Products.cmfcore

Latest version: v3.5

Safety actively analyzes 634526 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 9

2.2.3

Not secure
------------------

- Make the error raised when trying to rename an instance of ImmutableId
indicate the id of the object.

- DateTime 2.12.5 does away with a special case representing
DateTime values for midnight (00:00:00) without their time and
time zone values. So DateTimes formerly rendered as
``2010/01/01`` in the UTC timezone now render as
``2010/01/01 00:00:00 UTC``. Several unit tests that relied on
the old-style representation had to be fixed.

- Get most tests working under Zope 2.13.0a2.

- Added dependency on the new ``Products.ZSQLMethods`` distribution and updated
Zope2 requirement accordingly.

2.2.2

Not secure
------------------

- Backport test setup fixes for Zope 2.13 compatibility.

- Use the standard libraries doctest module.

- Updated setDefaultRoles to use the addPermission API if available.

- Updated test to work with zope.contenttype >= 3.4.3.

2.2.1

Not secure
------------------

- Actions and TypeInformation: Clear the compiled NNN_expr_object
property when the NNN_expr property is cleared.

- Actions: Return None if 'link_target' is an empty string.
This helps to avoid invalid empty 'target' attributes in HTML output.

2.2.0

Not secure
------------------

- Changed GenericSetup import handlers to fail silently if they
are called in a context that does not contain the items they
import.

2.2.0beta

-----------------------

- TypesTool: Made it an ordered container.
This allows to control the order of the add actions.

- TypeInformation: Removed redundant 'content_icon' property.
For backwards compatibility old settings containing 'content_icon' instead
of 'icon_expr' are converted on import. CMFDefault provides the necessary
upgrade steps for migrating existing sites.

- DynamicType: Added 'getIconURL' method.
This replaces the now deprecated 'getIcon' method.

- TypeInformation: Added 'getIconExprObject' method.
This replaces the now deprecated 'getIcon' method.

2.2.0alpha

------------------------

- Got rid of redundant icon related type info properties.
(https://bugs.launchpad.net/zope-cmf/+bug/397795)

- PortalFolder: Ensure that pasting an object into a folder takes
workflow instance creation conditions into account.
(https://bugs.launchpad.net/zope-cmf/+bug/308947)

- Made calls to reindexObjectSecurity in the membership tool conditional
after the CMFCatalogAware refactoring.

- PortalFolder: Removed unused ICatalogAware and IWorkflowAware methods.

- CMFCatalogAware: Split up CMFCatalogAware mixin.
CatalogAware, WorkflowAware and OpaqueItemManager are now separate mixins.

- Changed testing.py to directly load zope.traversing's ZCML instead of going
via the Five traversing.zcml BBB shim.

- moved the Zope dependency to version 2.12.0b3dev

- PortalFolder: Modified allowedContentTypes method to check
isConstructionAllowed only for allowed types, not for all content types.

- Fixed typo in the acquisition wrapping of the found utility in
getToolByName.

- Actions: Add a link_target attribute to store a value for the
final rendered link tag's "target" attribute
(https://bugs.launchpad.net/zope-cmf/+bug/376951)

- MemberData tool: Make it easier to override the default
MemberData implementation by trying to look up a named
factory utility named "MemberData" before falling back on the
default MemberData class.
(https://bugs.launchpad.net/zope-cmf/+bug/377208)

- FSPageTemplate: Change the charset/encoding detection to consider
charset specifications in the content type, and replace the
hardcoded Latin-15 fallback with the mechanism used by the
Products.PageTemplate code, which can be influenced by setting
the environment variable "ZPT_PREFERRED_ENCODING"
(https://bugs.launchpad.net/zope-cmf/+bug/322263)

- Expose the ZMI manage view of the "_components" object manager as
a new "Components Folder" tab in the ZMI.

- ActionsTool: The "Action Providers" tab in the ZMI did not render
actions from the WorkflowTool correctly since those are not
'new-style' actions.
(https://bugs.launchpad.net/zope-cmf/+bug/322300)

- FSPageTemplate: Prevent reading the underlying file without doing
anything with the data in some cases.

- FSObject: Ensure that ZCache invalidations only happens if the
filesystem modification time differs from the internally stored
previous modification time.
(https://bugs.launchpad.net/zope-cmf/+bug/325246)

- TypeInformation: DCWorkflow instances define a method and a guard
for vetoing object creation, but it was never used. Now
TypeInformation objects will consult these guard conditions during
object creation.
(https://bugs.launchpad.net/zope-cmf/+bug/308947)

- PortalCatalog: Changed to use a multi-adaptor to allow a pluggable
IndexableObjectWrapper class. Objects that implement IIndexableObject
are not wrapped. The change will assist in integrating with
other indexing strategies from third-party packages.

- Events: Changed 'handleContentishEvent' behavior for IObjectCopiedEvent.
'WorkflowTool.notifyCreated' no longer resets the workflow state, so the
the event subscriber clears the workflow history instead.

- WorkflowTool: 'notifyCreated' no longer overrides assigned workflow states.

- No longer catch a `NotImplemented` string exception in the MembershipTool
in deleteMembers.

- Cleaned up / normalized imports:

o Don't import from Globals; instead, use real locations.

o Make other imports use the actual source module, rather than an
intermediate (e.g., prefer importing 'ClassSecurityInfo' from
'AccessControl.SecurityInfo' rather than from 'AccessControl').

o Avoid relative imports, which will break in later versions of Python.

- Added `icon_expr` as a new property to type information. This allows you
to specify the `content_icon` as an expression and store it. This avoids
creating the expression on the fly at rendering time.

- Removed superGetAttr fallback from SkinnableObjectManager. None of its base
classes have a `__getattr__` method anymore.

- PortalObject: Removed backwards compatibility code in getSiteManager.
Please use CMFDefault's upgrade steps for upgrading old CMF sites.

- Fixed compatibility with non-string exceptions on Zope trunk.

- Added remove support to GenericSetup types tool exportimport handler.

- FiveActionsTool: Removed the tool and all functionality for bridging
between Zope 3-style menu items and CMF actions. The CMF has been going
a different route for a long time and the code is unused and
unmaintained.

- Actions: Added deprecation warnings to the ZMI actions tab and
most listActions methods where old-style actions are found
asking developers to move to new-style actions instead. These
warnings allow us to remove old-style actions code by version 2.4.

- Discussion tool: Removed the listActions method that would return
a hardcoded Reply action. This action has been handled by the
Actions tool itself for a while now, and the Discussions tool was
not set as an action provider anymore.

- actions tool export/import: The actions tool export/import mechanism
is no longer attempting to handle actions stored on tools other than
itself. Other tools are themselves responsible for their actions.
The importer has been fixed to add all action providers to the actions
tool, not just a select list of providers we know about.
(https://bugs.launchpad.net/zope-cmf/+bug/177675)

- tool interfaces: Replace non-existing IMember interface with the
correct IMemberData.

- CatalogTool: If proxy roles are set on a script that uses the catalog
and those proxy roles have been unset using the ZMI, which results
in an empty tuple as proxy roles, then the catalog would not correctly
determine what the current user is allowed to see.
(https://bugs.launchpad.net/zope-cmf/+bug/161729)

- Properties export/import: Get the string encoding for property
imports from the import context and fall back to UTF-8, which
mirrors the behavior for exports. This fixes property export/import
round tripping.
(https://bugs.launchpad.net/zope-cmf/+bug/248853)

- traversal: Added ++add++ namespace for add views.

- Skinstool import: Fix imports that manipulate existing skins.
(https://bugs.launchpad.net/zope-cmf/+bug/161732)

- ActionInformation: extend the ActionInformation and ActionInfo classes
to support a icon URL just like the newer Action class already does

- WorkflowTool: Passing the "magic" chain name "(Default)" to the
setChainForPortalTypes method did not set the chain to the default
chain value as expected.
(https://bugs.launchpad.net/zope-cmf/+bug/161702)

- ZMI: Prevent users from creating content through the ZMI by hiding the
entry for "CMFCore Content".

- utils: Add a new optional argument to ContentInit that allows hiding
a content item's ZMI add list entry. The default is to leave the item
visible, which reflects the previous behavior.

- FSMetadata: Remove handling of .security and .properties metadata
files which was supposed to have been removed in CMF 2.0 already.

- SkinsTool: Added the ability to do a diff comparison between items
found using the portal_skins "Find" ZMI tab.
(https://bugs.launchpad.net/zope-cmf/+bug/238489)

- TypeInformation and TypesTool: Added support for add view actions.
Type infos now have a new 'add_view_expr' property and implement IAction.
'listActions' of the types tool includes type infos as 'add' actions.

- interfaces: Fixed some docstrings.
There is no IActionInformation. ActionInformation is an old action class
that implements IAction, non-persistent IActionInfo objects adapt action
objects to a given context.

- FSSTXMethod: Fixed Zope 2.12 compatibility.
zope.structuredtext is now used instead of StructuredText.

- removed the five.localsitemanager svn:external and its import hack
in favor of stating the dependency for separate installation in
DEPENDENCIES.txt and automatic installation in setup.py.

- TypesTool: Refactored content creation.
Moved addCreator call to IObjectCreatedEvent handler and moved
notifyWorkflowCreated and indexObject calls to IObjectAddedEvent handler.
Please make sure all oldstyle content factory methods use _setObject with
suppress_events=True. CMF factory methods don't finish object creation,
so they should not send the IObjectAddedEvent.

- interfaces: Added new interfaces for CMFCatalogAware methods.
In the long run ICatalogAware, IWorkflowAware and IOpaqueItemManager will
become deprecated. Don't expect that CMF content always implements them.

- setup handlers: All import and export steps are now registered globally.

- MembershipTool: Removed ancient LoginManager compatibility code and
deprecated the no longer needed __getPUS method.

- interfaces: Removed deprecated oldstyle interfaces.

Page 7 of 9

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.