- Zope-Announce - Zope lists

ANNOUNCE ZEO 0.2.2 Released
by Jim Fulton 10 Aug '00

10 Aug '00

A new bug-fiz release of ZEO is abailable at: http://www.zope.org/Products/ZEO. This release fixes a serious bug that was made effective by Zope 2.2.1 and recent changes checked into the Zope CVS. This release also provides fixes and documentation for the -S option to the server startup script, which allows any kind of storage and multiple storages to be served. If you encounter problems with ZEO, please report them using the ZEO issue tracker at: http://www.zope.org/Products/ZEO/Tracker. Jim -- Jim Fulton mailto:jim@digicool.com Python Powered! Technical Director (888) 344-4332 http://www.python.org Digital Creations http://www.digicool.com http://www.zope.org Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats.

1 0

ZEO 0.2.1 doesn't work with Zope 2.2.1 FileStorage
by Jim Fulton 10 Aug '00

10 Aug '00

There is a bug in ZEO 0.2.1 which was made effective by Zope 2.2.1 (which has just beed released in beta). I plan to release ZEO 0.2.2 shortly, which fixes this bug. If you are using ZEO, please hold off of using Zope 2.2.1 (or an up-to-date Zope public CVS) until you can install ZEO 0.2.2. Jim -- Jim Fulton mailto:jim@digicool.com Python Powered! Technical Director (888) 344-4332 http://www.python.org Digital Creations http://www.digicool.com http://www.zope.org Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats.

1 0

ANNOUNCE: Zope 2.2.1 beta 1 released
by Brian Lloyd 10 Aug '00

10 Aug '00

Hi all - Zope 2.2.1 beta 1 has been released - you can download it from Zope.org: http://www.zope.org/Products/Zope/2.2.1b1/ This release contains many bug fixes, including the fix for the recently announced security issue. It also includes fixes to the ZODB code for supporting object databases over 2GB (provided your platform supports large files). For more information on what is new in this release, see the CHANGES.txt and HISTORY.txt files for the release: http://www.zope.org/Products/Zope/2.2.1b1/CHANGES.txt http://www.zope.org/Products/Zope/2.2.1b1/HISTORY.txt Note that we have also posted "diff" updates as .tgz files that will let you easily upgrade an existing 2.2.x site. These updates are available for those currently using the 2.2.x source release or the 2.2.x binary releases for either solaris or linux. To apply a differential update to your site: - download the appropriate .tgz file from zope.org - shutdown your Zope process - copy the .tgz to your Zope directory and extract it - run w_pcgi or wo_pcgi *if you are not using a binary release* - restart your process Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

SECURITY: Zope security alert and hotfix product...
by Brian Lloyd 10 Aug '00

10 Aug '00

Hi all - We have recently become aware of an important security issue that affects all released Zope versions prior to 2.2.1 beta 1. The issue involves the fact that the getRoles method of user objects contained in the default UserFolder implementation returns a mutable Python type. Because the mutable object is still associated with the persistent User object, users with the ability to edit DTML could arrange to give themselves extra roles for the duration of a single request by mutating the roles list as a part of the request processing. While we know of no instances of this issue being used to exploit a site, we *highly* recommend that any Zope site running versions of Zope prior to 2.2.1 have this hotfix product installed to mitigate the issue if the site is accessible by untrusted users who have DTML editing privileges. A hotfix for this issue in the form of an add-on Zope product has been made available on zope.org. To install the hotfix, simply download and install the package as you would any other Zope add-on product (extract it in the root of your Zope installation). Remember to restart your Zope installation for the hotfix to take effect. http://www.zope.org/Products/Zope/Hotfix_08_09_2000/Hotfix_08_09_2000.tg z The hotfix will work for all versions of Zope 2.0 and higher. The forthcoming Zope 2.2.1 beta 1 release will contain the fix for this issue, and you be able to uninstall the hot fix after upgrading to 2.2.1 beta 1 or higher (though nothing bad will happen if you don't uninstall it). Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

Updated Compilation of Zope Howtos and Tips
by Alexandre Ratti 10 Aug '00

10 Aug '00

Hello, I updated the compilations of Zope Howtos and Tips in PDF format. The new PDF files contain 207 Howtos and 69 Tips. You can download them from here: <http://www.zope.org/Members/AlexR/ZopeDocs/> Secondary download site (where uncompressed PDFs are also available): <http://alexandre.ratti.free.fr/ZopeDocs/> Cheers. Alexandre

1 0

Announcement: PTK 0.8.1 Release
by Tres Seaver 07 Aug '00

07 Aug '00

I have made two new snapshot tarballs available for the PTK: * a "complete version", http://www.zope.org/Products/PTK/ZopePTK-0.8.1-complete.tar.gz/view, intended for new users and **most** existing sites; * an "update version", http://www.zope.org/Products/PTK/ZopePTK-0.8.1-update.tar.gz/view, intended for sites which have customized the DemoPortal or Wizard through-the-web products. Existing site managers should read the change log and the installation notes carefully, in order to minimize issues while upgrading. ----------------------------------------------------------------------- Change Log 0.8.1 * Zope 2.2 compatibility * Sample content types moved from PTKBase to PTKDemo: - Document - File - Image - Link - NewsItem - Discussion/DiscussionItem *Note: existing portals will need to run a conversion script; see the "Installation notes":install for details.* * Added DemoPortal and Wizard as "distribution tab" products (e.g., they are present as directories in the tarball). This makes installing the PTK for the first time much simpler (untar, restart, and you're there), but presents an issue for existing portals which have customized the DemoPortal or Wizard products (see the "Installation notes":install for details). * Added portal/user/item toolbar actions. * Added support for discussable content types (sample content is all discussable). * Separated membership from authenticataion; membership now defined as a mix-in class on the portal. * Add ZPL. * Repair initialization-order dependencies for ZClass products (build base ZClasses at module import, then register them with the ProductContext during 'initialize()'). * Remove dependencies on LoginManager / ZPatterns products (you can use them, but you no longer have to have them to build a portal). * Improve Wizards: - Allow "Back" as well as "Next". - Hold enough state to perform "preview". - Extensions to allow use in editing, as well as for construction. 0.8.0 Internal release only (Zope 2.2 compatibility test) ----------------------------------------------------------------------- Installation Notes The primary means of obtaining the PTK is via CVS. Occasionally, snapshots are made available for those who don't have the ability to check a copy out with CVS. Obtaining and installing ZopePTK from a snapshot PTK >= 0.8, new installation Snapshots can be downloaded from the "PTK page":http://www.zope.org/Products/PTK if any are available. To install a snapshot, extract it into the root of your Zope server. For instance:: $ cd /usr/local/Zope2 $ tar xzf ~/downloads/ZopePTK-x.x.tar-complete.gz Start or restart your Zope server. PTK >= 0.8, existing, customized PTK installation *If you have made changes you wish to preserve to the DemoPortal or Wizard products (we **don't** advise this):* Snapshots can be downloaded from the "PTK page":http://www.zope.org/Products/PTK if any are available. To install a snapshot, extract it into the root of your Zope server. For instance:: $ cd /usr/local/Zope2 $ tar xzf ~/downloads/ZopePTK-x.x.tar-update.gz Start or restart your Zope server. Migrating existing content objects Existing instances of the sample content types (Document, File, Image, Link, NewsItem) must be "reseated" to fix up their class name in the ZODB. To perform this operation, first update your PTK (see above), and then view the following URL:: http://host.your.tld/path/to/portal/manage_migrate_contents This method recursively walks your portal, finding and replacing instances of the sample PTK content with instances whose class is in the new, "blessed" location. PTK < 0.8 (Zope 2.1.* only) Snapshots can be downloaded from the "PTK page":http://www.zope.org/Products/PTK if any are available. To install a snapshot, extract it into the root of your Zope server. For instance:: $ cd /usr/local/Zope2 $ tar xzf ~/downloads/ZopePTK-x.x.tar.gz Start or restart your Zope server. Skip down to 'Completing the install'. Obtaining and installing ZopePTK from the CVS PTK >= 0.8 (Zope 2.2 only) See "Public CVS Access":http://classic.zope.org:8080/Community/CVS_public_access for directions, substituting 'ZopePTK' for 'Zope2'. After following the instructions of the Public CVS Access page, you will end up with a directory called 'ZopePTK', which will contain subdirectories. Copy the contents of 'ZopePTK' to the 'Products' directory of your Zope server. Restart Zope. Note that to refresh an existing CVS sandbox, you should use 'cvs up -d -P' (assuming you want to remove obsolete directories and retrieve any newly-added ones). *N.B.: Sites which have customized DemoPortal or Wizard should **not** copy the new DemoPortal or Wizard folders from the CVS sandbox to the Products directory -- doing so will replace you through-the-web changes!* PTK < 0.8 (Zope 2.1.* only) See "Public CVS Access":http://classic.zope.org:8080/Community/CVS_public_access for directions, substituting 'ZopePTK' for 'Zope2'. After following the instructions of the Public CVS Access page, you will end up with a directory called 'ZopePTK', which will contain subdirectories. Copy the contents of 'ZopePTK' to the 'Products' directory of your Zope server. Copy the file 'ZopePTK/PTKDemo/DemoPortal.zexp' to the 'import' directory of your Zope server. You will need to create this folder in the root of your Zope installation if you have not already done so. Restart Zope. Continue with "Completing the Install" Completing the install (PTK < 0.8) Use a web browser to view your Zope Management Interface. View the contents of your 'Products' folder. You should see the 'PTKBase' and 'PTKDemo' products. Using the 'Import/Export' view, import the file 'DemoPortal.zexp'. You must restart Zope again to fix the DemoPortal product. It contains a ZClass instance ('PortalWizard') which is always 'broken' until the next restart. Kicking the Tires If you now go to a suitable location, you should be able to instantiate a Portal object. This is actually an instance of the DemoPortal. Take a look at it's ZClasses and the contents of the DemoApp folder in ZopePTK/PTKDemo to see how it works. -- =============================================================== Tres Seaver tseaver(a)digicool.com Digital Creations "Zope Dealers" http://www.zope.org

1 0

ZMailIn 0.3.0 Now available
by Andy Dawkins 07 Aug '00

07 Aug '00

ZMailIn 0.3.0 is now available here: http://www.zope.org/Members/NIP/ZMailIn/ Major Revisions: -- Global ZCatalog to index ZMailIn instances. -- Support for Multi-Mime type emails. -- Customisable Message handling via DTML-Methods. -- CatalogAware + Folderish. Cheers -Andy

1 0

XMLRenderer, xml/xsl Document type
by Phil Harris 03 Aug '00

03 Aug '00

I have just released version 0.0.1a of xmlRenderer. It is intended to be a modified DTMLDocument which uses XML/DTML as the base instead of HTML/DTML. This means that you can still embed DTML into the document as long as the result of it is valid XML. If you want to give the development version a go, it's at http://www.zope.org/Members/philh/xmlRenderer-0.0.1a.tgz Have fun Phil phil.harris(a)zope.co.uk

1 0

[Patch] supports ":method" suffix for <input type=image> form elements supports ":last", retain only last given value supports ":last", retain only last given value
by Dieter Maurer 30 Jul '00

30 Jul '00

Do you like * buttons containing images (and do not yet want to use the HTML 4.0 "button" tag) and * Zope's ":method" magic for buttons? The you may find the following patch interesting: URL:http://www.dieter.handshake.de/pyprojects/zope/imgbutton.pat With the current Zope, you can not use ":method" with "<input type=image>" tags, i.e. the HTML 3.2 image buttons. The browser creates for such an image button two form variables "<name>.x" and "<name>.y". These suffixes (".x" and ".y") prevent Zope to recognize any type suffix, especially ":method". The patch above extends Zope's ":method" suffix handling for the case of image buttons. It defines for them the form variable "imgclickpos", a record with the 2 integer fields "x" and "y", and calls the method as it does for normal submit buttons. The patch defines a new ":last" suffix, too. "<name>:last" tells Zope to discard any value previously seen for "<name>". This should avoid the nasty case to get a single value, if a form contains a field once, but a list if it contains the list several times. "<name>:last" ensures, you always get a single value (and not a list), namely the last one. ":last" is effective only for types that are not SEQUENCE, RECORD nor RECORDS. For ":list" and ":tuple", ":last" is not senseful. For ":record" and ":records", the code was rather complicated, such that I not dared to change it. Dieter

1 0

[Patch] ZCatalog for International Latin-1 sites
by Dieter Maurer 30 Jul '00

30 Jul '00

ZCatalog can already be used easily to catalog material in one non-english language (condition: one byte per character encoding) by using the locale support. This breaks down, however, when a single catalog should index objects in different (non-english) languages. The patch at URL:http://www.dieter.handshake.de/pyprojects/zope/splitter.pat lets ZCatalog treat each character with code between 192 and 254 (inclusive) as letters, provided "Splitter.c" is compiled with "-DINT_LATIN1". This is adequate for ISO-Latin1, because all characters in the range of 192 and 254 are letters (though for different Latin-1 languages) with the exception of 215, 216 and 247. Dieter

1 0