This repository was archived by the owner on Mar 27, 2025. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathCHANGES.txt
211 lines (134 loc) · 6.16 KB
/
CHANGES.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
=======
CHANGES
=======
2.1 (unreleased)
----------------
- Add support for Python 3.12, 3.13.
- Drop support for Python 3.7, 3.8.
2.0 (2023-02-09)
----------------
- Drop support for Python 2.6, 2.7, 3.4, 3.5, 3.6.
- Add Python 3.7, 3.8, 3.9, 3.10, 3.11 support.
- Remove unused imports.
1.0.1 (2018-05-16)
------------------
- bugfix: remove None from queryNextUtiliy because getNextUtility signature got
changed and None was used as name argument.
- cleanup, removed unused imports
- Get rid of deprecation warning. Switch hooks import from zope.site to
zope.component
- skip test_exception_in_subscriber_leaves_item_in_place for IAuthenticator
container. This zope.container test method left over an event subscriber with
zope.container version 4.2.1 which raises an error in other methods. Needs
review and probably a tear down in zope.container test method.
1.0.0 (2017-04-17)
------------------
- Ping Python support to 2.7, 3.5, 3.6 and PyPy.
1.0.0a5 (2013-03-31)
--------------------
- More Py3 compatibility bugs in untested code.
1.0.0a4 (2013-02-28)
--------------------
- Removed support for Zope generations. It was not used and application-wide
generations make more sense anyways. This removed the
``zope.app.generations`` and ``zope.generations`` dependencies.
- Made ``z3c.configurator`` support optional.
- Cleaned up source code a little bit.
1.0.0a3 (2013-02-28)
--------------------
- Changed manifest to actually include the page templates.
1.0.0a2 (2013-02-28)
--------------------
- Added version Trove classifiers.
1.0.0a1 (2013-02-28)
--------------------
- Dropped support for Python 2.4 and 2.5, added Python 3.3 support.
- Removed dependencies on ``zope.app`` packages.
0.8.1 (2011-01-21)
------------------
- Bugfix: Did not handle unicode IUser.login values.
- Fixed DeprecationWarnings.
0.8.0 (2010-01-25)
------------------
- Security Fix: move camefrom url to a session variable instead of exposing
the url in the login form. Because the camefrom url is built at server side
based on local information and will always only use internal traversal names.
Exposing this camefrom query in the login url gives others only a point to
attack because it could be simply set by a unfriendly domain with a custom
url. This is much better since such a unfriendly 3rd party domain url doesn't
get redirected by default based on the changes in zope.publisher's redirect
method. (zope.publisher 3.9.3 does only redirect to urls located in the same
domain by default)
Remove all camefrom widgets and queries in our custom forms if you use any.
You can just set and get the camefrom session variable in your custom forms
if you need to.
0.7.2 (2010-01-26)
------------------
- Bugfix: Failed miserably on challenge on pages having non-ASCII names.
0.7.1 (2009-08-19)
------------------
- Bugfix: the method specialGroups applied groups everytime the method get
called even if the group was already applied. This is a problem if the
global shared unauthenticated principal instance is used because it will
apply similar groups till the server get restarted and a new principal
instance is used.
- Feature: added getUserByLogin to IUserContainer
- Added a test for user migration (that they will keep their ID)
0.7.0 (2009-05-11)
------------------
- Update dependencies:
* Use ``zope.container`` instead of ``zope.app.container``.
* Use ``zope.site`` instead of ``zope.app.component``.
* Use ``zope.authentication`` and ``zope.principalregistry`` instead
of ``zope.app.security``.
* Use ``zope.password`` instead of maintaining a copy of password
managers.
- Drop dependency on z3c.i18n and recreate a message factory instead.
0.6.2 (2010-01-26)
------------------
- Bugfix: Failed miserably on challenge on pages having non-ASCII names.
(Backport from 0.7.2)
0.6.1 (2009-08-19)
------------------
- Backport bugfix 0.7.1 to 0.6.1. See branches/roger-0.6.0
the method specialGroups applied groups everytime the method get
called even if the group was already applied. This is a problem if the
global shared unauthenticated principal instance is used because it will
apply similar groups till the server get restarted and a new principal
instance is used.
0.6.0 (2009-01-04)
------------------
- Feature: added support for local IUnauthenticatedPrincipal. This is usefull
if you need to apply local roles to IUnauthenticatedPrincipal. This was not
possible before and is not possible in zope.app.authentication
- Feature: implemented initial grant view based on ISource widget. Note, this
source widget terms implementation which is very complex to understand will
get moved to z3c.from if we fixed the ITerm dependency. Which means ITerm
needs to get moved out of zope.app.form first.
- Feature: added support for next utility lookup in authenticate call. By
default the principals from the global principalregistry get involved now.
You can disable this feature by setting includeNextUtilityForAuthenticate to
False.
- Feature: added PrincipalRegistryAuthenticatorPlugin which allows to
authenticate principals defined in global principal registry.
- Feature: implemented z3c.form prefix support in SessionCredentialsPlugin. Now
there is an option called prefixes which can be used for define a list of
used z3c.form prefixes. This makes it simpler for supporting different forms
and adjust the credential extraction.
- Renamed IGroupPrincipal to IFoundGroup which makes it more understandable
why this adapter implementation is needed. The IFoundGroup adapter is now
also used for zope.security.interfaces.IGroup principals. This makes it
possible to use them in the new principalregistry credential. Provide
deprecation message for the old IGroupPrincipal implementation.
- Removed dependency for zapi. But it's not really gone since other packages
use zapi too.
- Removed unused InvalidPrincipalIds and InvalidGroupId exceptions
- Removed unused IMemberAwareGroup support. This interface is not used in zope
at all.
- Added documentation for Pypi home page.
0.5.1 (2008-04-16)
------------------
- Cleanup imports and adjust dependencies
0.5.0 (2008-04-16)
------------------
- Initial Release