August 2000 - Zope-Announce

EventFolder 1.0 release
by Jeff Sasmor 12 Aug '00

12 Aug '00

EventFolder 1.0 release - Dateline: Saturday August 12, 2000. Princeton NJ USA Overcoming the frumious help system, the bandersnatch missing boolean properties, and the galumphing ZClass Vocabularies, EventFolder 1.0 has been released to the accolades of at least one person- the author. "O frabjous day! Callooh! Callay!" EventFolder 1.0 has been released to an adoring public, hungry for excitement during the summer US political convention season. "It's the most exciting thing since Pat Paulsen" says the New York Tomes. Reviewers are agog over its support for Zope 2.2.1 beta 1 including the new Zope help system. Security concious folks are beaming with pride with its HTML tag content filtering. See for yourself, AND IT'S FREE, that's right - it's released Open Source! Check it out at Zope.org today. * * *

1 0

Zope training class is scheduled for Denver and San Diego
by Gary Graham 11 Aug '00

11 Aug '00

The dates are: Zope 101 & 201: San Diego, California ---- Sept 25-28, 2000 Zope 101 & 201: Denver, Colorado ---- Oct 2-5, 2000 The classes fill up very quickly. So contact me asap to reserve your space. ZOPE101: 3 Days, $1495 per person This three (3) day course provides the student with a thorough and briskly paced introduction to Zope. This course is valuable for applications and Web site developers, Webmasters, system adminis- trators and others developing and/or supporting intranet/Internet services using Zope. Students should have a thorough understanding of HTML (including the development and use of HTML forms). ZOPE201: 1 Day, $450 per person This one (1) day seminar provides the attendee with an opportunity to develop a real-world application under the supervision and guidance of an experienced commercial Zope developer. The instructor will guide the students' development of an application utilizing SQL, ZClasses, ZCatalog, and various user authentication techniques. This fast-paced day will end with a survey of design patterns and develop- ment approaches appropriate with Zope. Registration To register for these courses, please send the following information to: gary(a)digicool.com Name Organization Name Phone number (fax number if possible) Your VISA or MasterCard # with expiration date & cardholder's name Course (e.g., Zope 101 AND 201, Zope 101 only, Zope 201 only, etc.) Location We will contact you as soon as possible after receiving your email. Important Notes: Payment for training courses is due within twenty-one (21) days of the start of the course in order to confirm seat reservations. Complete refunds are available for cancellations made more than twenty-one (21) days before the start of the course. Fifty (50) percent refunds are available for cancellations made more than fifteen (15) days from the start of the training course. No refunds will be offered for cancellations made less than fifteen (15) days from the start of the course. The training day starts at 9a and ends at 5p daily. See www.digicool.com/Solutions/Training/ for more details on the individual classes. Knowledge Development Center url is http://www.kdc-denver.com/ for Denver or http://www.kdc-sd.com/ for San Diego. They can give you info about the surrounding area and lodging. -------------------- --Gary Gary Graham gary(a)digicool.com Director, Sales & Marketing Digital Creations Fredericksburg, Virginia mobile: 540.840.3813 office: 540.371.6909 ext 117 ---------------------------------------------------- Creators of Zope: The Open Source Application / Content Management Server www.zope.org www.digicool.com

1 0

ANNOUNCE ZEO 0.2.2 Released
by Jim Fulton 10 Aug '00

10 Aug '00

A new bug-fiz release of ZEO is abailable at: http://www.zope.org/Products/ZEO. This release fixes a serious bug that was made effective by Zope 2.2.1 and recent changes checked into the Zope CVS. This release also provides fixes and documentation for the -S option to the server startup script, which allows any kind of storage and multiple storages to be served. If you encounter problems with ZEO, please report them using the ZEO issue tracker at: http://www.zope.org/Products/ZEO/Tracker. Jim -- Jim Fulton mailto:jim@digicool.com Python Powered! Technical Director (888) 344-4332 http://www.python.org Digital Creations http://www.digicool.com http://www.zope.org Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats.

1 0

ZEO 0.2.1 doesn't work with Zope 2.2.1 FileStorage
by Jim Fulton 10 Aug '00

10 Aug '00

There is a bug in ZEO 0.2.1 which was made effective by Zope 2.2.1 (which has just beed released in beta). I plan to release ZEO 0.2.2 shortly, which fixes this bug. If you are using ZEO, please hold off of using Zope 2.2.1 (or an up-to-date Zope public CVS) until you can install ZEO 0.2.2. Jim -- Jim Fulton mailto:jim@digicool.com Python Powered! Technical Director (888) 344-4332 http://www.python.org Digital Creations http://www.digicool.com http://www.zope.org Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats.

1 0

ANNOUNCE: Zope 2.2.1 beta 1 released
by Brian Lloyd 10 Aug '00

10 Aug '00

Hi all - Zope 2.2.1 beta 1 has been released - you can download it from Zope.org: http://www.zope.org/Products/Zope/2.2.1b1/ This release contains many bug fixes, including the fix for the recently announced security issue. It also includes fixes to the ZODB code for supporting object databases over 2GB (provided your platform supports large files). For more information on what is new in this release, see the CHANGES.txt and HISTORY.txt files for the release: http://www.zope.org/Products/Zope/2.2.1b1/CHANGES.txt http://www.zope.org/Products/Zope/2.2.1b1/HISTORY.txt Note that we have also posted "diff" updates as .tgz files that will let you easily upgrade an existing 2.2.x site. These updates are available for those currently using the 2.2.x source release or the 2.2.x binary releases for either solaris or linux. To apply a differential update to your site: - download the appropriate .tgz file from zope.org - shutdown your Zope process - copy the .tgz to your Zope directory and extract it - run w_pcgi or wo_pcgi *if you are not using a binary release* - restart your process Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

SECURITY: Zope security alert and hotfix product...
by Brian Lloyd 10 Aug '00

10 Aug '00

Hi all - We have recently become aware of an important security issue that affects all released Zope versions prior to 2.2.1 beta 1. The issue involves the fact that the getRoles method of user objects contained in the default UserFolder implementation returns a mutable Python type. Because the mutable object is still associated with the persistent User object, users with the ability to edit DTML could arrange to give themselves extra roles for the duration of a single request by mutating the roles list as a part of the request processing. While we know of no instances of this issue being used to exploit a site, we *highly* recommend that any Zope site running versions of Zope prior to 2.2.1 have this hotfix product installed to mitigate the issue if the site is accessible by untrusted users who have DTML editing privileges. A hotfix for this issue in the form of an add-on Zope product has been made available on zope.org. To install the hotfix, simply download and install the package as you would any other Zope add-on product (extract it in the root of your Zope installation). Remember to restart your Zope installation for the hotfix to take effect. http://www.zope.org/Products/Zope/Hotfix_08_09_2000/Hotfix_08_09_2000.tg z The hotfix will work for all versions of Zope 2.0 and higher. The forthcoming Zope 2.2.1 beta 1 release will contain the fix for this issue, and you be able to uninstall the hot fix after upgrading to 2.2.1 beta 1 or higher (though nothing bad will happen if you don't uninstall it). Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

Updated Compilation of Zope Howtos and Tips
by Alexandre Ratti 10 Aug '00

10 Aug '00

Hello, I updated the compilations of Zope Howtos and Tips in PDF format. The new PDF files contain 207 Howtos and 69 Tips. You can download them from here: <http://www.zope.org/Members/AlexR/ZopeDocs/> Secondary download site (where uncompressed PDFs are also available): <http://alexandre.ratti.free.fr/ZopeDocs/> Cheers. Alexandre

1 0

Announcement: PTK 0.8.1 Release
by Tres Seaver 07 Aug '00

07 Aug '00

I have made two new snapshot tarballs available for the PTK: * a "complete version", http://www.zope.org/Products/PTK/ZopePTK-0.8.1-complete.tar.gz/view, intended for new users and **most** existing sites; * an "update version", http://www.zope.org/Products/PTK/ZopePTK-0.8.1-update.tar.gz/view, intended for sites which have customized the DemoPortal or Wizard through-the-web products. Existing site managers should read the change log and the installation notes carefully, in order to minimize issues while upgrading. ----------------------------------------------------------------------- Change Log 0.8.1 * Zope 2.2 compatibility * Sample content types moved from PTKBase to PTKDemo: - Document - File - Image - Link - NewsItem - Discussion/DiscussionItem *Note: existing portals will need to run a conversion script; see the "Installation notes":install for details.* * Added DemoPortal and Wizard as "distribution tab" products (e.g., they are present as directories in the tarball). This makes installing the PTK for the first time much simpler (untar, restart, and you're there), but presents an issue for existing portals which have customized the DemoPortal or Wizard products (see the "Installation notes":install for details). * Added portal/user/item toolbar actions. * Added support for discussable content types (sample content is all discussable). * Separated membership from authenticataion; membership now defined as a mix-in class on the portal. * Add ZPL. * Repair initialization-order dependencies for ZClass products (build base ZClasses at module import, then register them with the ProductContext during 'initialize()'). * Remove dependencies on LoginManager / ZPatterns products (you can use them, but you no longer have to have them to build a portal). * Improve Wizards: - Allow "Back" as well as "Next". - Hold enough state to perform "preview". - Extensions to allow use in editing, as well as for construction. 0.8.0 Internal release only (Zope 2.2 compatibility test) ----------------------------------------------------------------------- Installation Notes The primary means of obtaining the PTK is via CVS. Occasionally, snapshots are made available for those who don't have the ability to check a copy out with CVS. Obtaining and installing ZopePTK from a snapshot PTK >= 0.8, new installation Snapshots can be downloaded from the "PTK page":http://www.zope.org/Products/PTK if any are available. To install a snapshot, extract it into the root of your Zope server. For instance:: $ cd /usr/local/Zope2 $ tar xzf ~/downloads/ZopePTK-x.x.tar-complete.gz Start or restart your Zope server. PTK >= 0.8, existing, customized PTK installation *If you have made changes you wish to preserve to the DemoPortal or Wizard products (we **don't** advise this):* Snapshots can be downloaded from the "PTK page":http://www.zope.org/Products/PTK if any are available. To install a snapshot, extract it into the root of your Zope server. For instance:: $ cd /usr/local/Zope2 $ tar xzf ~/downloads/ZopePTK-x.x.tar-update.gz Start or restart your Zope server. Migrating existing content objects Existing instances of the sample content types (Document, File, Image, Link, NewsItem) must be "reseated" to fix up their class name in the ZODB. To perform this operation, first update your PTK (see above), and then view the following URL:: http://host.your.tld/path/to/portal/manage_migrate_contents This method recursively walks your portal, finding and replacing instances of the sample PTK content with instances whose class is in the new, "blessed" location. PTK < 0.8 (Zope 2.1.* only) Snapshots can be downloaded from the "PTK page":http://www.zope.org/Products/PTK if any are available. To install a snapshot, extract it into the root of your Zope server. For instance:: $ cd /usr/local/Zope2 $ tar xzf ~/downloads/ZopePTK-x.x.tar.gz Start or restart your Zope server. Skip down to 'Completing the install'. Obtaining and installing ZopePTK from the CVS PTK >= 0.8 (Zope 2.2 only) See "Public CVS Access":http://classic.zope.org:8080/Community/CVS_public_access for directions, substituting 'ZopePTK' for 'Zope2'. After following the instructions of the Public CVS Access page, you will end up with a directory called 'ZopePTK', which will contain subdirectories. Copy the contents of 'ZopePTK' to the 'Products' directory of your Zope server. Restart Zope. Note that to refresh an existing CVS sandbox, you should use 'cvs up -d -P' (assuming you want to remove obsolete directories and retrieve any newly-added ones). *N.B.: Sites which have customized DemoPortal or Wizard should **not** copy the new DemoPortal or Wizard folders from the CVS sandbox to the Products directory -- doing so will replace you through-the-web changes!* PTK < 0.8 (Zope 2.1.* only) See "Public CVS Access":http://classic.zope.org:8080/Community/CVS_public_access for directions, substituting 'ZopePTK' for 'Zope2'. After following the instructions of the Public CVS Access page, you will end up with a directory called 'ZopePTK', which will contain subdirectories. Copy the contents of 'ZopePTK' to the 'Products' directory of your Zope server. Copy the file 'ZopePTK/PTKDemo/DemoPortal.zexp' to the 'import' directory of your Zope server. You will need to create this folder in the root of your Zope installation if you have not already done so. Restart Zope. Continue with "Completing the Install" Completing the install (PTK < 0.8) Use a web browser to view your Zope Management Interface. View the contents of your 'Products' folder. You should see the 'PTKBase' and 'PTKDemo' products. Using the 'Import/Export' view, import the file 'DemoPortal.zexp'. You must restart Zope again to fix the DemoPortal product. It contains a ZClass instance ('PortalWizard') which is always 'broken' until the next restart. Kicking the Tires If you now go to a suitable location, you should be able to instantiate a Portal object. This is actually an instance of the DemoPortal. Take a look at it's ZClasses and the contents of the DemoApp folder in ZopePTK/PTKDemo to see how it works. -- =============================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

ZMailIn 0.3.0 Now available
by Andy Dawkins 07 Aug '00

07 Aug '00

ZMailIn 0.3.0 is now available here: http://www.zope.org/Members/NIP/ZMailIn/ Major Revisions: -- Global ZCatalog to index ZMailIn instances. -- Support for Multi-Mime type emails. -- Customisable Message handling via DTML-Methods. -- CatalogAware + Folderish. Cheers -Andy

1 0

XMLRenderer, xml/xsl Document type
by Phil Harris 03 Aug '00

03 Aug '00

I have just released version 0.0.1a of xmlRenderer. It is intended to be a modified DTMLDocument which uses XML/DTML as the base instead of HTML/DTML. This means that you can still embed DTML into the document as long as the result of it is valid XML. If you want to give the development version a go, it's at http://www.zope.org/Members/philh/xmlRenderer-0.0.1a.tgz Have fun Phil phil.harris(a)zope.co.uk

1 0