Nuxeo CPS 3.4.0 released

← Back to Stories (view on slashdot.org)

Posted by ryuzaki0 on Tuesday March 14, 2006 @10:13PM from the content-to-manage-content-management dept.

Stefane Fermigier writes "French open source software vendor Nuxeo has recently released version 3.4.0 of its Zope-based enterprise content management system CPS. CPS is a platform for building content management, collaboration and business process applications, that has been used in several majors projects in the French administration and industry. The result of more than one year of work by 30 contributors, CPS is one of the first major products to leverage the new Zope 3 component architecture."

16 comments

Min score:

Reason:

Sort:

asdf by zaguar · 2006-03-14 22:22 · Score: 2, Informative

The Wiki Article about CPS, for those who were blindsided by the TLA.

--
"Sure there's porn and piracy on the Web but there's probably a downside too."
FP by Anonymous Coward · 2006-03-14 22:25 · Score: 0

Zope That!
What is "enterprise content management"? by Elixon · 2006-03-14 22:52 · Score: 4, Informative

Source: http://en.wikipedia.org/wiki/Enterprise_content_ma nagement
---
In autumn 2005 AIIM defines ECM as follows:
Enterprise Content Management is the technologies used to Capture, Manage, Store, Preserve, and Deliver content and documents related to organizational processes.
---
These ECM components and technologies can be categorized as:

* Capture,
* Manage,
* Store,
* Deliver, and long-term
* Preserve.

This model is based on the five lead categories of AIIM International.

The traditional application areas are:

* Document management (DM),
* Collaboration (or collaborative software, groupware),
* Web content management (WCM) (including portals),
* Records management (RM) (archive and filing management systems on long-term storage media) and
* Workflow / Business process management (BPM)
---

--
Well, I've got to get back to work. When I stop rowing, the slave ship just goes in circles.
CMS Systems by MichaelSmith · 2006-03-14 22:53 · Score: 1

Off The Shelf content management systems bother me because they must surely be full of well known security holes.

If I had to have a CMS I would prefer to develop my own tailored system. At least that way I will have a chance of finding the bugs before a potential attacker.

--
http://michaelsmith.id.au
1. Re:CMS Systems by afd8856 · 2006-03-14 23:05 · Score: 2, Interesting
  
  You probably assume that CPS is written in PHP, which is not. I'm not familiar with CPS, but I am familiar with Plone, a somewhat related project. Zope, the underlying framework forces you to declare a security permission for every accesible method. Even XSS type of vulnerabilities would be extremely hard to find, as the CMF filters the dangerous html tags in content items(applet, script, iframe, etc). And while it's possible to create proxies for python scripts to run under a different priviledge, the framework also makes it easy to have validators for that script, so you can check for mailicious actions. Sure, there a few security related fixes in the Plone project, but I don't know yet of any exploit, as oposed to PHP counterparts, Mambo, Drupal, xoom and nukes.
  
  --
  I'll do the stupid thing first and then you shy people follow...
2. Re:CMS Systems by MichaelSmith · 2006-03-14 23:45 · Score: 1
  
  You probably assume that CPS is written in PHP, which is not.
  No I can see that its written in Python. My concern is that CMS applications have a lot of code connected to open sockets and undergo rapid development.
  
  Other applications which keep sockets open to the world include apache and qmail, but these applications change so slowly that there is time to identify and close security holes.
  
  --
  http://michaelsmith.id.au
3. Re:CMS Systems by __aavljf5849 · 2006-03-15 00:12 · Score: 3, Insightful
  
  No, it doesn't have a lot of code connected to open sockets. It connects one piece of code, the ZServer, to open sockets, and that is only if you don't connect it via apache, which most people do for various reasons. The ZServer does not evolve rapidly.
  
  Zope, which is the platform om which CPS is based, is one of the bigger open source platforms for web application development, and has to my knowledge never been broken (which of course partly is because few have tried, but there you go).
  
  You can rest assured that anything you write will have more security holes than Zope/CPS, simply because you are the only one that can find and fix them. ;)
4. Re:CMS Systems by Anonymous Coward · 2006-03-15 02:52 · Score: 2, Informative
  
  No, there have historically been very few security holes with CPS, Plone, Silva, or any of the other Zope-based CMSs out there. In fact, there have been very few security holes with Zope.
  
  All that being said, there are a few sites that have built their own CMS on top of Zope (it has a decent CMF built into it, so it's far from impossible to roll one's own). The two biggest profile ones are probably Boston.com and Saugus.net, but I'm sure there are plenty of others.
Let's get this dealt with by Alarash · 2006-03-14 23:54 · Score: 0, Offtopic

Yes, the software surrenders after you installed it. French, surrender, get it? Ok, so now it's done, please spare us the anti-french comments.
1. Re:Let's get this dealt with by __aavljf5849 · 2006-03-16 03:49 · Score: 1
  
  Good, I hate when I have to fight with the software. :)
Pointless by Anonymous Coward · 2006-03-15 02:04 · Score: 0

This topic is so worthless that you could have spent 10 minutes on your post instead of .001 minutes and still have been FP...and said something worth saying. Tool.
zope 3 ? by MaoTse · 2006-03-17 14:39 · Score: 1

This is false.

Although some zope 3 technology is included (as in all zope 2.9 installations) CPS is certainly NOT based on component architecture.

It's basically another CMF based system just like Plone.
1. Re:zope 3 ? by stuntpope · 2006-03-20 02:22 · Score: 1
  
  True that CPS is still a Zope 2 CMF product, but the summary is correct - it leverages Zope 3, leverage being the key word. And I mean beyond just having Five included in the Zope core. I'm looking at the download, and they're incorporating the Zope 3 testing mechanism with functional and unit tests, plus they use Zope 3 interfaces, schemas, and some ZCML.
  
  Their totally-Zope 3 work is announced at http://www.z3lab.org/.
2. Re:zope 3 ? by MaoTse · 2006-03-21 04:56 · Score: 1
  
  CPS 3.4 is a Zope 2.9 app
  
  It is not a Zope 3 app and although it leverages Zope 3 components certainly it is not based on zope 3 Component Architecture
3. Re:zope 3 ? by stuntpope · 2006-03-21 10:12 · Score: 1
  
  Thank you for repeating me ("CPS is still a Zope 2 CMF product"). But it should be pointed out that they could have written a 2.9 app and completely avoided interfaces, schemas, zcml and any parts of 3. To be pedantic, it's really more a Five app, the bridge between 2.x and 3.x. You can continue to argue the difference between "leveraging Zope 3 components" vs "leveraging Zope 3 component architecture" if you wish, but it seems silly to me.
4. Re:zope 3 ? by MaoTse · 2006-03-22 13:49 · Score: 1
  
  Yup, the wole "problem" has become to look so silly that some zope3 leading developers are planning
  to turn the zope3 revolution upside down