Re: Component parameters-unintended persistent binding

2010-10-18 Thread Jeshurun Daniel
I've finally figured out the cause of the problem but is just really weird. Turns out the problem was being caused by a CSS class name! This is the code from the breadcrumb component: http://tapestry.apache.org/schema/tapestry_5_0_0.xsd";> ${currentMenuItem.text}

Re: T5 Customize Returned List.

2010-10-18 Thread ningdh
Hi, Why not do it in Java? public String getLabel() { if (==1) { return "OK"; } if (==2) { return "Cancel"; } } .tml ${label} - Original Message - From: "ael" To: Sent: Tuesday, October 19, 2010 12:09 PM Subject: T5 Customize Returned List. > > Hello everyone i h

T5 Customize Returned List.

2010-10-18 Thread ael
Hello everyone i have a List which is returned from a Database. Then i want to customize its returned value. Is that possible? {$source.value} Ex. {$source.value} if value == 1 it will display OK if value == 2 it will display Cancel. -- View this message in context: h

Re: Early steps getting Tapestry and Hibernate working via DAO

2010-10-18 Thread ael
Wow, Tapestry Hibernate is much easier than my customize hibernate code... fascinating ^_^. http://code.google.com/p/tapestry5examples/downloads/detail?name=folderTap5_15.jar&can=2&q=&sort=filename http://code.google.com/p/tapestry5examples/downloads/detail?name=folderTap5_15.jar&can=2&q=&sort=fi

Re: T5: Where to implement security ?

2010-10-18 Thread Taha Hafeez
Thanks, I am not doing anything specific so can't be any specific. I am just digging into the source code of different security integrations and got confused about the specific purpose of these filters... But now it is quite clear. thanks to you.. Taha On Mon, Oct 18, 2010 at 10:46 PM, Thiago H.

Re: [T5.2] What security framework do you recommend ?

2010-10-18 Thread Muhammad Mohsen
Tynamo\Shiro must've left quite an impression on you guys :D Sounds like I was questioning the unquestionable lol Well the most I like about tynamo, is securing method calls. I'm really impressed by that. Maybe acegi supports that too but from the your messages, I think tynamo wins :) But have s

Re: Component parameters-unintended persistent binding

2010-10-18 Thread Jeshurun Daniel
Hi Howard, Thanks for the quick reply, I really need help with this. I have three page classes, Index, Page1 and Page2 Template for Index: Template for Page1: Template for Page2: I have three components, a layout component, a menu component and a page component. This is the source for the

Re: [T5.2] What security framework do you recommend ?

2010-10-18 Thread Borut BolĨina
+1 on that Very easy to use (read shiro documentation), very well integrated in Tapestry and the components are right there to use them. -Borut Another +1 for Kalle's responsiveness. 2010/10/18 Mark W. Shead > I've been very pleased with tynamo's tapestry-security module (which > uses Shiro

Re: Component parameters-unintended persistent binding

2010-10-18 Thread Rich M
This may not be entirely your issue, but the t:if test parameter takes in property bindings, so I believe that is why it would be calling the getters on the mainMenuId even if it were blank/null on the second page. What happens if you have the test parameter link to a boolean method that handle

Re: Component parameters-unintended persistent binding

2010-10-18 Thread Howard Lewis Ship
I'm confused from your description. I'm sure its something minor, but we'd need to know the version you are using, plus more details from your .tml and .java files to figure out what's going on. On Mon, Oct 18, 2010 at 12:19 PM, Jeshurun Daniel wrote: > Hi everyone, > This is a really strange pr

Component parameters-unintended persistent binding

2010-10-18 Thread Jeshurun Daniel
Hi everyone, This is a really strange problem I'm having with component parameters and I've spent a whole day on this and I'm still clueless. I have three components, a custom layout component, a menu component and a breadcrumb component. The menu and breadcrumb components are contained within

Re: [T5.2] What security framework do you recommend ?

2010-10-18 Thread Juan E. Maya
I agree with Mark. I have tried both Spring Security and Shiro and I have found the integration with Tapestry is more transparent with Shiro using tynamo. It might be because a Tynamo commiter is also is part of the Shiro team! :) One big disadvantage of Spring-security is that u r force Spring al

Re: [T5.2] What security framework do you recommend ?

2010-10-18 Thread Mark W. Shead
I've been very pleased with tynamo's tapestry-security module (which uses Shiro). One nice benefit is that it provides components you can use in your tapestry templates to do stuf like: You have user1role Other reasons I like tapestry-security: - Good documentation and example

Re: [T5.2] What security framework do you recommend ?

2010-10-18 Thread Vangel V. Ajanovski
Depending on the application. We use JASIG CAS server for authentication. It is used at many big US universities and it is best used as a single sign on solution for many websites. But it's pretty easy to setup and customizable that can be used even on small sites. - Once logged in on CAS, the use

Re: T5: Where to implement security ?

2010-10-18 Thread Thiago H. de Paula Figueiredo
On Mon, 18 Oct 2010 14:23:26 -0200, Taha Hafeez wrote: Thanks for such a quick response... Let me rephrase it... When should I use ComponentEventRequestFilter or ComponentRequestFilter or RequestFilter. RequestFilter is invoked for any request, including resource (images, JavaScript, C

Re: T5: Where to implement security ?

2010-10-18 Thread Taha Hafeez
Thanks for such a quick response... Let me rephrase it... When should I use ComponentEventRequestFilter or ComponentRequestFilter or RequestFilter. I know they are part of request processing but if I am implementing security at 1. Component Level. 2. Method Level. 3. Package Level. 4. may be mix

Re: T5: Where to implement security ?

2010-10-18 Thread Thiago H. de Paula Figueiredo
On Mon, 18 Oct 2010 14:07:36 -0200, Taha Hafeez wrote: Hi everyone! Hi! I was looking at the source code of a number of projects related to security and also read related articles (including one at Tapestry Central). I want to know whether to implement security by implementing Compone

T5: Where to implement security ?

2010-10-18 Thread Taha Hafeez
Hi everyone! I was looking at the source code of a number of projects related to security and also read related articles (including one at Tapestry Central). I want to know whether to implement security by implementing ComponentEventRequestFilter or ComponentRequestFilter or RequestFilter or in Di

Re: [T5.2] What security framework do you recommend ?

2010-10-18 Thread Katia Aresti Gonzalez
Hi, It depends on your needs and on you. I successfully used Spring Security 3.0 (without any additional library) and it works very well. You can checkout the example here : http://github.com/lguerin/tapestwitter and Tynamo security with shiro too http://github.com/ccordenier/tapestry5-hotel-b

[T5.2] What security framework do you recommend ?

2010-10-18 Thread Muhammad Mohsen
Hi All, I'm currently trying to decide what framework to use to secure my tapestry applications efficiently and easily. So I found tapestry-acegi and tynamo-security so far. Been reading some about tynamo's. May be someone could share his experience with either frameworks or securing tapestry appl

Re: Tapestry 5.2.1 upgrade woes

2010-10-18 Thread Vangel V. Ajanovski
The chenillekit 1.3.0-snapshot that is found arround the net in maven repositories is older version. The problem was fixed only 2-3 days ago. You will have to wait till they publish a more recent 1.3.0-snapshot (it should be dated later than 15th october). What I did is I downloaded chenillekit so

Re: Tapestry 5.2.1 upgrade woes

2010-10-18 Thread Zubair Nuamaan
Hey, did you manage to find a fix for your problem? I updated to use the new Tapestry 5.2.1 and am getting the same error java.lang.NoClassDefFoundError: org/apache/tapestry5/internal/services/RequestPathOptimizer I also updated to chenelkit 1.3.0-sanpshot. Thanks, Zubair -- View this me

Re: change session id after login

2010-10-18 Thread Thiago H. de Paula Figueiredo
On Mon, 18 Oct 2010 10:26:00 -0200, Andreas Andreou wrote: Yea, that's session fixation... see http://www.owasp.org/index.php/Session_Fixation Thanks for the link! :) Grabbing the session and invalidating directly does the trick but you have to be sure this occurs at the end of the reques

Re: Disable Access denied Stack-trace

2010-10-18 Thread iberck
Jonathan Barker wrote: > > A long time ago (tapestry-acegi days maybe), I saw a post about using > log4j > filtering configured in a log4j.xml file - it is not available in a > properties file configuration. If log4j is your underlying logging > mechanism, check into filtering options. > > On

Re: change session id after login

2010-10-18 Thread Andreas Andreou
Yea, that's session fixation... see http://www.owasp.org/index.php/Session_Fixation Grabbing the session and invalidating directly does the trick but you have to be sure this occurs at the end of the request - otherwise Tapestry may try to reuse the session and because that has been invalidated yo

Re: change session id after login

2010-10-18 Thread Thiago H. de Paula Figueiredo
On Mon, 18 Oct 2010 08:47:05 -0200, Mike Oestereter wrote: Hi Hi! How can I change the value of the JSESSIONID cookie after succcessfull login - failure to do this will result in a session hijacking vulnerability. The session cookie is created and removed by the servlet container (se

[T4] session serialization

2010-10-18 Thread Ivano Luberti
I'm considering options to persist sessions in a Tomcat instance running on of my customers server. Under that instance I have both JSP+Servlet web applications and T4 web applications. Is there something I should be aware about the way T4 handles sessions that can be against a serialization proce

change session id after login

2010-10-18 Thread Mike Oestereter
Hi How can I change the value of the JSESSIONID cookie after succcessfull login - failure to do this will result in a session hijacking vulnerability. I'm not using Spring or AECGI (sp?) and am not interested in it at the moment. In tapestry 5.0 the value of the cookie (somewhat magically and un

Re: Thanks for making my life hell!

2010-10-18 Thread Jeshurun Daniel
@OriginalPoster The only way Tapestry sucks compared to the other frameworks you have listed is if you are paid by the hour. nuf said. --- On Sun, 10/17/10, ael wrote: From: ael Subject: Re: Thanks for making my life hell! To: users@tapestry.apache.org Received: Sunday, October 17, 2010, 12:37

Re: T5 Image Source not context.

2010-10-18 Thread ael
Problem solved... http://kb.mozillazine.org/Links_to_local_pages_don%27t_work -- View this message in context: http://tapestry.1045711.n5.nabble.com/T5-Image-Source-not-context-tp3217063p3217097.html Sent from the Tapestry - User mailing list archive at Nabble.com. --

Re: T5 Image Source not context.

2010-10-18 Thread ael
I tried src="file://servername/folder/image.jpg" It is ok in IE but not in firefox... -- View this message in context: http://tapestry.1045711.n5.nabble.com/T5-Image-Source-not-context-tp3217063p3217077.html Sent from the Tapestry - User mailing list archive at Nabble.com. ---

T5 Image Source not context.

2010-10-18 Thread ael
Hello Everyone I just want to know how to link img source using a file server & not using context?. Any idea... This is for intranet purpose only :) ty... -- View this message in context: http://tapestry.1045711.n5.nabble.com/T5-Image-Source-not-context-tp3217063p3217063.html Sent from the T