Re: [T5] Internationalizing included js

2009-02-11 Thread Alex Kotchnev
Thiago / Jonathan / Fernando, thanks for everyone's input ! Indeed, the asset localization of js does work out OK. Refactoring the code would certainly get the job done. I've also used the ${message:foo} expansions in js that's included in a page, that works OK too. I guess the issue is that

Re: ServletMultipartDecoder Question

2009-02-11 Thread Alex Kotchnev
I apologize : the proposed solution was for T5, not 4.1 . I must have overlooked your mention of T4. Unfortunately, I'm unable to offer any advice on T4. Cheers, Alex Kotchnev 2009/2/11 Wayward Java小白 > the version i use was Tapestry 4.1.6, the main problem is the upload > file'id;in your code

Re: Agile 2009

2009-02-11 Thread Christian Edward Gruber
Ok, you're a co-presenter. I'm not sure if you can edit now or not. I'll figure out how to re-order us with you as primary (so if it gets accepted, you get the comp). I may have to get an admin to do it. Take a look at the submission http://www.agile2009.org/node/1424 and let me know wha

Re: Agile 2009

2009-02-11 Thread Howard Lewis Ship
Ok, I'm in as "hlship" ... see if you can add me to the proposal. Great idea, thanks! On Wed, Feb 11, 2009 at 6:06 PM, Christian Edward Gruber wrote: > That's awesome, Howard. I'll send an off-list message on getting signed up > to the submissions system. > > Christian. > > On 11-Feb-09, at 20:0

Re: Agile 2009

2009-02-11 Thread Christian Edward Gruber
That's awesome, Howard. I'll send an off-list message on getting signed up to the submissions system. Christian. On 11-Feb-09, at 20:04 , Howard Lewis Ship wrote: I'd like to be of help; I'm not an expert at Agile (something about working alone without specific schedules undermines that), b

Re: ServletMultipartDecoder Question

2009-02-11 Thread Wayward Java小白
the version i use was Tapestry 4.1.6, the main problem is the upload file'id;in your code: *UploadedFile file = decoder.getFileUpload("Filedata"); * "Filedata" is the upload file'id? and all the files uploaded from the swfupload have the same id "Filedata"? if not, Could you tell me how you get a

Re: Agile 2009

2009-02-11 Thread Howard Lewis Ship
I'd like to be of help; I'm not an expert at Agile (something about working alone without specific schedules undermines that), but I do practice the principles of an agile developer, to the best of my knowledge. In any case, I'm glad this is being covered. On Wed, Feb 11, 2009 at 12:00 PM, Christi

Re: Switch from Prototype to jQuery?

2009-02-11 Thread Howard Lewis Ship
These are all good points. When this last flared up, at least a year back, I didn't want to tackle it because I could not then say what the "minimal set of functionality" would be. I think we're closer now. Coding in such a way that we can easily swap out or mix-n-match Prototype and jQuery will

Re: Switch from Prototype to jQuery?

2009-02-11 Thread Davor Hrg
One small example from tapestry.js when looking at this as prototype centric app it is totaly ok, but from the angle of enabling other libs this approach is completely unnecessary and easily fixed. again this is one example (rewriting all may not be as easy).. this code is called (tapestry.js:551

Re: Switch from Prototype to jQuery?

2009-02-11 Thread Davor Hrg
I was even willing to do this wrapper thing almost a year ago,all this is from going through tapestry js code last spring some things are just thoughts on what should not be done, and some may be comments on tap.js the Tapestry js code is not so complicated, and uses only a portion of pro

RE: Site security

2009-02-11 Thread James Sherwood
Hello, Thanks, The admin side is a full user/role deal but they are being very strict on security. The public side is a separate app so I'm good, thanks for your help. --James -Original Message- From: Christian Edward Gruber [mailto:christianedwardgru...@gmail.com] Sent: February-11-0

Re: Security / Authentication extension for Tapestry 5

2009-02-11 Thread Stephan Schwab
Kalle Korhonen-2 wrote: > > Anything came out of this or any other jsecurity integration with T5? I > see > tapestry-sesame project hasn't gotten out of the starting block. I'm going > to start using jsecurity but wouldn't mind using/borrowing code from > others. > Unfortunately I got quite bu

Re: T5 Question: how to access a parameter defined in parent component(not container) in 5.1.0.0

2009-02-11 Thread Yunhua Sang
Hello Howard, It turns out the error occurs only when the child wants to provide its own default binding for a parameter originally defined in parent; example: public class Parent { @Parameter private String name; void setupRender() { name.toUpperCase(); // NPE happens here

Agile 2009

2009-02-11 Thread Christian Edward Gruber
I just proposed a session for Agile2009 on using Tapestry 5 in an agile development context, focusing on its rapid development capabilities (reloading, etc.) it's strong support for clean layers, no wasted code, and inversion-of-control. I thought I'd let the lists know. If anyone wants t

Re: Security / Authentication extension for Tapestry 5

2009-02-11 Thread Kalle Korhonen
On Wed, Feb 11, 2009 at 11:22 AM, Joachim Van der Auwera wrote: > Have a look at chenillekit-access. That does the trick for me. Thanks. Yea, I'm thinking more in terms of domain security (it's not the page we need to protect, but the objects) for use in Trails. That's why I'm interested in jsec

Re: Security / Authentication extension for Tapestry 5

2009-02-11 Thread Joachim Van der Auwera
Have a look at chenillekit-access. That does the trick for me. Kind regards, Joachim Kalle Korhonen wrote: Anything came out of this or any other jsecurity integration with T5? I see tapestry-sesame project hasn't gotten out of the starting block. I'm going to start using jsecurity but wouldn't

Re: T5 Question: how to access a parameter defined in parent component(not container) in 5.1.0.0

2009-02-11 Thread Howard Lewis Ship
I'm not aware of anything that's changed in this area; could you elaborate? On Wed, Feb 11, 2009 at 10:56 AM, Yunhua Sang wrote: > Hello all, > > It seems there is no clear document about how to access a parameter > defined in parent component; previous to 5.0.18, I was using the way > of declari

Re: T5 Question: how to access a parameter defined in parent component(not container) in 5.1.0.0

2009-02-11 Thread Yunhua Sang
Hi Uli, inherit is used between a component and its container, it doesn't work in class and sub-class scenario. Thanks, Yunhua On Wed, Feb 11, 2009 at 2:04 PM, Ulrich Stärk wrote: > I've never done it, but there's the inherit: parameter binding, maybe that's > what you are looking for. Check th

Re: T5 Question: how to access a parameter defined in parent component(not container) in 5.1.0.0

2009-02-11 Thread Ulrich Stärk
I've never done it, but there's the inherit: parameter binding, maybe that's what you are looking for. Check the component paramter docs in the user guide. Uli Yunhua Sang schrieb: Hello all, It seems there is no clear document about how to access a parameter defined in parent component; prev

T5 Question: how to access a parameter defined in parent component(not container) in 5.1.0.0

2009-02-11 Thread Yunhua Sang
Hello all, It seems there is no clear document about how to access a parameter defined in parent component; previous to 5.0.18, I was using the way of declaring the parameter again in child class and it worked well; however looks like some changes in 5.1.0.0 broke the way, seems there is no link b

Re: [T5] URL Manipulation

2009-02-11 Thread xfile80303
Howard Lewis Ship wrote: > > I've been doing some cleanup of some internal APIs lately with the > goal to centralizing Tapestry's logic for generating and parsing > component event and page render links. This will allow an application > to override how that information is incorporated into the

Re: Security / Authentication extension for Tapestry 5

2009-02-11 Thread Thiago H. de Paula Figueiredo
Em Wed, 11 Feb 2009 15:17:42 -0300, Kalle Korhonen escreveu: Anything came out of this or any other jsecurity integration with T5? I see tapestry-sesame project hasn't gotten out of the starting block. I'm going to start using jsecurity but wouldn't mind using/borrowing code from others.

Re: Security / Authentication extension for Tapestry 5

2009-02-11 Thread Kalle Korhonen
Anything came out of this or any other jsecurity integration with T5? I see tapestry-sesame project hasn't gotten out of the starting block. I'm going to start using jsecurity but wouldn't mind using/borrowing code from others. Kalle On Fri, Oct 10, 2008 at 8:17 AM, Stephan Schwab wrote: > > S

Re: [T5] Internationalizing included js

2009-02-11 Thread Fernando Padilla
Not the best option but: Don't forget that included js files are determined using Tapestry's Internationalication/Localization code.. http://tapestry.apache.org/tapestry5/guide/localization.html so: include( my.js ) would look up the right js file using the locale of the user: my_en.js my_

Re: Site security

2009-02-11 Thread Christian Edward Gruber
Well, if you have your admin side as a separate application (on the same app-server) than the solution I mentioned could work if the front- end web-server is separate. In that case, you can link one (public) server against the app context of the public app, and a separate (internal) webserv

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Peter Stavrinides
I have added a page to the wiki, I will probably update it a bit still as I continue to modify this service: http://wiki.apache.org/tapestry/Tapestry5HowToMitigatingLoginAttacks Comments and suggestions encouraged! Peter - Original Message - From: "Joachim Van der Auwera" To: "Tapes

How to prevent default css in some pages

2009-02-11 Thread Damir Bijuklic
Hi, can I prevent rendering of default css on some pages? I have a page which launches appropriate gwt application via expression in template. It really does not need to load default.css... Damir

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Joachim Van der Auwera
Peter Stavrinides wrote: I use an ASO as a token when signing users in, I use this small method to introduce a time delay (if there are multiple failed attempts, I increase the delay): It would be an option to store server side when a person/system is allowed another try to login and assure all

Re: T5 and restrictive policies

2009-02-11 Thread Howard Lewis Ship
Please open an issue. I've also been thinking that Tapestry should be making use of AccessController.doPrivileged() ... I'm just not sure exactly what things need it. Certainly, creating a ClassLoader. On Wed, Feb 11, 2009 at 2:57 AM, Ulrich Stärk wrote: > This has come up before (for example h

Re: Construction of service 'Alias' has failed due to recursion

2009-02-11 Thread Howard Lewis Ship
All I can say for this is ... the 5.1 code tracks whats going on, and reports it when an exception occur. Makes tracking this stuff down much easier. You're not making any contribution to Alias? On Mon, Feb 9, 2009 at 3:59 PM, Thiago H. de Paula Figueiredo wrote: > One situation that can raise t

RE: IoC question - introducing a time delay in an ASO

2009-02-11 Thread James Sherwood
Hello, I could be wrong but worse case it would just slow down the interval, how bad or at all would depend on how you have your barracuda(or whatever) set up(IP's route to same server)? Just a shot in the dark maybe:) --James -Original Message- From: Olle Hallin [mailto:olle.hal...@gm

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Peter Stavrinides
Thanks for the input Thiago and James, I have adjusted my implementation to use a singleton as James suggested :-) thanks! we ran a Perl script against it and it seems solid. I will stick it on the wiki for anyone interested. Cheers, Peter -- If you are not an intended recipient of this e-mail

RE: IoC question - introducing a time delay in an ASO

2009-02-11 Thread James Sherwood
Hello, Thanks for the nudge in the right direction. I created the service and I was wondering if you could have a look at how I created it to be sure I've done it right(Everything seems to work fine but it's my first service and I want to be sure it's done right): Steps in reverse order basica

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Olle Hallin
What happens in a clustered environment? Tapestry services aren't part of normal HTTP session clustering. Olle 2009/2/11 Thiago H. de Paula Figueiredo > On Wed, Feb 11, 2009 at 11:16 AM, Ulrich Stärk wrote: > > Something like a singleton tapestry service with an access-synchronized > map >

T 5.1 Snapshot: error reporting

2009-02-11 Thread Andy Pahne
Hi, I am using the most recent snapshot. Since today I don't get any nice error reports anymore. No matter what error I introduce on purpose (missing a source for a loop component, compile errors, missing required parameters for components), the exception I get is _always_ the same, see b

Re: [T5] Something like GlazedLists for T5?

2009-02-11 Thread Thiago H. de Paula Figueiredo
Make sure all your Ajax requests have the header "X-Requested-With" = "XMLHttpRequest". Tapestry most probably will think that requests without that header are traditional HTTP requests and then it doesn't allow you to return a Block or Zone in an event handler method. -- Thiago

Re: [T5] Something like GlazedLists for T5?

2009-02-11 Thread Otho
If I trigger an event or redirekt to an eventlink in the page class, the event handler method is obviously not allowed to return a Block. The code below doesn't work, though the onUpdateGrid is called. When I comment the lines from "Link..." to "response..." out and click an eventlink on the page

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Thiago H. de Paula Figueiredo
On Wed, Feb 11, 2009 at 11:16 AM, Ulrich Stärk wrote: > Something like a singleton tapestry service with an access-synchronized map > inside maybe? That's what I'd do. James: sorry for mistaking your message as someone else's. :) -- Thiago --

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Ulrich Stärk
Something like a singleton tapestry service with an access-synchronized map inside maybe? Uli James Sherwood schrieb: Hello, I am not him:)(if that makes sense:) but I am doing the same thing right now. I am using the database not to slow connections but block IP's that get 100 failed login

RE: IoC question - introducing a time delay in an ASO

2009-02-11 Thread James Sherwood
Hello, I am not him:)(if that makes sense:) but I am doing the same thing right now. I am using the database not to slow connections but block IP's that get 100 failed login attempts over 2 minutes(blocked for 1 hour). I like your idea of a map held in memory much better. But how do I create an

RE: IoC question - introducing a time delay in an ASO

2009-02-11 Thread James Sherwood
Hello, Doesn't most dictionary style attacks create a new request each time therefore creating a new ASO? Kind of like closing your browser and reopening it each time? If not this is a much better idea than mine of delaying the IP. --James -Original Message- From: Thiago H. de Paula Fig

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Thiago H. de Paula Figueiredo
On Wed, Feb 11, 2009 at 10:46 AM, James Sherwood wrote: > Hello, Hi! > Doesn't most dictionary style attacks create a new request each time > therefore creating a new ASO? Kind of like closing your browser and > reopening it each time? They are done by bots (programs), not people, so I guess yo

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Thiago H. de Paula Figueiredo
On Wed, Feb 11, 2009 at 9:49 AM, Peter Stavrinides wrote: > I use an ASO as a token when signing users in, I use this small method to > introduce a time delay (if there are multiple failed attempts, I increase the > delay): Your code doesn't delay the ASO, it delays the request processing. ;) I

RE: Site security

2009-02-11 Thread James Sherwood
Hello, Thanks for the reply. I have a public side(anyone is allowed to access) and an admin side(very restricted), both on the same server. Will this still solve my issue if I use 2 webservers or will I need 2 separate servers? --James -Original Message- From: Christian Edward Gruber [

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Peter Stavrinides
Hi Thiago, thanks for the reply, that is pretty much what I expected... > For me :), the biggest questions is why would you want to insert a > delay in ASOs? I use an ASO as a token when signing users in, I use this small method to introduce a time delay (if there are multiple failed attempts, I

Re: [T5] Internationalizing included js

2009-02-11 Thread Thiago H. de Paula Figueiredo
On Wed, Feb 11, 2009 at 7:08 AM, Jonathan O'Connor wrote: > Alex, according to Thiago, you can have string substitution in the javascript: Yes, if the Javascript is generated inside the page, not in an external file. ;) -- Thiago

Re: IoC question - introducing a time delay in an ASO

2009-02-11 Thread Thiago H. de Paula Figueiredo
On Wed, Feb 11, 2009 at 8:25 AM, Peter Stavrinides wrote: > Hi everyone, Hi! > What are the effects of using Thread.sleep(myInterval) in an ASO? My > understanding is that each user receives a separate instance of the ASO, but > not > necessarily on a separate thread, right? Each user receive

Re: T5 and restrictive policies

2009-02-11 Thread Ulrich Stärk
This has come up before (for example here: http://markmail.org/thread/as67xcjkw2s2pbiw) and at the moment the only solution according to Howard is to completely deactivate security which I'm not very happy with. Howard, should I open an issue for specifying the access rights Tapestry needs or

IoC question - introducing a time delay in an ASO

2009-02-11 Thread Peter Stavrinides
Hi everyone, What are the effects of using Thread.sleep(myInterval) in an ASO? My understanding is that each user receives a separate instance of the ASO, but not necessarily on a separate thread, right? If this is true then what happens after Thread.sleep is active, and the next user asks for

Re: T5 and restrictive policies

2009-02-11 Thread Ulrich Stärk
The policy is of course grant codeBase "file:/var/lib/tomcat5.5/webapps/mailadmin/-" { permission java.security.AllPermission; }; Uli Ulrich Stärk schrieb: Hi, I've got a Tomcat 5.5 installation with a very restrictive security policy in place. When I try to access my application, I

T5 and restrictive policies

2009-02-11 Thread Ulrich Stärk
Hi, I've got a Tomcat 5.5 installation with a very restrictive security policy in place. When I try to access my application, I get a nasty security exception: java.security.AccessControlException: access denied (java.io.FilePermission /var/lib/tomcat5.5/webapps/mailadmin/WEB-INF/classes/org/

Re: Tapestry update from T5.0.12 to T5.0.18

2009-02-11 Thread Peter Stavrinides
That error occurs if you set a default value on a field eg: @Persist private boolean formSuccess_ = false; (IS WRONG) and should be: @Persist private boolean formSuccess_; Use @SetupRender or the like to initialize it. Cheers, Peter - Original Message - From: "Artur_eol" To: users@

Re: [T5] Internationalizing included js

2009-02-11 Thread Jonathan O'Connor
Alex, according to Thiago, you can have string substitution in the javascript: >>>THIAGO Another solution is to put a Tapestry expression expansion inside the Javascript code: Page class: public Link getEventLink() { return componentResources.createXXXLink(parameters); } Template: window