Re: plone.app.uuid.utils.uuidToObject/URL filters on expired items, necessary?

Patrick Gerken <gerken-Hgn/qBBDvdzwVR/[email protected]> Wed, 1 Apr 2015 18:49:47 +0200
Newsgroups	gmane.comp.web.zope.plone.devel
Message-ID	<20150401164947.GA5278@preciousone>
On 01.04 17:00, Johannes Raggam wrote:
> What if you fix plone.app.uuid and add the ``show_all=False,
> show_inactive=False`` parameters to the uuidToObject (and possibly
> others?) method signature and pass it to the catalog call?

This is a bad idea. Have you considered the other failure modes?
What about Unauthorized exceptions?

The first problem here is that the failure modes aren't
mentioned in the documentation and probably not tested in the tests.
This is a bug in plone.app.uuid.

Passing multiple flags as an argument is also not a very good idea. As
you mention it already, you plan to pass them on to the catalog.
That means you start to add ties from plone.app.uuid to the catalog.
It could very well happen that during Sorrento or some other sprint we
decide to make it easier to swap out Catalog by something different.
Then a design decision could be to have independent UUID catalog and the
flags don't make sense any more or force us to reimplement catalog
specific logic.

The way the traverse API handles it sounds like a better approach, there
we have unrestrictedTraverse.
> 
> 
> On Wed, 2015-04-01 at 11:22 +0200, Fred van Dijk wrote:
> > Hi,
> > 
> > 
> > To answer my own question, yes changing this will probably hurt as
> > existing code is expecting this kind of
> > filtering to happen and will start listing expired content for
> > anonymous users in listings etc. by looping over
> > uuids and "filtering" with uuidToObject. so it's backwards
> > incompatible for some or many add'ons.
> > 
> > 
> > With kind regards,
> > 
> > 
> > Fred van Dijk
> > --
> > Zest - www.zestsoftware.nl
> > Vasteland 78
> > 3011 BN Rotterdam
> > Tel: +31 (0)10 2959251
> > 
> > 
> > 
> > 
> > 
> > 
> > > I don't want to mess with security (unrestrictedSearchResults), and
> > > I can fix the add'on code by doing
> > > my own uuid search/retrtieval), but is there any harm in adding
> > >  "show_all=1, show_inactive=1" to the
> > > uuidTo* function catalog calls in plone.app.uuid so that expired
> > > items sill still be fetchable?
> > > 
> > > 
> > > I already have the unique identifier and want the object if 'm
> > > allowed to, filtering on expiration dates at
> > > this low level seems a bit too restrictive and is normally already
> > > done at the searchResults catalog functions
> > > where you expect multiple items returned to list/process)
> > > 
> > > 
> > > (show_all=1, show_inactive=1 credits go to
> > > https://www.fourdigits.nl/blog/listing-expired-plone-content)
> > > 
> > > 
> > > With kind regards,
> > > 
> > > 
> > > Fred van Dijk
> > > --
> > > Zest - www.zestsoftware.nl
> > > Vasteland 78
> > > 3011 BN Rotterdam
> > > Tel: +31 (0)10 2959251
> > > 
> > > 
> > > ------------------------------------------------------------------------------
> > > Dive into the World of Parallel Programming The Go Parallel Website,
> > > sponsored
> > > by Intel and developed in partnership with Slashdot Media, is your
> > > hub for all
> > > things parallel software development, from weekly thought leadership
> > > blogs to
> > > news, videos, case studies, tutorials and more. Take a look and join
> > > the 
> > > conversation now.
> > > http://goparallel.sourceforge.net/_______________________________________________
> > > Plone-developers mailing list
> > > Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > https://lists.sourceforge.net/lists/listinfo/plone-developers
> > 
> > ------------------------------------------------------------------------------
> > Dive into the World of Parallel Programming The Go Parallel Website, sponsored
> > by Intel and developed in partnership with Slashdot Media, is your hub for all
> > things parallel software development, from weekly thought leadership blogs to
> > news, videos, case studies, tutorials and more. Take a look and join the 
> > conversation now. http://goparallel.sourceforge.net/
> > _______________________________________________ Plone-developers mailing list Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org https://lists.sourceforge.net/lists/listinfo/plone-developers
> 



> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website, sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for all
> things parallel software development, from weekly thought leadership blogs to
> news, videos, case studies, tutorials and more. Take a look and join the 
> conversation now. http://goparallel.sourceforge.net/

> _______________________________________________
> Plone-developers mailing list
> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/plone-developers

------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/

_______________________________________________
Plone-developers mailing list
Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/plone-developers
signature.asc (application/pgp-signature, 819 B)