Unable to upload files larger than 1mb after Plone 6.0.7 upgrade

[cekk]

BUG/PROBLEM REPORT (OR OTHER COMMON ISSUE)

This is probably related to Zope 5.8.4 issue #1141 and pull request #1142.

What I did:

Update buildout to use new versions of Plone/Zope (Plone 6.0.7)
Tested also with latest buildout.coredev

What I expect to happen:

Upload a file larger than 1mb in a File content-type

What actually happened:

Upload is blocked because Zope has now a (1mb limit)

From the commits and documentation i see that it should be configurable, but i can't do it.
Anyone has a working example?

1mb is probably very low for regular pdf files that users usually upload on a website.

What version of Plone/ Addons I am using:

Zope 5.8.5
Plone 6.0.7

[mauritsvanrees]

I see this too, with Plone 6.0.7 on a ClassicUI site with plone.restapi installed.
I upload an image via a form, and get this:

2023-09-26 14:12:35,673 ERROR   [Zope.SiteErrorLog:35][waitress-0] BadRequest: http://localhost:8080/Plone3/++add++Image
Traceback (innermost last):
  Module ZPublisher.WSGIPublisher, line 181, in transaction_pubevents
  Module ZPublisher.WSGIPublisher, line 391, in publish_module
  Module ZPublisher.WSGIPublisher, line 269, in publish
  Module ZPublisher.BaseRequest, line 638, in traverse
  Module Products.PluggableAuthService.PluggableAuthService, line 244, in validate
  Module Products.PluggableAuthService.PluggableAuthService, line 560, in _extractUserIds
  Module plone.restapi.pas.plugin, line 100, in extractCredentials
  Module plone.restapi.deserializer, line 8, in json_body
  Module ZPublisher.HTTPRequest, line 1058, in get
  Module ZPublisher.HTTPRequest, line 1370, in __get__
zExceptions.BadRequest: data exceeds memory limit

Actually, even without plone.restapi installed (only available in the eggs), I see the same traceback. This is strange, because the jwt_auth PAS plugin is not even in acl_users. It should not be called then. But that is a separate issue.

Adding <dos_protection> in parts/instance/etc/zope.conf gives a startup error: "Error: unknown type name: 'dos_protection'". Ah, I will try the PR from @mamico:
plone/plone.recipe.zope2instance#191

[mauritsvanrees]

Yes, that works.

I have released the fix from @mamico in plone.recipe.zope2instance 6.12.2.
(I should have called that 6.13.0 really. Oh well.)

Add something like this in your instance/zeoclient recipe config:

zope-conf-additional =
  <dos_protection>
    form-memory-limit 4MB
  </dos_protection>

(I think I will go for 10MB for most of my customers.)

Thanks!

[yurj]

Yes, that works.

I have released the fix from @mamico in plone.recipe.zope2instance 6.12.2. (I should have called that 6.13.0 really. Oh well.)

Add something like this in your instance/zeoclient recipe config:

zope-conf-additional =
  <dos_protection>
    form-memory-limit 4MB
  </dos_protection>

(I think I will go for 10MB for most of my customers.)

Thanks!

but this works only with buildout. What about cookiecutter?

[mamico]

(I think I will go for 10MB for most of my customers.)

@mauritsvanrees don't you think we should put a default for Plone equal or larger than 10MB?

PDFs and images are normally larger, I think many people might run into this problem after updating, don't you?

[gotcha]

Well, do use buildout ! 😜

I love it 😉

[MrTango]

but this works only with buildout. What about cookiecutter?

@yurj the config is written into the zope.conf file, which you also have in a buildoutless setup like teh cookiecutter templates.

[yurj]

I mean the automated installation via cookiecutter should add this conf additional snippet too . If you upgrade the docker image, you cannot add this config (easly) and maybe downgrade your database is not an option.

https://6.docs.plone.org/install/manage-add-ons-packages.html

"For the backend, it uses cookiecutter-zope-instance to generate configuration files for a Zope WSGI instance."

[mauritsvanrees]

@mauritsvanrees don't you think we should put a default for Plone equal or larger than 10MB?

PDFs and images are normally larger, I think many people might run into this problem after updating, don't you?

Yes.
Where would we put a default. Would that be in the recipe? Or do an override in CMFPlone?

I really don't have time for community work this week. The last few weeks have been too crazy for that. I will add the current solution to a few customers, as I saw Sentry errors coming in.

[wesleybl]

Will I always have to update this setting if I want higher limits?