
These are all bug fixes or optimizations.
Jim
--
Jim Fulton   mailto:[EMAIL PROTECTED]   Python Powered!
CTO  (540) 361-1714http://www.python.org
Zope Corporation http://www.zope.com   http://www.zope.org
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope3-dev] Re: [Zope-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Tim Peters
[Martijn Faassen]
...
 Do some of these have something to do with a change to Python 2.4, by
 the way?

[Jim Fulton] 
 No.

If you're using the Python 2.4 line, some of the security changes
triggered a Python bug that will be fixed in 2.4.1 (which is currently
in release candidate 2 status).

 It's a bit unclear to me what version of Python this release is
 targetting.

 2.3

There are relevant (but different) Python bugs in 2.3 too.  I'd say =
2.3.4 is the requirement now.  I only test with 2.3.5.
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Re: [Zope3-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Chris McDonough
   - The Z3 developers will have *no* extra burden or 
 responsibility to support X3.0 beyond what they 
 would normally do in the normal course of maintaining 
 it for Z3-only applications. In other words, it is not 
 the responsibility of Z3 devs to make sure Z2 tests 
 pass, etc. 
 
   - It *will be* the responsibility of the Zope 2 devs to 
 make sure Z2 works with the version of Z3 bundled at the 
 time.

I assume these caveats are spelled out here because Z3 developers don't
want to slow down Z3 development to test/maintain Z2 compatibility.  I
know a lot about Z2 code, but I know very little about Z3 code.  I'd
like that to change, but it's likely that I'll just not have the
bandwidth to make sure Z3-inside-Z2 works.  If that just means I can't
use Z3 features but nothing else breaks, it's probably fine, but if Z3
integration actively breaks Z2, it's likely I'll just need for some
extended period of time to continue to use and maintain 2.7.

It'd be great if active Z3 developers could actually help make new
releases of Z2 once Five is integrated but the above makes it sound like
a we'll throw it over the wall and you make it work sort of thing.  If
it's the latter, maybe as devil's advocate, I need to ask what the point
is here?

It appears there is an assumption that merging Z2 and Z3 code within Z2
itself is an unmitigated good thing, but IMHO, each is complicated
enough in their own right that I'd personally prefer to be dealing with
one or the other at any given time and not both.  This isn't exactly
idle whining either, I need to do this when I maintain Z4I code, and
it's definitely not a walk in the park; it's moderately difficult to do
and also difficult find people who have the skills to help too.

Does anyone else share this skepticism or am I about to get shouted
down? ;-)

- C


___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Re: [Zope3-dev] Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Jens Vagelpohl
  - It *will be* the responsibility of the Zope 2 devs to
make sure Z2 works with the version of Z3 bundled at the
time.
snip
It'd be great if active Z3 developers could actually help make new
releases of Z2 once Five is integrated but the above makes it sound 
like
a we'll throw it over the wall and you make it work sort of thing.  
If
it's the latter, maybe as devil's advocate, I need to ask what the 
point
is here?
It came across the same way for me. Not only we Z3 people will go 
along on our merry way, let the Z2 people deal with the problems, it's 
also about bundling a version of Z3 that is apparently not within the 
Z3 developers' path anymore (at least from the description).

I didn't answer until I read Chris' post because I work on CMF when I 
work on Zope, so I don't do much as far as checkins to Zope goes. He 
says what I only thought, and I had the same thing in the back of my 
mind: If this becomes an obstacle I just won't touch it anymore.

Yes, I will get into Z3 at some point myself, but preferably at a time 
of my own choosing...


It appears there is an assumption that merging Z2 and Z3 code within Z2
itself is an unmitigated good thing, but IMHO, each is complicated
enough in their own right that I'd personally prefer to be dealing with
one or the other at any given time and not both.  This isn't exactly
idle whining either, I need to do this when I maintain Z4I code, and
it's definitely not a walk in the park; it's moderately difficult to do
and also difficult find people who have the skills to help too.
Right on. Now, I have no idea how similar or different the Z3-Z2 
marriage in 2.8 is to that unholy alliance that is used for Z4I, but 
working on it for Z4I is an exercise in frustration every time I had to 
do it.

jens
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] RE: Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Brian Lloyd
 Chris wrote:
 I assume these caveats are spelled out here because Z3 
 developers don't
 want to slow down Z3 development to test/maintain Z2 compatibility.  I
 know a lot about Z2 code, but I know very little about Z3 code.  I'd
 like that to change, but it's likely that I'll just not have the
 bandwidth to make sure Z3-inside-Z2 works.  If that just means I can't
 use Z3 features but nothing else breaks, it's probably fine, but if Z3
 integration actively breaks Z2, it's likely I'll just need for some
 extended period of time to continue to use and maintain 2.7.
 
 It'd be great if active Z3 developers could actually help make new
 releases of Z2 once Five is integrated but the above makes it 
 sound like
 a we'll throw it over the wall and you make it work sort of 
 thing.  If
 it's the latter, maybe as devil's advocate, I need to ask 
 what the point
 is here?
 
 It appears there is an assumption that merging Z2 and Z3 code 
 within Z2
 itself is an unmitigated good thing, but IMHO, each is complicated
 enough in their own right that I'd personally prefer to be 
 dealing with
 one or the other at any given time and not both.  This isn't exactly
 idle whining either, I need to do this when I maintain Z4I code, and
 it's definitely not a walk in the park; it's moderately 
 difficult to do
 and also difficult find people who have the skills to help too.
 
 Does anyone else share this skepticism or am I about to get shouted
 down? ;-)
 
 - C

A lot of time was spent talking about these (legitimate) concerns - 
unfortunately it will probably take a little time to distill all 
of that communication to the community. But let me take a shot ;)

There are several different groups, with different goals and 
concerns, who are involved here:

  A: Z2 developers that don't care right now about Z3

  B: Z2 developers that care about Z3, but can't effectively 
 use anything Z3 related right now because it is not practical 
 or possible to switch wholesale and there is no bridge to 
 Z3 that doesn't require throwing away existing investments 
 in Z2

  C: Z3 developers that don't care about Z2 anymore, often because 
 they dont have existing investments in Z2

There are a significant and growing number of people in group B. 

At the paris sprint, we were looking for a way to:

  - Allow folks in group B to start taking advantage of (and 
developing an interest in and contributing to!) Zope 3 
technologies

  - Make sure that group A would not be 'forced' to do anything
they don't want to do

  - Make sure that group C would not be 'forced' to do anything 
they don't want to do

I feel that the approach of integrating Five into Zope officially 
does a pretty good job of meeting those goals. We added the Five 
product and a snapshot of Zope X3.0 into the core so that people 
could have a reliable baseline 'out of the box'.

That integration touched almost nothing in the Z2 code (one or 
two things that were previously done as monkey patches were 
un-monkeyed, but that's about it).

The Z3 code (and the Five code) just sits there unused unless you 
choose to use it, so Zope3 code breaking Z2 apps is not really a 
concern. But is there and available, so people can begin to plot 
their own migration paths based on their own situations.

Like other areas of Z2 (and Z3, for that matter), contributors 
tend to develop areas of expertise. A new area of expertise for 
Z2 going forward will be the Five/Z3 integration, and there will 
be a set of devs who will likely focus on that aspect. I don't 
expect that the fact that Five and Z3 integration exists will 
make life any harder for someone who focuses on purely Z2 
aspects of the core anytime soon.

So the short answer is, we tried really hard to make sure to 
take an approach where z3 integration would not actively break 
zope2 in any way or force people into any particular direction.

I *do* expect these (good) questions to recur in future Z2 
releases, as integration and ability to use Z3 technologies 
increases, but we'll have plenty of time to work those out.

For now, I think it is a huge win to make some Z3 avenues 
available to people who want to use them, without forcing 
everyone to drink the kool-aid at once ;)



Brian Lloyd[EMAIL PROTECTED]
V.P. Engineering   540.361.1716  
Zope Corporation   http://www.zope.com 
  

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] RE: Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Chris McDonough
On Fri, 2005-03-18 at 13:45, Brian Lloyd wrote:
 A lot of time was spent talking about these (legitimate) concerns - 
 unfortunately it will probably take a little time to distill all 
 of that communication to the community. But let me take a shot ;)
 
 There are several different groups, with different goals and 
 concerns, who are involved here:
 
   A: Z2 developers that don't care right now about Z3
 
   B: Z2 developers that care about Z3, but can't effectively 
  use anything Z3 related right now because it is not practical 
  or possible to switch wholesale and there is no bridge to 
  Z3 that doesn't require throwing away existing investments 
  in Z2
 
   C: Z3 developers that don't care about Z2 anymore, often because 
  they dont have existing investments in Z2
 
 There are a significant and growing number of people in group B. 

Yup, that makes sense.  Are these assumed to also be the folks who will
try to make sure that new Z3 releases make it in to Z2 via Five?  I
guess what I'm driving at is that I'd hate to eventually have a very old
version of Z3 sitting inside of Zope 2 due to insufficient bandwidth on
the part of those developers to keep up with Z3 releases.  While it
wouldn't be the end of the world or anything, I suspect some
dependencies will inevitably creep into the Zope 2 core on Zope 3
packages, and maintaining an older codebase can be pretty painful.  The
testing requirements for making sure that changes that Z2 coders make to
Z3 work both in Z2 and Z3 is a pretty high bar, just as vice versa.  In
the past, I've seen efforts like this turn into an effective fork as a
result.

 At the paris sprint, we were looking for a way to:
 
   - Allow folks in group B to start taking advantage of (and 
 developing an interest in and contributing to!) Zope 3 
 technologies
 
   - Make sure that group A would not be 'forced' to do anything
 they don't want to do
 
   - Make sure that group C would not be 'forced' to do anything 
 they don't want to do
 
 I feel that the approach of integrating Five into Zope officially 
 does a pretty good job of meeting those goals. We added the Five 
 product and a snapshot of Zope X3.0 into the core so that people 
 could have a reliable baseline 'out of the box'.
 
 That integration touched almost nothing in the Z2 code (one or 
 two things that were previously done as monkey patches were 
 un-monkeyed, but that's about it).
 
 The Z3 code (and the Five code) just sits there unused unless you 
 choose to use it, so Zope3 code breaking Z2 apps is not really a 
 concern.

That's good to know.

  But is there and available, so people can begin to plot 
 their own migration paths based on their own situations.

Please correct me if I'm wrong here but I get the sense that Five is
less of a migration path from Z2 to Z3 than a way to integrate Z3
technologies (like views and adapters) into Z2 right now.  Obviously
allowing Z2 developers to use these things will give them a some needed
familiarity with Z3 if they decide to switch but the migration path to
straight Z3 will always be more or less a rewrite, no?

 Like other areas of Z2 (and Z3, for that matter), contributors 
 tend to develop areas of expertise. A new area of expertise for 
 Z2 going forward will be the Five/Z3 integration, and there will 
 be a set of devs who will likely focus on that aspect. I don't 
 expect that the fact that Five and Z3 integration exists will 
 make life any harder for someone who focuses on purely Z2 
 aspects of the core anytime soon.
 
 So the short answer is, we tried really hard to make sure to 
 take an approach where z3 integration would not actively break 
 zope2 in any way or force people into any particular direction.

Excellent, that's what I was hoping.

 I *do* expect these (good) questions to recur in future Z2 
 releases, as integration and ability to use Z3 technologies 
 increases, but we'll have plenty of time to work those out.
 
 For now, I think it is a huge win to make some Z3 avenues 
 available to people who want to use them, without forcing 
 everyone to drink the kool-aid at once ;)

Yup... I'm still a bit skeptical but if other folks are committed to
maintenance I'd be less so.

- C


___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] RE: [Zope3-dev] RE: Clarification re: Zope X3.1, 2.8

2005-03-18 Thread Brian Lloyd
  There are a significant and growing number of people in group B. 
 
 Yup, that makes sense.  Are these assumed to also be the 
 folks who will
 try to make sure that new Z3 releases make it in to Z2 via Five?  I
 guess what I'm driving at is that I'd hate to eventually have 
 a very old version of Z3 sitting inside of Zope 2 due to insufficient 
 bandwidth on the part of those developers to keep up with Z3 releases. 

 While it wouldn't be the end of the world or anything, I suspect some
 dependencies will inevitably creep into the Zope 2 core on Zope 3
 packages, and maintaining an older codebase can be pretty 
 painful.  The testing requirements for making sure that changes that Z2 
 coders make to Z3 work both in Z2 and Z3 is a pretty high bar, just as 
 vice versa.  In the past, I've seen efforts like this turn into an 
 effective fork as a result.

It won't turn into a fork. Right now there is a lot of discussion 
going on about the 'right' way to manage Z3 releases -- we'll need 
to decide on a Z2 release policy that takes that into account. I 
think the goal for Z2 will be to include the latest stable z3 
possible. Some have suggested synchronizing the releases - that 
may be the way to go if it isnt impractical from an operational 
point of view. 

In any case, the goal is to gradually (but consistently!) make 
more and more Z3 functionality available to Z2 developers in 
future Z2 releases, based on the most stable Z3 baseline possible.


 Please correct me if I'm wrong here but I get the sense that Five is
 less of a migration path from Z2 to Z3 than a way to integrate Z3
 technologies (like views and adapters) into Z2 right now.  Obviously
 allowing Z2 developers to use these things will give them a 
 some needed
 familiarity with Z3 if they decide to switch but the migration path to
 straight Z3 will always be more or less a rewrite, no?

It is definitely a migration path. Lets say you have an application based 
on Z3 with 10 (logical) components. You couldn't feasibly rewrite all of 
it at once to use Z3. As of 2.8, you'll be able to add functionality to 
your application using adapters, views, etc. So for V.Next of your app, 
maybe you are able to port 2 existing components and add 1 new one. For 
V.Next.Next, you add 2 more and port 2 more. At some point, it *will* 
be feasible to jump to Z3 with a minmal effort, since you've been able 
to port your application to components over time.


  I *do* expect these (good) questions to recur in future Z2 
  releases, as integration and ability to use Z3 technologies 
  increases, but we'll have plenty of time to work those out.
  
  For now, I think it is a huge win to make some Z3 avenues 
  available to people who want to use them, without forcing 
  everyone to drink the kool-aid at once ;)
 
 Yup... I'm still a bit skeptical but if other folks are committed to
 maintenance I'd be less so.

Skepticism is healthy, but if it's any consolation, almost everyone 
involved in this effort has very real 'skin in the game' in terms 
of existing Zope2 investments. I think that will do a great deal 
to ensure that the decisions made for future 2.x work are sane and 
take real-world concerns into account.


Brian Lloyd[EMAIL PROTECTED]
V.P. Engineering   540.361.1716  
Zope Corporation   http://www.zope.com 
  

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Re: Overriding Products

2005-03-18 Thread Derrick Hudson
On Tue, 15 Mar 2005 19:49:01 +0100, Martijn Jacobs wrote:
 Hello guys.
 
 I have a question regarding  product importing in zope 2.7.x,  as since 
 zope 2.7 this part is way more flexible then it was before. I'd like to 
 accomplish the next situation :
 
 -
 A Zope base installation has Product X installed in /lib/python/Products 
 which I want to change or develop further
 -
 x instances of Zope use the produtc from this base install.
 -
 At one instance I want to test and develop, without breaking the other 
 instances.
 -

My approach would be one of the following:

1) Do the dev and test on a different (non-production) machine.

2) Install a second copy of zope for that dev/test instance.

Both of these will avoid any interactions between your production
setup and your dev/test work.

HTH,
-D

-- 
Microsoft has argued that open source is bad for business, but you
have to ask, Whose business? Theirs, or yours? --Tim O'Reilly
 
www: http://dman13.dyndns.org/~dman/jabber: [EMAIL PROTECTED]

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Re: [Zope-Checkins] SVN: Zope/trunk/ - Applied patch for

2005-03-18 Thread Tim Peters
[Martijn Faassen]
 Oh, also please note that we're merging zope.interfaces and zope.testing
 into Zope 2.8 already. So once we merge that branch (today, we expect),

AFAICT, that didn't land today, at least not on the trunk.

 ZODB 3.4 could be merged in. But I'm worried that there are other
 factors involved with ZODB 3.4 that will hold up release even further.

Even further than what?  If you want to maintain ZODB, feel free to
release 2.8 with the random snapshot that's there now wink. 
Otherwise-- and 3.3.1 or 3.4 --it needs another ZODB first.

 For instance, there is no ZODB 3.4 release yet;

Neither a 3.3.1.

 how much work would that entail?

2-3 days (for both 3.3.1 and a 3.4), but I'm 7 days solid at PyCon
starting tomorrow morning so it won't be the coming week.  The week
after could work; I don't yet know what priority my management
attaches to this project relative to other projects on my plate.
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Cookie problem with mySqlUserFolder

2005-03-18 Thread Aruna Kathiria
Title: Cookie problem with mySqlUserFolder






Hello everyone:


I am facing the problem regarding cookie.

One of our website uses mySqlUserFolder. 



Problem is if user logs on one computer, and if he/she comes again on same computer, computer remembers him/her. That is good as it is what we want.

But if he/she goes on another computer and logs on and then if he/she come back to previous one, it looses it's reorganization though cookie is there.

I checked what problem would be and found that each time logged in process on different computers generates a random value for cookie on that computer and also store same value in Tokens table on mysqlUserFolder database. So everytime only cookie from one computer matches the value with Tokens tables value. So other computer don't remember the previous login. ( Though I don't know this is the reason of my problem)

What would be the solution to keep reorganization on all computers on which once user has been logged in? Any help will be appreciated.

Thanks in advance!



With Regards,

Aruna Kathiriya

Sr.Consultant,

CIGNEX Technologies, Inc

T: 408.327.9900 x 314

F: 408.273.6785

E: [EMAIL PROTECTED]

U: www.cignex.com

Implement IT Right




___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Parrot

2005-03-18 Thread Alan Milligan
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Parrot 0.1.2 was released a couple of weeks ago.  According to the
release notes, there's now better python support, separated into
dynaclasses.
Unfortunately, I haven't really managed to keep up with the Parrot
project, but I think it quite possibly represents the strategic future
of Zope.
An obvious benefit is the genuine concurrency it offers over GIL on SMP
hardware.  Anyone running an enterprise Zope or Plone installation would
desire to take advantage of this.
I know a year or so ago, someone received a pie in the face at a
conference because Parrot still wasn't as fast as the native Python
interpreter, but maybe this too has changed with this release.
I'm very interested to know if anyone is investigating Parrot.
Alan
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFCO4vpCfroLk4EZpkRAsVVAKCQBlffkkhd86BX/KxwJcYSXPx5pwCfdiU8
Ybnu4zF97xG8SSYxYUY64I8=
=KzS4
-END PGP SIGNATURE-
___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )