On 27/11/2016 13:52, Guillaume Munch wrote:
Hi Tommaso,

Hi,

[...] Making AppArmor work would be
great too, but I suspect that it is going to be hard to have a
configuration which is both secure and without hassle to the user,

right, security comes often at a usability cost, hopefully we can
keep hassle at the very bare minimum, and showing up only for
advanced/particular usage scenarios.

Le 23/11/2016 à 22:27, Tommaso Cucinotta a écrit :
One note: one way to avoid the [auth session] section growing unbounded,
might be to have an expiry timestamp, so that e.g., authorizations would
expire in ~1y or so. This might be done with a section syntax like:

  <timestamp> <filename>

instead of the simple <filename> we have now.

Could that be used to fix #10310 as well?
See https://www.mail-archive.com/lyx-devel@lists.lyx.org/msg195888.html

eh eh, what about remembering 'needauth' (as well as cursor pos) only for
those files in the recent files list :-), and collapse the 3 lists into
a single one, and a single session section ?

* Please see the attached patch for a few suggestions

looks great, HTML provides a much better graphics :-), feel free to push !

As for the type of possible damages, it's likely beef for the User Manual,
and probably we need to redirect the user there, to know more if needed.

few corrections, html formatting, no checkbox). (Using html much
improves readability, but then the html appears in the console output. I
have a solution for this if you choose this route.)

and feel free to apply the corresponding workaround...

* Converters>Security is located below the converter configuration,
which leads to think that they are converter properties instead of
global settings. What about placing it above the converter list?

Same problem with the Converter Cache option already, isn't it?

Let me propose the attached fix for both at once.

* It would be nice to be able to edit the needauth flag from the
converters settings.

you can already, e.g., browse to the Sweave converters, and you'll see
the needauth option in the extraflags, guess we can edit as well from
the dialog, can't we?

* What happens if a needauth converter is called during instant preview?
Could that happen? And during graphics display?

I've been testing with 2 cases:

1. graphics on-screen conversion & display, used with my (local) gnuplot patch,
   so I insert a .gnuplot image file, and I see its produced output pic on 
screen,
   ..., after a few warnings about running needauth converters :-)...
2. formatted PDF when previewing/rendering PDF

The 1. and 2. cases correspond to 2 different converters call paradigms, one
is from Converters.cpp, the other from GrpahicsConverter.cpp.

AFAIK, instant preview is used for maths, processed through standard (secure) 
latex (no --shell-escape option), what else, what are further calls to 
converters?

Thanks,

        T.

>From 8f157f2d3beb48ae87f9dcd07d59ee062a7a7da0 Mon Sep 17 00:00:00 2001
From: Tommaso Cucinotta <tomm...@lyx.org>
Date: Mon, 28 Nov 2016 00:31:46 +0100
Subject: [PATCH] Converters Prefs UI layout clarification.

---
 src/frontends/qt4/ui/PrefConvertersUi.ui | 28 +++++-----------------------
 1 file changed, 5 insertions(+), 23 deletions(-)

diff --git a/src/frontends/qt4/ui/PrefConvertersUi.ui b/src/frontends/qt4/ui/PrefConvertersUi.ui
index 7e4a1b32..f9c02a86 100644
--- a/src/frontends/qt4/ui/PrefConvertersUi.ui
+++ b/src/frontends/qt4/ui/PrefConvertersUi.ui
@@ -22,7 +22,7 @@
    <item row="0" column="0" >
     <widget class="QGroupBox" name="converterDefGB" >
      <property name="title" >
-      <string/>
+      <string>Converter Defi&amp;nitions</string>
      </property>
      <layout class="QGridLayout" >
       <property name="margin" >
@@ -31,7 +31,7 @@
       <property name="spacing" >
        <number>6</number>
       </property>
-      <item row="1" column="0" >
+      <item row="0" column="0" >
        <widget class="QListWidget" name="convertersLW" >
         <property name="sizePolicy" >
          <sizepolicy>
@@ -43,7 +43,7 @@
         </property>
        </widget>
       </item>
-      <item row="3" column="0" colspan="2" >
+      <item row="2" column="0" colspan="2" >
        <layout class="QGridLayout" >
         <property name="margin" >
          <number>0</number>
@@ -99,7 +99,7 @@
         </item>
        </layout>
       </item>
-      <item row="2" column="0" colspan="2" >
+      <item row="1" column="0" colspan="2" >
        <layout class="QHBoxLayout" >
         <property name="margin" >
          <number>0</number>
@@ -173,7 +173,7 @@
         </item>
        </layout>
       </item>
-      <item row="1" column="1" >
+      <item row="0" column="1" >
        <layout class="QVBoxLayout" >
         <property name="margin" >
          <number>0</number>
@@ -225,24 +225,6 @@
         </item>
        </layout>
       </item>
-      <item row="0" column="0" colspan="2" >
-       <widget class="QLabel" name="label" >
-        <property name="sizePolicy" >
-         <sizepolicy>
-          <hsizetype>1</hsizetype>
-          <vsizetype>5</vsizetype>
-          <horstretch>0</horstretch>
-          <verstretch>0</verstretch>
-         </sizepolicy>
-        </property>
-        <property name="text" >
-         <string>Converter Defi&amp;nitions</string>
-        </property>
-        <property name="buddy" >
-         <cstring>convertersLW</cstring>
-        </property>
-       </widget>
-      </item>
      </layout>
     </widget>
    </item>
-- 
2.9.3

Reply via email to