Slashdot Mirror

Reader the_rev_matt writes with this review of Hungry Minds' Zope Bible. He finds both merit and shortcomings in this book, and suggests that "Bible" may be too grand a word for this decent-but-spotty work. Read on for his reasoning. The Zope Bible author Michael R. Bernstein, Scott Robertson & the CodeIT Development Team pages 613 publisher Hungry Minds rating 8 reviewer the_rev_matt ISBN 0764548573 summary An in depth look at extending Zope with Python.

Part One is the basics, which anyone familiar with Zope can skip over if they so choose. For a newcomers it may seem a little overwhelming, but for readers unfamiliar with web development it may seem a light on details at times. It opens with the obligatory "History of Zope" which is mercifully brief and includes a single paragraph on the history of the Internet that publishers still insist on including. It does mention some great high-profile organizations that are using Zope (Red Hat, NASA, Bell Atlantic Mobile, CBS, and the U.S. Navy). The Features section could be used to great effect in selling the use of Zope to management, as it is brief and to the point and focuses on things that businesses actually care about. Next up is Architecture, and the Bible does a fine job of describing the Zope architecture and highlights the primary advantages in nice bullet points (Cost of ownership, RAD, reliability, scalability).

Installation is covered with proper dispatch and goes into great detail about the ZServer (the preferred web server) as well as how to install new products and troubleshoot bad installations. The basics of the Zope Management Interface and the Control Panel are covered in chapter three.

Chapter Four is where the meat starts. This is a fairly in-depth presentation of DTML, Zope's built-in markup language. It includes a nice reference to Python modules natively available in Zope, and examples of all standard tags in action. Closing out Part One is a chapter about Object Oriented Programming in Python. It is less detailed than the documentation and tutorial that come stock with Python, and anyone who plans on getting that down and dirty will want to get a real Python book. Those 50 pages would have been better used in providing a case study or two of developing an end-to-end web app in Zope. Even given the focus on writing things in Python, this section isn't actually helpful.

Part Two begins with an example of writing your own Zope product in Python (though not one that actually does anything useful), rapidly followed by the process of creating a real product in Python. Given the detail and scope of the AddressBook products, there is no need for the first "create a product" example. Chapter 8 continues with adding functionality to the AddressBook product.

Chapter 9 is Zope Product Security. This chapter explains both what Zope will and won't do for you, and how to determine security requirements and policies. Chapter 10 finishes up the AddressBook application and explains the use security concepts to control levels of access. The order is slightly awkward: it would have made more sense to introduce security concepts before going down the entire create-a-product path, rather than take a side trip in the middle.

Part Three: Management. Not PHBs, but application management. This starts off with Content Management. If you remove the specific Zope examples, you have what amounts to a best-practices guide to web development regardless of language. This is a Good Thing(tm). Database Management assumes zero familiarity with databases and provides a nice basic intro to databases and specifically how to connect assorted DBs to Zope as well as how to integrate SQL with DTML. The last part of the triumvirate is User Management and Security. This section covers the basics (users/roles) and a very light taste of addons, but really could stand a bit more breadth.

Part Four is called Advanced Zope Concept, or "everything that doesn't really fit anywhere else." ZClasses can hardly be considered an advanced concept, especially when compared to rolling your own product in Python. Zope Core components is a compilation of basic OO concepts (acquisition, persistence), the ZODB, ZPublisher, and Document Templates. This is another section that could have been better served by more detail. DocumentTemplates is breezed through with no detail whatsoever.

Scripting Zope demonstrates once again how to extend Zope using Python and covers scripting with Perl in just under two pages.

ZClasses, which have in the past been the most common method of writing Zope products, are discussed in fair detail, including a nice comparison of ZClasses -vs- PythonProducts.

Chapter 17 covers searching, describing how the ZCatalog works and how to leverage it. Zope Page Templates warrant their own (very brief) chapter which explains the shortcomings of DTML (HTML-editor unfriendly, not renderable, mixes presentation and logic) and gives a decent overview of the new PageTemplates that are meant to replace DTML in many instances.

Debugging is another light chapter, though it does cover the essentials fairly well. Finally comes Alternative Methods of Running Zope. This, as you might expect, explains how to use Zope with Apache/IIS and also addresses scalability, with a focus on Zope Enterprise Objects.

The appendices consist of What's On the CD-ROM and Installing Zope from the Red Hat RPMS or Souce Code.

What's Bad?
Zope Bible is a misnomer. There is a lot of great information here, but many sections are to shallow to be of any use. A more appropriate title would be "Python for Zope" or "Advanced Zope Development with Python." The book claims to be aimed at beginning to advanced users, but it is not organized in a manner that will be useful to Zope newbies and the things a beginner needs to know most often are missing or covered in such little detail as to be as good as missing. They could have dropped the first three chapters, and used that space to flesh out some of the later chapters and perhaps do a second case study.

What's Good?
The sections that are good are very good. The authors obviously have a deep understanding of Zope, and I didn't catch any technical errors. The writing is clear and effective. If you're already familiar with Zope and already have The Zope Book and The Book of Zope, then this would be a great next book for getting more into the Python parts of Zope. I particularly liked that they built an actual useful product from end to end in the course of several chapters explaining how different features of Zope can be used. The reference sections on CM and DBM are great. It's nice to see some aspects of Zope that are woefully underdocumented get addressed (Templates, DB integration, Security, Searching) even if some of them aren't in as much detail as I'd like.

You can purchase the Zope Bible from bn.com. Want to see your own review here? Just read the book review guidelines, then use Slashdot's handy submission form.

As usual, updates and tangents from previous stories in tonight's Slashback. Read on for more on toys from Pittsburgh, the newest iteration of the Magician-named distro, open source directory entries, and everyone's favorite trademark dispute. So hit the button.

For better, for worse, for what it's worth. Thanks to the people who pointed out reviews of Mandrake 8.0 after I complained about a dearth of these when posting a couple of other reviews

Chris "soup" Campbell, for instance, points to his 8.0 review at Binary Freedom, and the_rev_matt writes: "Timothy was bemoaning the lack of Mandrake 8.0 reviews, so here is one." There's also a pctalk.org review discussed at the excellent Mandrakeforum site, as well as quite a few harsher comments when the release was announced. (I wish other distros would put comments in a forum like this, too.)

You know, 'bouncy bouncy'! Illah Nourbakhsh of CMU's CS lab (the same folks who brought your the Palm Pilot robot kit) writes: "... So here is the newest thing we've done. We make one-legged hopping robots that use an unusual spring system. We wondered what would happen if we scale the hopping robot up so it's much larger than 6 inches-- big enough to carry a human being. Then we can throw away the computer and the human can do the control. The result, the BowGo, enables ordinary humans to jump very, very high into the air and over obstacles. It is a far more powerful Pogo stick. http://www.cs.cmu.edu/~bowgo - there are both pictures and videos available from there. This is from the Toy Robots Initiative at Carnegie Mellon University."

Please give these people your venture capital, because I want to ride one of these! Mountain pogo-ing looks fun.

How can a jump rope be "open"? An unnamed reader contributes: "I've kept my eye on the guys over at the open source directory since I saw them take a good tongue lashing on /. a few weeks ago. They aren't doing too bad getting some listings, but the ones they have gotten seem to be making some waves. By my math, it looks like they've somehow gotten *two* new open source licenses passed through the boys at OSI (open source initiative) since they started three weeks ago."

Well, my tongue is out of lashing practice, but queries for "nano," "bluefish," "gimp" and "python" all return zero matches, so it doesn't seem like the first place I would go "to find Open-Source applications that are stable." The site still looks like a good idea, but is it eclipsed by existing resources? Maybe if enough people go visit it and add entries ...

A high-security remote terminal app by any other name nodvin writes: "In a Slashdot story on Mar. 22, 2001, it was stated Secure Shell Will Remain 'SSH'. However, the draft documents
now start with the title "draft-ietf-secsh-" rather than "draft-ietf-ssh". The charter is now found at: http://www.ietf.org/html.charters/secsh-charter.ht ml and the mail archive is now at:
ftp://ftp.ietf.org/ietf-mail-archive/secsh/ "

Say it ain't so.

As usual, updates and tangents from previous stories in tonight's Slashback. Read on for more on toys from Pittsburgh, the newest iteration of the Magician-named distro, open source directory entries, and everyone's favorite trademark dispute. So hit the button.

For better, for worse, for what it's worth. Thanks to the people who pointed out reviews of Mandrake 8.0 after I complained about a dearth of these when posting a couple of other reviews

Chris "soup" Campbell, for instance, points to his 8.0 review at Binary Freedom, and the_rev_matt writes: "Timothy was bemoaning the lack of Mandrake 8.0 reviews, so here is one." There's also a pctalk.org review discussed at the excellent Mandrakeforum site, as well as quite a few harsher comments when the release was announced. (I wish other distros would put comments in a forum like this, too.)

You know, 'bouncy bouncy'! Illah Nourbakhsh of CMU's CS lab (the same folks who brought your the Palm Pilot robot kit) writes: "... So here is the newest thing we've done. We make one-legged hopping robots that use an unusual spring system. We wondered what would happen if we scale the hopping robot up so it's much larger than 6 inches-- big enough to carry a human being. Then we can throw away the computer and the human can do the control. The result, the BowGo, enables ordinary humans to jump very, very high into the air and over obstacles. It is a far more powerful Pogo stick. http://www.cs.cmu.edu/~bowgo - there are both pictures and videos available from there. This is from the Toy Robots Initiative at Carnegie Mellon University."

Please give these people your venture capital, because I want to ride one of these! Mountain pogo-ing looks fun.

How can a jump rope be "open"? An unnamed reader contributes: "I've kept my eye on the guys over at the open source directory since I saw them take a good tongue lashing on /. a few weeks ago. They aren't doing too bad getting some listings, but the ones they have gotten seem to be making some waves. By my math, it looks like they've somehow gotten *two* new open source licenses passed through the boys at OSI (open source initiative) since they started three weeks ago."

Well, my tongue is out of lashing practice, but queries for "nano," "bluefish," "gimp" and "python" all return zero matches, so it doesn't seem like the first place I would go "to find Open-Source applications that are stable." The site still looks like a good idea, but is it eclipsed by existing resources? Maybe if enough people go visit it and add entries ...

A high-security remote terminal app by any other name nodvin writes: "In a Slashdot story on Mar. 22, 2001, it was stated Secure Shell Will Remain 'SSH'. However, the draft documents
now start with the title "draft-ietf-secsh-" rather than "draft-ietf-ssh". The charter is now found at: http://www.ietf.org/html.charters/secsh-charter.ht ml and the mail archive is now at:
ftp://ftp.ietf.org/ietf-mail-archive/secsh/ "

Say it ain't so.

the_rev_matt sent in linkage to CNN talking about how the DOJ has said that Jackson was not biased in his Microsoft Ruling. Now mind you since nothing will ever happen as a result of his ruling, I guess it doesn't really matter either way.. I mean, many people think Microsoft is a monopoly. But doesn't appear that anything will change.