- Zope-Announce - Zope lists

Hotfix-20040807 Released
by Tres Seaver 10 Aug '04

10 Aug '04

Overview This hotfix addresses a security issue reported in CMF Collector #259 (http://zope.org/Collectors/CMF/259) This issue concerns a defective privilege check in the OFS.CopySupport module, which may permit unprivilieged (but authenticated) users of a site to move content into a folder under their control. Affected Versions This issue affects Zope version 2.7.2 and earlier, and has been resolved for Zope version 2.7.3 and later. Users of affected Zope versions should remove the hotfix after upgrading to version 2.7.3 or later. The hotfix has been tested against 2.6.x versions of Zope as well. Getting the Hotfix The hotfix product is available from the "zope.org site", http://zope.org/Products/Zope/Hotfix-200400807/Hotfix-20040807 - "Unix tarball", http://zope.org/Products/Zope/Hotfix-200400807/Hotfix-20040807/Hotfix-20040… - "Windows zipfile", http://zope.org/Products/Zope/Hotfix-200400807/Hotfix-20040807/Hotfix-20040… - "README.txt", http://zope.org/Products/Zope/Hotfix-200400807/README.txt Installation To install the hotfix, unpack the tarball / zip file into the 'Products' directory of your site's INSTANCE_HOME, and then restart your Zope application server. For example, if on your system, the Zope software is installed in '/opt/lib/zope2.7', and your instance is in '/var/lib/zope':: # cd /var/lib/zope/Products # tar xzf /tmp/Hotfix-20040807.tar.gz # ../bin/zopectl restart Removal To remove the hotfix after upgrading Zope to version 2.7.3 or later, simply remove the product folder and restart the application server. For example, for the same setup:: # cd /var/lib/zope/Products # rm -r Hotfix-20040807 # ../bin/zopectl restart Tres. -- =============================================================== Tres Seaver tseaver(a)zope.com Zope Corporation "Zope Dealers" http://www.zope.com

1 0

Plone Training in Houston: August 23-27th
by Andy McKay 10 Aug '04

10 Aug '04

Enfold Systems will be providing its Plone training course in Houston, the last week of August. Containing some of the leading Plone experts, Enfold Systems provides quality, in-depth training for all programmers. The training takes place 23rd-27th August at the Crowne Plaza in downtown Houston. The five day course covers everything from Python through Page Templates to Archetypes. For more information see: http://www.enfoldsystems.com/Training/Houston -- Andy McKay Enfold Systems http://www.enfoldsystems.com

1 0

ZODB 3.2.3 released
by Tim Peters 09 Aug '04

09 Aug '04

I'm pleased to announce the release of ZODB 3.2.3. This corresponds to the ZODB (and ZEO) that shipped with Zope 2.7.2. Upgrading to ZODB 3.2.3 is recommended for all users. You can download a source tarball or Windows installer from: http://zope.org/Products/ZODB3.2 This is a pure bugfix release. The most prominent fix since ZOBD 3.2.2 is in ZEO's treatment of temporary cache files. See the news file for details: http://zope.org/Products/ZODB3.2/NEWS Note that ZODB 3.2.3 does not support Zope X3 (Zope 3 requires ZODB 3.3 -- as will Zope 2.8).

1 0

Reminder: IRC Chat Tomorrow @ 11a (GMT-4)
by Rob Page 09 Aug '04

09 Aug '04

Hello everyone: Here is a final reminder of tomorrow's IRC chat. Details: Who: Zope Community What: Monthly IRC Session When: Tue, Aug 10, 11a (GMT-4) Where: #zope @ irc.freenode.net Why: Discuss agenda items Agenda ----------- 1) Zope.org team update (Jim Fulton: 10 minutes) 2) Pluggable Authentication Service Q&A (Tres Seaver: 15 minutes) 3) Zope 3 status update (Jim Fulton: 10 minutes) 4) Update on Zope Bug Day (Chris Withers: 10 minutes) Please send suggested agenda items to: irc_agenda_topics(a)zope.com Thanks! -- Rob Page V: 540.361.1710 Zope Corporation F: 703.995.0412

1 0

Reminder: IRC Session, Tue, Aug 10
by Rob Page 06 Aug '04

06 Aug '04

Hello everyone: This is a brief reminder of the community IRC session that will be happening as follows: Who: Zope Community What: Monthly IRC Session When: Tue, Aug 10, 11a (GMT-4) Where: #zope @ irc.freenode.net Why: Discuss agenda items Agenda ----------- 1) Zope.org team update (Jim Fulton: 10 minutes) 2) Pluggable Authentication Service Q&A (Tres Seaver: 15 minutes) 3) Zope 3 status update (Jim Fulton: 10 minutes) 4) Update on Zope Bug Day (Chris Withers: 10 minutes) Please send suggested agenda items to: irc_agenda_topics(a)zope.com Thanks! -- Rob Page V: 540.361.1710 Zope Corporation F: 703.995.0412

1 0

[Ann] AdvancedQuery 0.5: flexible queries in Zope
by Dieter Maurer 04 Aug '04

04 Aug '04

AdvancedQuery is a Zope product for flexible queries against "ZCatalog" or "CatalogTool". Queries can be arbitrarily combined with "and", "or" and "not". All index types are almost fully supported (exception: relevance sorting of TextIndexes). AdvancedQuery supports efficient incremental (lazy) multi-level sorting via FieldIndexes. This means, you can sort via e.g. "sort_on=(('Date','desc'), 'portal_type', 'id')". For large result sets, sorting is performed incrementally, only as far as you access the result. This can drastically speed up sorting time. AdvancedQuery is especially efficient for "ManagableIndex"es (see: <http://www.dieter.handshake.de/pyprojects/zope#ManagableIndex>). Version 0.5 supports the new glob and regexp matching queries of "ManagableIndex". More information and download: <http://www.dieter.handshake.de/pyprojects/zope#AdvancedQuery> Note: This may be the last version with its current open source unrestricted use license. I consider whether I will expressly forbid the use of my software by institutions of the European Union (Councel of Ministers, Commission, Parliament, ...). This is in protest against a recent decision of the Councel to make software patentable. This decision ignores a Parliament vote that pleaded to keep logic (algorithms, business rules) un-patentable. -- Dieter

1 0

[Ann] ManagableIndex 0.9 -- flexible indexing construction framework with Field-, Keyword-, Range- and WordIndex
by Dieter Maurer 04 Aug '04

04 Aug '04

ManagableIndex is a flexible framework to build efficient and easily customizable indexes. It comes with flexible, efficient and easily tailorable Field-, Keyword-, Range- and WordIndexes. New in version 0.9: * most string and unicode indexes (exception <code>RangeIndex</code>) now support glob and regular expression matching. Usually, only text indexes support glob matching. No other Zope index types (I know of) support regular expression matching. * a new WordIndex -- which is a minimal TextIndex without phrase searches, relevance ranking and integrated query parser. Its development was motivated by the observation that full text searches were slowed down immensely by loading large amounts of word frequency information (used for relevance ranking). This same information also caused transactions of almost 700 MB for documents of a few kB. As we sort all results by other criteria, the overhead for the unused relevance ranking was far too high. A WordIndex is expected to have minimal transaction sizes (during indexing) and minimal load times (during searching). As it does not include its own query parser, you need a flexible external query framework such as 'AdvancedQuery' or 'CatalogQuery' to make effective use of a WordIndex. More information and download: <http://www.dieter.handshake.de/pyprojects/zope#ManagableIndex> Note: This may be the last version with its current open source unrestricted use license. I consider whether I will expressly forbid the use of my software by institutions of the European Union (Councel of Ministers, Commission, Parliament, ...). This is in protest against a recent decision of the Councel to make software patentable. This decision ignores a Parliament vote that pleaded to keep logic (algorithms, business rules) un-patentable. -- Dieter

1 0

Third ZPUG Meeting this Thursday...
by jonahfish 04 Aug '04

04 Aug '04

The Zope/Python Users Group of DC exists to promote and serve the user and developer community in Washington, DC, for Python, Zope, and Plone. We will hold meetings and networking events, and provide a mailing list to our members. We meet on the first Thursday and third Monday of every month. We've scheduled meetings through the end of September. For now, our meetings are scheduled in downtown DC, in a meeting room at Porter Novelli. ______________________________________________________________ Main presentation: Durus, a new and cool object database from the MEMS Exchange (David Binger). Mini-presentation: Python (ultra) debugger (James Rosey) 8/05/2004 from 19:00 to 21:00 For more info please visit: http://zpugdc.org/meetings/mtg3 Hope to see any and all interested there, Jonah

1 0

Zope CMF 1.4.6 Released
by Tres Seaver 31 Jul '04

31 Jul '04

Zope Corporation is pleased to announce the release of version 1.4.6 of the Zope Content Management Framework (CMF). This release consists primarily of bug fixes for version 1.4, released in April, 2003. What is the CMF? The Zope Content Management Framework provides a set of services and content objects useful for building highly dynamic, content-oriented portal sites. As packaged, the CMF generates a site much like the Zope.org site. The CMF is intended to be easily customizable, in terms of both the types of content used and the policies and services it provides. Where do I get it? Download it from "cmf.zope.org", http://zope.org/Products/CMF/CMF-1.4.6 Points of interest include: - "Windows ZIP file", http://zope.org/Products/CMF/CMF-1.4.6/CMF-1.4.6.zip - "Unix tar/gzip archive", http://zope.org/Products/CMF/CMF-1.4.6/CMF-1.4.6.tar.gz . - "Release notes", http://zope.org/Products/CMF/CMF-1.4.6/README.txt - "Change history", http://zope.org/Products/CMF/CMF-1.4.6/CHANGES.txt - "Installation instructions", http://zope.org/Products/CMF/CMF-1.4.6/INSTALL.txt Where do I go to learn more? The "CMF mailing list":mailto:zope-cmf@zope.org has many participants who are active in supporting the CMF. ...to report bugs? The "CMF Collector":http://zope.org/Collectors/CMF is ths place to report bugs (please search for existing reports of your issue first!) Bug Fixes in 1.4.6 - See the "change history", http://zope.org/Products/CMF/CMF-1.4.6/CHANGES.txt for the bugs fixed in this release. Tres. -- =============================================================== Tres Seaver tseaver(a)zope.com Zope Corporation "Zope Dealers" http://www.zope.com

1 0

Five 0.1 released (Zope 3 in Zope 2)
by Martijn Faassen 30 Jul '04

30 Jul '04

Hot on the heels of the Zope X3 3.0.0b2 release, the Five team has released Five 0.1, the first public release of Five. Five is a Zope 2 product that allows you to use Zope 3 technologies in Zope 2, today. Five allows you to use the following Zope 3 technologies in Zope 2: * Zope 3 interfaces * adapters * pages (views), including skins and layers * ZCML, including things like Zope 2 security declarations from ZCML It is possible to add Zope 3 style views to your own Zope 2 objects, or to existing ones, even normal Folders! For a more extensive list of Five features, see here: http://codespeak.net/z3/five/features.html Five 0.1 allows you to use Zope X3 3.0.0b2 technologies in a straight Zope 2.7 installation. See Five's INSTALL.txt for more information on how to set it up. Download Five 0.1: http://codespeak.net/z3/five/release/Five-0.1.tgz More about the Five project: http://codespeak.net/z3/five Five is part of the Zope 3 Base project, which aims to offer an approachable area for the developers of Zope 3 related software. More about the Zope 3 base: http://codespeak.net/z3/ The Five Team

1 0