--- a/CHANGES.txt	Thu Oct 04 02:16:15 2001 +0000
+++ b/CHANGES.txt	Fri Oct 05 02:23:24 2001 +0000
@@ -2,11 +2,34 @@
 are given with the most recent entry first.
 
 2001-??-?? - 0.2.9
+Feature:
+ . roundup-admin create now prompts for property info if none is supplied
+   on the command-line.
+ . hyperdb Class getprops() method may now return only the mutable
+   properties.
+ . CGI interfaces now generate a top-level index of their known instances.
+
+Changed:
+ . Login now uses cookies, which makes it a whole lot more flexible. We can
+   now support anonymous user access (read-only, unless there's an
+   "anonymous" user, in which case write access is permitted). Login
+   handling has been moved into cgi_client.Client.main()
+ . The "extended" schema is now the default in roundup init.
+ . The schemas have had their page headings modified to cope with the new
+   login handling. Existing installations should copy the interfaces.py
+   file from the roundup lib directory to their instance home.
+
 Fixed:
+ . Incorrectly had a Bizar Software copyright on the cgitb.py module from
+   Ping - has been removed.
  . Pretty time interval wasn't handling > 1 month properly.
  . Generation of links to Link/Multilink in indexes. (thanks Hubert Hoegl)
  . AssignedTo wasn't in the "classic" schema's item page.
-
+ . Fixed a whole bunch of places in the CGI interface where we should have
+   been returning Not Found instead of throwing an exception.
+ . Fixed a deviation from the spec: trying to modify the 'id' property of
+   an item now throws an exception.
+ . The plain() template function now html-escapes the content.
 
 2001-08-30 - 0.2.8
 Fixed: