[Zope] zope backward compatibility policy?

gabor gabor at nekomancer.net
Mon Jun 13 04:58:25 EDT 2005


Andreas Jung wrote:
> 
> 
> --On 13. Juni 2005 09:47:33 +0200 gabor <gabor at nekomancer.net> wrote:
> 
>> hi,
>>
>> what's the backward compatibility policy of zope?
>>
>> i'm asking because while upgrading from 2.6.4 to 2.7.2 we had some
>> problems. simple ones (like the 'lines' property type seems to have
>> changed from list to tuple), but still problems.
> 
> 
> 
>> From the cvs log of PropertyManager.py
> 
> So this change was driven by security issues. And btw. it *is* 
> documented in the release notes:
> 
> """
> - Some property types were stored in a mutable data type (list) which
>       could potentially allow untrusted code to effect changes on those
>       properties without going through appropriate security checks in
>       particular scenarios.
> 
> """


i see..
thanks a lot...

it's just that this is documented in the 'bugfix' part.

i didn't expect bugfixes to change the api....

hmm.. it seems that i will have to read the whole changelog (what 
happened between 2.6.4 and 2.7.2 ;))


gabor


More information about the Zope mailing list