[CMF-checkins] CVS: Releases/CMF - CHANGES.txt:1.24

[Tres Seaver]

Update of /cvs-repository/Releases/CMF
In directory cvs.zope.org:/tmp/cvs-serv14497

Modified Files:
	CHANGES.txt 
Log Message:
 - Merge Shane's exposition of CookieCrumbler changes.

=== Releases/CMF/CHANGES.txt 1.23 => 1.24 ===
     workflows) to the core set of CMF products.
 
+  - Made it possible to add CookieCrumblers in nested folders.
+    You can just drop in a cookie crumbler anywhere to change the
+    login form for that area of the site.  In fact, now you don't
+    have to create a user folder just to change the login
+    process.
+
   - Made Link objects editable via FTP / WebDAV.
 
   - Merged Chris Withers' FSSQLMethod into CMFCore.
@@ -97,6 +103,13 @@
     well as Dublin Core).
 
  Bug fixes
+
+  - Added a workaround for the problem where the CookieCrumber
+    set cookies even though the user entered an incorrect password.
+    RESPONSE.unauthorized() now cancels the cookie response
+    header.  The new login_form and logged_in form both try to
+    invoke unauthorized(), so make sure you install the new
+    forms.
 
   - Implement the notional 'search results item' interface for
     SkinnedFolder.