[Cubicweb] Pyro and ZMQ deprecated?

Yann Cointepas yann at cointepas.net
Wed Mar 5 10:28:34 CET 2014

Pyro and ZMQ have securities and obsolescence issues but, correct me if I
am wrong,  they do not provide admin access without admin login and

In order to compare the different option you proposed, I would add an
important drawback to the HTTP/HTTPS method : you do not get informative
error message when you provide a wrong request (for instance a syntax error
in RQL), you simply get an empty result.

Is the next Cubicweb sprint a good place to work on a documented and
maintained remote RQL system ? I could participate if it make sense.

Yann Cointepas            Tel: +33 1 69 08 78 31
CEA - Neurospin           Fax: +33 1 69 08 79 80
Bâtiment 145, Point Courrier 156
91191 Gif-sur-Yvette cedex, France

On Wed, Mar 5, 2014 at 10:05 AM, Dimitri Papadopoulos Orfanos <
dimitri.papadopoulos at cea.fr> wrote:

> Yann,
> My understanding is that rqlcontroller is preliminary work not yet ready
> for production - as far as I can see there hasn't been any release of
> this cube:
>         http://www.cubicweb.org/project/cubicweb-rqlcontroller
> I understand Nicolas was pointing you to this cube not as code you
> should be using, but as a preview of future ways to access the CubicWeb
> database. That would explain the current lack of documentation.
> For now, here are the options I know of to access a CubicWeb database
> (please correct me if I have forgotten any):
> * HTTP/HTTPS: can be used remotely, simple for retrieving data or
> without authentication, a bit more complex for pushing data or with
> authentication (for example max. length of an URL or session management)
> * CubicWeb shell: cannot be used remotely (unless using remote sessions
> at the system level like SSH), admin mode (full access to the resources
> of the user at host running the server)
> * ZMQ: can be used remotely, security issues, admin mode (full access to
> the resources of the user at host running the server), to be deprecated
> * Pyro: same as ZMQ
> * write you own front-end, for example a Web service
> Databases such as MySQL or PostgreSQL have their own protocol to
> remotely and securely run SQL queries:
>     http://dev.mysql.com/doc/refman/5.7/en/ssl-connections.html
>     http://www.postgresql.org/docs/9.3/static/libpq-ssl.html
> CubicWeb seems to be lacking such a maintainable and standard mechanism
> to remotely run RQL queries, especially for data insertion (except HTTPS
> which again is complex to use and seems to have some issues).
> I cannot understand from the 'rqlcontroller' page whether it will
> provide such a maintainable mechanism.
> Le 04/03/2014 23:42, Yann Cointepas a écrit :
> > So, it means that I have to go through the source code to find out what
> to
> > do.
> >
> > So many cubes and so few documentation for them. I have the feeling that
> > Cubicweb cubes are like an exhibition of jewelry where each jewel is
> > presented in a closed box.
> >
> > But thank you for letting visitors open the boxes and wear the jewels.
> >
> > [...]
> --
> Dimitri Papadopoulos
> CEA/Saclay
> I2BM, NeuroSpin
> 91191 Gif-sur-Yvette cedex, France
> _______________________________________________
> Cubicweb mailing list
> Cubicweb at lists.cubicweb.org
> http://lists.cubicweb.org/mailman/listinfo/cubicweb
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cubicweb.org/pipermail/cubicweb/attachments/20140305/a893f5ed/attachment-0186.html>

More information about the Cubicweb mailing list