Usage

Since cone.app not knows about the underlying data, cone.fileupload only provides an abstract server implementation.

So first we need to provide a model.

from cone.app.model import BaseNode
from pyramid.security import ALL_PERMISSIONS
from pyramid.security import Allow
from pyramid.security import Deny
from pyramid.security import Everyone

ACL = [
    (Allow, 'role:manager', ['add', 'delete']),
    (Allow, Everyone, ['login']),
    (Deny, Everyone, ALL_PERMISSIONS),
]

class Container(BaseNode):
    __acl__ = ACL

    def __call__(self):
        """Persistence happens here.
        """

class File(BaseNode):
    __acl__ = ACL

    # allow setting any value types
    child_constraints = None

Now we need to provide a concrete FileUploadHandle implementation for our model.

from cone.fileupload.browser.fileupload import FileUploadHandle
from pyramid.view import view_config

@view_config(
    name='fileupload_handle',
    context=Container, # <- here the view gets bound to our model
    accept='application/json',
    renderer='json',
    permission='add')
class ContainerFileUploadHandle(FileUploadHandle):

    def create_file(self, stream, filename, mimetype):
        # this function gets called for persisting uploaded files
        file = self.model[filename] = File()
        file['body'] = stream.read()
        return {
            'name': filename,
            'size': len(file['body']),
            'view_url': '/{0}'.format(file.name),
            'download_url': '/{0}/download'.format(file.name),
            'delete_url': '/{0}/filedelete_handle'.format(file.name),
            'delete_type': 'POST',
        }

    def read_existing(self):
        # this function gets called for initial reading of existing files
        files = list()
        for node in self.model.values():
            files.append({
                'name': node.name,
                'size': len(node['body']),
                'view_url': '/{0}'.format(node.name),
                'download_url': '/{0}/download'.format(node.name),
                'delete_url': '/{0}/filedelete_handle'.format(node.name),
                'delete_type': 'POST',
            })
        return files

Optionally we might want to provide a custom fileupload tile for our model.

from cone.tile import tile
from cone.fileupload.browser.fileupload import FileUploadTile

@tile(
    name='fileupload',
    path='cone.fileupload:browser/fileupload.pt',
    interface=Container,
    permission='add')
class ContainerFileUploadTile(FileUploadTile):
    accept_file_types = r'/(\.|\/)(gif|jpg)$/i'

The file upload actions are either rendered as dedicated tile by name fileupload_toolbar or integrated into the context menu. If it’s desired to display the action in the context menu, fileupload_contextmenu_actions flag must be set on model properties.

2.1.0 (2026-11-09)

• filedelete_handle only accepts POST requests. A FileUploadHandle returning delete_type needs to return POST. [rnix]

2.0.1 (2026-10-31)

• Extend the JS tests to 100 % coverage, all modules including bundles are loaded by the tests now. [rnix]

• Lint and format the JS code with biome. make check runs biome check, make format runs biome check --write (see include.mk). Behavior unchanged. [rnix]

• JS tooling: Commit pnpm-lock.yaml. Upgrade @web/test-runner to 1.0 and run the JS tests headless in Chromium via Playwright, installed in the JS CI workflow. Pin patched versions of vulnerable transitive dependencies via pnpm.overrides. [rnix]

• Sort the imports with ruff (one per line, from imports first, no sections) and format the code with ruff format (90 characters per line, single quotes). [rnix]

• Add import sorting (I rules) and the formatter settings to the ruff configuration in pyproject.toml. [rnix]

2.0.0 (2026-10-24)

• Drop the Python 2 StringIO import fallback in tests. [rnix]

• Modernise the code ruff flags as outdated: u'' prefixes, class X(object), .format() over f-strings. Behaviour unchanged. super(Class, self) is kept, see cone.app. [rnix]

• Add qa.ruff domain to Makefile and pin the ruff rule selection in pyproject.toml, make check runs ruff check. [rnix]

• Pin setuptools<82.0.0 in mx.ini. pyramid 2.0.2 still imports pkg_resources, which setuptools 82 removed. [rnix]

• Bootstrap 5 styles.

1.1.0 (2026-02-03)

• Refactor package layout to use pyproject.toml and implicit namespace packages. [rnix]

• Setup Makefile. [lenadax]

• Run tests with pytest. [lenadax]

1.0a1 (2023-05-15)

• Use webresource for resource registration. [rnix]

• Replace deprecated use of allow_non_node_children by child_constraints. [rnix]

0.8 (2025-10-25)

• Pin upper versions of dependencies. [rnix]

• Replace deprecated use of allow_non_node_children by child_constraints. [rnix]

0.7 (2022-01-19)

• Modernize JavaScript setup.

• Add i18n_messages_src, upload_template_src and download_template_src attributes to FileUploadTile.

• Add optional download_url to file data dict.

• Remove thumbnailUrl from file data dict.

Breaking Changes

• Rename url to view_url in file data dict.

• Rename deleteUrl to delete_url in file data dict.

• Rename deleteType to delete_type in file data dict.

0.6 (2021-11-21)

• Fileupload actions optionally work from contextmenu. [rnix]

• Move button toolbar into dedicated tile for customization. [rnix]

• Reduce included files and plugins of jquery fileupload to required ones. [rnix]

• Update jquery fileupload to version 10.32.0. [rnix]

0.5 (2021-11-08)

• Rename deprecated allow_non_node_childs to allow_non_node_children in tests and documentation. [rnix]

0.4 (2020-05-30)

• Initial pypi release [rnix]

0.3

• Python 3 compatibility. [rnix]

• Convert doctests to unittests. [rnix]

• Use cone.app.main_hook decorator. [rnix]

• Move resource registration to main hook. [rnix]

• Upgrade to cone.app 1.0b1. [rnix]

0.2

• Code organization. [rnix]

0.1

• Make it work [rnix]