Changelog for Plone (name of developer listed in brackets) Plone 2.5.5 - Final - released December 4, 2007 - Moved folder_rename logic into PloneTool and added savepoint+rollback there as well. Additionally, folder_rename now requires POST requests. [alecm] - Moved most folder_publish and folder_delete logic into PloneTool methods. Added savepoints and rollbacks for folder publish and delete actions, so that partial deletions/transitions are not committed. Made folder_publish require POST. Thanks to rossp for finding this. [alecm] - Add support for show_ymd to the calendar widget template. This makes it possible to create time-only widgets. [wiggy] - Fix 2.1 migration issue for sites using QueueCatalog. [alecm] - Fix issues with non-ASCII characters in portal title. http://dev.plone.org/plone/ticket/6628 [hannosch] - Fix security hole due to unsafe use of python pickles. [MJ, witsch, hannosch] Plone 2.5.4 - Final - released October 8, 2007 - Add support for show_ymd to the calendar widget template. This makes it possible to create time-only widgets. [wichert] - No longer require a _catalog property on portal_catalog for migration. This avoids migration errors on sites with e.g. QueueCatalog installed. [alecm] - Add migration to set the default GS profile when upgrading from 2.1. [alecm] - Migration has been much improved, especially for big sites. We only reindex once — no matter what version you're migrating from — and there are several improvements to the actual migration code too. Migration now takes 2-4 times less time, and is more likely to succeed. So if you had problems migrating from 2.0 or 2.1 earlier, try this version. Reference: http://dev.plone.org/plone/changeset/14945 [hannosch] - Fix navigation portlet when top-level is private. http://dev.plone.org/plone/ticket/6772 [alecm] - Made Plone use 1/10th of the memory on file uploads. Details in http://dev.plone.org/plone/ticket/7027 (also fixed in Plone 3.0.x) [zegor] - Use a button/script combo for product reinstall from the control panel. http://dev.plone.org/plone/ticket/6457 [alecm] - Remove silly root check from stripGRUFLocalRolePrefix script to fix migration bug. http://dev.plone.org/plone/ticket/5817 [alecm] - No longer call invokeFactory twice when creating objects in portal_factory. Fixes http://dev.plone.org/plone/ticket/6595 Nice catch nouri :-) [alecm] - The page title is not rendered if it's the same as the global site title (e.g. for pages that don't have titles). This avoids duplicate site titles in the title tag. [limi] Plone 2.5.3 - Final - released May 16, 2007 - Forbid catalog metadata names in check_id.py. Give check_id.py Manager proxy so that ids can be checked even if listing the contents of the parent is forbidden. [alecm] - Further optimized the migrations from older Plone versions. We reindex the whole catalog once and only once, independent of the Plone version we start migrating from. [hannosch] - Made migration twice as fast, it was recataloging unnecessarily. [hazmat][limi] - Fix bad links between templates prefs_users_overview, prefs_user_details and prefs_user_membership (remove starting space and force portal_url) [encolpe] Plone 2.5.3 - Release Candidate - released April 28, 2007 - Fix improper uses of 'CatalogTool.searchResults' where a dict was passed as the first argument in place of REQUEST. [nouri, maurits] - Reindex security recursively after group name update in stripGRUFLocalRolePrefix. Fixes http://dev.plone.org/plone/ticket/5817 [alecm] - Add back user skin cookie deletion on logout. Fixes http://dev.plone.org/plone/ticket/2563 [alecm] - Add POST-only protections to security critical methods (see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0240). [mj, bloodbare, alecm] - Set the current instance version on site creation so we can migrate properly. [wichert] - Fixed some bugs in addtoFavorites [ender] - Fixed cropping of utf8 encoded text (cropText script). This fixes http://dev.plone.org/plone/ticket/6190. [naro] - Fixed problems with migrating member data like a members fullname. This closes http://dev.plone.org/plone/ticket/6111. [tesdal] - Add a new IHideFromBreadcrumbs interface. Items marked with this interface will not be shown in the breadcrumb trail. Mark the portal factory with this interface so it no longer polutes the breadcrumbs. [wichert] - Made CatalogTool.ExtensibleIndexableObjectWrapper a subclass of the CMFCore.CatalogTool.IndexableObjectWrapper class to ensure Plone doesn't miss on improvements made there. EIOW instances now proxy Zope3 interface declarations of the wrapped object. [mj] Plone 2.5.2 - Orb - released January 16, 2007 - Fix issue with drag and drop caused by changing of css ids in folder_contents. [alecm] - Added some classes to document_byline.pt for more flexibility when styling this template. This closes http://dev.plone.org/plone/ticket/5025 [spliter] Plone 2.5.2 - Release Candidate - released January 3, 2007 - In livesearch results, don't append ... at the end, when the length of the title or description is exactly the limit. This closes http://dev.plone.org/plone/ticket/5989. [hannosch] - Do not display the right column on prefs_main_template anymore, as it was unneeded and could cause design problems. This closes http://dev.plone.org/plone/ticket/5803. [hannosch] - Moved the global_cache_settings call in main_template before the call to header.pt as otherwise the encoding in the header would not be defined and fall back to ZPublishers default_encoding. This closes http://dev.plone.org/plone/ticket/6013 [hannosch] - Optimized the check_id.py uniqueness check to not use contentIds, fixes http://dev.plone.org/plone/ticket/5976 [alecm] - Add search term highlighting to livesearch result links. [alecm] - links in Contents table behave as they should now - show the "pointer" hand when hovering the mouse over them. It was broken due to ajax sorting feature somehow [spliter] - event_view.pt has a better position for details table now, letting byLine and Description info to be content-wide and not to be shifted to the left, bacuse of Details table [spliter] - main table for columns (#portal-columns) should not have paddings or spacings - they can confuse when styling. Fixed with CSS for the table cells, thanks to deo ;) [spliter] - Make the parameters for member image scaling more easily configurable by putting them in a mutable data structure. Eventually, we should provide a TTW configuration for this. [alecm] - Make hasIndexHtml script more efficient for BTreeFolders. Fixes http://dev.plone.org/plone/ticket/5769 [alecm] - Add event support to OrderedContainer so that moveObjectToPosition doesn't break on Zope 2.9. Should fix http://dev.plone.org/plone/ticket/5961 [alecm] - Make css ids for rows in folder_contents sane. Fixes http://dev.plone.org/plone/ticket/5940 [alecm] - Make various icons in folder_contents explicitly render alt tags, because the rendering of those images magically picks up items named 'alt' in the context, which breaks the page (plus it adds usability). Fixes http://dev.plone.org/plone/ticket/5934 [alecm] - Don't assume portal_catalog when reindexing during ownership change. Fixes http://dev.plone.org/plone/ticket/5063 [alecm] - Ensure rss_template max items is an integer. Should fix http://dev.plone.org/plone/ticket/5553 [alecm] - Applied patch from aaronv to add includeTop setting to navigation prefs form. Fixes http://dev.plone.org/plone/ticket/5519 [alecm] - Made standard_error_message more tolerant of security issues and acquisition problems. Fixes http://dev.plone.org/plone/ticket/5955 [alecm] - Fixed issue with search for members of groups, using patch from derek_richardson. Fixes http://dev.plone.org/plone/ticket/5902 [alecm] - Use some url unquoting to ensure that the rename form redirects to the correct url after rename, even if quoted characters are involved. Fixes http://dev.plone.org/plone/ticket/5843 [alecm] - Use current_page_url instead of ACTUAL_URL for accessibility anchors. Fixes http://dev.plone.org/plone/ticket/5777 [alecm] - Made the error displayed on SMTPRecipientsRefused during password reset not display the email address, as this is an undesirable privacy leakage. Fixes https://dev.plone.org/plone/ticket/5962 [alecm] - Applied the Hotfix for CVE-2006-4249, which also fixes http://dev.plone.org/plone/ticket/5906 [wiggy, alecm] - Non-ascii characters in actions used in the portal tabs provoked an UnicodeDecodeError. This closes http://dev.plone.org/plone/ticket/5791. [hannosch] - Fixed another UnicodeDecodeError in livesearch_reply. This fixed http://dev.plone.org/plone/ticket/5828. [hannosch] - Added a general safe_unicode method to utils.py, which can be used to convert any Unicode, 'utf-8' or 'ascii' encoded string to Unicode. [hannosch] - Added button tag styling that conforms to the standard input button look. [limi] - Added optgroup styling, since the default in Firefox looks like crap. [limi] - Fixed the Live search error: 0x80040111 (NS_ERROR_NOT_AVAILABLE). This closes http://dev.plone.org/plone/ticket/4519. [deo] - Injected Plone 2.1.4 into the migration chain. [stefan] - Lots of minor whitespace corrections, found by using the new i18ndude 3.0 which is based on zope.tal.talgettext for extraction of translation files. [hannosch] - Fixed a minor spelling inconsistency in folder_localrole_form. [hannosch] - Fixed flawed lookup of email_from_address in send_feedback scripts. This closes http://dev.plone.org/plone/ticket/5839. [hannosch] - Added option to choose different base profile while creating a new Plone site. This closes http://dev.plone.org/plone/ticket/5890. [hannosch] - Removed redundant getToolByName call in send_feedback_site. This closes http://dev.plone.org/plone/ticket/5863. [hannosch] - Fixed the calendar portlet to display correctly in Internet Explorer 7. [limi] - Updated links in the automatically generated front-page. [hannosch] - Added a few macro hooks in personalize_form and prefs_user_details to allow at least some form of easy customization without the need to customize the entire forms. Now it looks for a file additional_memberdata in your skin and uses the macros in there to inject them into these horrible forms. Now it sucks slightly less ;-). [ender] - livesearch_reply.py mixed up utf-8-encoded strings and unicode strings leading to unpredictable UnicodeDecodeErrors. This fixes http://dev.plone.org/plone/ticket/5828. [ajung] - livesearch_reply.py wrote quotes (") in the title-attribute. misformed XML was generated. replaced quotes by ". [jensens] Plone 2.5.1 - released September 28, 2006 - The content tab selection logic now checks the request in addition to template_id when trying to determine which tab should be selected. [rocky] - Noted the new hard dependency on ElementTree that was introduced in the Marshall product as of Plone 2.5.1. [hannosch] - The plone_various and plone-final steps now honour GenericSetup conventions and only run when a config file is present for them. ExtensionProfiles no longer need to override these steps. Fixes http://dev.plone.org/plone/ticket/5823 [mj] Plone 2.5.1-rc1 - released September 11, 2006 - Fixed an UnicodeDecodeError in enableSyndication script. This closes http://dev.plone.org/plone/ticket/5750. [hannosch] - Adjusted button CSS to have overflow: visible because Internet Explorer makes them very wide in foreign languages like Finnish. This fixes http://dev.plone.org/plone/ticket/5461 - thanks to Mikko. [limi] - Made login_form and default_error_message not invoke the portlets, since they are irrelevant and expensive in those forms. Also made the error template a valid HTML document. [limi] - Added description in the dict in WorkflowTool's getTransitionsFor. [ender] - Corrected the log_exc method in log.py to actually log the exception, as it was done before replacing zLOG with Python's logging module. [hannosch] - Make the object_delete and folder_delete methods require non-GET requests. This is a bit of a band-aid and it is likely we will want to do the same for other object actions which could be easily triggered by a crawler (a paste for instance, which may have been preceeded by a cut or copy). Related to http://dev.plone.org/plone/ticket/4886 [alecm] [limi] - Make the syntool methods for enabling and disabling syndication check for the Manager properties permission on the object. [alecm] - Making text/* not render inline for security reasons (Internet Explorer renders these blindly, no matter that they are not text/html), and fixing inline rendering of Office documents and PDFs in the process. [limi] - Fix member portrait handling by automatically scaling all incoming images using PIL. This will throw an IOError on any invalid image and also save some bandwidth and space in the zodb. [alecm] - Added method and management template to membership tool to cleanup members with bad images. [alecm] - Made 'setuphandlers.PloneGenerator.setupPortalContent' more robust by checking if the Members folder is really there. [nouri] - Copied '_getSecurity' from Archetypes.utils to avoid a dependency. Plone should not import from Archetypes to minimize coupling. [stefan] - Added a Unicode and UTF-8 aware case normalizer to the plone_lexicon pipeline. Goes with the fix for http://dev.plone.org/plone/ticket/5231 [stefan] - Circumvented a UnicodeDecodeError on smart folders editing view. This closes http://dev.plone.org/plone/ticket/5746. [hannosch] - Added new css class visualIcon. This will be used to make generated.css much smaller in Plone 3.0 and is introduced now, so people can see how this will affect templates. Only templates which use css to add icons for content types are affected. [fschulze] - DiscussionTool.cookReply needs to be available to anyone who can comment on an item, otherwise the comment will not be cooked and we get HTML injection. This fixes http://dev.plone.org/plone/ticket/5718 [alecm] - Made the code in utranslate more error resilient and added tests for it. [rafrombrc] [hannosch] - Enhanced accessibility of adjacent links in main_template. This fixes http://dev.plone.org/plone/ticket/5210. [hannosch] - Removed some unnecessary hyphens from date_components_support. This fixes http://dev.plone.org/plone/ticket/5711. [hannosch] - Added Five and CMF version to the control panel version overview. This closes http://dev.plone.org/plone/ticket/5345. [hannosch] - Made getInheritedLocalRoles in PloneTool more error resilient. This closes http://dev.plone.org/plone/ticket/5542. [hannosch] - Added some workaround code for the general misbehaving utranslate and uLocalizedTime methods. They should return Unicode now again, but right now they only work for the single supported site encoding of utf-8. This fixes http://dev.plone.org/plone/ticket/5609. [hannosch] - Synced table-less and table-based main_template again. This fixes http://dev.plone.org/plone/ticket/5696. [hannosch] - Fixed incorrect status message after bad login attempt. This closes http://dev.plone.org/plone/ticket/5695. [hannosch] - According to GenericSetup.interfaces.IProfileRegistry: when an extension profile is registered for 'None', it should be available in any type of site. Fixed CMFPlone.factory to include such profiles. [stefan] - Made PloneTool.browserDefault check if the default page it is trying to render is the folder itself, and prevent it from doing so (which would cause an endless loop). Fixes http://dev.plone.org/plone/ticket/5704. [alecm] - Applied patch from paregorius to add ids to all visualClear divs. Fixes http://dev.plone.org/plone/ticket/4145. [paregorius] [alecm] - Applied patch from paregorius to make the LiveSearch div vanish in IE as needed. Fixes http://dev.plone.org/plone/ticket/5705. [paregorius] [alecm] - Made PloneTool.browserDefault check for a result of None from getLayout and raise a sensible error. Generally this means that the FTI is missing or otherwise incorrect. Fixes http://dev.plone.org/plone/ticket/5676. [alecm] - Added migration to reindex the catalog which is necessary for the changes made for http://dev.plone.org/plone/ticket/5569 and http://dev.plone.org/plone/ticket/5231. [alecm] - Made is_folderish and isStructuralFolder respect the z2 INonStructuralFolder interface as well as the z3 one. Fixes http://dev.plone.org/plone/ticket/5592 and http://dev.plone.org/plone/ticket/5569. [alecm] - Changed all of the action conditional expressions checking for the existence of 'member' to explicitly use 'member is None' or 'member is not None' rather than just using truth or falsehood of the member object. [rafrombrc] - Added a workaround for erroneous indexing behavior for words containing non-ascii characters. These were treated as word breaks so far. The code works for a site encoding of 'utf-8' now as well as proper unicode usage. This closes http://dev.plone.org/plone/ticket/5231. [hannosch] - Added migration to remove plone.css from portal_css. Fixes http://dev.plone.org/plone/ticket/5614. [alecm] - Fixed wrong usage of label tag. Added one for attribute that was missing. This closes http://dev.plone.org/plone/ticket/5539. [ender] - Added test that ensures the language is getting set in header. This is related to http://dev.plone.org/plone/ticket/5444 and http://dev.plone.org/plone/ticket/4770. [hannosch] - Fixed folder_summary_view ignored allowAnonymousViewAbout. http://dev.plone.org/plone/ticket/5678 [ender] - Fixed language setting in the html page header. This closes http://dev.plone.org/plone/ticket/5444. [hannosch] - Added a few tests for the calendar view. [hannosch] - Fixed the problem where you cannot select items in folder_contents in Safari. All non-draggable elements must have the 'notDraggable' CSS class now. This closes http://dev.plone.org/plone/ticket/5586. [deo] - Fixed handling of login_time and last_login member properties: last_login_time is now the time of the previous login and login_time is the time of the current login. This fixes http://dev.plone.org/plone/ticket/5471. [wichert] - Ignored the ' character when normalizing strings. This implements part of http://dev.plone.org/plone/ticket/5664. [wichert] - Improved test for autogenerated ids to handle content types with an underscore in their id. This fixes http://dev.plone.org/plone/ticket/5560. [wichert] - Using 'indexObject' instead of 'reindexObject' for CatalogTool.clearFindAndRebuild works just as well, but does not touch every object and cause a monster transaction to be committed. [stefan] - The list of addable types in a folder is now ordered according to the translated title and not the English title anymore. This closes http://dev.plone.org/plone/ticket/1760. [hannosch] - Add GenericSetup import and export steps for the portal factory. [wichert] - Fixed a username vs userid confusion in the member search page and bring the implementation inline with the help text. This fixes http://dev.plone.org/plone/ticket/5657. [wichert] - Small spelling corrections in reconfig_form. This closes http://dev.plone.org/plone/ticket/5552. [hannosch] - Event time and location aren't considered byline information in folder_listing anymore and thus visible if allowAnonymousViewAbout is disabled. This closes http://dev.plone.org/plone/ticket/5573. [hannosch] - Corrected RSS search template to show correct numbers. This closes http://dev.plone.org/plone/ticket/5211. [hannosch] - Modified login logic to work for sites which do not use the cookie plugin or still use GRUF. [wichert] - Added support for the hCalendar/hCard standard for events. This closes http://dev.plone.org/plone/ticket/4102. Thanks, Nate. [hannosch] - Changed setupSite.py to import 'Zope2' instead of 'Zope'. Could cause confusion on case-insensitive filesystems with 'zope'. [sidnei] - Fixed bug in folder_contents causing all links to get /folder_contents appended as well. [optilude] - Changed all action conditions that were simply "member" or "not:member" to be "python:member" or "python:not member" to prevent member object from being called, leading to infinite recursion in certain cases. [rafrombrc] - Fixed 'reindexContentObject' in CatalogTool.py so that it doesn't set the modification date to now due to some AT "convenience". [nouri] - Cleaned up the localrole form to support searching for either a users full name or login name; both at once does not work. [wichert] Plone 2.5 - released June 16, 2006 - Officially deprecated portlet_related which was slated for removal since Plone 2.1. [hannosch] - Fixed invalid URL for events/previous link in events portlet. This closes http://dev.plone.org/plone/ticket/5582. [hannosch] - Added missing i18n magic to the dummy workflow transition labeled 'No change' in content_status_history.cpt. [hannosch] - Fix rename from the action menu when using virtual hosting. Thanks to Daniel Nouri, Maurits van Rees, Alec Mitchell and Stefan Holek for pointers and code. [optilude] - Small fix to avoid an AttributeError in @@plone when viewing objects without isPrincipiaFolderish, in general uses of aq_explicit should be conditional. [alecm] Release candidate 3 - released June 13, 2006 - Added missing nocall: for toLocalizedTime in mail_password_template.pt. Fixes http://dev.plone.org/plone/ticket/5568 [alecm] - Added deprecation warnings for the old site creation machinery. [hannosch] - Fixed last deprecated occurrences of portal_object. Use portal instead. [hannosch] Release Candidate 2 - released June 8, 2006 - Fixed issue with encoding of translated ui strings in javascript. [ree, nouri] Release Candidate 1 - released June 3, 2006 - Deleting objects in the portal root now requires the user to have the 'Delete objects' permission on both the portal and the objects to be deleted. This makes the rules for object deletion consistent between the portal and all other folderish objects in the portal (at least those based on BasePloneFolder or AT's BaseFolder). This fixes http://dev.plone.org/plone/ticket/2925 [alecm] - Don't propose local workflow policy configuration iw we aren't in a folderish type. We don't allow it on plone root too. [encolpe] - Finish worklists implementation with workflow id and complete guard filtering. [encolpe] - Polished HTML in livesearch_reply.py. It generated
  • element without the