- Zope-Announce - Zope lists

PloneCollectorNG 1.0 alpha 2 released
by Andreas Jung 30 Oct '03

30 Oct '03

I am pleased to announce the release of PloneCollectorNG 1.0 alpha 2 (PCNG) PCNG is a bugtracking system for Plone. It is based on the concepts and ideas of CMFCollector and CMFCollectorNG but it is a complete re-write. One major highlight of this new version is the built-in TTW editor for Archetypes schemas. This means you can edit the complete fields for your issue (field types and widgets) through-the-web including the use of schemats etc. Another goal of the new implementation was to focus on security. So I dropped the old workflow and created a new one (which is much simpler). The codebase is very small and generic and therefore very much extensible for the future. Changes since 1.0a1: * improved I18N support (skins, core messages) * Schemaeditor: Vocabularies accept now an entry "method:METHODNAME" to specify a callback method that is used to retrieve the DisplayList instance for the vocabulary * File upload: Images are now stored as Portal Image instances and no longer as Portal File instances * Uploaded files can now be attached to notification emails * misc typos, fixes Wiki and Download: http://www.zope.org/Members/ajung/PloneCollectorNG Cheers, -aj

1 0

State of Zope 3
by Stephan Richter 28 Oct '03

28 Oct '03

Hello to everyone in the Zope community and beyond, you might have wondered why you have not heard from the Zope 3 developer community for a while. Also, where in the world is the first alpha, not to mention the first beta that was planned for this Fall? Has the development stalled? No, not at all! We are all still committed to produce one of the most advanced Internet Application Servers available. However, in recent months as more and more applications [1] were developed for Zope 3, we recognized issues with some of the fundamental components of Zope 3 and we decided to fix them before going any further. The first step of this code review was Parentgeddon, which removed 99% of the use of ContextWrappers, which was probably the worst single annoyance of Zope 3. Next we noticed already a while ago, that Adapters as we have them now impose a limitation to their usefulness, since one can only map one interface to another. In the ongoing Adaptergeddon, this limitation is removed by allowing a set of N interfaces to be mapped to another interface. For details see the proposal [2]. After this -geddon is completed, we will release Milestone 4, which is currently scheduled for November 10. But we are not done geddoning at that point. The security and containers also need some work. Currently, the application developer has to always write some annoying boilerplate and the relationships between containers and containees is not enforced. See the "Simplifying Implementing Containers" [3] and "Containment Constraints" [4] proposals for detail. After these final two major refactorings we will release Milestone 5 on December 1st or January 1st, which will hopefully be the last one. After MS 5, we will head towards the first alpha (in January 2004) and beta (in February 2004). From then on we will concentrate on efficiency, scalability, stability, as well as on API and GUI cleanups. The upcoming development will be supported by two sprints. Jim will go to India in December and there will be an UI sprint in Australia in February. If you have general questions about Zope 3, please do not hesitate to send a mail to zope3-dev(a)zope.org. For concerns and remarks about the release schedule feel free to send an E-mail directly to stephan.richter(a)tufts.edu. Sincerely, The Zope 3 Development Team [1] http://dev.zope.org/Zope3/Zope3Products [2] http://dev.zope.org/Zope3/ComponentArchitectureSimplification [3] http://dev.zope.org/Zope3/SimplifyImplementingContainers [4] http://dev.zope.org/Zope3/ContainmentConstraints

2 1

COREBlog 0.51b - Zope Weblog Product
by Atsushi Shibata 28 Oct '03

28 Oct '03

COREBlog 0.51b has been released ! http://zope.org/Members/ats/COREBlog/ COREBlog is a Zope Blog/Weblog/Web Nikki Product. Easy to setup,Full featured,Ubiquitous and Customizable! And now it has a 'moblog' feature - you can add a new entry via email! Features. * Moblog - you can add new entry via email (New in 0.5b) http://coreblog.org/howtos/moblog_howto_html * PING to weblogs.com, etc. (New in 0.5b) * Entries(Articles) * Comments * Categories * TrackBack * Object management with ZMI * Calendar interface * Weblog customization with skin system Have fun :-). ---------------------------------------- Atsushi Shibata shibata(a)webcore.co.jp http://www.webcore.co.jp/ ----------------------------------------

1 0

CMF 1.4.2 released
by Tres Seaver 27 Oct '03

27 Oct '03

Zope Corporation is pleased to announce the release of version 1.4.2 of the Zope Content Management Framework (CMF). This release consists primarily of bug fixes for version 1.3, released in August, 2002. All users of CMF version 1.4.1 and 1.4 should upgrade to version 1.4.2. Users of earlier versions should upgrade either to version 1.3.3 or to version 1.4.2. What is the CMF? The Zope Content Management Framework provides a set of services and content objects useful for building highly dynamic, content-oriented portal sites. As packaged, the CMF generates a site much like the Zope.org site. The CMF is intended to be easily customizable, in terms of both the types of content used and the policies and services it provides. Where do I get it? Download it from cmf.zope.org. Points of interest include: - "Windows ZIP file", http://cmf.zope.org/download/CMF-1.4.2/CMF-1.4.2.zip - "Unix tar/gzip archive", http://cmf.zope.org/download/CMF-1.4.2/CMF-1.4.2.tar.gz - "Release notes", http://cmf.zope.org/download/CMF-1.4.2/README.txt - "Change history", http://cmf.zope.org/download/CMF-1.4.2/CHANGES.txt - "Installation instructions", http://cmf.zope.org/download/CMF-1.4.2/INSTALL.txt Where do I go to learn more? The CMF mailing list has many participants who are active in supporting the CMF. ...to report bugs? The "CMF Collector":http://www.zope.org/Collectors/CMF is ths place to report bugs (please search for existing reports of your issue first!) Bug Fixes in 1.4.2 - See the "change history", http://cmf.zope.org/download/CMF-1.4.2/CHANGES.txt for the changes leading up to this release. Tres. -- =============================================================== Tres Seaver tseaver(a)zope.com Zope Corporation "Zope Dealers" http://www.zope.com -- =============================================================== Tres Seaver tseaver(a)zope.com Zope Corporation "Zope Dealers" http://www.zope.com

1 0

CMF 1.3.3 released
by Tres Seaver 27 Oct '03

27 Oct '03

Zope Corporation is pleased to announce the release of version 1.3.3 of the Zope Content Management Framework (CMF). This release consists primarily of bug fixes for version 1.3, released in August, 2002. All users of CMF version 1.3.3 and earlier should upgrade to version 1.3.3. What is the CMF? The Zope Content Management Framework provides a set of services and content objects useful for building highly dynamic, content-oriented portal sites. As packaged, the CMF generates a site much like the Zope.org site. The CMF is intended to be easily customizable, in terms of both the types of content used and the policies and services it provides. Where do I get it? Download it from cmf.zope.org. Points of interest include: - "Windows ZIP file", http://cmf.zope.org/download/CMF-1.3.3/CMF-1.3.3.zip - "Unix tar/gzip archive", http://cmf.zope.org/download/CMF-1.3.3/CMF-1.3.3.tar.gz - "Release notes", http://cmf.zope.org/download/CMF-1.3.3/README.txt - "Change history", http://cmf.zope.org/download/CMF-1.3.3/CHANGES.txt - "Installation instructions", http://cmf.zope.org/download/CMF-1.3.3/INSTALL.txt Where do I go to learn more? The CMF mailing list has many participants who are active in supporting the CMF. ...to report bugs? The "CMF Collector":http://www.zope.org/Collectors/CMF is ths place to report bugs (please search for existing reports of your issue first!) Bug Fixes in 1.3.3 - See the "change history", http://cmf.zope.org/download/CMF-1.3.3/CHANGES.txt for the changes leading up to this release. Tres. -- =============================================================== Tres Seaver tseaver(a)zope.com Zope Corporation "Zope Dealers" http://www.zope.com

1 0

CMFHotfix_20031026 Released
by Tres Seaver 27 Oct '03

27 Oct '03

CMF Hotfix Release, 2003/10/26 Overview This hotfix product addresses two issues with the Zope Content Management Framework (CMF): - It changes the permission assigned to the 'searchMembers' method of the 'portal_membership' tool. This method exposes user IDs and other information about site members, and could be used by a sufficiently clever cracker to mount an attack on the site. - It patches the 'registeredNotify' method of the 'portal_registration' tool, removing the possibility that an attacker might inject a hostile e-mail address into the mail which it generates. Zope Corporation recommends that all CMF-based sites upgrade to a version (see below) which contains the fix for this issue. Sites which for some reason cannot upgrade may instead install this hotfix product. Affected Versions Users of CMF version 1.4.1 are potentially affected by this issue, as are users of version 1.3.2 and earlier. Versions 1.3.3 and 1.4.2 will contain this fix, and therefore will not require this hotfix. Obtaining the Hotfix The hotfix is available in two formats: - As a "Unix tarball", http://cmf.zope.org/download/CMFHotfix_20031026/CMFHotfix_20031026.tar.gz - As a "Windows zipfile", http://cmf.zope.org/download/CMFHotfix_20031026/CMFHotfix_20031026.zip Installing the Hotfix 1. Unpack the tarball into a working directory, and then move or link the 'CMFHotfix_20031026' directory into the Products directory of your '$INSTANCE_HOME' (next to 'CMFCore', 'CMFDefault', etc.). 2. Restart Zope. E.g., assuming that you have Zope installed in '/usr/lib/Zope-2.6.1' (the '$SOFTWARE_HOME'), and that your instance data is in '/var/zope/instance' (the '$INSTANCE_HOME'):: $ cd /var/zope/instance/Products $ tar xzf /tmp/CMFHotfix_20031026.tar.gz $ cd /var/zope/instance $ kill -HUP `cat var/Z2.pid` Windows users should unzip the ZIP file and move the extracted 'CMFHotfix_20031026' folder to their Zope's 'Products' folder. Uninstalling the Hotfix You may remove the 'CMFHotfix_20031026' product directory after upgrading to one of the updated versions of CMF (1.3.3, 1.4.2, or later). E.g.:: $ cd /var/zope/instance/Products $ rm -r CMFHotfix_20031026 Tres. -- =============================================================== Tres Seaver tseaver(a)zope.com Zope Corporation "Zope Dealers" http://www.zope.com

1 0

M2Crypto 0.12 + Win32 binaries
by Ng Pheng Siong 27 Oct '03

27 Oct '03

Hi, M2Crypto 0.12 is now available. What's new: - Tested with Python 2.3. - ZServerSSL with client certificate authentication. - ZServerSSL for Zope 2.7.0b2. - ZServerSSL exports SSL_CIPHER to Zope applications. - setup.py works "out of the box", no Distutils tweaking needed. - Updated build instructions for Mac OS X. M2Crypto is here: http://sandbox.rulemaker.net/ngps/m2/ As usual, feedback is welcome. Cheers. -- Ng Pheng Siong <ngps(a)netmemetic.com> http://firewall.rulemaker.net -+- Manage Your Firewall Rulebase Changes http://sandbox.rulemaker.net/ngps -+- Open Source Python Crypto & SSL

1 0

epoz 1.0 alpha1 released
by Philipp von Weitershausen 24 Oct '03

24 Oct '03

Many of you have probably already enjoyed Maik Jablonski's fantastic visual editor Epoz. More than two months ago, Paul Everitt published an extensive proposal on refactoring Maik's original code base. After having received positive feedback and funding by the Dutch-based Zope expert and creator of Silva Infrae (http://www.infrae.com) Paul Everitt (Zope Europe Association), Guido Wesdorp (Infrae), Philipp von Weitershausen (philiKON) and Geir Bækholt (Plone Solutions) started hacking, using the main concepts from the proposal. After more than two months, we are now proud to release a first alpha version of what will be the next generation of the epoz editor. What's new? - The core of the editor essentially is only a file-system based skin layer. Target-platform (Zope2, CMF, Plone, Zope3) specific skin layers can then do their customization based on core. - The richtext editing widget with its buttons and toolboxes is displayed using ZPT macros. This and the usage of CSS to define the looks of the editor makes epoz more customizable than ever. Using ZPTs also has the incredible advantage that epoz can even opened in a browser from the file system or be made available through Apache. - Translation is done using the i18n namespace suported by both Zope2 and Zope3 TAL. - Document centric editing and the option of synchronous and asynchronous, as well as data-oriented (POST) and document-oriented (PUT) saving. - Works as a drop-in product for Zope2, Silva, CMF 1.4, Plone (in the future) and Zope3 (in the future). Where can I get it? You may download a tarball at the the epoz project homepage at Sourceforge: http://sourceforge.net/project/showfiles.php?group_id=84377 How can I use it? Please be aware that epoz 1.0 alpha a) is a complete rewrite of Epoz 0.X and b) is alpha software. epoz comes with a great deal of documentation already. The INSTALL.txt file in the 'doc' directory should provide a quick introduction. Note that epoz 1.0 and Epoz 0.X cannot be used together in the same Zope instance. If you would like to see epoz 1.0 alpha1 in action without having to go through a long installation orgy, you may either download the tarball and open 'common/epozmacros.html' in your browser (yes, it works off the filesystem!) or visit the following URL (served by Apache, by the way): http://www.philikon.de/files/epoz/common/epozmacros.html What to expect before 1.0: - Link and image toolbox: The original Epoz editor provided a toolbox for Plone users that was loaded in a browser pop-up window. Since epoz 1.0 puts a lot of focus on document-centric editing, it places toolbox elements such as a link or image browser and table creator right on the edit page. Results for link and image searching will be loaded asynchronously in a yet-to-defined XML format. In upcoming releases, we will provide asynronous server-side methods for link and image searching in Zope2, CMF, Plone and Zope3. - Plone integration: Although we have made an effort to integrate it with Plone 1.0/2.0, we have seen that current versions of Plone does not allow an editor to take over for document-centric editing. Philipp has made a Plone Improvement Proposal (PLIP) to provide a visual editing architecture in Plone (http://plone.org/development/current/projects/PLIP5) The proposal has been accepted by the community and Philipp is currently implementing. It is expected that Plone 2.1 will be ready to be plugged together with epoz 1.0. How to report bugs? As part of the process of moving away from Sourceforge for developemnt, we have set up a tracker at Codespeak.net. Feel free to report any bugs you encounter at: http://codespeak.net/issues/epoz/ (mind the trailing slash) We are looking forward to your comments. For the epoz developers, Philipp von Weitershausen

1 0

Send Zope and Plone to COMDEX!
by Martijn Pieters 19 Oct '03

19 Oct '03

Want to help Zope and Plone to make an impact at COMDEX? COMDEX 2003 is all about how IT is at a truning point, and one of the 7 themes of this years show is going to be Open Source Software. It looks like OSS is going to be shown in an incredidbly positive light; especially considering recent hostilities towards OSS from the US concervative business culture. The organizers of the COMDEX IT show have asked O'Reilly to help them set up a booth showing of the best of Open Source to a general IT audience. To fill the booth O'Reilly has selected 21 OSS projects with a good 'presense'; visual snazz to show of what OSS is capable of. Both Zope and Plone have made it to this short list! However, there is space for only 6 projects in the booth, so O'Reilly is asking the community to vote for their favourites. Starting today, and all the way through to 31 October you can cast a vote for your personal 3 choices, once every day. Here is are the relevant URLs: Steve Mallet Blog: Help us Send Open Source to Comdex http://www.oreillynet.com/pub/wlg/3895 COMDEX Las Vegas 2003 http://www.comdex.com/lasvegas2003/ The Open Source Goes COMDEX vote http://www.oreillynet.com/contest/comdex/ Please help us send Zope and Plone to COMDEX by casting your votes! -- Martijn Pieters | Software Engineer mailto:mj@zope.com | Zope Corporation http://www.zope.com/ | Creators of Zope http://www.zope.org/ ---------------------------------------------

1 0

ANN: PloneCollectorNG 1.0 alpha 1 released
by Andreas Jung 17 Oct '03

17 Oct '03

I am pleased to announce the release of PloneCollectorNG 1.0 alpha 1 (PCNG) PCNG is a bugtracking system for Plone. It is based on the concepts and ideas of CMFCollector and CMFCollectorNG but it is a complete re-write. One major highlight of this new version is the built-in TTW editor for Archetypes schemas. This means you can edit the complete fields for your issue (field types and widgets) through-the-web including the use of schemats etc. Another goal of the new implementation was to focus on security. So I dropped the old workflow and created a new one (which is much simpler). The codebase is very small and generic and therefore very much extensible for the future. This release should be very functional except the handling of issue references using Archetypes which is still a moving target. So except that this feature will change in the future. Also the i18n support is not completed yet (volunteers are welcome). Email notification has been added since the first 0.10. The notification mechanism will be changed in the future by using a more generalized notification framework. Wiki and Download: http://www.zope.org/Members/ajung/PloneCollectorNG Cheers, -aj

1 0