and asking for a user from a user database given an ID.  The default
implementations, in BasicUser and BasicUserFolder assume that user
names are used as IDs.

Refactored the user classes so that super and nobody aren't persistent
and don't have IDs. There is now a SimpleUser that is the same as
User, sans persistence.  There is a SpecialUser that subclasses
SimpleUser.  The special user nobody is a SpecialUser. The class Super
not subclasses SpecialUser.

  (in order to enable REMOTE_USER mode) also opens the monitor to any
  user connecting through localhost.

  - Made it easier to disable servers.

    o You can now disable a server by giving a '-' as an argument to a server
      option. For example, to disable FTP, use "-f -"

    o You can disable all servers with -X. For example, a simple way to
      get *just* a web server is to use: "-X -w8080".

  - Specifying an option multiple times causes multiple servers to run.
    For example, to run multiple web servers::

      z2.py -w80 -w81 -w82

  - A separate address can be sp[ecified for each HTTP, FTP, or monitor
    server, by providing address:port, rather than just port, as in:

     z2.py -wkorak.digicool.com:80 -w127.0.0.1:81

  raise '123', 'blah'

and get a return status of 123.

Changed ftp server start up to bind to the given ip. Also added a commented out stanza showing how to turn on debug logging.

vocabularies.  redid Lexicon interface.

Changed 'password' and 'confirm' default values to use new User protocol for leaving password alone while changing roles/domains.

Modified _doChangeUser to leave password unchanged if the 'password' parameter is None.  _changeUser now always accepts "password == confirm == None", and sets 'password' to None if "password == 'password' and confirm == 'confirm'".

This gives Users an unambiguous protocol for both DTML and Python code to change roles/domains without touching the password.  editUser.dtml has a somewhat magical protocol, which users need not worry about.

createInObjectManager. There is probably a better solution.

Anthony's collector submission:

Title:  current cvs zcatalog lexicon/vocab support is broken

At: http://classic.zope.org:8080/Collector/Collector/1071/sview

Submitter:  Anthony Baxter

Description:  The current CVS version of ZCatalog has a couple of
              nasty bugs in it.

First off, the standard Lexicon uses a variable 'self.counter',
without ever initialising it. Oops.

Secondly, Catalog handles the default Lexicon inconsistently. In the
case of a lexicon being provided, it stores the name as self.lexicon,
otherwise it stores a Lexicon _object_ as self.lexicon. Later on, it
tries to do a getattr with the lexicon object as the second arg.

The first bug utterly breaks non-globbing Lexicons. The second bug
breaks textindexes that don't provide a lexicon at creation time.

A patch for both follows.  [Rather, this checkin commits both.]  Note
that the patch tries to handle gracefully existing Catalogs and
Lexicons that might be broken.

a mapping that is not a web request is passed in.

Added optional 'multipart' argument to dtml-mime, to allow specifying 'alternative' or whatever instead of 'mixed'.

Added check for streaming responses when determing whether to add a content-length header and setting a 204 response. This should fix the problem of streaming response having content-length 0 respone headers. Thanks to Toby Dickenson.

Added a lock to tempfile producers. Thanks to Toby Dickenson. This should avoid possible corruption of responses from FCGI and large HTTP responses.