[Zope-PAS] Checkins coming

[Zachery Bir]

[Zac's Note: I wrote this last Sunday, while waiting in the airport 
with no connection. Some of this may be obviated by checkins already 
done - I see there are several mail messages for me.]

Hey, all.

I'm checking in some changes to the head of PAS with tests. I'm going 
to leave the changes on the head for a week while I'm on vacation, and 
will cut a release when I get back, if no one has any objections.

Also included is an External Method that can replace the root acl_users 
with a PluggableAuthService instance, provided the root acl_users is a 
stock AccessControl.User.UserFolder, and not something special (but it 
should provide enough of an idea if you need to convert a 3rd-party 
User Folder replacement). Caveat Emptor, &c.

CHANGES.txt:

PluggableAuthService:

         - arrows images finally work in the ZMI
         - searchPrincipals will work for exact matches when a plugin
           supports both enumerateUsers and enumerateGroups
         - 'Authenticated' Role is added dynamically by the
           PluggableAuthService, not by any role manager


plugins/ZODBGroupManager.py:

         - if a previously assigned principal goes away, the
           ZODBGroupManager won't freak out.

plugins/ZODBRoleManager.py:

         - ZODBRoleManager will only claim authority for the
           __ac_roles__ of its grandparent that aren't 'Authenticated'
           or 'Anonymous'

         - if a previously assigned principal goes away, the
           ZODBRoleManager won't freak out.

plugins/ZODBUserManager.py:

         - ZODBUserManager now uses AuthEncoding for its password
           encryption so that we can more easily support migrating
           existing UserFolders. Since PAS has been out for a while,
           though, we still will authenticate against old credentials