Zope.app.security

Latest version: v6.0

Safety actively analyzes 629564 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 3

3.7.3

------------------

- provide a clean zope setup and move zope.app.testing to a test dependency

- removed unused dependencies like ZODB3 etc. from install_requires

3.7.2

------------------

- Added data attribute to '_protections.zcml' for PersistentList
and PersistentDict to accomodate UserList and UserDict behavior
when they are proxied.

3.7.1

------------------

- Changed globalmodules.zcml to avoid making declarations for
deprecated standard modules, to avoid deprecation warnings.

Note that globalmodules.zcml should be avoided. It's better to make
declarations for only what you actually need to use.

3.7.0

------------------

- All interfaces, as well as some authentication-related helper classes and
functions (checkPrincipal, PrincipalSource, PrincipalTerms, etc.) were moved
into the new ``zope.authentication`` package. Backward-compatibility imports
are provided.

- The "global principal registry" along with its zcml directives was moved into
new "zope.principalregistry" package. Backward-compatibility imports are
provided.

- The IPrincipal -> zope.publisher.interfaces.logginginfo.ILoggingInfo
adapter was moved to ``zope.publisher``. Backward-compatibility import
is provided.

- The PermissionsVocabulary and PermissionIdsVocabulary has been moved
to the ``zope.security`` package. Backward-compatibility imports are
provided.

- The registration of the "zope.Public" permission as well as some other
common permissions, like "zope.View" have been moved to ``zope.security``.
Its configure.zcml is now included by this package.

- The "protect" function is now a no-op and is not needed anymore, because
zope.security now knows about i18n messages and __name__ and __parent__
attributes and won't protect them by default.

- The addCheckerPublic was moved from zope.app.security.tests to
zope.security.testing. Backward-compatibility import is provided.

- The ``LocalPermission`` class is now moved to new ``zope.app.localpermission``
package. This package now only has backward-compatibility imports and
zcml includes.

- Cleanup dependencies after refactorings. Also, don't depend on
zope.app.testing for tests anymore.

- Update package's description to point about refactorings done.

3.6.2

------------------

- The `Allow`, `Deny` and `Unset` permission settings was preferred to
be imported from ``zope.securitypolicy.interfaces`` for a long time
and now they are completely moved there from ``zope.app.security.settings``
as well as the ``PermissionSetting`` class. The only thing left for
backward compatibility is the import of Allow/Unset/Deny constants if
``zope.securitypolicy`` is installed to allow unpickling of security
settings.

3.6.1

------------------

- Depend on new ``zope.password`` package instead of ``zope.app.authentication``
to get password managers for the authentication utility, thus remove
dependency on ``zope.app.authentication``.

- Use template for AuthUtilitySearchView instead of ugly HTML
constructing in the python code.

- Bug: The `sha` and `md5` modules has been deprecated in Python 2.6.
Whenever the ZCML of this package was included when using Python 2.6,
a deprecation warning had been raised stating that `md5` and `sha` have
been deprecated. Provided a simple condition to check whether Python 2.6
or later is installed by checking for the presense of `json` module
thas was added only in Python 2.6 and thus optionally load the security
declaration for `md5` and `sha`.

- Remove deprecated code, thus removing explicit dependency on
zope.deprecation and zope.deferredimport.

- Cleanup code a bit, replace old __used_for__ statements by ``adapts``
calls.

Page 2 of 3

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.