Re: t5: protecting data from public access

2009-06-15 Thread P . Stavrinides
citly permissioned. regards, Peter - Original Message - From: "Onno Scheffers" To: "Tapestry users" Sent: Wednesday, 10 June, 2009 19:19:21 GMT +02:00 Athens, Beirut, Bucharest, Istanbul Subject: Re: t5: protecting data from public access > > this is a

Re: t5: protecting data from public access

2009-06-10 Thread Onno Scheffers
> > this is a good idea. which one is faster: > returning the image as a stream or a direct link to a physical file in the > file system? The physical file is much faster. It just gets a little troublesome to keep all files in sync if your application has to be distributed over multiple servers

Re: t5: protecting data from public access

2009-06-10 Thread Angelo Chen
this is a good idea. which one is faster: returning the image as a stream or a direct link to a physical file in the file system? Onno Scheffers-3 wrote: > >> >> Hi, >> your understanding is correct, photos are under protected folders. and >> the >> scaling will be a problem, but do you think

Re: t5: protecting data from public access

2009-06-10 Thread Onno Scheffers
> > Hi, > your understanding is correct, photos are under protected folders. and the > scaling will be a problem, but do you think it is good to store photo in > the > database's blob field? and every rendering requires copying from database > to > a temporary file? You can spool the data from a

Re: t5: protecting data from public access

2009-06-10 Thread Thiago H. de Paula Figueiredo
On Wed, Jun 10, 2009 at 12:14 PM, Angelo Chen wrote: > Hi, Hi! > and every rendering requires copying from database to > a temporary file? You don't need to that. Just create a page that returns the image wrapped in a StreamResponse. -- Thiago

Re: t5: protecting data from public access

2009-06-10 Thread Angelo Chen
Hi, your understanding is correct, photos are under protected folders. and the scaling will be a problem, but do you think it is good to store photo in the database's blob field? and every rendering requires copying from database to a temporary file? Onno Scheffers-3 wrote: > > I didn't fully un

Re: t5: protecting data from public access

2009-06-10 Thread Onno Scheffers
I didn't fully understand your exact requirement. Should the photo's be publicly accessible (as in published by the user) or do you need to be logged in to be able to access the photo? If public access it isn't allowed, you should move the photo's to a protected folder and you can create a Tapestr

Re: t5: protecting data from public access

2009-06-10 Thread Angelo Chen
Hi, I use dispatcher in some cases like logging and automatic logging of user with cookie, but how to use dispatcher in this context? any tips? how we expose the protected data? Angelo Thiago H. de Paula Figueiredo wrote: > > On Wed, Jun 10, 2009 at 7:06 AM, Angelo Chen > wrote: >> folder, b

Re: t5: protecting data from public access

2009-06-10 Thread Thiago H. de Paula Figueiredo
On Wed, Jun 10, 2009 at 7:06 AM, Angelo Chen wrote: > folder, but it will slow down the rendering, any idea how to meet this > requirement with tapestry 5? If you need or want a pure Tapestry solution, use a dispatcher. By the way, a dispatcher is possible a solution for almost any cross-page or c

Re: t5: protecting data from public access

2009-06-10 Thread Michael Gerzabek
Hi Angelo, you might investigate tapestry-spring-security [1]. It has everything you need and there is a snapshot [2] that works with T5.1. You can secure resources and if someone requests a secured resource authentication is required from the framework. So, no hacking possible. Michael [1

t5: protecting data from public access

2009-06-10 Thread Angelo Chen
Hi, In a app that I'm going to develop, it requires users to log in before they can browse job related info, quite a number of those are pictures, those photos now are stored in folders of the server, the easiest way is, link that folder to tomcat's context, and program can refer to a particular