(like Afresko for example (http://bitnami.org/stack/alfresco))

Add big red bar with some text to Plone Control Panel if security hotfixes are not installed.

It should be possible to install new Plone products within Plone interface without editing buildout.cfg.
(The reality is that drupal, joomla, wordpress, typo3 have this option). Auto check for updates.

Now (Plone <= 4.1)xy@a.eu and XY@a.eu are two different users.

Currently all required CSS and JavaScript files are loaded _eagerly_ by Plone: all of them are in the head. Several files (e.g. JavaScript) aren't needed on particular pages, yet they're loaded. This requires additional bandwidth as well as loading time.

I.e. a display like the current update suggestion message for Plone
itsself.

3rd Party Updates installed by buildout that need migrations should be
able to hold a "untouched" flag like the "safe download" database in
MacOSX until the necessary migrations are finished. The Quickinstaller
still provides this in a more general form, but there are some cases
where we need more info at the right place saving support time. Maybe
I am overseeing something that is already present.

Scan for any add ons or parts of the software, that display an obvious
waiting of the system for missing useraction or update and display
them as a list by default or via a link in the traceback page until finished

When displaying errors in Plone link to one landing page on Plone.org with a list of common ressources to scan for the displayed error. Check if passing over some "safe" arguments to provide (pre) filtering of the displayed results for convenience.

Plone has a openId authentication plugin.

I would like to see an OAuth authentication plugin to be able to log in with Facebook, Twitter and other OAuth providers.

I was just thinking: there is no "help menu" from within plone.

Could this be a sane idea ?
1) A product that adds a "how to" action (in portal siteactions")
2) This "drags in the how tos from some webpage or wiki

I've had occasion to build sites where I wanted to control who had permission to view the author of particular content. Rather than have to build this into the particular product or make special templates for a particular object, this should be one of the base permissions controlled in Plone. This will be especially good with Dexterity types.

Plone should be able to use Google Gears in order to allow users to edit and/or view content offline.

examples
- http://www.sohtanaka.com/web-design/guest-post-sexy-drop-down-menu/

- http://www.sohtanaka.com/web-design/mega-drop-downs-w-css-jquery/

- http://www.sohtanaka.com/web-design/horizontal-sub-nav-with-css-jquery/

Something like http://opengrok.plone.org/ would be awesome for sponsoring source-code studying and understanding.

“Given enough eyeballs, all bugs are shallow”. Linus' law.

The admin should have a way to put a system wide message about the maintenance and put the site to a ready-only mode (without restarting Zope).

Plomino has a great user interface that makes it very easy for nonprgrammers & newbies to dsign & creat applications for their website. If the plone core worked more like this it would drastically increase user adoption.

The issue with plomino as an add-on is that there's too much bloat. Plomino as an add-on is like having a framework on top of an CMS thats on top of a framework. lol.

You can find out more information about plomino on their website http://plomino.net

When events are one day events i.e. when the user does not provide a start time, do not show the start time. Currently it appears as 12:00

The standard buildout script should contain markers such as "#EGGS" "#ZCML_SLUGS". These would allow external scripts to insert into the buildout.cfg file without the need for editing the file and would bring us closer to an automated install tool. Most of the plugins I use just have to be added to the eggs section of buildout.cfg, rerun buildout and restart zope.

At the moment many Plone 4 products are not visible when you search Plone.org downloads. This is because they are posted in PyPi, and either never posted in Plone.org or the releases are not posted in Plone.org. I propose that pypi trove classifiers be extended to include plone release (plone3/plone4) and they include the categorisation in plone (theme, storage etc). Then plone.org should suck data from pypi to find downloads.