Re: Expansions, projections and arrays

2009-08-26 Thread Kalle Korhonen
Almost brilliant! Except that if I have to write my own transformer or the bean from scratch, it's still more lines of code than just writing the getters for the template. There's no way to suppress the properties you've aliased (right?) but maybe I'll just use aliasToBean() and create a "Displayab

Re: Expansions, projections and arrays

2009-08-26 Thread Igor Drobiazko
You can set a ResultTransformer to your criteria. https://www.hibernate.org/hib_docs/v3/api/org/hibernate/transform/ResultTransformer.html On Thu, Aug 27, 2009 at 8:06 AM, Kalle Korhonen wrote: > I'm using tapestry-hibernate and I have a case where I'm forced to use > Projections (or aggregate f

Expansions, projections and arrays

2009-08-26 Thread Kalle Korhonen
I'm using tapestry-hibernate and I have a case where I'm forced to use Projections (or aggregate functions in hql but same end result) so my query is returning an object array. Now, I'm rendering a list of that information to the user, but since using ${obj[0]} expansion is not supported, I'm force

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Alex Kotchnev
@Robert, thanks for releasing the 1.0.0 version. I added it, it seems to work OK, with a minor issue. I'm using 5.0.18, and when I try to access a resource that shouldn't be accessible, I get the following exception: - org.apache.tapestry5.ioc.internal.OperationExceptionSymbol 'tapestry.

Re: T5.1: Get block by (page and block) names?

2009-08-26 Thread ThirstyCrow
Thiago H. de Paula Figueiredo wrote: > > Em Wed, 26 Aug 2009 11:29:42 -0300, ThirstyCrow <5451vs5...@gmail.com> > escreveu: > >> if the getPageBlock() method works, everything will be ok. Here is where >> I got stuck. How to implement this method? Or is it possible to write >> such a met

Re: Noob: Wishing for a tapestry-jpa like tapestry-hibernate

2009-08-26 Thread Pierce T. Wetter III
Oh well, diving in to see how far I can get by just taking tapestry-hibernate and making a JPA version. I did the same some time ago. It works for me, but is far from being complete: http://bitbucket.org/psartini/tapestry-jpa/ There is a lot of stuff missing, especially the more advance

t5: Dynamic Forms & Grids

2009-08-26 Thread sparqle
Hi, I would like to understand how to create dynamic forms and grids in T5. For example, suppose I am trying to build a site like Amazon.com with lot of items for sale (including books, tvs, computers etc.). Each type of item may have its own set of attributes - books (author, number of pages, pub

Chenille Kit OnEvent Mixin

2009-08-26 Thread Pedro Januário
Hey, I'm facing a weird problem with Chenille Kit OnEvent Mixin. I have Tapestry 5.1.0.5 Application that uses ajax in some places and everything is working well except some combo box that uses Chenille Kit OnEvent Mixin. I have discovered that the Kaspersky is blocking the response. The request i

T5Eclipse patch

2009-08-26 Thread Erik Putrycz
Is someone still in charge of T5Eclipse? I fixed a small annoying bug that causes bunch of NPEs but I have no clue what is the good place to submit patches. Erik. - Apption Software -- View this message in context: http://www.nabble.com/T5Eclipse-patch-tp25155484p25155484.html Sent from th

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Robert Zeigler
I rescind this comment; just duplicated it. ;) Robert On Aug 26, 2009, at 8/262:08 PM , Robert Zeigler wrote: Agreed that it's tedious but better to whitelist (cf my e-mail from 2007 where I expressed my personal preference for whitelisting). I've been playing around with this a bit... have y

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Robert Zeigler
Agreed that it's tedious but better to whitelist (cf my e-mail from 2007 where I expressed my personal preference for whitelisting). I've been playing around with this a bit... have you demonstrated the vulnerability in WEB-INF and, eg, template files? I just tried, but couldn't duplicate...

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Ulrich Stärk
You'd still have to write them. The framework default is to allow access to sensitive files. That's the problem here. On 26.08.2009 20:43 schrieb Thiago H. de Paula Figueiredo: Em Wed, 26 Aug 2009 15:09:08 -0300, Ulrich Stärk escreveu: There is no framework solution for context assets. Reso

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Ulrich Stärk
Robert, While whitelisting a lot of extensions might seem tedious, it's a lot less painful than to forget to blacklist the one file that someone might use to compromise the security of your whole web app. The problem we have is that all Tapestry applications are insecure *by default* at the mo

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Thiago H. de Paula Figueiredo
Em Wed, 26 Aug 2009 15:09:08 -0300, Ulrich Stärk escreveu: There is no framework solution for context assets. ResourceDigestGenerator is purely for classpath assets. There are two: a RequestFilter or a Dispatcher. -- Thiago H. de Paula Figueiredo Independent Java consultant, developer, an

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Ulrich Stärk
There is no framework solution for context assets. ResourceDigestGenerator is purely for classpath assets. Uli On 26.08.2009 19:55 schrieb Robert Zeigler: Try version 1.0.0, just released today. ;) See my comment on issue 815 for the maven url, artifact id, etc. In any event, there's a framew

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Robert Zeigler
Try version 1.0.0, just released today. ;) See my comment on issue 815 for the maven url, artifact id, etc. In any event, there's a framework solution in place already... it's just that it's a blacklist-based solution instead of a whitelist-based solution. Although whitelist-based security t

Re: Noob: Wishing for a tapestry-jpa like tapestry-hibernate

2009-08-26 Thread Pierce T. Wetter III
On Aug 26, 2009, at 5:47 AM, Piero Sartini wrote: Oh well, diving in to see how far I can get by just taking tapestry-hibernate and making a JPA version. I did the same some time ago. It works for me, but is far from being complete: http://bitbucket.org/psartini/tapestry-jpa/ There is

sharing my loading-page function

2009-08-26 Thread Alfonso Quiroga
Hi! I'm new in T5 and I've succeed with showing "loading..." in the page, just creating a mixin, and I wanted to share it. First, I use lightbox.js, a very small js lib, (6kb, 1kb compressed when tapestry uses gzip). This lib puts the background dark and a box appears, just what I wanted. OK, as I

Re: Securing files on the classpath/webapp context (was: Re: Running Tapestry 5.0.18 on Google App Engine)

2009-08-26 Thread Onno Scheffers
> > The Tapestry asset feature is used even when you use files from the context > (asset:context:something.jpg). Yes, but does that mean js-files and css-files etc. should be whitelisted by default? Normally if Tapestry encounters an asset:-statement, it knows the asset should be whitelisted. In

Re: getClientId returning null

2009-08-26 Thread Bruno Santos
Thanks for clarifying that. > Pass the component's clientside id as a context parameter to your handler > method. Is there a way, server-side, i can map the clientside id context to the component so i can know wich id is what? I'm asking this cause, using your suggestion i would have to pass more

Re: Testify and Injecting Services from IOC Registry

2009-08-26 Thread Mark W. Shead
Paul, I am using the Selenium testing so I'm subclassing from AbstractIntegrationTestSuite in tapestry-test. Is there a way to get the IOC Registry from there? Mark On Aug 26, 2009, at 4:47 AM, Paul Field wrote: Hi Mark, If you are subclassing from one of the TapestryTest classes in T

Re: T5.1: Get block by (page and block) names?

2009-08-26 Thread Thiago H. de Paula Figueiredo
Em Wed, 26 Aug 2009 11:29:42 -0300, ThirstyCrow <5451vs5...@gmail.com> escreveu: if the getPageBlock() method works, everything will be ok. Here is where I got stuck. How to implement this method? Or is it possible to write such a method at all? To get a page instance by name: ComponentSo

T5.1: Get block by (page and block) names?

2009-08-26 Thread ThirstyCrow
Currently, I have a event handler like this: Object onAction(String page) { return page; } Now I want to enable ajax, so I try to return a certain block rather than the whole page, if the incoming request is a XHR: Object onAction(String page, String block) { if (req

Re: getClientId returning null

2009-08-26 Thread Ulrich Stärk
The problem here is that you are trying to access the component's clientId without the component being rendered (in your case from an XHR). The clientId is only accurate after the component has rendered itself. See http://tapestry.apache.org/tapestry5.1/apidocs/org/apache/tapestry5/ClientElement

Securing files on the classpath/webapp context (was: Re: Running Tapestry 5.0.18 on Google App Engine)

2009-08-26 Thread Ulrich Stärk
I really like to hear what the other devs (apart from Thiago) are thinking about this, whether there are objections against what I proposed or if you think there are better solutions. This really needs fixing ASAP. Cheers, Uli On 26.08.2009 13:41 schrieb Ulrich Stärk: > I think that's way too

Re: Securing files on the classpath/webapp context (was: Re: Running Tapestry 5.0.18 on Google App Engine)

2009-08-26 Thread Thiago H. de Paula Figueiredo
Em Wed, 26 Aug 2009 11:10:17 -0300, Onno Scheffers escreveu: I think not even css-files, js-files and png-files should be whitelisted by default to be honest. We already have a way of making such files public: put them in the public web context. The Tapestry asset feature is used even wh

getClientId returning null

2009-08-26 Thread Bruno Santos
Hi all, My name is Bruno and I'm new to this mailing list and new to tapestry. I've been banging my head hard and googling (probably been using wrong keywords) for an answer for this, why is getClientId returning null, isn't it suppose to return the client id? If it ain't, is there a workaround?

Re: Securing files on the classpath/webapp context (was: Re: Running Tapestry 5.0.18 on Google App Engine)

2009-08-26 Thread Onno Scheffers
On Wed, Aug 26, 2009 at 3:57 PM, Ulrich Stärk wrote: > I really like to hear what the other devs (apart from Thiago) are thinking > about this, whether there are objections against what I proposed or if you > think there are better solutions. This really needs fixing ASAP. I think not even css

Re: Noob: Wishing for a tapestry-jpa like tapestry-hibernate

2009-08-26 Thread Piero Sartini
> Oh well, diving in to see how far I can get by just taking > tapestry-hibernate and making a JPA version. I did the same some time ago. It works for me, but is far from being complete: http://bitbucket.org/psartini/tapestry-jpa/ There is a lot of stuff missing, especially the more advanced

Styles improvement proposal for the beaneditform

2009-08-26 Thread Sebastian Hennebrueder
Hello, if the labels are very strong the line is wrapped around and the next label stand in front of the wrong input elements. if we modify the detault.css adding the following styles div.t-beaneditor-row{ clear:left; } div.t-beaneditor-row label{ clear:none; } it works. I have tested

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Christian Riedel
Yes, Alex, the thread is from 2007, but the workaround that Martijn also lists here has been posted to the thread just 2 weeks ago. I use it in my current T5.1 application and it works fine! martijn.list schrieb: Alex Kotchnev wrote: Christian, you seem to indicate that there's an easy fix

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Ulrich Stärk
I think that's way too complicated. Keep it simple: a) blacklist everything and let the user contribute filenames, file extensions or paths to some whitelisting service (already having some reasonable defaults like .css, .js, .png, ...) which AssetSource queries before returning an Asset b) res

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Onno Scheffers
> > I agree. My suggestion to TAP-815 was: > > "I would suggest to have a chain of command, each object in it receiving > the requested URL and responding true (ok), false (file is forbidden) or > null (this object doesn't handle this URL, ask the same thing to the next > object. This chain of comm

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Thiago H. de Paula Figueiredo
Em Wed, 26 Aug 2009 04:12:29 -0300, Onno Scheffers escreveu: @Thiago How about allowing absolutely nothing from the classpath/WEB-INF initially? Directory listing should also be disabled. I agree. My suggestion to TAP-815 was: "I would suggest to have a chain of command, each object in

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Onno Scheffers
Hi Dmitry, thanks for this information. 20 seconds to first page is indeed pretty long, but if you use a cron-job to keep the application warm, the long startup time is less of an issue. This was one of my major doubts about Tapestry on GAE, but your approach seems like a very good work-around. r

Re: Testify and Injecting Services from IOC Registry

2009-08-26 Thread Paul Field
Hi Mark, If you are subclassing from one of the TapestryTest classes in Testify then the @Inject annotation should be processed in your test. You can put a breakpoint into TapestryTester#injectInto(Object) to check that the annotation is being processed. If that's happening then perhaps the IOC

Re: Render Page to file, etc

2009-08-26 Thread Nathan Beemer
#1 is the real trick. The way I finally got a working implementation was to simply establish an HttpSession to Tapestry to call up the Page requested. Basically mimicing a web browser. I can then capture the OutputStream that way and convert to String, etc for rendering to pdf. There's extra overh

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Dmitry Gusev
It tooks 15 seconds to startup the instance + 5 seconds to render the first page (same on my development laptop and GAE cloud) Thats pretty long but I guess the bottleneck here is not in tapestry but rather in spring. As for cleaning up an instance after it's not being used - I can't tell you, th

actionliks and XHR response problem

2009-08-26 Thread Janko Muzykant
hi guys, this is quite strange, but i noticed that actionlinks "sometimes" return unexpected results. i have a page containing lot of actionlinks changing/updating certain elements via ajax request/response. from java side it's nothing more than just returning a block or MultiZoneUpdate as a resu

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread martijn.list
Alex Kotchnev wrote: Christian, you seem to indicate that there's an easy fix for this on the mailing list; however, the last discussion there is from around 2007; the module that Robert is referring to is out of date (e.g. referring to old package names, etc). Any other tips on addressing thi

Re: Running Tapestry 5.0.18 on Google App Engine

2009-08-26 Thread Onno Scheffers
> Everyone is invited to contribute to the solution by posting all the ways we can have access to assets that shouldn't be available. ;) @Thiago How about allowing absolutely nothing from the classpath/WEB-INF initially? Directory listing should also be disabled. When a page or component comes alo