[Zope3-checkins] SVN: Zope3/trunk/doc/CHANGES.txt Documented changes.

[Jim Fulton]

Log message for revision 26669:
  Documented changes.
  


Changed:
  U   Zope3/trunk/doc/CHANGES.txt


-=-
Modified: Zope3/trunk/doc/CHANGES.txt
===================================================================
--- Zope3/trunk/doc/CHANGES.txt	2004-07-21 22:52:23 UTC (rev 26668)
+++ Zope3/trunk/doc/CHANGES.txt	2004-07-21 22:56:27 UTC (rev 26669)
@@ -64,8 +64,44 @@
 
   Zope X3.0.0 Beta 2
 
+    New Features
+
+      - Improved using documentation files as tests. (Needed to test
+        new security policy):
+
+        Changed DocFileSuite:
+
+        o If a package is passed, it must be passed as a keyword argument.
+          (For now, a package can also be passed before passing any file
+          names, but this generates a deprecation warning.)
+
+        o File paths may contain '/'s as separators. These will be converted
+          to native file separators at run time.
+
+        o It is now possible to pass set-up and tear-down methods
+
+        o It is now possible to pass a dictionary of initial global variables.
+
+        o Error output is improved as is meta data used for verbose output.
+
     Bug fixes
 
+      - Changed the security policy:
+
+        o Fix a bug (actually a missfeature). It wasn't possible for
+          local settings to override global (zcml) settings.
+
+        o Changed the way role denies work.  A role deny simply
+          prevents a principal from having a role.  A principal may
+          still have access through other roles or through principal
+          grants.  Role grants or denies never override principal
+          grants or denies *even* if the role-based grants or denies
+          are more local.
+
+        o Implemented a caching scheme that provides huge performance
+          benefits when the authenticated principal is defined in a
+          local auth service, rather than a global one (zcml).
+
       - Fixed bug in TypeRegistry for
         zope.app.publisher.browser.globalbrowsermenuservice which allows
         passing classes instead of interfaces as well but has a missing import.