Security Hotfix, community work on the Zope Book, updated Python product tutorial, HiperDOM and XMLTemplates, Zope 2.2.3 nears, the ZDOM quickens, and a documentation organization chat.

The opinions expressed in Zope Weekly news are solely the authors', and not the opinions of Digital Creations, The Zope Community at-large, or the Spanish Inquisition.

If you or your company are doing something cool with zope, submit it to the Zope Weekly News for possible inclusion.

And Now For Something Completely Different:

Documentation

by Michel Pelletier

We want to give props to all the folks who have sent us comments and bugglets about the the book. Special mention goes to Tom Deprez, whose sent us detailed edits on every chapter! Due to mail server switch overs, I don't have the list of contributors with me but there's a least a dozen zopistas out there who have dropped us a line. Amos and I have rounded up Chapters 8, 10 and 12, Amos is working on 9 (XML!) and I've doing the incredibly interesting task of screen shots (yawn). The only uncompleted rough draft chapter is Chapter 9, so start reading because a lot of it's in there!

Zope Status

by Brian Lloyd

Summary

Security hotfix, HiperDOM and spirited debates on dev.zope.org

Recent News

I've been out for a while with a new addition to the family - sorry for no new ZWN lately! Last week it was discovered that the interaction between ZPublisher and UserFolders was not quite correct in the context it used to validate access during URL traversal. Kudos to Shane Hathaway for coming up with a Hotfix to address the problem in the short term. The longer term answer is to update UserFolder-ish objects to use the standard SecurityPolicy machinery to perform validation. This unfortunately probably means that most of the current UserFolder implementations will need to be updated. I'd like to see this done for the built-in variety of UserFolder for 2.3 (and to provide a guide for authors of other types of user folders to follow in updating their implementations).

Shane also released an "updated Python product tutorial",

http://www.zope.org/Members/hathawsh/PythonProductTutorial

Its great how spelling out some things in documentation makes the warts apparent. Several folks commented that they are happy to have the updated tutorial but that we should work on reducing the complexity involved in creating Python products. I got some good feedback on ways we might do this - the docket is pretty full right now, but reducing complexity is definitely a long term goal not only for "users" of Zope but for Product developers as well. We will definitely revisit this in the future.

In other news, Hiperlogica released an intial version of HiperDom which explores a template model similar to XMLC

I'd like to find a way to integrate this effort with the XHTML Templates project on dev.zope.org to get all of that brain-juice flowing in the same direction and produce a solution that can become a part of the Zope core.

Several spirited discussions have been going on (on both the zope-dev list and dev.zope.org), notably regarding the Core Session Tracking Project

There are a lot of good ideas flying around on this - we need to find a way to come to closure on the key requirements and begin moving on from there.

Fourthought continues to work the kinks out of the new ZDOM and XMLDocument replacement. It has been decided that the new XMLDoc will get a different name so that it can live in the same Zope site as applications built with the older version of XMLDocument.

Near Future

We will be working on making progress on the tasks on the 2.3 plan. As the projects on the current list are all headed by DC people, we are somewhat resource-bound (most if not all of those people have other commitments to meet as well). It looks like we have a few bug reports in the Collector that would warrant a 2.2.3 release sometime soon. I'll be looking into pruning the Collector and getting this out in the next couple of weeks.

Zope Web

-- by Ethan Fremen

Documentation Organization Chat

The ZDP is into the thick of things, helping to organize the documentation at Zope.org. Join Maik Roeder, Tom Deprez, Rik Hoekstra, and mindlace today at 1900 GMT as they "hash it out",

http://www.zope.org/Documentation/Chat

-EOT-