Products.cmfcore

Latest version: v3.6

Safety actively analyzes 701948 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 9

2.2.0alpha

------------------------

- Got rid of redundant icon related type info properties.
(https://bugs.launchpad.net/zope-cmf/+bug/397795)

- PortalFolder: Ensure that pasting an object into a folder takes
workflow instance creation conditions into account.
(https://bugs.launchpad.net/zope-cmf/+bug/308947)

- Made calls to reindexObjectSecurity in the membership tool conditional
after the CMFCatalogAware refactoring.

- PortalFolder: Removed unused ICatalogAware and IWorkflowAware methods.

- CMFCatalogAware: Split up CMFCatalogAware mixin.
CatalogAware, WorkflowAware and OpaqueItemManager are now separate mixins.

- Changed testing.py to directly load zope.traversing's ZCML instead of going
via the Five traversing.zcml BBB shim.

- moved the Zope dependency to version 2.12.0b3dev

- PortalFolder: Modified allowedContentTypes method to check
isConstructionAllowed only for allowed types, not for all content types.

- Fixed typo in the acquisition wrapping of the found utility in
getToolByName.

- Actions: Add a link_target attribute to store a value for the
final rendered link tag's "target" attribute
(https://bugs.launchpad.net/zope-cmf/+bug/376951)

- MemberData tool: Make it easier to override the default
MemberData implementation by trying to look up a named
factory utility named "MemberData" before falling back on the
default MemberData class.
(https://bugs.launchpad.net/zope-cmf/+bug/377208)

- FSPageTemplate: Change the charset/encoding detection to consider
charset specifications in the content type, and replace the
hardcoded Latin-15 fallback with the mechanism used by the
Products.PageTemplate code, which can be influenced by setting
the environment variable "ZPT_PREFERRED_ENCODING"
(https://bugs.launchpad.net/zope-cmf/+bug/322263)

- Expose the ZMI manage view of the "_components" object manager as
a new "Components Folder" tab in the ZMI.

- ActionsTool: The "Action Providers" tab in the ZMI did not render
actions from the WorkflowTool correctly since those are not
'new-style' actions.
(https://bugs.launchpad.net/zope-cmf/+bug/322300)

- FSPageTemplate: Prevent reading the underlying file without doing
anything with the data in some cases.

- FSObject: Ensure that ZCache invalidations only happens if the
filesystem modification time differs from the internally stored
previous modification time.
(https://bugs.launchpad.net/zope-cmf/+bug/325246)

- TypeInformation: DCWorkflow instances define a method and a guard
for vetoing object creation, but it was never used. Now
TypeInformation objects will consult these guard conditions during
object creation.
(https://bugs.launchpad.net/zope-cmf/+bug/308947)

- PortalCatalog: Changed to use a multi-adaptor to allow a pluggable
IndexableObjectWrapper class. Objects that implement IIndexableObject
are not wrapped. The change will assist in integrating with
other indexing strategies from third-party packages.

- Events: Changed 'handleContentishEvent' behavior for IObjectCopiedEvent.
'WorkflowTool.notifyCreated' no longer resets the workflow state, so the
the event subscriber clears the workflow history instead.

- WorkflowTool: 'notifyCreated' no longer overrides assigned workflow states.

- No longer catch a `NotImplemented` string exception in the MembershipTool
in deleteMembers.

- Cleaned up / normalized imports:

o Don't import from Globals; instead, use real locations.

o Make other imports use the actual source module, rather than an
intermediate (e.g., prefer importing 'ClassSecurityInfo' from
'AccessControl.SecurityInfo' rather than from 'AccessControl').

o Avoid relative imports, which will break in later versions of Python.

- Added `icon_expr` as a new property to type information. This allows you
to specify the `content_icon` as an expression and store it. This avoids
creating the expression on the fly at rendering time.

- Removed superGetAttr fallback from SkinnableObjectManager. None of its base
classes have a `__getattr__` method anymore.

- PortalObject: Removed backwards compatibility code in getSiteManager.
Please use CMFDefault's upgrade steps for upgrading old CMF sites.

- Fixed compatibility with non-string exceptions on Zope trunk.

- Added remove support to GenericSetup types tool exportimport handler.

- FiveActionsTool: Removed the tool and all functionality for bridging
between Zope 3-style menu items and CMF actions. The CMF has been going
a different route for a long time and the code is unused and
unmaintained.

- Actions: Added deprecation warnings to the ZMI actions tab and
most listActions methods where old-style actions are found
asking developers to move to new-style actions instead. These
warnings allow us to remove old-style actions code by version 2.4.

- Discussion tool: Removed the listActions method that would return
a hardcoded Reply action. This action has been handled by the
Actions tool itself for a while now, and the Discussions tool was
not set as an action provider anymore.

- actions tool export/import: The actions tool export/import mechanism
is no longer attempting to handle actions stored on tools other than
itself. Other tools are themselves responsible for their actions.
The importer has been fixed to add all action providers to the actions
tool, not just a select list of providers we know about.
(https://bugs.launchpad.net/zope-cmf/+bug/177675)

- tool interfaces: Replace non-existing IMember interface with the
correct IMemberData.

- CatalogTool: If proxy roles are set on a script that uses the catalog
and those proxy roles have been unset using the ZMI, which results
in an empty tuple as proxy roles, then the catalog would not correctly
determine what the current user is allowed to see.
(https://bugs.launchpad.net/zope-cmf/+bug/161729)

- Properties export/import: Get the string encoding for property
imports from the import context and fall back to UTF-8, which
mirrors the behavior for exports. This fixes property export/import
round tripping.
(https://bugs.launchpad.net/zope-cmf/+bug/248853)

- traversal: Added ++add++ namespace for add views.

- Skinstool import: Fix imports that manipulate existing skins.
(https://bugs.launchpad.net/zope-cmf/+bug/161732)

- ActionInformation: extend the ActionInformation and ActionInfo classes
to support a icon URL just like the newer Action class already does

- WorkflowTool: Passing the "magic" chain name "(Default)" to the
setChainForPortalTypes method did not set the chain to the default
chain value as expected.
(https://bugs.launchpad.net/zope-cmf/+bug/161702)

- ZMI: Prevent users from creating content through the ZMI by hiding the
entry for "CMFCore Content".

- utils: Add a new optional argument to ContentInit that allows hiding
a content item's ZMI add list entry. The default is to leave the item
visible, which reflects the previous behavior.

- FSMetadata: Remove handling of .security and .properties metadata
files which was supposed to have been removed in CMF 2.0 already.

- SkinsTool: Added the ability to do a diff comparison between items
found using the portal_skins "Find" ZMI tab.
(https://bugs.launchpad.net/zope-cmf/+bug/238489)

- TypeInformation and TypesTool: Added support for add view actions.
Type infos now have a new 'add_view_expr' property and implement IAction.
'listActions' of the types tool includes type infos as 'add' actions.

- interfaces: Fixed some docstrings.
There is no IActionInformation. ActionInformation is an old action class
that implements IAction, non-persistent IActionInfo objects adapt action
objects to a given context.

- FSSTXMethod: Fixed Zope 2.12 compatibility.
zope.structuredtext is now used instead of StructuredText.

- removed the five.localsitemanager svn:external and its import hack
in favor of stating the dependency for separate installation in
DEPENDENCIES.txt and automatic installation in setup.py.

- TypesTool: Refactored content creation.
Moved addCreator call to IObjectCreatedEvent handler and moved
notifyWorkflowCreated and indexObject calls to IObjectAddedEvent handler.
Please make sure all oldstyle content factory methods use _setObject with
suppress_events=True. CMF factory methods don't finish object creation,
so they should not send the IObjectAddedEvent.

- interfaces: Added new interfaces for CMFCatalogAware methods.
In the long run ICatalogAware, IWorkflowAware and IOpaqueItemManager will
become deprecated. Don't expect that CMF content always implements them.

- setup handlers: All import and export steps are now registered globally.

- MembershipTool: Removed ancient LoginManager compatibility code and
deprecated the no longer needed __getPUS method.

- interfaces: Removed deprecated oldstyle interfaces.

2.1.2

Not secure
------------------

- fiveactionstool: fix typo in a method name that isn't even used in the CMF
or Plone.
(https://bugs.launchpad.net/zope-cmf/+bug/257259)

2.1.2beta

-----------------------

- completed devolution from monolithic CMF package into its component
products that are distributed as eggs from PyPI.

2.1.1

Not secure
------------------

- exportimport.content: Add simple guard against import failures when
the ".objects" file contains empty lines.
(https://bugs.launchpad.net/zope-cmf/+bug/176328)

2.1.1beta

-----------------------

- Testing: Derive test layers from ZopeLite layer if available.

- Updated to the 0.3 release of five.localsitemanager.

- Events: Fixed some handleContentishEvent issues.
Moved _clearLocalRolesAfterClone code to separate handler that is
triggered before indexing and also for folders. Made sure notifyModified
is not called if objects are just moved.

- PortalObject: Added setSite to getSiteManager for old instances. This
fixes migrations from Plone 2.1 to 3.0.

- FSImage: Supply class-level defaults for 'alt', 'height', and 'width',
to avoid acquiring objects with the same names.
(http://www.zope.org/Collectors/CMF/507)

- Testing: Derive test layers from ZopeLite layer if available.

- PortalObject: Fixed a bug in the site manager creation code, which would
assign the __parent__ pointer to the Aq-wrapper and not the actual
object.

2.1.0

------------------

- Fixed all componentregistry.xml files to use plain object paths and strip
and slashes. GenericSetup does only support registering objects which are
in the site root.

- PortalFolder: Enabled 'Components' ZMI tab.
This GenericSetup tab allows to inspect and edit component registrations.

- First egg release. For changes up through this release, please see
the overall "CMF changelog",
http://svn.zope.org/CMF/tags/2.1.0/CHANGES.txt?rev=78713&view=markup

Page 8 of 9

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.