Re: users Digest 28 Dec 2009 16:16:59 -0000 Issue 3955

2009-12-28 Thread Alex Shneyderman
Security by ignorance does not work in general if you want to secure your site
you better know what you are doing otherwise hire someone who can explain
how to do it but never blindly trust anyone.

In general though security is no rocket science, although ppl developing
frameworks and tools around it purposefully or not would make you believe
otherwise.

On Mon, Dec 28, 2009 at 6:55 PM, Wilson Ikeda wilsonaik...@gmail.com wrote:
 One more thing to add to Peter's mail:
 I'm not a security expert, I know some common exploits and how to secure
 against them but certainly these guys are much more informed than me (spring
 security - apache shiro devs). That's why even on small apps that have a
 face on the web i use them. Security is something that I don't want to worry
 later nor my knowledge area, how many people on this list constantly go to
 sites devoted to security? excluding Kalle of course : ), JM2C.

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: [Tapestry Central] Why chose Tapestry?

2009-06-18 Thread Alex Shneyderman
Not even that is needed. You can pack your dependencies with your project.
You need to pack those jars in the form maven would recognize it as its
repository. Then you could specify local repo (the one that sits on the file
system) in your parent pom.

On Thu, Jun 18, 2009 at 12:54 PM, Massimo Lusetti mluse...@gmail.comwrote:

 On Thu, Jun 18, 2009 at 12:37 PM, Onno Scheffers o...@piraya.nl wrote:

 
   In a small operation you can get away with doing dependency management
   manually, but not for enterprise applications or any development of
 scale.
 
 
 
  For complex projects especially, I try to keep things simple by adding
 all
  dependencies directly into the version-control system. New developers can
  just check out the project, load the project-file up in IntelliJ and they
  are ready to go.
  I prefer wasting diskspace over wasting developer time.

 Having a maven's proxy let you achieve the same without wasting disk space.
 Having a maven proxy is a must have facility if you really want to
 work with maven.

 Regards
 --
 Massimo
 http://meridio.blogspot.com

 -
 To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
 For additional commands, e-mail: users-h...@tapestry.apache.org




Re: Changing logging level at runtime

2009-05-19 Thread Alex Shneyderman
Write a little app to adjust debug levels on the fly. The basics of log4j are:

Logger lg = Logger.getLogger( org.qi4j );
lg.setLevel( Level.INFO );

2 things to watch out for:

1. Clusters.
2. Classes are available in JVM only when loaded. So you will need a
listing of them before you deploy the app. I do this @ build time.

- Alex

PS: I wish I could publish this app ... but I can not. The basic ideas
are above.

On Tue, May 19, 2009 at 1:39 PM, Borut Bolčina borut.bolc...@gmail.com wrote:
 Hi,

 I've been using log4j's configureAndWatch in some of my backend java apps. I
 want to be able to change log4j.properties for my T5.0.18 web app and see
 the change (log level) in my logs without restarting Tomcat.

 My goal is to switch to debug level when I see fishy behaviur in the
 production deployed apps.

 How to achive this in best practice?

 -Borut


-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: Changing logging level at runtime

2009-05-19 Thread Alex Shneyderman
On Tue, May 19, 2009 at 2:33 PM, Borut Bolčina borut.bolc...@gmail.com wrote:
 Actually we do have this web app in cluster.

in this case you will have to find out how to propagate level changes
to all the instances
of the cluster.

 Are you saying that I should run this simple standalone java app to change
 the log level of the web app?

you could only if you share the class-loader with the app that you
want to see the
log levels adjusted - I believe this is default behavior in JBoss.
Most likely though
it will be simpler to simply embed the code into an existing application.

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: Good Cheap Java Web Hosting Solutions

2009-03-29 Thread Alex Shneyderman
 wish I can read German:)

you do not have to :-) Just point google lang translator to the site
and see what happens.
Most of the time translations are funny but humanly readable.

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: [T5] Something like GORM for Tapestry?

2008-11-12 Thread Alex Shneyderman
 I usually code against DAOs configured in Spring. GORMs main advantage IMO
 is the uncluttered and quickly readable configuration of the domain classes
 and relations. The dynamic finders are definitely helpful for smaller scale
 admin type apps and for quick testing. For more complex apps there is
 usually no way to avoid a dedicated business/service layer or at least
 complex DAOs.

Of course if you take only GORM part out of Grails that is all you get
DAO that is simple to use.
Grails however has services that are could and should be used to do
the access (never mind the
controllers filled with DA code - although it demonstrates the
possibility no sane person, I hope,
would do it for a production ready application)

 Using Hibernate sessions directly in the page-code is IMO also more a thing
 of prototyping and proof of concept. Especially if you don't know in advance
 if there will be a change of data-access technology in the future, e.g. to
 TopLink, Ibatis or maybe even to an object database like db4o. In these
 cases GORM is of course no help either as long as it's tightly tied to
 Hibernate.

GORM itself is not tied to Hibernate (except maybe for queries which are HQL
and H stands for Hibernate). The problem there is that the only implementation
provided is done with Hibernate and probably will be for at least a
while. And that
kind of sucks and I think Grails team knows about it :-)

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [T5] Something like GORM for Tapestry?

2008-11-07 Thread Alex Shneyderman
On Fri, Nov 7, 2008 at 1:35 PM, Otho [EMAIL PROTECTED] wrote:
 Yes of course, but Tapestry and Groovy integrate quite well.

yes I recall an attempt I do not know if anything beyond basic page
was ever implemented.

http://www.troymaxventures.com/2007/08/grails-tapestry-grapestry-part-1-of-n.html

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [T5] Something like GORM for Tapestry?

2008-11-07 Thread Alex Shneyderman
 That is not the same, since you don't only have the AND operator at hand.

 def books = Book.findAllByPublisheddateBetween(lastyear, today)

You do realize that what you are asking is not possible given that impl
language is Java (for Tapestry based projects)?

So DAO's your friend. If you like GORM write a generator that will pre-generate
most of those nifty dynamic methods GORM has with your DAO.

Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How is T5 tutorial?

2008-03-26 Thread Alex Shneyderman
Guys,

This exchange turns to be disturbing. If you find someone a troll
there is always an option to ignore him/her. IMHO, the message below
is much more damaging than the trolling.

Just a suggestion: maybe you guys can find it in your hearts to ignore
trolls from now on. I also think it will be a mature decision.

Alex.

On Wed, Mar 26, 2008 at 5:21 PM, Adam Zimowski [EMAIL PROTECTED] wrote:
 But YOU STARTED it. Repeat, and memorize this you pathetic TROLL!!!
  YOU STARTED IT ! YOU STARTED IT !! YOU STARTED IT !! YOU STARTED IT !!
  YOU STARTED IT !! YOU STARTED IT !! YOU STARTED IT !! YOU STARTED IT
  !! YOU STARTED IT !! YOU STARTED IT !! YOU STARTED IT !! YOU STARTED
  IT !! YOU STARTED IT !! YOU STARTED IT !! .



  On Wed, Mar 26, 2008 at 10:42 AM, Rob Smeets [EMAIL PROTECTED] wrote:
   And is calling someone a Troll not an insult? You guys have been doing the
insults. I haven't insulted anyone but I'm only pointing out the facts.
  
Best wishes,
  
Rob Smeets
  
  
  
On Wed, Mar 26, 2008 at 2:52 PM, Davor Hrg [EMAIL PROTECTED] wrote:
  
 you keep claiming your opinion should matter but,
 you are not a gwt or wicket user and you never asked a constructive or
 real
 question.
 You use every message to bash tapestry or it's community.

 If you can manage to ask a technical question about how to do something
 you will get an answer. Again if you ask a question that is too general
 don't be surprized if you don't get an answer, or a satisfying one. This
 is
 a free software and no there are no warranties.

 Do you have something to say to this and my previous email ?
 Can you write an email without insulting people on this mailing list,
 and without baching tapestry, and without advertizing other frameworks ?

 Davor Hrg

 On Wed, Mar 26, 2008 at 2:23 PM, Rob Smeets [EMAIL PROTECTED] wrote:

  I hope the men whose names you mentioned being me are reading and 
 could
  respond. I'm Rob Smeets and take full responsibility of all what I
 write.
  So
  hold me responsible. Are you afraid of me or something? You'll be more
  productive facing what I write point by point and respond. Instead of
  calling me a troll or that I'm someone else.
  You say I'm a Wicket user? Why not a GWT user since I mention that as
  well?
  I've read on the Internet and I'm well informed about Tapestry's crazy
  world. Don't I have the right to voice my opinions?
 
  Best wishes,
 
  Rob Smeets
 
  On Tue, Mar 25, 2008 at 4:35 PM, Angelo Turetta 
  [EMAIL PROTECTED] wrote:
 
   Rob Smeets wrote:
There we go again, when someone raises a legitimate concern he is
  easily
labeled a Troll.
  
   So, once and for all, please prove us you are not the same childish
   anonymous coward A.K.A Emmanuel Sowah A.K.A. Francis Amanfo
  
   http://www.nabble.com/forum/ViewPost.jtp?post=8015345framed=y
  
   Why don't you get a real life outside of your fake identities?
  
   Angelo.
  
   
 -
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 

  

  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Mixing T5 and Guice --- best practices

2007-10-29 Thread Alex Shneyderman
On 10/29/07, Howard Lewis Ship [EMAIL PROTECTED] wrote:
 and lifecycle, the need for service contributions (something none of the
 other IoC containers seem to get) ... but Guice pushes the spectrum of

Not exactly correct. They do not provide it out of the box :-( One can
do the same with
spring for example - that's what grails does - but of course tapestry
shines in the simplicity
of the setup. But I agree that contributions are a big thing and none
of the containers seem
to make it easy to contribute. Perhaps not enough Eclipse influence up
there - they are all
stuck with IDEA ? :-)

Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Tapestry 5 Roadmap

2007-10-23 Thread Alex Shneyderman
On 10/23/07, Howard Lewis Ship [EMAIL PROTECTED] wrote:
 Let me repeat ... I have seven years of experience (in Tapestry) on how NOT
 to be backwards compatible.  T5 is all about ensuring future backwards
 compatibility without compromising the ability to enhance the framework
 going forward.

I am not familiar with T3/T4 - only T5 - but if one builds a framework
to eliminate
future incompatibilities would not it be possible to make a backward
compatibility
as well? I guess this would be a good test case for the functionality you are
developing.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



5.0.6-SNAPSHOT archetype problems ...

2007-10-22 Thread Alex Shneyderman
I am using archetype to create a quickstart app. I have copmiled from
sources and installed the archetype.

Now when I run create:archetype there seems to be 2 problems:

1.
In archetype.xml (quickstart/src/main/resources/META-INF/archetype.xml)
there is a line like this in sources section:
sources
sourcesrc/main/java/base//source
...
/sources

however the directory base does not exist in
quickstart/src/main/resources/archetype-resources/src/main/java

so maven complains on create:archetype.


2. The template pom.xml contains ${tapestry-release-version} in it.
Since, that pom is the template on archetype create the plugin tries to
substitute ${tapestry-release-version}. The vairable can not be found
and of course we get a failure.

Any ideas on how to deal with the #2, besides asking maven list or
hard-coding the release version into the template pom?

-- 
Thanks,
Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Tapestry 5 Roadmap

2007-10-18 Thread Alex Shneyderman
 The one question I could not answer without looking ridiculous was What
 happens to our multi-million dollar project if Howard is hit by a bus
 tomorrow

I think the question is irrelevant. The question you should be answering:
Is the current base usable enough to push through on the project?. A
relevant after-question (if answer to the above is not exactly) to answer
how easy it is to add the features you are missing if you have to. And
how easy it is to poke through the tapestry's source-base to fix bugs that
might exist and you will find during the project's development.

If you can cross off HLS as your dependency then t5 is probably the best
choice to make from what's available out there :-)

Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Component event mechanism is not clear

2007-09-20 Thread Alex Shneyderman
Hi, all!

I have a custom built component it has an action link in it.
The markup looks lie this:

t:actionlink id='logout'Logut/t:actionlink

then in the component's java source I have an event handler like this:

@OnEvent(component=logout)
public void doLogout() {
System.out.println(onActionLogout);
_loginInfo.setUserLoggedIn(false);
_loginInfo.setUsername(null);
}

the event never fires (I do not see the system out stmt)

Any idea on what am I doing wrong?

-- 
Thanks,
Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Component event mechanism is not clear

2007-09-20 Thread Alex Shneyderman
On 9/20/07, Nick Westgate [EMAIL PROTECTED] wrote:
 The component name mapping is specified as t:id=name.
 Note the t: prefix.

 You can also just name your method onActionFromLogout.


Thanks, I should have guessed it. I only tried t:name=logout
and that of course did not work :-(

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Component event mechanism is not clear

2007-09-20 Thread Alex Shneyderman
Ok, I guess I figured what was wrong with this component's java source
although now I have another question.

@OnEvent(component=logout)

should be

@OnEvent(component=actionlink)

However, if I put another action link in the same
component  the annotation on that link's handler will
have to be

@OnEvent(component=actionlink_0)

that's odd. Is there anyway to control this naming?

Thanks,
Alex.

On 9/20/07, Alex Shneyderman [EMAIL PROTECTED] wrote:
 Hi, all!

 I have a custom built component it has an action link in it.
 The markup looks lie this:

 t:actionlink id='logout'Logut/t:actionlink

 then in the component's java source I have an event handler like this:

 @OnEvent(component=logout)
 public void doLogout() {
 System.out.println(onActionLogout);
 _loginInfo.setUserLoggedIn(false);
 _loginInfo.setUsername(null);
 }

 the event never fires (I do not see the system out stmt)

 Any idea on what am I doing wrong?

 --
 Thanks,
 Alex.



-- 
Thanks,
Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [T5] Can't make custom library work

2007-09-19 Thread Alex Shneyderman
hmm, I am no tapestry expert but when you refer to component as

t:test.TestComp/

would not your class have to live under the FQN of

com.test.components.test.TestComp?

Yours looks like it is com.test.components.TestComp

Alex.

On 9/19/07, Kolesnikov, Alexander  GNI
[EMAIL PROTECTED] wrote:
 I am trying to create and use a trivial custom library.

 Here is the component:

 TestComp.java:

 package com.test.components;

 public class TestComp {
 public String getMessage() {
 return Test message;
 }
 }

 TestComp.html:

 html xmlns:t=http://tapestry.apache.org/schema/tapestry_5_0_0.xsd;
 p${message}/p
 /html

 Here is its module:

 package com.test;

 import org.apache.tapestry.ioc.Configuration;
 import org.apache.tapestry.services.LibraryMapping;

 public class TestModule {
 public static void
 contributeComponentClassResolver(ConfigurationLibraryMapping
 configuration){
 configuration.add(new LibraryMapping(test,
 com.test));
 }
 }

 Here is the manifest:

 Manifest-Version: 1.0
 Tapestry-Module-Classes: com.test.TestModule


 The testlib.jar is packaged like so:

 META-INF/MANIFEST.MF
 com/test/TestModule.class
 com/test/components/TestComp.class
 com/test/components/TestComp.html

 This JAR is placed into WEB-INF/lib of a T5 application and I am trying
 to display the test component like so:

 t:test.TestComp/

 The result is:

 Unable to resolve component type 'test/TestComp' to a component class
 name. Available component types: core/ActionLink, core/BeanEditForm,
 core/Checkbox, core/ComponentMessages, core/Delegate, core/Errors,
 core/Form, core/FormSupportImpl, core/Grid, core/GridCell,
 core/GridColumns, core/GridPager, core/GridRows, core/If, core/Label,
 core/Loop, core/Output, core/OutputRaw, core/PageLink, core/Palette,
 core/PasswordField, core/Radio, core/RadioGroup, core/RenderObject,
 core/Select, core/Submit, core/TextArea, core/TextField,
 fckeditor/Editor, jscalendar/DatePicker.

 Why Tapestry doesn't see my component I wonder?

 --
 CONFIDENTIALITY NOTICE: If you have received this email in error, please 
 immediately notify the sender by e-mail at the address shown.  This email 
 transmission may contain confidential information.  This information is 
 intended only for the use of the individual(s) or entity to whom it is 
 intended even if addressed incorrectly.  Please delete it from your files if 
 you are not the intended recipient.  Thank you for your compliance.  
 Copyright 2007 CIGNA
 ==



-- 
Thanks,
Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[T5] are there samples available ?

2007-08-21 Thread Alex Shneyderman
With lack of pragmatic documentation it would be really useful to have
sample apps - tutorial is a start but ... it barely gets the feet wet.
I wonder if there are more samples somewhere.

Care to share?

-- 
Thanks,
Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



maven build from source is not working.

2007-07-30 Thread Alex Shneyderman
Am I too naive to expect maven build to just build without problems?

I checked the source I go to the root directory (above all the modules)
and I do mvn clean package I get errors. That classes are can not be
compiled. Some missing deps.

Any clue? Any guidance on how to successfully build tapestry from source?

-- 
Thanks,
Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: maven build from source is not working.

2007-07-30 Thread Alex Shneyderman
 org.apache.tapestry.test.AbstractIntegrationTestSuite

/home/alex/sources/tapestry5/tapestry-test/src/main/java/org/apache/tapestry/test/AbstractIntegrationTestSuite.java:[182,22]
cannot find symbol
symbol  : class SeleniumServer
location: class org.apache.tapestry.test.AbstractIntegrationTestSuite

/home/alex/sources/tapestry5/tapestry-test/src/main/java/org/apache/tapestry/test/AbstractIntegrationTestSuite.java:[186,8]
cannot find symbol
symbol  : class CommandProcessor
location: class org.apache.tapestry.test.AbstractIntegrationTestSuite

/home/alex/sources/tapestry5/tapestry-test/src/main/java/org/apache/tapestry/test/AbstractIntegrationTestSuite.java:[186,34]
cannot find symbol
symbol  : class HttpCommandProcessor
location: class org.apache.tapestry.test.AbstractIntegrationTestSuite

/home/alex/sources/tapestry5/tapestry-test/src/main/java/org/apache/tapestry/test/AbstractIntegrationTestSuite.java:[186,68]
cannot find symbol
symbol  : variable SeleniumServer
location: class org.apache.tapestry.test.AbstractIntegrationTestSuite

/home/alex/sources/tapestry5/tapestry-test/src/main/java/org/apache/tapestry/test/AbstractIntegrationTestSuite.java:[189,24]
cannot find symbol
symbol  : class DefaultSelenium
location: class org.apache.tapestry.test.AbstractIntegrationTestSuite


[INFO] 
[INFO] For more information, run Maven with the -e switch
[INFO] 
[INFO] Total time: 2 seconds
[INFO] Finished at: Mon Jul 30 15:41:17 CEST 2007
[INFO] Final Memory: 9M/81M
[INFO] 


On 7/30/07, Alex Shneyderman [EMAIL PROTECTED] wrote:
 Am I too naive to expect maven build to just build without problems?

 I checked the source I go to the root directory (above all the modules)
 and I do mvn clean package I get errors. That classes are can not be
 compiled. Some missing deps.

 Any clue? Any guidance on how to successfully build tapestry from source?

 --
 Thanks,
 Alex.



-- 
Thanks,
Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



T5: Tutorial question.

2007-07-29 Thread Alex Shneyderman
Hi, all!

I am trying out tapestry and was going through the tutorial and
noticed that in the section about Guess.java the following:

  Object onActionFromLink(int guess)
  {
_count++;

if (guess == _target)
{
  _gameOver.setup(_count);
  return _gameOver;
}

if (guess  _target)
  _message = String.format(%d is too low., guess);
else
  _message = String.format(%d is too high., guess);

return null;
  }


this however does not work. I changed the name of the handler to

  Object onAction(int guess)
  {
  ...
  }

and things started to work as expected. Did I miss something or it is
a mess up in tutorial.

-- 
Thanks,
Alex.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]