T5 Best way to omit part of result page in output

2007-08-03 Thread Janko Muzykant
hello, i would like to omit some part of my page eg. allow only one component to be written in output. i did it writing my own MarkupWriter with enable/disable function which when enabled works as standard writer and when disabled ignores all writings. It's initially disabled and only specific com

Re: [T5] Security of files in the classpath

2007-08-03 Thread Sabine K.
Hi Robert, How to implement this component? Is it necessary to register the component in the appmodule? Thx Sabine Robert Zeigler wrote: > > Couple of comments... > First, the T5 asset service has the md5 feature. But the default > implementation, at the moment, only requires md5 hashin

Re: T4 creating dynamic styles for divs

2007-08-03 Thread Christian Haselbach
On Thu, Aug 02, 2007 at 06:32:06PM -0700, kael20 wrote: > I have an issue where I need to create the style for a div based on the > properties of an object in my database. This object contains top, left, > width, and height which are important to create this particular div. Is > there anyway that

Re: [ANN]T5 book: reviewers are needed

2007-08-03 Thread 小司
I am looking forward to reading it. 2007/8/3, Nick Westgate <[EMAIL PROTECTED]>: > This is great news, BTW. Good luck with it! > > Cheers, > Nick. > > > Kolesnikov, Alexander GNI wrote: > > I am writing a book on T5 and the publisher is looking for technical > > reviewers for this book. > > Please

Re: [T4] Event for every request to clear data

2007-08-03 Thread Christian Haselbach
On Thu, Aug 02, 2007 at 10:12:14AM -0500, Ben Dotte wrote: > Is there any reason you can't use a threaded HiveMind service? That is > usually the approach I take when I have a shared resource that should > only live for the duration of a request. Thanks for the tip. I'm not quite sure if this work

AW: T4.1.2 and beanform

2007-08-03 Thread Peter Schröder
hi goeff, it worked for me: net.sf.tacos tacos-core 4.1.0-SNAPSHOT com.javaforge.tapestry tapestry-prop 1.0.0 tapestry tapestry tapestry-annotations tapestry

Re: [T5] Security of files in the classpath

2007-08-03 Thread Thiago H de Paula Figueiredo
On Fri, 03 Aug 2007 10:03:37 -0300, Francois Armand <[EMAIL PROTECTED]> wrote: Thiago H de Paula Figueiredo wrote: Would a black list intead of a white list better? I suppose there are less files to hide than files to allow access. Well, I think that one of the best principle in security is

Re: JumpStart v1.6 - for Tapestry 4.1.2

2007-08-03 Thread Renat Zubairov
Hello Geoff, We had the same trade offs for our system but still we prefer Hivemind implementation of DI over EJB3 implementation, because of the following reasons: 1. DI from Hivemind has better integration and less infrastructure requirements - jetty much simpler than full blown EJB container. 2

Re: JumpStart v1.6 - for Tapestry 4.1.2

2007-08-03 Thread Renat Zubairov
BTW Could you, Geoff, comment on how EJB 3 solve Hibernate detached object multi-thread access problem? I didn't got your point in this case. Renat On 03/08/07, Geoff Callender <[EMAIL PROTECTED]> wrote: > Hi Kalle, > > I guess my starting point is that I really like the discipline of > building

Re: T5 Best way to omit part of result page in output

2007-08-03 Thread Daniel Jue
Hi, I would try blocks of components at the end of your template, and a delegate component. The delegate refers to a method in your page or component class the template it for. It returns an Object, which is actually one of the component blocks. It can also return null and nothing will be rendere

Re: Acegi

2007-08-03 Thread Paulo Ramos
Thanks, but probably i don't explain well. I already have Acegi with that configuration. My problem isn't the login page but the response of the form in the login page. This form is do a "post" to direct.svc and i cant give access to anonymous user to the url: /direct.svc** Paulo Ramos Mart

Re: Acegi

2007-08-03 Thread Martino Piccinato
Sorry I missed that. Without investigating too much I can se you have 2 possibilities 1) Having a separate servlet/url for login (not that bad ...) 2) Doing your on ObjectDefinitionSOurce implementation returning different config attributes depending on passed request (in filter context this obje

Re: JumpStart v1.6 - for Tapestry 4.1.2

2007-08-03 Thread Geoff Callender
Hi Kalle, I guess my starting point is that I really like the discipline of building a business facade for my system ie. a layer that says what the system can do for you, irrespective of UIs. So then the question for me is where to put that layer. Since EJB3 arrived, I've opted to put t

Re: T5 Best way to omit part of result page in output

2007-08-03 Thread DougS
Also, if you would like to put the logic to determine if a component should display or not in that component, you can have your SetupRender or BeginRender phases return a boolean result -- if it returns the false, the component will not be rendered (no matter where that component is placed). For

Re: [T5] Security of files in the classpath

2007-08-03 Thread Francois Armand
Thiago H de Paula Figueiredo wrote: Would a black list intead of a white list better? I suppose there are less files to hide than files to allow access. Well, I think that one of the best principle in security is "explicit authorization" : you just do not want that a confidential file is access

Re: [T5] Security of files in the classpath

2007-08-03 Thread Robert Zeigler
Nope. Zero configuration necessary for the basic functionality. Keep in mind, however, that the default configuration is pretty restrictive, since it is whitelist-based, and the only entries added by default are the assets that come "out of the box" with tapestry (tapestry.css, tapestry.js, e

Re: [T5] Security of files in the classpath

2007-08-03 Thread Robert Zeigler
I don't plan on changing the default configuration from whitelist to blacklist... it's the fallback. I'm a fan of "deny unless explicitly authorized", as well. The AssetProtectionDispatcher takes an ordered configuration of AssetPathAuthorizer's, with the default whitelist implementation bei

Re: Acegi

2007-08-03 Thread Martino Piccinato
you have to configure your FilterSecurityInterceptor with something like this /login.html**=ROLE_ANONYMOUS,ROLE_AUTHENTICATED /**=ROLE_AUTHENTICATED

Re: [T4] Event for every request to clear data

2007-08-03 Thread Ben Dotte
Yes, a threaded service is created and bound to the current request thread the first time it is requested. There is a more detailed explanation here: http://hivemind.apache.org/hivemind1/services.html#Threaded+Service+Model They also mention on there how to handle cleanup at the end of the reques

Re: Acegi

2007-08-03 Thread Paulo Ramos
smime.p7s Description: S/MIME Cryptographic Signature

[T5] Why is default ValidationTracker in Form marked Persist not Persist("flash")

2007-08-03 Thread Christian Koeberl
Hi! I was wondering why the "_defaultTracker" in the Form component is marked as @Persist not as @Persist("flash"). In my opinion it should be @Persist("flash")!! Persisting the ValidationTracker in the session leads to some (usually) not wanted behaviour: the validation is not reset, even thou

Re: T4.1.2 and beanform

2007-08-03 Thread Geoff Callender
Hi, I've just tried beanform-core-0.8-20070629.194801-1.jar but I'm still getting the problem. Anyone else? [ +/- ] Exception: Unable to lookup $BeanFormButtons_31: $BeanFormButtons_31 org.apache.hivemind.ApplicationRuntimeException Unable to lookup $BeanFormButtons_31: $BeanFormButtons_3

Re: [T4] Event for every request to clear data

2007-08-03 Thread Ben Dotte
Ok, yeah actually Tapestry's ApplicationServlet takes care of the HiveMind filter so nevermind that part: http://tapestry.apache.org/tapestry4.1/usersguide/hivemind.html#Bootstrapping%20the%20Registry On 8/3/07, Ben Dotte <[EMAIL PROTECTED]> wrote: > Yes, a threaded service is created and bound t

Re: JumpStart v1.6 - for Tapestry 4.1.2

2007-08-03 Thread Thiago H de Paula Figueiredo
On Fri, 03 Aug 2007 11:11:23 -0300, Renat Zubairov <[EMAIL PROTECTED]> wrote: Main drawback is offcourse XML files, but we hope it will be fixed with T5 IOC and/or HM2 Tapestry-IoC requires no XML files and is very easy and powerful. Most people here already discovered the pleasure of Tape

Acegi

2007-08-03 Thread Paulo Ramos
Hi, I have 3 projects and i decide group commons components and pages in one library. One of the pages is the Acegi login. I have friendly url's and secure pages with Acegi. When i try to login, the form is sent by "post" to direct.svc and fail because this url is protected. How i can open the

Re: [T5] Security of files in the classpath

2007-08-03 Thread Thiago H de Paula Figueiredo
On Fri, 03 Aug 2007 05:33:55 -0300, Robert Zeigler <[EMAIL PROTECTED]> wrote: Nope. Zero configuration necessary for the basic functionality. Keep in mind, however, that the default configuration is pretty restrictive, since it is whitelist-based, and the only entries added by default are t

Re: [T5] Why is default ValidationTracker in Form marked Persist not Persist("flash")

2007-08-03 Thread Howard Lewis Ship
By making it @Persist (i.e. with default), then the container (i.e., your page) can set a @Meta to control the default persistence of components below it. Thus, if you want the default to be "flash", you're in luck. Or, you can inject the Form component, it has methods that overlap ValidationDele

Re: [T5] Why is default ValidationTracker in Form marked Persist not Persist("flash")

2007-08-03 Thread Thiago H de Paula Figueiredo
On Fri, 03 Aug 2007 16:07:07 -0300, Howard Lewis Ship <[EMAIL PROTECTED]> wrote: By making it @Persist (i.e. with default), then the container (i.e., your page) can set a @Meta to control the default persistence of components below it. Thus, if you want the default to be "flash", you're in

Re: T5 Best way to omit part of result page in output

2007-08-03 Thread Janko Muzykant
One more question. What will happen with all nested components when a given parent component returns false in its SetupRender? Are they automatically discarded? thanks, jm. DougS wrote: > > Also, if you would like to put the logic to determine if a component > should display or not in that c

Newbie - Show all validation errors

2007-08-03 Thread Adam Bennett
Hello all, I'm trying to wrap my head around Tapestry. I'll be ordering some books shortly but in the meantime: What is the simplest way (in 4.1) to show a list of form validation errors. Here is the essence of my page:

Re: T5 Best way to omit part of result page in output

2007-08-03 Thread DougS
Any components that are rendered by that component will not be rendered if SetupRender or BeginRender returns false. Janko Muzykant wrote: > > One more question. What will happen with all nested components when a > given parent component returns false in its SetupRender? Are they > automaticall

Re: [T5] Any component Bis

2007-08-03 Thread David Avenante
Yes thank you Nick. I've create my own Any component from T5 5.0.3 sources ;) Regards

Re: Newbie - Show all validation errors

2007-08-03 Thread Shing Hing Man
In your form component, > success="listener:doSubmit"> I think you meant jwcid="[EMAIL PROTECTED]". Also, you need to specify the delegate parameter. In case you did not know, there is an example on displaying all errors in chapter 3 of Enjoying Web Development with Tapestry http://www