Products.plonepas

Latest version: v8.0.5

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 9 of 15

4.0.6

------------------

- Fix missing and broken security declarations.
[davisagli]

4.0.5

------------------

- Avoid breaking on startup if PIL isn't present.
[davisagli]

- Use 'defaultUser.png' as the default user portrait, since the .gif version
has been deprecated for a long time now. See
http://dev.plone.org/plone/changeset/36350
[mj]

4.0.4

------------------

- Remove plone.openid dependency in setup.py, import errors are already caught
in PASInfoView.
[elro]

- The code to search by id in mutable_properties.enumerateUsers didn't work at
all, an exception was always raised and it was actually a good thing.
We tried to implement it in 3.10 and we had strange listing in Plone UI. Then
we reverted it in the next version so the behavior was backward compatible
with previous versions.
If we allow search by id, we can potentially break other part of the code. For
example acl_users/portal_role_manager/manage_roles will break because
Products.PluggableAuthService.plugins.ZODBRoleManager.listAssignedPrincipals
raises MultiplePrincipalError, and maybe it will break somewhere else.
Versions 4.0.4 and 3.13 use now the same algorithm.
References http://dev.plone.org/plone/ticket/9361
[vincenfretin]

- When calling editGroup method, avoid error
while trying to remove dynamic 'AuthenticatedUsers' group.
[thomasdesvenain]

- In Plone 4.1+, create a Site Administrators group with the new Site
Administrator role.
[davisagli]

- Fix critical error on groupprefs page
when some groups have a non-ascii character in their title.
Sort groups on their title normalized.
This fixes http://dev.plone.org/plone/ticket/11301
[thomasdesvenain]

- Fix interface error: doChangeUser takes a user id as parameter,
not a login name.
[wichert]

4.0.3

------------------

- Check we have a REQUEST attribute before accessing it in
getRolesForPrincipal.
[vincentfretin]

- Use safe_unicode to correctly find users with
non-ascii properties, regardless of the sys.defaultencoding.
This fixes http://dev.plone.org/plone/ticket/10898
[mr_savage]

4.0.2

------------------

- Made last_login_time logic compatible with DateTime 2.12.5.
[hannosch]

4.0.1

------------------

- Clean up some unused imports and variable assignments.
[esteele]

- Stop looking to GRUF to check if group properties can be edited.
[esteele]

Page 9 of 15

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.