[cgiapp] app authorization patterns, best practices?

2012-03-23 Thread B. Estrade
Greetings, all. I've been working with CApp for a while, and I really like it. I have some questions regarding best practices when implementing role based access control (RBAC). I have been playing with CApp::Authentication and Authorization, and they both do basically what I need. Here's the

Re: [cgiapp] app authorization patterns, best practices?

2012-03-28 Thread B. Estrade
On Sat, Mar 24, 2012 at 10:32:59AM +1100, Ron Savage wrote: Hi Brett On 24/03/12 05:30, B. Estrade wrote: https://gist.github.com/33d23edf8fa2c0f48dc0 The return stmt in your groupmap code seems overly complex: #!/usr/bin/env perl use strict; use warnings; #use

Re: [cgiapp] app authorization patterns, best practices?

2012-03-28 Thread B. Estrade
On Fri, Mar 23, 2012 at 8:05 PM, Jerry Kaidor je...@tr2.com wrote: I have some questions regarding best practices when implementing role based access control (RBAC). I have been playing with CApp::Authentication and Authorization, and they both do basically what I need. *** Me too.  I have

Re: [cgiapp] app authorization patterns, best practices?

2012-03-29 Thread B. Estrade
did not try them yet myself. On 29/03/12 00:40, B. Estrade wrote: On Fri, Mar 23, 2012 at 8:05 PM, Jerry Kaidorje...@tr2.com wrote: I have some questions regarding best practices when implementing role based access control (RBAC). I have been playing with CApp::Authentication

Re: [cgiapp] CAP::Session causing errors under FastCGI and Plack?

2012-04-04 Thread B. Estrade
On Wed, Apr 04, 2012 at 03:13:13PM +1000, Cees Hek wrote: On Wed, Apr 4, 2012 at 1:51 PM, Jason Crome cromed...@gmail.com wrote: I keep banging my head against the wall trying to figure this out. ?I expect that I am doing something else wrong, but whenever I comment out the session

Re: [cgiapp] Announce: CGI::Snapp::Dispatch V 1.00 etc, with PSGI support

2012-04-12 Thread B. Estrade
On Thu, Apr 12, 2012 at 01:29:37PM +1000, Ron Savage wrote: Hi Folks I've uploaded to CPAN: o CGI::Snapp::Dispatch V 1.00. This distro includes CGI::Snapp::Dispatch::Regexp. Both modules support usage in a PSGI environment. This module is a partner for CGI::Snapp, and together they

Re: [cgiapp] Announce: CGI::Snapp::Dispatch V 1.00 etc, with PSGI support

2012-04-13 Thread B. Estrade
On Fri, Apr 13, 2012 at 06:48:34AM -0400, Nic Zero wrote: I too have recently rewritten CGI::App and most of its core plugins. That was not my original plan.?? You may remember recently I was recommending people make use of class-level initialisation and only do object-level initialisation

[cgiapp] Debugging while using CAP::Dispatch...

2012-04-19 Thread B. Estrade
I am having some time trying to figure out errors with this kind of output: Can't locate object method error via package Can't locate object method error has occured via package... What is the best way to get useful information to the browswer when something goes awry? Brett

Re: [cgiapp] Debugging while using CAP::Dispatch...

2012-04-20 Thread B. Estrade
On Fri, Apr 20, 2012 at 08:57:53AM +1000, Ron Savage wrote: Hi Brett On 20/04/12 08:47, B. Estrade wrote: I am having some time trying to figure out errors with this kind of output: Can't locate object method error via package Can't locate object method error has occured via

Re: [cgiapp] app authorization patterns, best practices?

2012-04-24 Thread B. Estrade
I am finally at the point where I am writing a driver, so I have a stupid question. Do I need to place this into the main module's parent directory in order to have Authen/z use them? Thanks, Brett On Wed, Mar 28, 2012 at 09:26:14AM -0700, Jerry Kaidor wrote: Hello, I just emailed you

Re: [cgiapp] app authorization patterns, best practices?

2012-04-25 Thread B. Estrade
/Plugin/Authentication/Driver/MyDriver.pm Now I can configure it to use: DRIVER = ['MyDriver', {arg1=foo,...}], Thank you, Brett Nic From: B. Estrade estr...@gmail.com To: CGI Application cgiapp@lists.erlbaum.net Sent: Tuesday, April 24, 2012 at 7:04 pm Subject: Re: [cgiapp] app

[cgiapp] CAP Dispatch and encoded backslashes

2012-06-06 Thread B. Estrade
I am having an issue with CAP Dispatch that seems to be rearing its ugly head when I send, as part of the route, serialized JSON data. The issue is that I have a value with a backslash in it. I am pretty sure the URL parsing done by Dispatch is splitting on this backslash, but I though that it

Re: [cgiapp] CAP Dispatch and encoded backslashes

2012-06-06 Thread B. Estrade
On Thu, Jun 07, 2012 at 01:17:12PM +1000, Ron Savage wrote: Hi Brett On 07/06/12 05:37, B. Estrade wrote: I am having an issue with CAP Dispatch that seems to be rearing its ugly head when I send, as part of the route, serialized JSON data. The issue is that I have a value

Re: [cgiapp] CAP Dispatch and encoded backslashes

2012-06-07 Thread B. Estrade
On Thu, Jun 07, 2012 at 03:45:15PM +1000, Ron Savage wrote: Hi Brett On 07/06/12 13:42, B. Estrade wrote: On Thu, Jun 07, 2012 at 01:17:12PM +1000, Ron Savage wrote: Hi Brett On 07/06/12 05:37, B. Estrade wrote: I am having an issue with CAP Dispatch that seems to be rearing its

Re: [cgiapp] CAP Dispatch and encoded backslashes

2012-06-07 Thread B. Estrade
:41:30AM -0500, B. Estrade wrote: On Thu, Jun 07, 2012 at 03:45:15PM +1000, Ron Savage wrote: Hi Brett On 07/06/12 13:42, B. Estrade wrote: On Thu, Jun 07, 2012 at 01:17:12PM +1000, Ron Savage wrote: Hi Brett On 07/06/12 05:37, B. Estrade wrote: I am having an issue with CAP

[cgiapp] Authz with Authen, something is backwards here...

2012-06-13 Thread B. Estrade
I am finding that if I have a runmode that is protected via authentication and authorization, the authen doesn't happen before the authz is validated. In otherwords, I want a authen to happen first; if it fails, redirect to the login. If authen is okay, proceseed to authz. Right now I have this

Re: [cgiapp] Authz with Authen, something is backwards here...

2012-06-13 Thread B. Estrade
On Wed, Jun 13, 2012 at 02:58:28PM -0500, B. Estrade wrote: I am finding that if I have a runmode that is protected via authentication and authorization, the authen doesn't happen before the authz is validated. In otherwords, I want a authen to happen first; if it fails, redirect

Re: [cgiapp] Authz with Authen, something is backwards here...

2012-06-14 Thread B. Estrade
there is a problem with the order in which you configured things which will influence the order in which the authen and authz callbacks get triggered. I guess this is where I need to look. Thank you, Brett Cheers, Cees On Thu, Jun 14, 2012 at 6:03 AM, B. Estrade estr...@gmail.com wrote

Re: [cgiapp] Authz with Authen, something is backwards here...

2012-06-14 Thread B. Estrade
14, 2012 at 09:44:32AM -0500, B. Estrade wrote: On Thu, Jun 14, 2012 at 10:12:40AM +1000, Cees Hek wrote: Hi Brett, Authorization is not purely related to authentication. For example you could authorize access based on an IP Address, or based on the time of the day. So we can't

[cgiapp] uploads

2012-08-10 Thread B. Estrade
What is the idiomatic way for dealing with uploads via CAP? I am using CGI::Simple. Thank you, Brett -- Register Now for cPanel Conference Oct 8-10, 2012, Houston, Texas http://conference.cpanel.net/ # CGI::Application community mailing list ##

Re: [cgiapp] CGI::Application status update from the maintainer

2012-09-05 Thread B. Estrade
Thank you, Mark. Responses are inlined. On Tue, Aug 28, 2012 at 11:27:04PM -0400, Mark Stosberg wrote: Hello Everyone. I'll start with a apology about not being as present as I intended. Messages from this list were not coming directly to my Inbox for some time, and it took me longer

Re: [cgiapp] CGI::Application status update from the maintainer

2012-09-06 Thread B. Estrade
Snipped On Thu, Sep 06, 2012 at 09:12:40AM +1000, Ron Savage wrote: Hi Brett It would be really nice to merge in some bare bones Authentication and Authorization support - maybe ever by more fully developing CAP's lifecycle. Likewise. It's a pity a standard(!) way of doing this with CAP

Re: [cgiapp] CGI::Application status update from the maintainer

2012-09-07 Thread B. Estrade
a way with setup altogether and use a method similar to the init hook you mentioned below. I am sure MMWV, but I will take your advice below. Thanks for the help. Brett On Thu, Sep 6, 2012 at 12:04 PM, Rhesa Rozendaal p...@rhesa.com wrote: On 09/06/2012 04:48 PM, B. Estrade wrote: You're

Re: [cgiapp] CGI::Application status update from the maintainer

2012-09-10 Thread B. Estrade
Thank you, Mark. I accept what you so at face value and will seek to educate myself more. Below I address the questions you asked me. On Sat, Sep 08, 2012 at 06:10:55PM -0400, Mark Stosberg wrote: snip.. It would be really nice to merge in some bare bones Authentication and

Re: [cgiapp] CGI::Application status update from the maintainer

2012-09-18 Thread B. Estrade
On Tue, Sep 18, 2012 at 12:19:46PM -0500, Bill Stephenson wrote: On Sep 15, 2012, at 10:58 AM, Mark Stosberg wrote: Most web clients support JSON now, which allows for more complex structures than the simple key/value pair that CGI.pm uses. Mark, I think this is relevant to what I'm

Re: [cgiapp] authentication and authorization callbacks

2012-11-06 Thread B. Estrade
On Tue, Nov 06, 2012 at 03:32:13PM -0500, Mark Stosberg wrote: You call init in BUILD, but then explicitly run down the callback list in the run() method. What I am wondering is if you could bridge the gap to the other side that would allow one to munge around with the *ordered contents

Re: [cgiapp] authentication and authorization callbacks

2012-11-07 Thread B. Estrade
On Tue, Nov 06, 2012 at 09:37:21PM -0500, Mark Stosberg wrote: Brett, I think this existing functionality would provide what you want: PSGI::Application-new_hook('authorization'); PSGI::Application-add_callback('authorization', \callback); Kind of, but what it doesn't allow me to