any there any other actions which could cause a timeout?

2010-07-22 Thread Jake Bearkley
Hi All, can someone tell me if there is anything else which can cause a timeout? we have set setSessionTimeOut to be an hour in Application class, but we are intermittently experiencing timeouts when the hour has not been reached. Thanks in advance Bearko ___

Re: Does the ERXStaticResourceRequestHandler work with those compressed jarred resources?

2010-07-22 Thread Anjo Krank
The reason we don't do it ourself is that a lot of that stuff calls into erxfileutils and that uses path names. Fixing it would be a lot of work and make code more complicated without a lot of real gain (at least from when I last looked at it). So unless any of the committers actually need to u

Re: Does the ERXStaticResourceRequestHandler work with those compressed jarred resources?

2010-07-22 Thread Mr. G Brown
On Jul 21, 2010, at 11:12 PM, Mike Schrag wrote: >> Is anybody using 5.4? >> >> It is too bad that Wonder doesn't work so well with the jar frameworks; >> sometimes it does, sometimes it doesn't... > fixes welcome :) > > ms > Well the following line in my Application fixes this problem: r

Re: Inverse to-one relationships

2010-07-22 Thread Paul Hoadley
On 23/07/2010, at 10:20 AM, Chuck Hill wrote: >> 1. It only works when I call a.addObjectToBothSidesOfRelationshipWithKey(b, >> "b"). (Don't get me wrong—that's great, an enormous improvement on what I >> was doing 5 minutes ago.) > > Did you add versions of this method to both entities? Yes

Re: Inverse to-one relationships

2010-07-22 Thread Chuck Hill
On Jul 22, 2010, at 5:22 PM, Paul Hoadley wrote: > On 23/07/2010, at 8:25 AM, Chuck Hill wrote: > >> OK, now that we are all on the same page :-), see the JavaDocs for >> EOEnterpriseObject: >> >> inverseForRelationshipKey >> >> String inverseForRelationshipKey(String relationshipKey) >> Return

Re: Inverse to-one relationships

2010-07-22 Thread Paul Hoadley
On 23/07/2010, at 8:25 AM, Chuck Hill wrote: > OK, now that we are all on the same page :-), see the JavaDocs for > EOEnterpriseObject: > > inverseForRelationshipKey > > String inverseForRelationshipKey(String relationshipKey) > Returns the name of the relationship pointing back to the receiver

Re: Inverse to-one relationships

2010-07-22 Thread Chuck Hill
On Jul 22, 2010, at 3:39 PM, Paul Hoadley wrote: > On 23/07/2010, at 7:42 AM, Chuck Hill wrote: > How are you modeling these relationships? >>> >>> Originally, just this: a mandatory, to-one relationship from A to B. >>> Consider it to be a parent (B) with optional child (A). Every chil

Re: Inverse to-one relationships

2010-07-22 Thread Chuck Hill
On Jul 22, 2010, at 3:37 PM, Paul Hoadley wrote: > On 23/07/2010, at 7:32 AM, Chuck Hill wrote: > >> On Jul 22, 2010, at 2:56 PM, Paul Hoadley wrote: >> >>> Sorry, I should have tried to be clearer. Basically, I've got a parent >>> object B (which will always be created first). At some point

Re: Inverse to-one relationships

2010-07-22 Thread Paul Hoadley
On 23/07/2010, at 7:42 AM, Chuck Hill wrote: >>> How are you modeling these relationships? >> >> Originally, just this: a mandatory, to-one relationship from A to B. >> Consider it to be a parent (B) with optional child (A). Every child has a >> parent (hence the current mandatory to-one from

Re: Inverse to-one relationships

2010-07-22 Thread Paul Hoadley
On 23/07/2010, at 7:32 AM, Chuck Hill wrote: > On Jul 22, 2010, at 2:56 PM, Paul Hoadley wrote: > >> Sorry, I should have tried to be clearer. Basically, I've got a parent >> object B (which will always be created first). At some point, B may obtain >> at most one child A, but it doesn't nece

Re: Inverse to-one relationships

2010-07-22 Thread Chuck Hill
On Jul 22, 2010, at 2:49 PM, Paul Hoadley wrote: > On 23/07/2010, at 12:09 AM, Chuck Hill wrote: > >>> I know this topic comes up on the list from time to time, but I just need a >>> quick sanity check. >> >> Nope, not sane. :-) > > Well spotted. Now on with this: > >>> I have two entities

Re: Inverse to-one relationships

2010-07-22 Thread Chuck Hill
On Jul 22, 2010, at 2:56 PM, Paul Hoadley wrote: > Sorry, I should have tried to be clearer. Basically, I've got a parent > object B (which will always be created first). At some point, B may obtain > at most one child A, but it doesn't necessarily. So every B has zero or one > child As. E

Re: Inverse to-one relationships

2010-07-22 Thread Paul Hoadley
Hi David, On 23/07/2010, at 6:33 AM, David Avendasora wrote: > I'm not 100% clear on how this is modeled. > > 1) Does the A.b() relationship propagate PKs? No. > 2) Are you saying that the A.b().a() may be null? No, never. A.b().a() would always give A. > In other words, are you saying A.fe

Re: Inverse to-one relationships

2010-07-22 Thread Paul Hoadley
On 23/07/2010, at 12:09 AM, Chuck Hill wrote: >> I know this topic comes up on the list from time to time, but I just need a >> quick sanity check. > > Nope, not sane. :-) Well spotted. Now on with this: >> I have two entities, A and B. For every A, there is a corresponding B. For >> some

Re: Inverse to-one relationships

2010-07-22 Thread Paul Hoadley
On 22/07/2010, at 11:42 PM, Ramsey Gurley wrote: > One-to-optional-one relationship... Not doable as far as I know. In another > discussion on the topic, Chuck Hill suggested: > >> You could model it as a right-outer join and optional, but I think that EOF >> is still going to have a hissy fi

Re: OT: WO Wiki search less than helpful

2010-07-22 Thread David Holt
Hi Joe, I've been really impressed with the updated confluence site itself. <> <> The search has become especially useful to me. I hope that the extension can match it, but if not, the confluence wiki itself is still only a click away. And no, I don't think you put up your notes about ERM

OT: WO Wiki search less than helpful

2010-07-22 Thread Joe Little
I was trying out the new extension, and wanted to see what I last posted on ERModernLook (or if I ever did get around to adding my notes). I was lazy, and did a search for "ERModern" but came up blank. Only by searching full names like ERModernLook did results come up. This is relative to the searc

Re: Inverse to-one relationships

2010-07-22 Thread David Avendasora
Hi Paul, I'm not 100% clear on how this is modeled. 1) Does the A.b() relationship propagate PKs? 2) Are you saying that the A.b().a() may be null? In other words, are you saying A.fetchAllAs().valueForKey(B_KEY) may not return an Array with the same objects that B.fetchAllBs(ec, B.A.isNotNull

Re: OT: Java desktop dev environments

2010-07-22 Thread David Avendasora
Well, he did say non-WO, and that he actually wanted to write Swing instead of letting the rule engine do all that hard work for him. If a guy is a masochist, who am I to stand in the way? Now, stand around and watch? That I could _easily_ do all day, especially if there's beer involved. Dave

Re: WebObjects and HTML injection

2010-07-22 Thread Dov Rosenberg
Check out http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API They have a very good Java based implementation of security code that you can integrate with your java based project to help you sanitize your user/externally provided data. It is not sufficient to check for

Re: Does the ERXStaticResourceRequestHandler work with those compressed jarred resources?

2010-07-22 Thread Lachlan Deck
On 22/07/2010, at 1:00 PM, Mr. G Brown wrote: > On Jul 21, 2010, at 8:12 PM, Mike Schrag wrote: > >> Or your deployment needs fixing to not assume jar frameworks :) Mike: Now that you're moving (have moved?) to the inside... I'm sure you'll have need to broaden your horizons ;-) >> On Jul 21,

Re: WebObjects and HTML injection

2010-07-22 Thread Lachlan Deck
On 22/07/2010, at 9:28 PM, Patrick Middleton wrote: > Some of our customers are commissioning penetration testing reports, which > are flagging vulnerabilities in our WebObjects applications. The problem > reported is with URLs such as > .../wa/MyDirectAction?wosid=XYZ%22%3E%3Cscript%3Ealert%2

Re: WebObjects and HTML injection

2010-07-22 Thread Anjo Krank
I don't follow: *is* this an actual problem with the default coding style? IMO, you wouldn't ever say "oh noez! your session $ID" is no longer valid! but I'll use it anyway." What *should* happen is that WO gives you a new page when the instance doesn't find the existing session (SessionExpire

Re: WebObjects and HTML injection

2010-07-22 Thread George Domurot
Wouldn't a simple check on hasSession do the trick? No session = no action = pageWithName(OhNoYouDidNot) -G On Jul 22, 2010, at 9:40 AM, Patrick Middleton wrote: > > On 22 Jul 2010, at 12:49, Anjo Krank wrote: > >> Why would you "preserve" the session id when it's no longer valid? >> >> Ch

Re: WebObjects and HTML injection

2010-07-22 Thread Patrick Middleton
On 22 Jul 2010, at 12:49, Anjo Krank wrote: Why would you "preserve" the session id when it's no longer valid? Cheers, Anjo Am 22.07.2010 um 13:28 schrieb Patrick Middleton: in order to sanitize inputs -- mostly by removing anything containing the likes of ' Preserve the session id whe

OT: Java desktop dev environments

2010-07-22 Thread Dawn Lockhart
Wow, Dave didn¹t use this as an opportunity to plug D2JC? ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.co

Re: Safari Extension update

2010-07-22 Thread Edgar Klein
On 2010-07-22, at 01:16 , Emmanuel GEZE wrote: > It work's fine with Safari v 5.0 (6533.16) but not in nightly webkit v 5.0 > (6533.16, r63854). ... and here an article about it http://trac.webkit.org/wiki/FAQ cheers, Edgar > Thank you for this usefull extension. > > Emmanuel > > Le 21 juil.

Re: Inverse to-one relationships

2010-07-22 Thread Chuck Hill
On Jul 22, 2010, at 5:00 AM, Paul Hoadley wrote: > Hello, > > I know this topic comes up on the list from time to time, but I just need a > quick sanity check. Nope, not sane. :-) > I have two entities, A and B. For every A, there is a corresponding B. For > some subset of all Bs, each h

Re: Inverse to-one relationships

2010-07-22 Thread Ramsey Gurley
One-to-optional-one relationship... Not doable as far as I know. In another discussion on the topic, Chuck Hill suggested: You could model it as a right-outer join and optional, but I think that EOF is still going to have a hissy fit when it does not find the row. Worth a try and a good

Inverse to-one relationships

2010-07-22 Thread Paul Hoadley
Hello, I know this topic comes up on the list from time to time, but I just need a quick sanity check. I have two entities, A and B. For every A, there is a corresponding B. For some subset of all Bs, each has a corresponding A. Currently I have modelled this with a single relationship from

If an Editing Context is disposed off?

2010-07-22 Thread Farrukh Ijaz
Hi, Is there a way to check if an editing context is disposed so I could create new one? E.g. private EOEditingContext _editingContext; public EOEditingContext editingContext() { if(_editingContext == null) { // Or _editingContext is disposed off _editingContext = ERXEC

Re: WebObjects and HTML injection

2010-07-22 Thread Anjo Krank
Why would you "preserve" the session id when it's no longer valid? Cheers, Anjo Am 22.07.2010 um 13:28 schrieb Patrick Middleton: > in order to sanitize inputs -- mostly by removing anything containing the > likes of 'http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archiv

WebObjects and HTML injection

2010-07-22 Thread Patrick Middleton
Hi folks! Some of our customers are commissioning penetration testing reports, which are flagging vulnerabilities in our WebObjects applications. The problem reported is with URLs such as .../wa/MyDirectAction? wosid=XYZ%22%3E%3Cscript%3Ealert%28123%29%3C%2Fscript%3E , direct actions that

Re: Does the ERXStaticResourceRequestHandler work with those compressed jarred resources?

2010-07-22 Thread Anjo Krank
Am 22.07.2010 um 05:00 schrieb Mr. G Brown: >> We only accept 5.4 fixes now, not issues. None of the comitters use or >> condone the use of 5.4 and thus we can't really test or debug problems with >> it. Note that the poster showed remarkable constraint. Now, if that was *me* who'd have writ

Re: Safari Extension update

2010-07-22 Thread Emmanuel GEZE
It work's fine with Safari v 5.0 (6533.16) but not in nightly webkit v 5.0 (6533.16, r63854). Thank you for this usefull extension. Emmanuel Le 21 juil. 2010 à 18:30, Edgar Klein a écrit : > I really like this extension :). > > On 2010-07-21, at 09:50 , ISHIMOTO Ken wrote: > >> Version 0.86