when trying to get attributes during acquisition.  For example, it was
common for acquisition to mask errors occuring when trying to load
object state from the database, since this is typically triggered by a
getattr call.  I wanted to do something like:

  try: foo.bar
  except AttributeError, v:
    if v != 'bar': raise # Bogus attribute error
    # keep looking up the acquisition tree

Unfortunately, this fails because v is (sometimes) an
instance, not a string.

For now, we'll check for attribute errors, but ingore the values.

  (in order to enable REMOTE_USER mode) also opens the monitor to any
  user connecting through localhost.

Brought ZDOM more in line with DOM spec by changing Root class to be an Element sub-class. Now the top-level Zope object is a normal Element, not an Element/Document/DOMInterface hybrid. Also added Document and DOMImplementation classes.

Added permissions to ZDOM classes.

Hide the delete button if the user doesn't have 'Delete objects' permission. Hide the export button if the user doesn't have the 'Import/Export objects' permission.

Added a 'getobject' method to ZCatalog. This makes it easy to retrieve a cataloged object from the searchResults list.

database.

Fixed a problem in setting user permissions.

get set even if we fail setting traceback.

We can't pretify it, but at least we can restart.

care of it.

This is a pretty significant restructuring of ZPublisher to
allow a new module hook for handling errors.  There are two goals
in this:

  - To allow Zope to retry a request when ZODB raises a ConflictError, and

  - To move reformatting of exception using standard_error_message
    out to the publisher level so that:

    - Errors don't get obfuscated by error handling done by
      sub-documents and external methods, and

    - Errors raised by the publisher (e.g. for input errors,
      not-found errors, system exit, etc) get prettified.

processInputs that is called by the publisher at the start of request
processing. Any request processing that can raise errors must be
defered at least until this method is called so that the publisher can
handle the errors. BaseRequest now has an empty implementation for
this method and HTTPRequest defers most of it's initialization to this
method.

This fixes a bug in handling of form inut errors, which were being
raised as ZServer server errors.