[CMF-checkins] CVS: CMF - CHANGES.txt:1.146.4.1 HISTORY.txt:1.36.18.1 INSTALL.txt:1.13.10.1 INSTALL_CVS.txt:1.4.10.1 TODO.txt:NONE
Tres Seaver
tseaver@zope.com
Sat, 26 Apr 2003 15:14:08 -0400
Update of /cvs-repository/CMF
In directory cvs.zope.org:/tmp/cvs-serv3794
Modified Files:
Tag: CMF-1_4-branch
CHANGES.txt HISTORY.txt INSTALL.txt INSTALL_CVS.txt
Removed Files:
Tag: CMF-1_4-branch
TODO.txt
Log Message:
- Package for a 1.4beta1 release on Monday:
o Synchronize "old" 'CHANGES.txt' (from the 1.3 branch) into
'HISTORY.txt'.
o Reworked references to older versions.
o Removed explicit support for Zope 2.4.3 (nobody is testing it
there any more).
o Included DCWorkflow in the release.
o updated 'version.txt' files.
=== CMF/CHANGES.txt 1.146 => 1.146.4.1 ===
--- CMF/CHANGES.txt:1.146 Tue Apr 15 12:07:59 2003
+++ CMF/CHANGES.txt Sat Apr 26 15:13:36 2003
@@ -1,27 +1,4 @@
-Future
-
- New Features
-
- - (__future__) Exposed role management for manager users on the
- default roster: managers can now "promote" members without going
- to the ZMI.
-
- - (__future__) Added "custom schema" mechanism for content objects:
- site managers can now define additional propertysheets for a
- content type, which will then be reflected in instances created
- from the type.
-
- - (__future__) Added simple link extraction / checking for textual
- content. Link checking also works for Link objects.
-
- - (__future__) Added "composite content" types (see the "dogbowl
- proposal",
- (http://cmf.zope.org/rqmts/proposals/compounds/compoundproposal.txt).
-
- - (__future__) Added DCWorkflow (through-the-web configurable
- workflows) to the core set of CMF products.
-
-CMF 1.4 alpha
+CMF 1.4beta1 (2003/04/28)
New Features
@@ -38,10 +15,6 @@
- skins (CMFDefault): Made scripts independent of submit button 'values'.
- - utils: Changed behavior of 'StrippingParser' and 'scrubHTML'.
- They now close empty tags.
- (Collector #108, thanks to 'tanghus' for the patch)
-
- Added .css to the extensions that create FSFile objects in
DirectoryViews (see CMFCore/FSFile.py)
All sites upgrading which expected css extension to be dropped and to
@@ -63,22 +36,23 @@
The head check in bodyfinder is removed. In most cases you want to call
bodyfinder only if html_headcheck is true.
- - Cleaned up Interfaces and API Help (Collector #96):
-
- o Removed redundant 'Syndicatable' and 'IndexableContent' interfaces.
-
- o Removed unfixable 'Membership' and 'ReviewableContent' interfaces.
+ - Added FSFile skin object, in order to allow .swf files (et al.) in
+ skins
- o Removed listActions() from 'Contentish' and 'portal_workflow'
- interface.
+ - Added 'listMetaTags' skin method, which filters the DublinCore
+ metadata into a form suitable for inclusion as <meta> tags.
- o Removed redundant or 'None' overriding of listActions().
+ - Added .metadata file for FSObjects, which allows the easy addition of
+ more features without adding lots and lots of files. ConfigParser format.
- o Updated all interfaces to work with new Zope 2.6 Interface API.
+ - Added proxy roles to FS Python Scripts and FS DTML Methods via the proxy
+ property in .metadata files.
- o Added 'portal_properties' and 'Dynamic' interfaces.
+ Bug Fixes
- o Added many interface implementation tests and made them pass.
+ - utils: Changed behavior of 'StrippingParser' and 'scrubHTML'.
+ They now close empty tags.
+ (Collector #108, thanks to 'tanghus' for the patch)
- Removed deprecated 'register' module and 'PortalContentRegistration'
interface.
@@ -86,25 +60,28 @@
- Moved URLTool to CMFCore. Added interface and basic tests.
(Collector #67)
- - Added FSFile skin object, in order to allow .swf files (et al.) in
- skins
-
- - Added 'listMetaTags' skin method, which filters the DublinCore
- metadata into a form suitable for inclusion as <meta> tags.
-
- Protected the Pending review action in DefaultWorkflow by
ReviewPortalContent (Collector #52).
- Raise ValueError instead of TypeError in TypesTool.getActionById
if the action is not found (Collector #56).
- - Added .metadata file for FSObjects, which allows the easy addition of
- more features without adding lots and lots of files. ConfigParser format.
+ - Cleaned up Interfaces and API Help (Collector #96):
- - Added proxy roles to FS Python Scripts and FS DTML Methods via the proxy
- property in .metadata files.
+ o Removed redundant 'Syndicatable' and 'IndexableContent' interfaces.
- Bug Fixes
+ o Removed unfixable 'Membership' and 'ReviewableContent' interfaces.
+
+ o Removed listActions() from 'Contentish' and 'portal_workflow'
+ interface.
+
+ o Removed redundant or 'None' overriding of listActions().
+
+ o Updated all interfaces to work with new Zope 2.6 Interface API.
+
+ o Added 'portal_properties' and 'Dynamic' interfaces.
+
+ o Added many interface implementation tests and made them pass.
- MembershipTool (CMFDefault): Fixed acquisition bug. (Collector #102)
@@ -141,3 +118,19 @@
- Remove redundant VERSION.txt files; the canonical spelling is
'version.txt' (Collector #13).
+
+ - Correct security assertion on CMFDefault.Image's manage_afterAdd
+ (Collector #141).
+
+ - Ensure that the security attributes are reindexed on all
+ subobjects too when a folderish object changes state in the
+ workflow (Collector #115).
+
+ - Backport fix of CMFCore/tests/test_FSImage.py to work with
+ recent Zopes (> 2.6), which force HTTP headers to be strings.
+
+ - Use return instead of raise in RegistrationTool.testPropertiesValidity
+ if id is incorrect (Collector #48).
+
+ - Correctly cleanup temporaries in CMFCore.MemberDataTool when
+ wrapping a user object (Collector #136).
=== CMF/HISTORY.txt 1.36 => 1.36.18.1 ===
--- CMF/HISTORY.txt:1.36 Wed Jul 31 17:58:31 2002
+++ CMF/HISTORY.txt Sat Apr 26 15:13:36 2003
@@ -1,10 +1,185 @@
-Post 1.3 beta2
+CMF 1.3.1 (2003/03/06)
+
+ Bug Fixes
+
+ - Fixed editSyInformationProperties in SyndicationTool to ensure
+ that updateBase is saved as a DateTime instance.
+
+CMF 1.3.1beta1 (2003/02/26)
+
+ New Features
+
+ - Implemented PUT and GET support to CMFCalendar.Event for
+ editing via FTP/WebDAV (thanks to Sidnei da Silva).
+
+ Bug Fixes
+
+ - Fixed incorrect security declaration in File.py (Collector #91).
+
+ - Remove over-helpful default argument values in
+ 'CMFDefault.DefaultDublinCoreImpl._editMetadata'. Now, if
+ called without a value for an argument, the method will not
+ change that value. Collector #10.
+
+ - Remove workaround in CMFCore.utils for recognizing links in
+ StructuredText: STX in CMF content should now recognize exactly
+ the same links as the underlying Zope. Note that we *do* still
+ provide a customized HTML class, to permit embedding images without
+ generating the "whole" page. Collector #6.
+
+ - Remove bizarre, shadowing import of CMFCore.utils as 'utils'
+ into package namespace of CMFDefault; instead, import specific
+ names from that package directly (thanks to Paul Winkler for
+ pointing out the incongruity).
+
+ - Fix (theoretical) bug in CMFCore.DirectoryView which allowed
+ non-registered directories to slip through (UI didn't exercise it).
+
+ - Merge Christian Theune's fix for funky default argument values on
+ CMFCalendar.Event's constructor and edit methods (collector #76).
+
+ - FSPageTemplates overwrote a user-generated 'Content-Type' header.
+ We now check to make sure a Content-Type header is not already set
+ before allowing a page template to set its own.
+
+ - Fixed bugs around 'addActionProvider' in ActionsTool (Collector #42).
+
+ - Fixed race condition in lazy initialization of filesystem-based skin
+ methods; the bug led to odd name errors on 'context' for
+ FSPythonScripts (Collector #37).
+
+ - Removed crufty 'isDesktop' stuff from 'folder_factories' and
+ 'folder_contents' methods.
+
+ - Fixed HTML-invalidating call to 'filterCookie' in 'folder_contents'.
+
+ - Fixed unclosed 'tr' element in ZPT version of 'folder_edit_form'
+ (Collector #57).
+
+ - Fixed CalendarTool to use portal_type and not Type to search for
+ events in the catalog (Collector #28, thanks to Heimo Laukkanen
+ for the report).
+
+ - Fixed a bug in CalendarTool where events were not showing on the
+ last day of the month.
+
+CMF 1.3 (2002/08/06)
New Features
- - FSPageTemplates now autodetect XML if a document has the standard
- <?xml version="xx"?> at the top, setting the content_type to "text/xml"
- so that it is parsed and served as XML.
+ - FSPageTemplates now autodetect XML if a document has the standard
+ '<?xml version="xx"?>' at the top, setting the content_type to
+ "text/xml" so that it is parsed and served as XML.
+
+ - Added a 'Workflows' tab in the ZMI that displays the workflow
+ state of the object.
+
+ - Wired 'scrubHTML' check into default versions of 'document_edit'
+ and 'newsitem_edit' skins (site managers who prefer to allow
+ JavaScript in content can customize to remove the check).
+
+ - Added utility methods for checking / scrubbing HTML content of
+ unwanted tags:
+
+ CMFDefault.utils: scrubHTML, isHTMLSafe
+
+ Known bad tags ('script', 'applet', 'embed', 'object'),
+ attributes (starting with 'on'), and values (starting with
+ 'javascript:') cause 'scrubHTML' to raise an exception; unknown
+ tags are silently dropped. 'isHTMLSafe' returns true if
+ 'scrubHTML' would not raise an exception on the same text.
+
+ - Exposed useful utility methods to scripting / skinning.
+
+ CMFCore.utils: getToolByName, cookString, tuplize, format_stx,
+ keywordsplitter, normalize, expandpath, minimalpath
+
+ CMFDefault.utils: formatRFC822Headers, parseHeadersBody,
+ semi_split, comma_split, seq_strip, tuplize, bodyfinder,
+ html_headcheck.
+
+ - Added two utility functions, 'isHTMLSafe' and 'scrubHTML', to
+ CMFDefault utils; these modules check for / remove undesirable
+ tags from textual content.
+
+ - Made public functions of 'CMFCore.utils' and 'CMFDefault.utils'
+ available for scripting.
+
+ - Allowed Portal Folders to be discussable.
+
+ - Improved the ActionsTool so that permission checking for actions
+ is done in the context of the object for all categories that start
+ with 'object' or 'workflow', in the context of the folder for
+ those that start with 'folder', and in the context of the portal
+ otherwise. This is useful for admin-defined additional categories.
+
+ Bug Fixes
+
+ - Fixed Image and File so that they reindex on PUT.
+
+ - Fixed WorkflowTool so that it doesn't pretend to workflow non-CMF
+ objects (Collector #19).
+
+ - Removed redundant block of code from CMFDefault/Link.py (Collector
+ #18).
+
+ - Fixed discussion tree display not to embed entire HTML document
+ (Collector #17, thanks to Jeffrey Shell for the inspiration).
+
+ - Fixed CookieCrumbler to emit "Basic" and not "basic" auth as per
+ HTTP spec (Collector #14, thanks to Simon Eisenmann for the
+ report). This fixes some WebDAV locking problems with (rightfully)
+ picky clients, like ExternalEditor.
+
+ - Made old ListCriterion instances forward-compatible across earlier
+ addition of 'operator' field.
+
+ - Defaulted CMFCore.MembershipTool's createMemberArea flag to true,
+ to preserve existing behavior: member area should be created by
+ default on first login (Collector #5).
+
+ - Hardened DefaultDublinCoreImpl's EffectiveDate() and
+ ExpirationDate() methods to deal better with older / uninitialzed
+ content.
+
+ - Refactored content construction in the Types tool to make
+ cataloguing and workflow notification more uniform.
+
+ - Made Undo work again by removing any LF in transaction ids.
+
+ - Made WorkflowTool.updateRoleMappings update security-related
+ indexes.
+
+ - Append '/' to links in skin templates to the root of the site, to
+ pacify clients which won't send Basic Auth tokens because the path
+ doesn't match.
+
+ - Removed the binding of Folder and Topic types to the default
+ workflow for newly-created CMFSites (Collector #4). Note that
+ existing sites will still need to remove these bindings manually,
+ as indicated in the "Upgrading" section of INSTALL.txt.
+
+ - Updated initial action reported by CMFDefault's DefaultWorkflow:
+ was "joined", now "created".
+
+ - Fix 'index_html' template to filter using 'View' permission
+ (folders which were not viewable were triggering authentication,
+ instead of being skipped).
+
+ - Repair free-form subject entry on 'full_metadata_edit_form' (was
+ merging all keywords onto the same line, plus soft-wrapping!).
+ Likewise the "Contributors" textarea.
+
+ - Ensured that Link, File, and Image content objects reindex
+ themselves after edit (wrapping 'edit' as a WorkflowMethod no
+ longer guarantees that).
+
+ - Fixed CMFCalendar's "day view" to accomodate the removal of
+ 'title' metadata from catalog in favor of 'Title' (thanks to
+ Dieter Maurer for pointing this out).
+
+ - Corrected a skins performance optimization (the version as
+ released in the beta did not take effect).
CMF 1.3 beta2 (2002/07/07)
@@ -186,7 +361,7 @@
- Updated caching policy manager tool to use correct date format
(RFC 1123 instead of RFC 822).
-1.3 beta 1 (2001/04/03)
+CMF 1.3 beta 1 (2001/04/03)
New Features
@@ -373,7 +548,7 @@
- Made 'CMFCore/interfaces/__init__.py' non-empty, to remove suspicion
that the file was corrupted in the download (Tracker #426).
-1.2 beta (2001/12/07)
+CMF 1.2 beta (2001/12/07)
New features
@@ -664,7 +839,7 @@
'unittest' module from Python 2.1 (it no longer has
'JUnitTestTextRunner' class).
-1.1 final (2001/06/20)
+CMF 1.1 final (2001/06/20)
New features
@@ -800,7 +975,7 @@
- Removed debugging / "paranoia" print statements (thanks to
Chris Withers for the patches).
-1.1 beta (2001/06/01)
+CMF 1.1 beta (2001/06/01)
New features
@@ -1026,7 +1201,7 @@
header is not needed when using the absolute URL of the
object, and causes certain browsers to misbehave.
-1.0 final (2001/03/29)
+CMF 1.0 final (2001/03/29)
- Removed embedded spaces in 'portal_status_message' strings
(thanks to Dieter Maurer for pointing this out)
@@ -1148,7 +1323,7 @@
in type info objects, to permit configuration of the content
types addable to a given folder type.
-0.10alpha (2001/02/02)
+CMF 0.10alpha (2001/02/02)
* Fixed breakage of "reply" feature introduced by new
constructor regime (PTK Tracker #159).
=== CMF/INSTALL.txt 1.13 => 1.13.10.1 ===
--- CMF/INSTALL.txt:1.13 Thu Mar 6 05:53:27 2003
+++ CMF/INSTALL.txt Sat Apr 26 15:13:36 2003
@@ -1,36 +1,26 @@
-Installing CMF 1.3-beta2
+Installing CMF 1.4beta1
Requirements
- - Zope v. 2.4.3 or later, v. 2.5 and later (*not* 2.4.2 or 2.4.1)
+ - Zope v. 2.5 and later
- o Note: For Zope 2.4.x, you will also need to install the most
- recent versions of the following packages:
-
- * PageTemplates product
-
- * TAL package
-
- * ZTUtils package
-
- These packages are available at:
-
- http://www.zope.org/Members/4am/ZPT/
+ o Note: Zope v. 2.4.3 *may* work, but is no longer a supported
+ version.
Assumptions
- New installation
- Zope configured using INSTANCE_HOME, /var/zope, and
- SOFTWARE_HOME, /usr/local/zope/Zope-2.5.1
+ SOFTWARE_HOME, /usr/local/zope/Zope-2.6.1
Procedure
- 1. Unpack the CMF-1.3-beta2.tar.gz tarball into a working
+ 1. Unpack the CMF-1.4beta1.tar.gz tarball into a working
directory. For instance::
$ cd /usr/local/zope
- $ tar xzf /tmp/CMF-1.3-beta2.tar.gz
+ $ tar xzf /tmp/CMF-1.4beta1.tar.gz
Note for Windows users: if you are using WinZip to unpack
the file, be *sure* to disable the "TAR file smart CR/LF
@@ -43,14 +33,16 @@
For instance::
$ cd /var/zope/Products # /var/zope is INSTANCE_HOME
- $ ln -s /usr/local/zope/CMF-1.3-beta2/CMFCore .
- $ ln -s /usr/local/zope/CMF-1.3-beta2/CMFDefault .
- $ ln -s /usr/local/zope/CMF-1.3-beta2/CMFTopic .
- $ ln -s /usr/local/zope/CMF-1.3-beta2/CMFCalendar .
+ $ ln -s /usr/local/zope/CMF-1.4beta1/CMFCore .
+ $ ln -s /usr/local/zope/CMF-1.4beta1/CMFDefault .
+ $ ln -s /usr/local/zope/CMF-1.4beta1/CMFTopic .
+ $ ln -s /usr/local/zope/CMF-1.4beta1/CMFCalendar .
+ $ ln -s /usr/local/zope/CMF-1.4beta1/DCWorkflow .
or, as a shortcut::
- $ ln -s /usr/local/zope/CMF-1.3beta2/CMF* .
+ $ ln -s /usr/local/zope/CMF-1.4beta1/CMF* .
+ $ ln -s /usr/local/zope/CMF-1.4beta1/DCWorkflow .
Since linking doesn't apply on Windows, you will need
to cut or copy the files from the place where you unpacked
@@ -105,7 +97,7 @@
Install the New Software.
- 0. "Download":CMF-1.3-beta2.tar.gz the tarball.
+ 0. "Download":CMF-14beta1.tar.gz the tarball.
1. Copy your "working" products off to one side (in case
you need / choose to revert).
@@ -118,7 +110,7 @@
Follow additionnal version-specific information below.
-Upgrading from versions earlier than CMF 1.3-beta2
+Upgrading from versions earlier than CMF 14beta1
Add New Metadata: "portal_type"
=== CMF/INSTALL_CVS.txt 1.4 => 1.4.10.1 ===
--- CMF/INSTALL_CVS.txt:1.4 Mon Feb 24 08:59:45 2003
+++ CMF/INSTALL_CVS.txt Sat Apr 26 15:13:36 2003
@@ -12,8 +12,8 @@
- See the note below [1] if you want to export or check out
the sources for a specific version from CVS.
- *Please note that current versions of the CMF (1.2 and later)
- require Zope 2.4.3 or later*
+ *Please note that current versions of the CMF (1.4 and later)
+ require Zope 2.5 or later*
* For help with CVS in general, see the "CVS Online Manual",
http://www.loria.fr/~molli/cvs-index.html
@@ -43,6 +43,8 @@
- CMFCalendar
+ - DCWorkflow
+
and several others.
2. Copy or link each of these subdirectories into the 'Products' directory of
@@ -52,6 +54,7 @@
$ ln -s /tmp/CMF-head/CMFCore .
$ ln -s /tmp/CMF-head/CMFDefault .
$ ln -s /tmp/CMF-head/CMFTopic .
+ $ ln -s /tmp/CMF-head/DCWorkflow .
3. Verify filesystem products:
=== Removed File CMF/TODO.txt ===