Re: Securing Wicket 6.x Applications with Java EE, Spring & Jetty

[Martin Grigorov]

Thank you very much for sharing your knowledge with us, Shawn!
Please let us know when you publish the second document.


On Mon, Sep 9, 2013 at 5:58 AM, Shawn McKinney wrote:

> Hello,
>
> I am a new subscriber to the Wicket users list but have been using the
> Wicket framework for about 3 years.
>
> Recently I published an article documenting an approach my company uses to
> secure Wicket applications.  It uses a combination of Java EE container
> security, Spring security and a few custom wicket components (for
> controlling view of component by role and permission).
>
> http://iamfortress.org/**WicketSecurity
>
> There is also a sample Wicket application using these controls on GIT Hub.
>
> https://github.com/**shawnmckinney/wicketsecurity
>
> I plan on publishing another document later that goes beyond the simple
> Jetty security provider by introducing policy enforcement mechanisms more
> suitable for production.
>
> Comments are welcome.
>
> Regards,
>
> Shawn
>
>
>

Re: tags!

[Martin Grigorov]

Hi,

If you are able to create an application that demonstrates the issue I'll
be happy to debug it.
There is nothing special in Wicket code about  tag.


On Mon, Sep 9, 2013 at 5:28 AM, Colin Rogers <
colin.rog...@objectconsulting.com.au> wrote:

> Wicketeers!
>
> I have an odd bug, that has been resolved, but I it doesn't explain what
> and why the issue existed - and with a view to avoiding the issue in
> future, I thought I should seek some wisdom! :)
>
> Basically - I have a application where the 'main panel' is replaced as a
> link is clicked (along with other panels, too) - oddly, when I hit certain
> links repeatedly, instead of the mainPanel simply replacing the old version
> and updating, it produced duplicates - no duplicates in the other panels,
> just the mainPanel. Meaning I had the same panel repeated from each click
> down the page.
>
> After tons of reverting on code, hacking and experimenting, I finally
> found the culprit... yep;  tags. When any of my sub-components of
> mainPanel were wrapped in  tags, it caused the parent to duplicate
> instead of replace. Replace the  tag with a  and everything works
> fine. So obviously I have a perfectly good solution!
>
> Does anyone have an explanation for this? I'm totally stumped as to why
>  tags would cause issues in the DOM?
>
> Cheers,
> Col.
> EMAIL DISCLAIMER This email message and its attachments are confidential
> and may also contain copyright or privileged material. If you are not the
> intended recipient, you may not forward the email or disclose or use the
> information contained in it. If you have received this email message in
> error, please advise the sender immediately by replying to this email and
> delete the message and any associated attachments. Any views, opinions,
> conclusions, advice or statements expressed in this email message are those
> of the individual sender and should not be relied upon as the considered
> view, opinion, conclusions, advice or statement of this company except
> where the sender expressly, and with authority, states them to be the
> considered view, opinion, conclusions, advice or statement of this company.
> Every care is taken but we recommend that you scan any attachments for
> viruses.
>

Securing Wicket 6.x Applications with Java EE, Spring & Jetty

[Shawn McKinney]

Hello,

I am a new subscriber to the Wicket users list but have been using the 
Wicket framework for about 3 years.


Recently I published an article documenting an approach my company uses 
to secure Wicket applications.  It uses a combination of Java EE 
container security, Spring security and a few custom wicket components 
(for controlling view of component by role and permission).


http://iamfortress.org/WicketSecurity

There is also a sample Wicket application using these controls on GIT Hub.

https://github.com/shawnmckinney/wicketsecurity

I plan on publishing another document later that goes beyond the simple 
Jetty security provider by introducing policy enforcement mechanisms 
more suitable for production.


Comments are welcome.

Regards,

Shawn

tags!

[Colin Rogers]

Wicketeers!

I have an odd bug, that has been resolved, but I it doesn't explain what and 
why the issue existed - and with a view to avoiding the issue in future, I 
thought I should seek some wisdom! :)

Basically - I have a application where the 'main panel' is replaced as a link 
is clicked (along with other panels, too) - oddly, when I hit certain links 
repeatedly, instead of the mainPanel simply replacing the old version and 
updating, it produced duplicates - no duplicates in the other panels, just the 
mainPanel. Meaning I had the same panel repeated from each click down the page.

After tons of reverting on code, hacking and experimenting, I finally found the 
culprit... yep;  tags. When any of my sub-components of mainPanel were 
wrapped in  tags, it caused the parent to duplicate instead of replace. 
Replace the  tag with a  and everything works fine. So obviously I have 
a perfectly good solution!

Does anyone have an explanation for this? I'm totally stumped as to why  
tags would cause issues in the DOM?

Cheers,
Col.
EMAIL DISCLAIMER This email message and its attachments are confidential and 
may also contain copyright or privileged material. If you are not the intended 
recipient, you may not forward the email or disclose or use the information 
contained in it. If you have received this email message in error, please 
advise the sender immediately by replying to this email and delete the message 
and any associated attachments. Any views, opinions, conclusions, advice or 
statements expressed in this email message are those of the individual sender 
and should not be relied upon as the considered view, opinion, conclusions, 
advice or statement of this company except where the sender expressly, and with 
authority, states them to be the considered view, opinion, conclusions, advice 
or statement of this company. Every care is taken but we recommend that you 
scan any attachments for viruses.

Re: callback versioning issue

[kiranduba]

Hi,
I'm facing the same issue in Wicket 6. Please let me know how you solved
this problem.

Thanks,
Kiran Duba



--
View this message in context: 
http://apache-wicket.1842946.n4.nabble.com/callback-versioning-issue-tp3606799p4661250.html
Sent from the Users forum mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org

Re: AutoCompleteTextField & suggestions popup position issue when container has scrollbar

[Andrea Del Bene]

Thank you for your feedback! A simple fix l've found is to use JavaScript
function getBoundingClientRect to retrieve the position of the owner of the
auto complete menu.
On Sep 8, 2013 10:00 AM, "Rakesh A"  wrote:

> Hi,
>
> Thank you, I did bit of search and found one issue which seems to be
> similar,
>
> https://issues.apache.org/jira/browse/WICKET-1355
>
> But the status says, its not reproducible.
>
> Hope it helps
>
> Regards,
> Rakesh.A
>
>
>
> --
> View this message in context:
> http://apache-wicket.1842946.n4.nabble.com/AutoCompleteTextField-suggestions-popup-position-issue-when-container-has-scrollbar-tp4661242p4661247.html
> Sent from the Users forum mailing list archive at Nabble.com.
>
> -
> To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
> For additional commands, e-mail: users-h...@wicket.apache.org
>
>

Re: Custom Component Converter not called

[Malte Neumann]

Am 07.09.2013 22:19, schrieb Sven Meier:
if you don't specify the type, a TextField will try to resolve the 
type from its model, see AbstractTextComponent#resolveType() and 
IObjectClassAwareModel.

Thanks for this hint.

During further tests after my mail, I found a situtation where the 
convertToString is called, but not the convertToObject. The initial 
situation is the same as described in the first mail. Then the model is 
updated by an ajax-call from null to a value, the output call my 
ToString-Method, but a later form submit doesn't call the 
ToObject-Method. It seems the problem occurs in 
AbstractTextComponent.resolveType. This function tries only once to 
resolve the type. In the first call the function sets type to null.


This is not my problem anymore. I can solve my special problem with the 
IObjectClassAwareModel.


Malte




>Shouldn't there be a pre-examination wheter a component converter is 
available?


Without type there can't be a converter.

Sven

On 09/07/2013 08:42 PM, Malte Neumann wrote:

Hello!

I've got a problem with a TextField and the depending 
CustomConverter. The converter of the component is not been called. 
So the default converter takes the task and fails.


In my case this problem occurs when my IModel.getObject returns null.

The problem arises in the FormComponent.convertInput method. Because 
of the null value, the typeName is null and a generic typcast is made 
and fails. Shouldn't there be a pre-examination wheter a component 
converter is available?


If I explicitly set  a type through TextField.setType my converter is 
called correctly.


Is that behaviour intended this way?

Malte

-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org

Re: AutoCompleteTextField & suggestions popup position issue when container has scrollbar

[Rakesh A]

Hi,

Thank you, I did bit of search and found one issue which seems to be
similar,

https://issues.apache.org/jira/browse/WICKET-1355

But the status says, its not reproducible.

Hope it helps

Regards,
Rakesh.A



--
View this message in context: 
http://apache-wicket.1842946.n4.nabble.com/AutoCompleteTextField-suggestions-popup-position-issue-when-container-has-scrollbar-tp4661242p4661247.html
Sent from the Users forum mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org