1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
|
=======
CHANGES
=======
3.7.0 (2009-05-13)
------------------
- Made ``pytz`` a soft dependency: the checker for ``pytz.UTC`` is
created / tested only if the package is already present. Run
``bin/test_pytz`` to run the tests with ``pytz`` on the path.
3.6.3 (2009-03-23)
------------------
- Ensure that simple zope.schema's VocabularyRegistry is used for
PermissionVocabulary tests, because it's replaced implicitly in
environments with zope.app.schema installed that makes that tests
fail.
- Fixed a bug in DecoratedSecurityCheckerDescriptor which made
security-wrapping location proxied exception instances throw
exceptions on Python 2.5.
See https://bugs.launchpad.net/zope3/+bug/251848
3.6.2 (2009-03-14)
------------------
- Add zope.i18nmessageid.Message to non-proxied basic types. It's okay, because
messages are immutable. It was done by zope.app.security before.
- Add "__name__" and "__parent__" attributes to list of available by default.
This was also done by zope.app.security package before.
- Added PermissionsVocabulary and PermissionIdsVocabulary vocabularies
to the ``zope.security.permission`` module. They were moved from
the ``zope.app.security`` package.
- Add zcml permission definitions for most common and useful permissions,
like "zope.View" and "zope.ManageContent", as well as for the special
"zope.Public" permission. They are placed in a separate "permissions.zcml"
file, so it can be easily excluded/redefined. They are selected part of
permissions moved from ``zope.app.security`` and used by many zope.*
packages.
- Add `addCheckerPublic` helper function in ``zope.security.testing`` module
that registers the "zope.Public" permission as an IPermission utility.
- Add security declarations for the ``zope.security.permisson.Permission`` class.
- Improve test coverage.
3.6.1 (2009-03-10)
------------------
- Use ``from`` imports instead of ``zope.deferred`` to avoid circular
import problems, thus drop dependency on ``zope.deferredimport``.
- Raise NoInteraction when zope.security.checkPermission is called
without interaction being active (LP #301565).
- Don't define security checkers for deprecated set types from the
"sets" module on Python 2.6. It's discouraged to use them and
`set` and `frozenset` built-in types should be used instead.
- Change package's mailng list address to zope-dev at zope.org as
zope3-dev at zope.org is now retired.
- Remove old zpkg-related files.
3.6.0 (2009-01-31)
------------------
- Install decorated security checker support on LocationProxy from the
outside.
- Added support to bootstrap on Jython.
- Moved the `protectclass` module from `zope.app.security` to this
package to reduce the number of dependencies on `zope.app.security`.
- Moved the <module> directive implementation from `zope.app.security`
to this package.
- Moved the <class> directive implementation from `zope.app.component`
to this package.
3.5.2 (2008-07-27)
------------------
- Made C code compatible with Python 2.5 on 64bit architectures.
3.5.1 (2008-06-04)
------------------
- Add `frozenset`, `set`, `reversed`, and `sorted` to the list of safe
builtins.
3.5.0 (2008-03-05)
------------------
- Changed title for ``zope.security.management.system_user`` to be more
presentable.
3.4.0 (2007-10-02)
------------------
- Updated meta-data.
3.4.0b5 (2007-08-15)
--------------------
- Bug: Fixed a circular import in the C implementation.
3.4.0b4 (2007-08-14)
--------------------
- Bug: ``zope.security.management.system_user`` had an ugly/brittle id.
3.4.0b3 (2007-08-14)
--------------------
- ``zope.security`` now works on Python 2.5
- Bug: ``zope.security.management.system_user`` wasn't a valid principal
(didn't provide IPrincipal).
- Bug: Fixed inclusion of doctest to use the doctest module from
``zope.testing``. Now tests can be run multiple times without
breaking. (#98250)
3.4.0b2 (2007-06-15)
--------------------
- Bug: Removed stack extraction in newInteraction. When using eggs this is an
extremly expensive function. The publisher is now more than 10 times faster
when using eggs and about twice as fast with a zope trunk checkout.
3.4.0b1
-------
- Temporarily fixed the hidden (and accidental) dependency on zope.testing to
become optional.
Note: The releases between 3.2.0 and 3.4.0b1 where not tracked as an
individual package and have been documented in the Zope 3 changelog.
3.2.0 (2006-01-05)
------------------
- Corresponds to the verison of the zope.security package shipped as part of
the Zope 3.2.0 release.
- Removed deprecated helper functions, 'proxy.trustedRemoveSecurityProxy' and
'proxy.getProxiedObject'.
- Made handling of 'management.{end,restore}Interaction' more careful w.r.t.
edge cases.
- Made behavior of 'canWrite' consistent with 'canAccess': if 'canAccess'
does not raise 'ForbiddenAttribute', then neither will 'canWrite'. See:
http://www.zope.org/Collectors/Zope3-dev/506
- Code style / documentation / test fixes.
3.1.0 (2005-10-03)
------------------
- Added support for use of the new Python 2.4 datatypes, 'set' and
'frozenset', within checked code.
- C security proxy acquired a dependency on the 'proxy.h' header from the
'zope.proxy' package.
- XXX: the spelling of the '#include' is bizarre! It seems to be related to
'zpkg'-based builds, and should likely be revisited. For the moment, I have
linked in the 'zope.proxy' package into our own 'include' directory. See
the subversion checkin: http://svn.zope.org/Zope3/?rev=37882&view=rev
- Updated checker to avoid re-proxying objects which have and explicit
'__Security_checker__' assigned.
- Corresponds to the verison of the zope.security package shipped as part of
the Zope 3.1.0 release.
- Clarified contract of 'IChecker' to indicate that its 'check*' methods may
raise only 'Forbidden' or 'Unauthorized' exceptions.
- Added interfaces, ('IPrincipal', 'IGroupAwarePrincipal', 'IGroup', and
'IPermission') specifying contracts of components in the security framework.
- Code style / documentation / test fixes.
3.0.0 (2004-11-07)
------------------
- Corresponds to the version of the zope.security package shipped as part of
the Zope X3.0.0 release.
|
