Zope-Announce July 2005

zope-announce@zope.dev

13 participants
24 discussions

SECURITY WARNING: Don't use the Zope 3 sendmail mailer
by Jim Fulton 29 Jul '05

29 Jul '05

There is a feature in Zope 3, called the "sendmail" mailer, which is not enabled by default, for using a shell command to invoke a mailer to send mail. (The name comes from the popular Unix mailer sendmail, which is often invoked as a sub-process.) Invoking a shell from a server program is a potential serious security hole. This feature can be enabled with a ZCML directive like: <mail:queuedService permission="zope.SendMail" queuePath="./queue" mailer="sendmail" /> If you have added a directive like this to your configuration, you should remove it or change it to use the smpt mailer: <mail:queuedService permission="zope.SendMail" queuePath="./queue" mailer="smtp" /> This feature will be removed in future versions of Zope, including Zope 3.1, and 3.0.2 (if there is a 3.0.2). If you gave questions about this, please send them to the Zope 3 users list, zope3-users(a)zope.org. Jim -- Jim Fulton mailto:jim@zope.com Python Powered! CTO (540) 361-1714 http://www.python.org Zope Corporation http://www.zope.com http://www.zope.org

1 0

zopen: command-line interface to the ZMI
by Ian Bicking 28 Jul '05

28 Jul '05

zopen is a small command-line Python script that gives you to access the Zope Management Interface (the web interface) without using a browser. zopen works completely through screen-scraping (and with External Editor), so it does not require any special software to be installed on the Zope server. Read more and download here: http://imagescape.com/software/zopen/ Cheers, Ian Bicking Imaginary Landscape LLC :: Python Web Development

1 0

Zope 2.8.1 beta 1 released
by Andreas Jung 28 Jul '05

28 Jul '05

Hi all, on behalf of Zope Corporation and the Zope community I am pleased to announce the release of Zope 2.8.1b1. You can download Zope 2.8.1b1 from http://www.zope.org/Products/Zope/2.8.1b1/ Some new features of Zope 2.8: - ZODB 3.4 with MVCC (multi version concurrency control) support. MVCC solves nearly every problem with ZODB read-conflict errors which is very important for high-traffic Zope sites. - Extension Classes were rewritten as Python new-style classes making all features of Python new-style classes available in Zope objects. This includes support for cyclic garbage collection. - Integration of Zope 3 technologies through Five (see http://codespeak.net/z3/five/) For more information on what is new in this release, see the CHANGES.txt files for the release: http://www.zope.org/Products/Zope/2.8.1b1/CHANGES.txt See also: http://www.zope.org/Wikis/DevSite/Projects/Zope2.8/OverView Please bring all the bugs you have found to the Zope bugtracker: http://collector.zope.org/Zope":http://collector.zope.org/Zope For more information on the available Zope releases, guidance for selecting the right distribution and installation instructions, please see: http://www.plope.com/Books/2_7Edition/InstallingZope.stx -- Andreas Jung (andreas at zopyx dot com)

1 0

Zope X3 3.0.1 released!
by Philipp von Weitershausen 28 Jul '05

28 Jul '05

Zope X3 3.0.1 released! ======================= The Zope 3 development team is proud to announce the release of Zope X3 3.0.1, a bugfix release for the X3.0 series. This bugfix release is mostly due to the fact that Zope X3.0 is included in Zope 2.8 and experiencing active integration into Zope 2 by means of the Five product. Several issues with X3.0.0 have made this bugfix release necessary. Please see the list of changes for more information. Downloads --------- http://zope.org/Products/Zope3/3.0.1 Installation instructions for both Windows and Un*x/Linux are now available in the top level README.txt file of the distribution. The binary installer is recommended for Windows. Zope X3 3.0.1 requires Python 2.3.5 or 2.4.1 to run. You must also have zlib installed on your system. Changes since X3 3.0.0: ----------------------- - Updated the French translation. - Backported some small fixes from the trunk to fix i18n of forms. - Fixed issue 298 (Role/permission title and description should be messageids) - Several fixes were backported from the Zope 2.8 integration branch, making the main X3.0 line compatible with Zope 2.8 and thus allowing X3.0 releases to be included into Zope 2.8 releases without modification. - Fixed issue 333 (XML Tree doesn't load if some item contains non-ASCII characters). - Fixed issue 314 (i18n:translate removes line breaks from <pre>...</pre> contents). - Fixed issue 394 (starting zope with command -C arg causes request.form to contain '-C':''). - Fixed issue 334 (Failing RuntimeInfo tests). - Fix SequenceWidgets. Added a CustomSequenceWidgetFactory for using object widgets within a sequence. Added a howto for ObjectWidget - Fixed issue 293 (sequence widget). - Backported several bug fixes made to the DSN parser, including issue 304. - Contents/contents.pt didn't quote the values that were used in href:s, thus it couldn't function properly if the items contained certain characters. - If the content-type was text/*, HTTPResponse.write re-set the content-length header to the first chunk of data. - Don't unconditionally add Content-Length header in HTTPResponse.getHeaders(). Do it only in output(), where the size of the data is known. - For ``for`` parameter of the <browser:menuItem> and <browser:menuItems> directives was not marked as required in the directive schema, while it actually was expected to be required. - Made the <includeOverrides /> ZCML directive behave like the <include /> directive with respect to the 'files' parameter. - Fixed a bug where IntWidget would not render a 0. Resources --------- - Zope 3 Development Web Site: http://dev.zope.org/Zope3 - Zope 3 Developers Mailing List http://mail.zope.org/mailman/listinfo/zope3-dev - Zope 3 Users Mailing List http://mail.zope.org/mailman/listinfo/zope3-users - IRC Channel: #zope3-dev at irc.freenode.net Acknowledgements ---------------- Much thanks to everyone who contributed to this release: Jim Fulton, Stephan Richter, Bjorn Tillenius, Yvo Schubbe, Stuart Bishop, Stefan H. Holek, Tim Peters, Dmitry Vasiliev, Gintautas Miliauskas, Tres Seaver, Philipp von Weitershausen

1 0

CPSSharedCalendar 1.0.0 released
by Lennart Regebro 26 Jul '05

26 Jul '05

July 26, 2005 -- Nuxeo is happy to release CPSSharedCalendar 1.0.0 CPSSharedCalendar is an advanced, flexible calendaring component for Zope and CPS3. It allows CPS users to access personal calendars using a web interface. Events on the calendar can be shared between multiple users, as a user can invite others to an event. This event will then appear on the calendar of the invited users as well. Features of the CPSSharedCalendar include among others: * a web interface for managing calendars, * integration with iCalendar clients (Apple iCal, Mozilla Sunbird, KOrganizer...) using the iCalendar protocol, * invitation workflow, * meeting support, * meeting helper that looks for free time, * etc. CPSSharedCalendar is built on a reusable core and is thus not just for CPS. It has been written from the ground up to be easy to integrate with other Zope 2 platforms such as Plone and Silva, and with portability to Zope 3 in mind. Its python core component (CalCore) can even be used outside of Zope altogether. For more functional and technical information, see the CPSSharedCalendar web site: http://www.cps-project.org/sections/projects/calendar_server CPSSharedCalendar can be downloaded here: http://www.cps-project.org/static/misc/CPSSharedCalendar-package-1.0.0.tgz Look at the README.txt file in the package for more information on how to install CPSSharedCalendar. If you'd like to help with CPSSharedCalendar development or porting to other platforms, please join the cps-devel mailing list at http://lists.nuxeo.com/mailman/listinfo/cps-devel (a dedicated list will be created if needed in the future). Changes from 1.0.0b2 includes: * French translation. * A field for attaching CPS documents. * More efficient use of the display area by "collapsing" events outside normal workhours. * "ToolTips" for events displaying more information. * Much improved support for non-CPS Zope2 installations. * Many, small bugfixes, thanks to testing by both clients and other interested parties. Thanks to all of you, for helping us improve CPSSharedCalendar! -- Lennart Regebro, Nuxeo http://www.nuxeo.com/ CPS Content Management http://www.cps-project.org/

1 0

CMFonFive 1.2.0 released
by Lennart Regebro 25 Jul '05

25 Jul '05

z3base proudly presents CMFonFive 1.2.0! CMFonFive is a product that provides integration between CMF and Five. CMFonFive 1.2.0 provides support for using Zope 3 menuItems as CMF actions, and it also provides a CMF skin layer that bridges some more of the standard slots between Zope 3 and CMF than the default CMF 1.5.2 template-bridge does. Much of the integration earlier being done by CMFonFive has with CMF 1.5.2 been moved into CMF proper. This means that CMFonFive is no longer required to run Five products under CMF, although it provides some improved integration. It also means that earlier versions of CMFonFive do not work with CMF 1.5.2, instead CMFonFive 1.1.0 should be used. For more information, see http://codespeak.net/z3/cmfonfive/ -- Lennart Regebro, Nuxeo http://www.nuxeo.com/ CPS Content Management http://www.cps-project.org/

1 0

Issue Dealer 0.9.78 released
by Morten W. Petersen 21 Jul '05

21 Jul '05

Issue Dealer (http://www.nidelven-it.no/products/issue_dealer) is a issue management tool featuring a weblog publisher (client), weblog (server), WebDAV client, WYSIWYG editing of HTML and Images and more. Changes since the last announcement: 0.9.78: - Added a category interface for the Weblog publisher. 0.9.77: - Added build options on the UNIX installer so that Issue Dealer should run smoothly on *BSD and Mac OS X - Search results are now more sensitive to context 0.9.76: - Fixed bug where emails sent to weblog subscribers would be rendered incorrectly - Made IssueDealer compatible with Zope 2.8 If you're interested in trying a demo, sign up at the demo site (http://demos.issue-dealer.net). To see the Issue Dealer Weblog Server in action, have a look at The Blogologue (http://www.blogologue.com). :) Nidelven IT (http://www.nidelven-it.no) and others use the product to manage their knowledge and action items, it's a great tool to keep track issues in different departments for example. Try it!

1 0

More TM ideas
by Rob Page 20 Jul '05

20 Jul '05

Following up to my note from yesterday. ZEA *is* the official registrant (but not legitimate owner) of the Cirlce-Z-Zope (CZZ) mark in many countries in the Madrid Protocol. You can search the WIPO database for "Zope" and find it. Zope Corporation is the official registrant of the word Zope in many countries in the Madrid Protocol and our registration predates the ZEAs. Since the ZEA registration is based on the word Zope we believe that an official trademark opposition will be successful. We are also only willing to pay the fees that Zope Corporation would otherwise have had to pay to register the marks itself. This offer was made in writing last Friday. The subtle but important point is that ZEA seems to be willing to transfer the marks to the Zope Foundation not Zope Corporation. This seems to be the essence of the difference in our position. If this is inaccurate -- i.e., ZEA is willing to transfer the marks to ZC with no strings attached then we can chalk this up to some incredible communication issue and can certainly move forward! It seems that the prospect of Zope Corporation's unfair (and unprecedented) management of the marks is the real issue. So that our position and policy are clear: *** We will not use (nor allow our successors or assigns) to use the Zope trademarks in non-competitive ways. *** The challenge is to figure out how to get this in place. One idea might be to make the BoD of the Zope Foundation the arbiter of any revocation action ZC might take. This would be a contractual relationship between ZC (and its successors and assigns) and the ZF. If ZC felt that a given ZC-licensed use of the marks had become inappropriate we would move to revoke the trademark license. If the license holder was unsatisfied with the revocation they would appeal to the Zope Foundation which, on vote of a supermajority of the BoD could overrule ZC's revocation action. It is our heartfelt sense that Zope Corporation is more likely to defend (within guidelines and process) the marks than a volunteer-led Foundation. We have heard comments that suggest that the Foundation should not be in the business of enforcement. Enforcement is an active responsibility. Perhaps once (and while) ZF has full-time staff to pursue Foundation business (including TM matters) the Foundation would be the first stop for tm issues. It has been reported that ZEA's original registration of the marks was defensive and done in an effort to preclude registrations from being made by unfriendly parties. We find it simply surprising that the first mention of their registrations to us was 18 months (!) after the fact. ZEA does not represent the entire Zope community in Europe (nor do they claim to) and certainly don't represent the global Zope community. In fact, we should all recognize that the ZEA competes with non-ZEA companies on proposals. That's fine, expected and natural. However, any action on ZEA's part that was made on "behalf of the community" is inappropriate. ZC does not claim to represent the whole Zope Community either. We are asserting our ownership (and, we think) aggressive desire to manage the marks and brand in a vendor-neutral way. With respect to ZEA's ownership of the Plone trademark - I am told by two people that ZEA helped register the Plone mark as a service to the Plone Foundation and that it has been or is in the process of being transferred. Presuming this is true I stand corrected. Even this morning the WIPO database advertises ZEA as the registrant of record for the mark. Regards, Rob -- Rob Page V: 540 361 1710 Zope Corporation F: 703 995 0412

1 0

Zope Foundation Update
by Rob Page 19 Jul '05

19 Jul '05

Foundation Update ---------------- This note updates progress on forming of the Zope Foundation. To remain transparent as possible, we are communicating in as timely a manner as possible. First, we have contacted the Software Freedom Law Center (SFLC) which specializes in the formation and maintenance of the legal structures that support open source software. From our first conference call with our primary POC there (who also helped with the Plone Foundation), we took away some homework items including: (1) draft trademark license agreement between Zope Corporation and the Zope Foundation (2) draft/initial set of ByLaws and related formation documents that capture the spirit of what we've been discussing for a while now (i.e., Eclipse Foundation-inspired membership and Apache Software Foundation-inspired operations). We have made progress on (2) but stopped when we discovered a trademark violation that needs to be addressed before Zope Corporation can properly license the trademarks to the Zope Foundation. During my stay at EuroPython I learned that eighteen months ago (and without Zope Corporation's knowledge or consent) Zope Europe Association (ZEA) registered a trademark consisting of the Cirlce-Z (the stylized Z surrounded by a circle) followed by the word ZOPE (hereinafter "Circle-Z-Zope"). The mark they registered is identical to the corporate logo used by Zope Corporation. In the three weeks since learning of ZEA's illegitimate registration of our marks we have tried diligently (but unsuccessfully) to get ZEA to unconditionally transfer the rights of the registration. We have offered to reimburse the registration fees paid by the ZEA to the WIPO (World Intellectual Property Organization) in order to facilitate the transfer. We have further offered to preserve their license to use the Zope mark in the conduct of their business as an association of Zope companies. ZEA's registration represents an abuse of registration and management of international trademarks and the misappropriation of a mark that is clearly the property of Zope Corporation. We are sorely disappointed that ZEA is unwilling to transfer the marks quickly and quietly so that we can proceed swiftly toward the formation of the Zope Foundation. We know that the establishment of a fair trademark license for the entire Zope community is an _essential_ component of the Zope Foundation. It is possible that we will come to a conclusion with the ZEA prior to the conclusion of a trademark dispute process. However, as a result (and unfortunately), until this matter is resolved using the established legal/trademark management processes, we are not able to proceed with the Zope Foundation. We will keep the community updated as milestones are reached, so that you know what the new target dates are for the formation of the Foundation at the same time that we do. We recognize that there are lingering questions about the trademark and our management thereof. We have captured our position on these marks in an open letter to the Zope Community. You can find this letter at: o http://www.zope.com/about_us/legal/ ZopeCorpTrademarkManagement_OpenLetter.html As an aside, the ZEA has also registered the Plone logo as a trademark. It is not our business, but came as a surprise to us, that the Plone Foundation is not the owner of the Plone trademark. -- Rob Page V: 540 361 1710 Zope Corporation F: 703 995 0412

1 0

[ANN] TextIndexNG 3.0.5 released
by Andreas Jung 17 Jul '05

17 Jul '05

I am pleased to announce the release of TextIndexNG V 3.0.5. TextIndexNG V 3 is a complete new implementation based on Zope 3 technologies and can be used both in Zope 2.8 or 2.7 (with Five) or in Zope 3. What's new? - multi-field indexing and query support - multi-lingual support - configurable converters (through ZCML) - new indexing API (allowing you to hook your custom content types with TextIndexNG through Zope 3 adapters). Changes since V 3.0.4: - optimization: unchanged documents will no longer be reindexed - added Plone integration: TextIndexNG 3 must be installed through the quickinstall or Add/Remove programs. The Plone integration provides a configlet to replace an existing SearchableText index with a TextIndexNG V3 instance. Note that the Plone integration **still* requires Zope 2.8 or Zope 2.7 + Five. The Plone support has been tested with Plone 2.1 only. If you want to run Plone 2.0 with TextIndexNG then you should use TextIndexNG V 2(!) Requirements: - Zope 2.8 or Zope 2.7 (+ Five) or Zope 3 (Zope 3 has nothing like catalogs yet) TextIndexNG V3 will *not* run with bare Zope 2.7 installations without Five (and this will not be changed in the future). Download: http://sf.net/projects/textindexng For installation and documentation issues refer to doc/README.txt from the archive. It's basically the same procedure as with former versions except you *need* to recompile the extension modules. Windows binaries of the required extension modules are currently not available (any volunteers?). TextIndexNG V 3 is published under the ZPL. Andreas Jung ----------------------------------------------------------------------- - Andreas Jung ZOPYX Software Development and Consulting - - E-mail: info(a)zopyx.com Web: www.zopyx.com - -----------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

Zope-Announce July 2005