Re: Cannot Figure out Bidirectional Parameters

Hi Mitch. I'm assuming you're using T4. The documentation is a bit scattered here, as it took me a while to find something to link to. (I'm still using T3.) Anyway, your properties are being created as "transient" by Tapestry. You need to add persistence to your properties, either by using the t

Re: handling file downloads

Hi Julian. The other approach (which I use in T3, but haven't verified in T4) is documented in FAQ 2.6, and is perhaps a quicker one-off hack: http://tapestry.apache.org/tapestry4/faq.html Cheers, Nick. hv @ Fashion Content wrote: > Create a Tapestry service for building CSV files. The demo app

RE: Using Discardable threaded services correctly?

Well, Tapestry will automatically clean up the services for you, but if you are using them inside a servlet filter (which kicks in before the Tapestry stuff), then you will have to do the cleanup yourself (or use a tapestry WebRequestServicerFilter or a ServletRequestServicerFilter and avoid the cl

Re: Using Discardable threaded services correctly?

Oh ok. Well I don't know the first thing about how to use HiveMind filters, so I haven't changed any setup there. I need this functionality in my Tapestry pages and in a couple of custome servlets, so I implemented it as a ServletFilter. Rather than having 4 different ServletFilters, I combined

RE: Using Discardable threaded services correctly?

I was thinking of a Tapestry WebRequestServicerFilter or ServletRequestServicerFilter. That basically takes the place of a servlet filter. For the tapestry-acegi module, I actually implemented support for regular servlet filters in the ServletRequestServicerFilter chain. I did that because all o

Re: Using Discardable threaded services correctly?

context.getAttribute("org.apache.tapestry.Registry:portalapp"); PersonalIdentity ident = (PersonalIdentity) firstRegistry.getService(PersonalIdentity.class); I wrote the filter and tried to incorporate all the standard functionality needed by Tapestry, Spring & HiveMind. The filter essentially

RE: Securing Tapestry Applications

No problem. I'm using it at work on our current project. It works quite well. It will automatically set up an anonymous user if nobody is logged in. It will give it the ROLE_ANONYMOUS role. -Original Message- From: Vinicius Carvalho [mailto:[EMAIL PROTECTED] Sent: Monday, July 10, 200

RE: Using Discardable threaded services correctly?

How are you accessing the service in your servlet filter? Did you write the servlet filter? Why can't you use the tapestry filter mechanism? -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of hv @ Fashion Content Sent: Monday, July 10, 2006 8:39 PM To: users@tapestry.ap

Re: handling file downloads

Create a Tapestry service for building CSV files. The demo app has a custom service (Graph I think). You can use ServiceLink to create links to the CSV files. It is constructed using a couple of classes. You can also make it by starting out with an existing service like ExternalService. Henrik

Re: Using Discardable threaded services correctly?

Since I use the service in every page of my app I have no doubt it will be instantiated. Also it's accessed in the first part of the filter. I think there might be something spooky going on with logging, althought that would be the first time I have experienced logging statements/internal errors

Re: Securing Tapestry Applications

James, great work, I just cheked the tapestry-acegi, really a good adition to us, thanks again :) On 7/10/06, James Carman <[EMAIL PROTECTED]> wrote: You can use tapestry-acegi for #1 and #2 right now. All you have to do is annotate your page class with the @Secured annotation (from Acegi). @S

Re: From the online docs

While I have never needed more than one Tapestry app per .war, I have seen documentation covering much of what you would need in the old manuals for version 3. In web.xml you define multiple servlets. The .application is named after the servlet and lists the .page files. So if you put the .page

Re: Why I hate mailing lists

Also you can try Nabble. http://www.nabble.com/Tapestry---User-f340.html You can browse and search on Nabble, you can also post through Nabble which will bridge the post to mailing list. Nabble allows cataloging of archives, so that Tapestry's user and dev lists can be browsed and searched from

RE: Using Discardable threaded services correctly?

HiveMind will not instantiate your service unless it is needed (which would explain why you saw the expected behavior after you called a method). If it instantiates it, then it'll clean it up. -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of hv @ Fashion Content Sent:

Using Discardable threaded services correctly?

I have a ServletFilter which sets up an identity object for each request. Previously it was stored with setAttribute, but now I use a threaded HiveMind service. So far it has worked just fine, but I can't seem to get the _Discardable_ functionality to work properly. PersonalIdentity extends Dis

Re: handling file downloads

Hi, My approach is creating a service. the service will provide the url of the file. So we can use the url with RedirectException. Gunna Julian Wood <[EMAIL PROTECTED]> wrote: How do you do it? I would like to click a link, have a listener assemble a CSV file, and send it back as a downloa

handling file downloads

How do you do it? I would like to click a link, have a listener assemble a CSV file, and send it back as a download (ie change a few headers behind the scenes like Content-Type and Content-Disposition). It seems that I need to write my own component, but it would also seem this should be

Cannot Figure out Bidirectional Parameters

Please forgive my newbness, I am trying to create a page that will allow a user to edit a record retrieved from the database. I would like to populate the individual text fields in the html with information about the account that is being edited. So far I have been able to populate the fields, h

RE: Securing Tapestry Applications

You can use tapestry-acegi for #1 and #2 right now. All you have to do is annotate your page class with the @Secured annotation (from Acegi). @Secured("ROLE_ADMIN") public abstract class AdminPage extends BasePage { } The tapestry-acegi library is available via SVN from: http://svn.javaforge.c

RE: Best practice for new/edit object page?

No, that's perfect! Properties we don't want to be changed, we're not exposing to the template at all, because that makes us vulnerable to the user spoofing new values for those properties, even if they're hidden. So, in pageBeginRender(..), we load the object we want to update, and then in Tapes

RE: Re: Why I hate mailing lists

Well, if there was a link to gmane on the main mailing list page (or even a search field that went to gmane), we wouldn't get these threads every three weeks. :-) /dev/mrg -Original Message- From: Epstein, Ezra [mailto:[EMAIL PROTECTED] Sent: Monday, July 10, 2006 2:35 PM To: Tapestry

Re: Best practice for new/edit object page?

No that's true, hibernate will only update members that have changed. They modify all of your classes with cglib to add changing listeners to fields/values. (Also how you get lazy initialization). There are still some issues with this though as the current logic in tapestry wrt forms would be tha

Re: Re: Why I hate mailing lists

Sure thing. I've gmail "starred" this thread and will probably do it sometime in the next couple of days. On 7/10/06, Epstein, Ezra <[EMAIL PROTECTED]> wrote: Thanks! Gmane fixes this very well. Any plans to post a link to Gamne (or similar) from the main mailing list page? Thanks, Ezra ---

RE: Portlets -- many in one .war ?

Can you give me an example of this configuration? Especially how one maps the different portlets to different .html/.page/.java files? The sample here implicitly only works with a single portlet: http://tapestry.apache.org/tapestry4/tapestry-portlet/configuration.html Thanks, Ezra Epstein

RE: From the online docs

Do you have a working example that provides multiple portlets from a single .war? Thanks, Ezra Epstein -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Saturday, July 08, 2006 8:41 AM To: Tapestry users Subject: Re: From the online docs Why does this imply

RE: Best practice for new/edit object page?

"If the user enters the edit page for an existing item and then clicks the link to create a new item I will have to reset the ID, am I right? My current PageLink will not do in that case." Right; I'm using DirectLinks in both cases, setting the ID to be either the appropriate ID or NULL if I'm cre

RE: Re: Why I hate mailing lists

Thanks! Gmane fixes this very well. Any plans to post a link to Gamne (or similar) from the main mailing list page? Thanks, Ezra -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Mark Reynolds Sent: Monday, July 10, 2006 9:57 AM To: users@tapestry.apache.org Subject

RE: Best practice for new/edit object page?

You should be aware that PageLink is not session-aware (DirectLink is). If a user's session times out and they click on a PageLink, they'll see the normal Tapestry exception page when the code tries to access the session. (They won't see the "friendly" stale session page.) /dev/mrg -Origina

Re: Best practice for new/edit object page?

Thank you. Especially Jim, you have understood my "problem" perfectly! The thing is I have a hibernate OR-mapping with lots of relationships and attributes which the user should not edit or see at all in the edit page. I think I'll use your #3 - keeping the ID in the session using @Persist and re

Re: ASO & Interceptor

Be careful with ThreadLocal. As someone else reported it here, you need to do a ThreadLocal.remove() when the app is shutdown otherwise, the content of the ThreadLocal won't eligible for garbage collection. Btw, why did you need to use a ThreadLocal? On 7/10/06, Kosarev A.V. <[EMAIL PROTECTED]>

AjaxForm submit problem

Hi everyone, I'm using tapestry 4.0.1 with Tacos 4-beta-3-20060616 I have a problem. In my component I'm trying to use the AjaxForm. When I submit the form, nothing happens. If I try to submit it again, the following error occurs: Rewind of form FormularioManutencao/formularioDinamico.$Relac

Re: Return with "html anchor" in listener

I remember seeing anchor related items in the core EngineServiceLink just yesterday, http://svn.apache.org/viewvc/tapestry/tapestry4/trunk/tapestry-framework/src/java/org/apache/tapestry/engine/EngineServiceLink.java?view=markup On 7/10/06, KE Gan <[EMAIL PROTECTED]> wrote: Shing, Thanks for

Re: Why I hate mailing lists

Using gmane, you can access any mirrored mailing list (including all apache mailing lists): * using a web-based threaded reader with search * using a blog-like, flat interface with search * using an NNTP news reader * using any one of four variations of an rss feed You can even search across

Re: tapestry-acegi

guest/guest On 7/10/06, Andreas Bulling <[EMAIL PROTECTED]> wrote: On 10. Jul 2006 - 18:00:40, Norbert Sándor wrote: | Hello, | | I tried to download tapestry-acegi but SVN access does not seem to be | public. | How can I download it? Do you know http://www.carmanconsulting.com/tapestry-acegi/

Re: tapestry-acegi

On 10. Jul 2006 - 18:00:40, Norbert Sándor wrote: | Hello, | | I tried to download tapestry-acegi but SVN access does not seem to be | public. | How can I download it? Do you know http://www.carmanconsulting.com/tapestry-acegi/source-repository.html HTH Andreas --

Re: tapestry-acegi

You can find both binary and source build in the Maven2 repo here http://www.carmanconsulting.com/mvn On 7/10/06, Norbert Sándor <[EMAIL PROTECTED]> wrote: Hello, I tried to download tapestry-acegi but SVN access does not seem to be public. How can I download it? Regards, Norbi -

tapestry-acegi

Hello, I tried to download tapestry-acegi but SVN access does not seem to be public. How can I download it? Regards, Norbi - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Securing Tapestry Applications

| Problem 3: Protecting the application from logged-in users who are | spoofing form parameters | | [...] | | However, we don't want to violate the DRY principle: if there are | multiple places where a given Entity can be selected for editing, we | would have to add this check in each place. T

Re: Best practice for new/edit object page?

On 10. Jul 2006 - 11:21:49, Gentry, Michael (Contractor) wrote: | The down side to embedding database IDs in your HTML form is they can be | changed by the user before POSTing them back to your application, which | can cause all sorts of problems. Exactly, this creates _really huge_ security issue

Re: Securing Tapestry Applications

What about using acegi "domain object security" for solving problem #3 ? Regards, Julio. 2006/7/10, Jim Steinberger <[EMAIL PROTECTED]>: I mentioned Acegi twice as a possible solution, as it certainly is for Problems 1 and 2, but I als

RE: Best practice for new/edit object page?

The down side to embedding database IDs in your HTML form is they can be changed by the user before POSTing them back to your application, which can cause all sorts of problems. /dev/mrg -Original Message- From: Jim Steinberger [mailto:[EMAIL PROTECTED] Sent: Sunday, July 09, 2006 6:56

Re: CMS Integration

Julio C. Rivera wrote: I think a CMS component library is a very good idea. I'm searching something like it. I'm trying Stitches, but I'm having some problems building and deploying examples. 2006/7/10, [EMAIL PROTECTED] <[EMAIL PROTECTED]>: a common CMS component library would be a very ni

Re: Securing Tapestry Applications

Hi Jim, good comments generally. The only comment I have at the moment is for #1, tapestry provides a specific listener, which is pageValidateListener. It's called earlier than pageRenderListener. If you're going to go the custom superclass route, implement PageValidateListener for the authenticat

RE: Securing Tapestry Applications

I mentioned Acegi twice as a possible solution, as it certainly is for Problems 1 and 2, but I also explored why I believe it would not be adequate for Problem 3. Jim -Original Message- From: Ben Wong [mailto:[EMAIL PROTECTED] Sent: Monday, July 10, 2006 9:49 AM To: 'Tapestry users'; 'Ta

RE: Securing Tapestry Applications

Correct me if I am wrong, but doesn't Acegi solve most, if not all, of these problems? http://acegisecurity.org/ Ben > -Original Message- > From: Jim Steinberger [mailto:[EMAIL PROTECTED] > Sent: Monday, July 10, 2006 5:01 AM > To: Tapestry users > Subject: Securing Tapestry Applicati

Injecting library name specification via HiveMind into a Tap application

Hello, is it possible to inject alibrary name instead of defining it into a .application file ? I need this because I've built a menu framework that is built whith HiveMind. An item specification is defined like : So for

Re: Why I hate mailing lists

I don't like mailinglists much either, but I do tend to visit forums less, as I won't go there for a few minutes. I like newsgroups so I use the gmane news server for Tapestry. Works just fine. Henrik "Angelo Luis" <[EMAIL PROTECTED]> skrev i en meddelelse news:[EMAIL PROTECTED] > very very v

Re: Accessing ASO 'Visit' from servlet filter

I haven't tried accessing ASO's, but I have a threaded HiveMind service which I use on my tapestry pages. This is the code I use in my ServletFilter if (firstRegistry == null) { firstRegistry = (Registry) context.getAttribute("org.apache.tapestry.Registry:portalapp"); } if (firstReg

Re: CMS Integration

I think a CMS component library is a very good idea. I'm searching something like it. I'm trying Stitches, but I'm having some problems building and deploying examples. 2006/7/10, [EMAIL PROTECTED] <[EMAIL PROTECTED]>: a common CMS component library would be a very nice feature/add-on: - not re

Securing Tapestry Applications

Hey all, I'm listing just a few security issues and possible solutions below. For the benefit of all, by all means challenge my assumptions, and add your own problems. But please at least consider my Problem 3 listed below, as I'm very curious as to whether someone's found a better elegant sol

Re: Return with "html anchor" in listener

Shing, Thanks for the input. Actually, I am using exactly, the same code as you have written. However, from the documentation, I cannot seems to find how to include an 'html anchor' into the ILink. Now. I am quite convince that this feature is no available. I just hope that someone could confirm

Re: Portlets -- many in one .war ?

Easy, Just have multiple instances of the tapestry servlet configured in your WAR once for each tapestry application. It works. d. "Epstein, Ezra" <[EMAIL PROTECTED]> wrote on 07/07/2006 20:24:13: > > We're looking to Tapestry for our portlet development. Basically we > love what Tapestry does

Re: Why I hate mailing lists

"Epstein, Ezra" <[EMAIL PROTECTED]> wrote on 07/07/2006 20:20:23: > This is why I deplore mailing lists. They are so 1983. Why don't > all teams follow Hibernate's (and others) lead and choose a simple > Forum (phpBB in the case of Hibernate). It (like google/yahoo > groups) is free, keeps al

RE: CMS Integration

a common CMS component library would be a very nice feature/add-on: - not re-invent the wheel - growing market need - Tapestry will 'sell' more/better - ... I'm interested in contributing/developing on this topic! greetz -Original Message- From: Simeon Koptelov [mailto:[EMAIL PROT

Re: ASO & Interceptor

Thanks! I solved this problem using HttpSessionContextIntegrationFilter and ThreadLocal. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]