why security assertions should be placed

       PASSWORD() function add to lib/python/AccessControl/AuthEncoding.py.

using list comprehensions (20-30% speedup under Python 2.2).

available or not, and also fixes to all the tests so they won't crap
out or complain if not.

To test whether these storages are avialable (including all package
dependencies), do:

import BDBStorage
if BDBStorage.is_available:
    # okay to use

Also, in BDBStorage/__init__.py do some cross-platform compatibility
for the bsddb module; in Python 2.3 we can just use the built-in
module, but in earlier Pythons we have to use bsddb3.  Now you can
just use "from BDBStorage import db" to get the proper db object.

Ensured that all HTTP headers are sent as normal strings and not Unicode.

Removed most <dtml-var> to replace them with &dtml-foo;.
This corrects a number of potential XSS holes, and simplifies
auditability of the remaining legitimate <dtml-var>.

version:

- If the setlocale() call fails, don't fail the test -- just skip it
  silently.  XXX This is not ideal, but what else can we do?  Locale
  names are not standardized; the test fails on Mac OSX, and
  apparently on older Linux versions (e.g. my Mandrake 8.1).

- Don't use non-ASCII literals; use \xXX escapes.

bsddb3Storage becomes BDBStorage
Full becomes BDBFullStorage
Minimal becomes BDBMinimalStorage

Removing MinimalReplicated.py, Packless.py, and base.py

        manage_afterClone in the saem way that manage_pasteObjects does.

        that are not Zope products.

Some calls to os.system('chmod') has been replaced with the more portable os.chmod() call, to make install work properly on Windows.

Merge to HEAD: The ZEO unit tests and wo_pcgi.py didn't run on Windows if the path to the python executable included a space.

someone tries to use 'client' as an argument to a zsql method.

Support getattr on PermissionRole instances to allow access to _p, _d, __name__m and __roles__ (patch submitted by Dieter Maurer in collector #161).

ZODB works around this situation, but it probably shouldn't.
AdaptableStorage doesn't allow it.

Collector #479: Catalog tab now correctly puts "Unknown" in the type column for cataloged objects with no meta_type metadata column

Merge with HEAD: Collector #256: Added a check in _doChangeUser to make sure passwords isn't encrypted twice.