Re: Security issue with access control documentation in Wiki

2009-09-04 Thread P . Stavrinides
. Kind regards, Peter - Original Message - From: "Sebastian HennebrŸüder" To: "Tapestry users" Sent: Tuesday, 25 August, 2009 17:25:42 GMT +02:00 Athens, Beirut, Bucharest, Istanbul Subject: Security issue with access control documentation in Wiki Hello, the examp

Re: Security issue with access control documentation in Wiki

2009-08-25 Thread Howard Lewis Ship
I created the ComponentRequestHandler service (a pipeline, with filters) for this purpose; to make a single logical place to put filters for both page render requests and component event requests. public interface ComponentRequestHandler { /** * Handler for a component action request whic

Re: Security issue with access control documentation in Wiki

2009-08-25 Thread Sebastian Hennebrueder
Thiago H. de Paula Figueiredo schrieb: Em Tue, 25 Aug 2009 11:33:18 -0300, Sebastian Hennebrueder escreveu: But it is an internal service which are from my understanding discouraged to use. ComponentEventLinkEncoder isn't internal, as it's in the org.apache.tapestry5.services package. Only

Re: Security issue with access control documentation in Wiki

2009-08-25 Thread Thiago H. de Paula Figueiredo
Em Tue, 25 Aug 2009 11:33:18 -0300, Sebastian Hennebrueder escreveu: But it is an internal service which are from my understanding discouraged to use. ComponentEventLinkEncoder isn't internal, as it's in the org.apache.tapestry5.services package. Only classes and interfaces in packages

Re: Security issue with access control documentation in Wiki

2009-08-25 Thread Sebastian Hennebrueder
Thiago H. de Paula Figueiredo schrieb: Em Tue, 25 Aug 2009 11:25:42 -0300, Sebastian HennebrŸüder escreveu: Hello, Hi! A correct implementation needs to implement the page name extraction as done in ComponentEventLinkEncoderImpl.decodeComponentEventRequest and as in the decodePageRenderRe

Re: Security issue with access control documentation in Wiki

2009-08-25 Thread Thiago H. de Paula Figueiredo
Em Tue, 25 Aug 2009 11:25:42 -0300, Sebastian HennebrŸüder escreveu: Hello, Hi! A correct implementation needs to implement the page name extraction as done in ComponentEventLinkEncoderImpl.decodeComponentEventRequest and as in the decodePageRenderRequest method of the same class. Why d

Security issue with access control documentation in Wiki

2009-08-25 Thread Sebastian Hennebrueder
Hello, the examples in the Wiki uses either a request filter or a request dispatcher. Both solutions extract the page name in order to check if there are any restrictions. This code orginally comes from the PageRenderDispatcher. String pageName; String path = request.getPath(); i

Security issue with access control documentation in Wiki

2009-08-25 Thread Sebastian HennebrŸüder
Hello, the examples in the Wiki uses either a request filter or a request dispatcher. Both solutions extract the page name in order to check if there are any restrictions. This code orginally comes from the PageRenderDispatcher. String pageName; String path = request.getPath();