[CMF-checkins] CVS: CMF - CHANGES.txt:1.146.4.1 HISTORY.txt:1.36.18.1 INSTALL.txt:1.13.10.1 INSTALL_CVS.txt:1.4.10.1 TODO.txt:NONE

Tres Seaver tseaver@zope.com
Sat, 26 Apr 2003 15:14:08 -0400


Update of /cvs-repository/CMF
In directory cvs.zope.org:/tmp/cvs-serv3794

Modified Files:
      Tag: CMF-1_4-branch
	CHANGES.txt HISTORY.txt INSTALL.txt INSTALL_CVS.txt 
Removed Files:
      Tag: CMF-1_4-branch
	TODO.txt 
Log Message:


  - Package for a 1.4beta1 release on Monday:

    o Synchronize "old" 'CHANGES.txt' (from the 1.3 branch) into
      'HISTORY.txt'.

    o Reworked references to older versions.

    o Removed explicit support for Zope 2.4.3 (nobody is testing it
      there any more).

    o Included DCWorkflow in the release.

    o updated 'version.txt' files.


=== CMF/CHANGES.txt 1.146 => 1.146.4.1 ===
--- CMF/CHANGES.txt:1.146	Tue Apr 15 12:07:59 2003
+++ CMF/CHANGES.txt	Sat Apr 26 15:13:36 2003
@@ -1,27 +1,4 @@
-Future
-
-  New Features
-
-    - (__future__) Exposed role management for manager users on the
-      default roster:  managers can now "promote" members without going
-      to the ZMI.
-
-    - (__future__) Added "custom schema" mechanism for content objects:
-      site managers can now define additional propertysheets for a
-      content type, which will then be reflected in instances created
-      from the type.
-
-    - (__future__) Added simple link extraction / checking for textual
-      content.  Link checking also works for Link objects.
-
-    - (__future__) Added "composite content" types (see the "dogbowl
-      proposal",
-      (http://cmf.zope.org/rqmts/proposals/compounds/compoundproposal.txt).
-
-    - (__future__) Added DCWorkflow (through-the-web configurable
-      workflows) to the core set of CMF products.
-
-CMF 1.4 alpha
+CMF 1.4beta1 (2003/04/28)
 
   New Features
 
@@ -38,10 +15,6 @@
 
     - skins (CMFDefault): Made scripts independent of submit button 'values'.
 
-    - utils: Changed behavior of 'StrippingParser' and 'scrubHTML'.
-      They now close empty tags.
-      (Collector #108, thanks to 'tanghus' for the patch)
-
     - Added .css to the extensions that create FSFile objects in
       DirectoryViews (see CMFCore/FSFile.py)
       All sites upgrading which expected css extension to be dropped and to
@@ -63,22 +36,23 @@
       The head check in bodyfinder is removed. In most cases you want to call
       bodyfinder only if html_headcheck is true.
 
-    - Cleaned up Interfaces and API Help (Collector #96):
-
-      o  Removed redundant 'Syndicatable' and 'IndexableContent' interfaces.
-
-      o  Removed unfixable 'Membership' and 'ReviewableContent' interfaces.
+    - Added FSFile skin object, in order to allow .swf files (et al.) in 
+      skins
 
-      o  Removed listActions() from 'Contentish' and 'portal_workflow'
-         interface.
+    - Added 'listMetaTags' skin method, which filters the DublinCore
+      metadata into a form suitable for inclusion as <meta> tags.
 
-      o  Removed redundant or 'None' overriding of listActions().
+    - Added .metadata file for FSObjects, which allows the easy addition of 
+      more features without adding lots and lots of files. ConfigParser format.
 
-      o  Updated all interfaces to work with new Zope 2.6 Interface API.
+    - Added proxy roles to FS Python Scripts and FS DTML Methods via the proxy
+      property in .metadata files.
 
-      o  Added 'portal_properties' and 'Dynamic' interfaces.
+  Bug Fixes
 
-      o  Added many interface implementation tests and made them pass.
+    - utils: Changed behavior of 'StrippingParser' and 'scrubHTML'.
+      They now close empty tags.
+      (Collector #108, thanks to 'tanghus' for the patch)
 
     - Removed deprecated 'register' module and 'PortalContentRegistration'
       interface.
@@ -86,25 +60,28 @@
     - Moved URLTool to CMFCore. Added interface and basic tests.
       (Collector #67)
 
-    - Added FSFile skin object, in order to allow .swf files (et al.) in 
-      skins
-
-    - Added 'listMetaTags' skin method, which filters the DublinCore
-      metadata into a form suitable for inclusion as <meta> tags.
-
     - Protected the Pending review action in DefaultWorkflow by
       ReviewPortalContent (Collector #52).
 
     - Raise ValueError instead of TypeError in TypesTool.getActionById
       if the action is not found (Collector #56).
 
-    - Added .metadata file for FSObjects, which allows the easy addition of 
-      more features without adding lots and lots of files. ConfigParser format.
+    - Cleaned up Interfaces and API Help (Collector #96):
 
-    - Added proxy roles to FS Python Scripts and FS DTML Methods via the proxy
-      property in .metadata files.
+      o Removed redundant 'Syndicatable' and 'IndexableContent' interfaces.
 
-  Bug Fixes
+      o Removed unfixable 'Membership' and 'ReviewableContent' interfaces.
+
+      o Removed listActions() from 'Contentish' and 'portal_workflow'
+        interface.
+
+      o Removed redundant or 'None' overriding of listActions().
+
+      o Updated all interfaces to work with new Zope 2.6 Interface API.
+
+      o Added 'portal_properties' and 'Dynamic' interfaces.
+
+      o Added many interface implementation tests and made them pass.
 
     - MembershipTool (CMFDefault): Fixed acquisition bug. (Collector #102)
 
@@ -141,3 +118,19 @@
 
     - Remove redundant VERSION.txt files;  the canonical spelling is
       'version.txt' (Collector #13).
+
+    - Correct security assertion on CMFDefault.Image's manage_afterAdd
+      (Collector #141).
+
+    - Ensure that the security attributes are reindexed on all
+      subobjects too when a folderish object changes state in the
+      workflow (Collector #115).
+
+    - Backport fix of CMFCore/tests/test_FSImage.py to work with
+      recent Zopes (> 2.6), which force HTTP headers to be strings.
+
+    - Use return instead of raise in RegistrationTool.testPropertiesValidity
+      if id is incorrect (Collector #48).
+
+    - Correctly cleanup temporaries in CMFCore.MemberDataTool when
+      wrapping a user object (Collector #136).


=== CMF/HISTORY.txt 1.36 => 1.36.18.1 ===
--- CMF/HISTORY.txt:1.36	Wed Jul 31 17:58:31 2002
+++ CMF/HISTORY.txt	Sat Apr 26 15:13:36 2003
@@ -1,10 +1,185 @@
-Post 1.3 beta2
+CMF 1.3.1 (2003/03/06)
+
+  Bug Fixes
+
+    - Fixed editSyInformationProperties in SyndicationTool to ensure  
+      that updateBase is saved as a DateTime instance.
+
+CMF 1.3.1beta1 (2003/02/26)
+
+  New Features
+
+    - Implemented PUT and GET support to CMFCalendar.Event for
+      editing via FTP/WebDAV (thanks to Sidnei da Silva).
+
+  Bug Fixes
+
+    - Fixed incorrect security declaration in File.py (Collector #91).
+
+    - Remove over-helpful default argument values in
+      'CMFDefault.DefaultDublinCoreImpl._editMetadata'.  Now, if
+      called without a value for an argument, the method will not
+      change that value.  Collector #10.
+
+    - Remove workaround in CMFCore.utils for recognizing links in
+      StructuredText:  STX in CMF content should now recognize exactly
+      the same links as the underlying Zope.  Note that we *do* still
+      provide a customized HTML class, to permit embedding images without
+      generating the "whole" page.  Collector #6.
+
+    - Remove bizarre, shadowing import of CMFCore.utils as 'utils'
+      into package namespace of CMFDefault;  instead, import specific
+      names from that package directly (thanks to Paul Winkler for
+      pointing out the incongruity).
+
+    - Fix (theoretical) bug in CMFCore.DirectoryView which allowed
+      non-registered directories to slip through (UI didn't exercise it).
+
+    - Merge Christian Theune's fix for funky default argument values on
+      CMFCalendar.Event's constructor and edit methods (collector #76).
+
+    - FSPageTemplates overwrote a user-generated 'Content-Type' header.
+      We now check to make sure a Content-Type header is not already set
+      before allowing a page template to set its own.
+
+    - Fixed bugs around 'addActionProvider' in ActionsTool (Collector #42).
+
+    - Fixed race condition in lazy initialization of filesystem-based skin
+      methods;  the bug led to odd name errors on 'context' for
+      FSPythonScripts (Collector #37).
+
+    - Removed crufty 'isDesktop' stuff from 'folder_factories' and
+      'folder_contents' methods.
+
+    - Fixed HTML-invalidating call to 'filterCookie' in 'folder_contents'.
+    
+    - Fixed unclosed 'tr' element  in ZPT version of 'folder_edit_form'
+      (Collector #57).
+
+    - Fixed CalendarTool to use portal_type and not Type to search for
+      events in the catalog (Collector #28, thanks to Heimo Laukkanen
+      for the report).
+
+    - Fixed a bug in CalendarTool where events were not showing on the
+      last day of the month.
+
+CMF 1.3 (2002/08/06)
 
   New Features
   
-    - FSPageTemplates now autodetect XML if a document has the standard 
-      <?xml version="xx"?> at the top, setting the content_type to "text/xml"
-      so that it is parsed and served as XML.
+    - FSPageTemplates now autodetect XML if a document has the standard
+      '&lt;?xml version="xx"?&gt;' at the top, setting the content_type to
+      "text/xml" so that it is parsed and served as XML.
+
+    - Added a 'Workflows' tab in the ZMI that displays the workflow
+      state of the object.
+
+    - Wired 'scrubHTML' check into default versions of 'document_edit'
+      and 'newsitem_edit' skins (site managers who prefer to allow
+      JavaScript in content can customize to remove the check).
+
+    - Added utility methods for checking / scrubbing HTML content of
+      unwanted tags:  
+
+      CMFDefault.utils:  scrubHTML, isHTMLSafe
+
+      Known bad tags ('script', 'applet', 'embed', 'object'),
+      attributes (starting with 'on'), and values (starting with
+      'javascript:') cause 'scrubHTML' to raise an exception;  unknown
+      tags are silently dropped.  'isHTMLSafe' returns true if
+      'scrubHTML' would not raise an exception on the same text.
+
+    - Exposed useful utility methods to scripting / skinning.
+
+      CMFCore.utils:  getToolByName, cookString, tuplize, format_stx,
+        keywordsplitter, normalize, expandpath, minimalpath
+
+      CMFDefault.utils:  formatRFC822Headers, parseHeadersBody,
+        semi_split, comma_split, seq_strip, tuplize, bodyfinder,
+        html_headcheck.
+
+    - Added two utility functions, 'isHTMLSafe' and 'scrubHTML', to
+      CMFDefault utils;  these modules check for / remove undesirable
+      tags from textual content.
+
+    - Made public functions of 'CMFCore.utils' and 'CMFDefault.utils'
+      available for scripting.
+
+    - Allowed Portal Folders to be discussable.
+
+    - Improved the ActionsTool so that permission checking for actions
+      is done in the context of the object for all categories that start
+      with 'object' or 'workflow', in the context of the folder for
+      those that start with 'folder', and in the context of the portal
+      otherwise. This is useful for admin-defined additional categories.
+
+  Bug Fixes
+
+    - Fixed Image and File so that they reindex on PUT.
+
+    - Fixed WorkflowTool so that it doesn't pretend to workflow non-CMF
+      objects (Collector #19).
+
+    - Removed redundant block of code from CMFDefault/Link.py (Collector
+      #18).
+
+    - Fixed discussion tree display not to embed entire HTML document
+      (Collector #17, thanks to Jeffrey Shell for the inspiration).
+
+    - Fixed CookieCrumbler to emit "Basic" and not "basic" auth as per
+      HTTP spec (Collector #14, thanks to Simon Eisenmann for the
+      report). This fixes some WebDAV locking problems with (rightfully)
+      picky clients, like ExternalEditor.
+
+    - Made old ListCriterion instances forward-compatible across earlier
+      addition of 'operator' field.
+
+    - Defaulted CMFCore.MembershipTool's createMemberArea flag to true,
+      to preserve existing behavior:  member area should be created by
+      default on first login (Collector #5).
+
+    - Hardened DefaultDublinCoreImpl's EffectiveDate() and
+      ExpirationDate() methods to deal better with older / uninitialzed
+      content.
+
+    - Refactored content construction in the Types tool to make
+      cataloguing and workflow notification more uniform.
+
+    - Made Undo work again by removing any LF in transaction ids.
+
+    - Made WorkflowTool.updateRoleMappings update security-related
+      indexes.
+
+    - Append '/' to links in skin templates to the root of the site, to
+      pacify clients which won't send Basic Auth tokens because the path
+      doesn't match.
+
+    - Removed the binding of Folder and Topic types to the default
+      workflow for newly-created CMFSites (Collector #4).  Note that
+      existing sites will still need to remove these bindings manually,
+      as indicated in the "Upgrading" section of INSTALL.txt.
+
+    - Updated initial action reported by CMFDefault's DefaultWorkflow:
+      was "joined", now "created".
+
+    - Fix 'index_html' template to filter using 'View' permission
+      (folders which were not viewable were triggering authentication,
+      instead of being skipped).
+
+    - Repair free-form subject entry on 'full_metadata_edit_form' (was
+      merging all keywords onto the same line, plus soft-wrapping!).
+      Likewise the "Contributors" textarea.
+
+    - Ensured that Link, File, and Image content objects reindex
+      themselves after edit (wrapping 'edit' as a WorkflowMethod no
+      longer guarantees that).
+
+    - Fixed CMFCalendar's "day view" to accomodate the removal of
+      'title' metadata from catalog in favor of 'Title' (thanks to
+      Dieter Maurer for pointing this out).
+
+    - Corrected a skins performance optimization (the version as
+      released in the beta did not take effect).
 
 CMF 1.3 beta2 (2002/07/07)
 
@@ -186,7 +361,7 @@
     - Updated caching policy manager tool to use correct date format
       (RFC 1123 instead of RFC 822).
 
-1.3 beta 1 (2001/04/03)
+CMF 1.3 beta 1 (2001/04/03)
 
  New Features
 
@@ -373,7 +548,7 @@
    - Made 'CMFCore/interfaces/__init__.py' non-empty, to remove suspicion
      that the file was corrupted in the download (Tracker #426).
 
-1.2 beta (2001/12/07)
+CMF 1.2 beta (2001/12/07)
 
  New features
 
@@ -664,7 +839,7 @@
       'unittest' module from Python 2.1 (it no longer has
       'JUnitTestTextRunner' class).
 
-1.1 final (2001/06/20)
+CMF 1.1 final (2001/06/20)
 
  New features
 
@@ -800,7 +975,7 @@
   - Removed debugging / "paranoia" print statements (thanks to
     Chris Withers for the patches).
 
-1.1 beta (2001/06/01)
+CMF 1.1 beta (2001/06/01)
 
  New features
 
@@ -1026,7 +1201,7 @@
     header is not needed when using the absolute URL of the
     object, and causes certain browsers to misbehave.
 
-1.0 final (2001/03/29)
+CMF 1.0 final (2001/03/29)
 
  - Removed embedded spaces in 'portal_status_message' strings
    (thanks to Dieter Maurer for pointing this out)
@@ -1148,7 +1323,7 @@
    in type info objects, to permit configuration of the content
    types addable to a given folder type.
 
-0.10alpha (2001/02/02)
+CMF 0.10alpha (2001/02/02)
 
  * Fixed breakage of "reply" feature introduced by new
    constructor regime (PTK Tracker #159).


=== CMF/INSTALL.txt 1.13 => 1.13.10.1 ===
--- CMF/INSTALL.txt:1.13	Thu Mar  6 05:53:27 2003
+++ CMF/INSTALL.txt	Sat Apr 26 15:13:36 2003
@@ -1,36 +1,26 @@
-Installing CMF 1.3-beta2
+Installing CMF 1.4beta1
 
   Requirements
 
-    - Zope v. 2.4.3 or later, v. 2.5 and later (*not* 2.4.2 or 2.4.1)
+    - Zope v. 2.5 and later
       
-      o Note:  For Zope 2.4.x, you will also need to install the most
-        recent versions of the following packages:
-        
-        * PageTemplates product
-
-        * TAL package
-
-        * ZTUtils package
-
-        These packages are available at:
-
-          http://www.zope.org/Members/4am/ZPT/
+      o Note:  Zope v. 2.4.3 *may* work, but is no longer a supported
+        version.
 
   Assumptions
 
     - New installation
 
     - Zope configured using INSTANCE_HOME, /var/zope, and
-      SOFTWARE_HOME, /usr/local/zope/Zope-2.5.1
+      SOFTWARE_HOME, /usr/local/zope/Zope-2.6.1
 
   Procedure
 
-    1. Unpack the CMF-1.3-beta2.tar.gz tarball into a working
+    1. Unpack the CMF-1.4beta1.tar.gz tarball into a working
        directory. For instance::
 
         $ cd /usr/local/zope
-        $ tar xzf /tmp/CMF-1.3-beta2.tar.gz
+        $ tar xzf /tmp/CMF-1.4beta1.tar.gz
 
        Note for Windows users:  if you are using WinZip to unpack
           the file, be *sure* to disable the "TAR file smart CR/LF
@@ -43,14 +33,16 @@
        For instance::
 
         $ cd /var/zope/Products  # /var/zope is INSTANCE_HOME
-        $ ln -s /usr/local/zope/CMF-1.3-beta2/CMFCore .
-        $ ln -s /usr/local/zope/CMF-1.3-beta2/CMFDefault .
-        $ ln -s /usr/local/zope/CMF-1.3-beta2/CMFTopic .
-        $ ln -s /usr/local/zope/CMF-1.3-beta2/CMFCalendar .
+        $ ln -s /usr/local/zope/CMF-1.4beta1/CMFCore .
+        $ ln -s /usr/local/zope/CMF-1.4beta1/CMFDefault .
+        $ ln -s /usr/local/zope/CMF-1.4beta1/CMFTopic .
+        $ ln -s /usr/local/zope/CMF-1.4beta1/CMFCalendar .
+        $ ln -s /usr/local/zope/CMF-1.4beta1/DCWorkflow .
         
        or, as a shortcut::
 
-        $ ln -s /usr/local/zope/CMF-1.3beta2/CMF* .
+        $ ln -s /usr/local/zope/CMF-1.4beta1/CMF* .
+        $ ln -s /usr/local/zope/CMF-1.4beta1/DCWorkflow .
 
        Since linking doesn't apply on Windows, you will need
        to cut or copy the files from the place where you unpacked
@@ -105,7 +97,7 @@
 
   Install the New Software.
 
-    0. "Download":CMF-1.3-beta2.tar.gz the tarball.
+    0. "Download":CMF-14beta1.tar.gz the tarball.
 
     1. Copy your "working" products off to one side (in case
        you need / choose to revert).
@@ -118,7 +110,7 @@
 
   Follow additionnal version-specific information below.
 
-Upgrading from versions earlier than CMF 1.3-beta2
+Upgrading from versions earlier than CMF 14beta1
 
   Add New Metadata: "portal_type"
 


=== CMF/INSTALL_CVS.txt 1.4 => 1.4.10.1 ===
--- CMF/INSTALL_CVS.txt:1.4	Mon Feb 24 08:59:45 2003
+++ CMF/INSTALL_CVS.txt	Sat Apr 26 15:13:36 2003
@@ -12,8 +12,8 @@
     - See the note below [1] if you want to export or check out
       the sources for a specific version from CVS.
 
- *Please note that current versions of the CMF (1.2 and later)
-  require Zope 2.4.3 or later*
+ *Please note that current versions of the CMF (1.4 and later)
+  require Zope 2.5 or later*
 
   * For help with CVS in general, see the "CVS Online Manual",
     http://www.loria.fr/~molli/cvs-index.html
@@ -43,6 +43,8 @@
 
       - CMFCalendar
 
+      - DCWorkflow
+
      and several others.
 
   2. Copy or link each of these subdirectories into the 'Products' directory of
@@ -52,6 +54,7 @@
       $ ln -s /tmp/CMF-head/CMFCore .
       $ ln -s /tmp/CMF-head/CMFDefault .
       $ ln -s /tmp/CMF-head/CMFTopic .
+      $ ln -s /tmp/CMF-head/DCWorkflow .
 
   3. Verify filesystem products:
 

=== Removed File CMF/TODO.txt ===