Actions (methods) must not appear in URIs

2007-10-15 Thread Roy T. Fielding
I seem to have failed to get my point across when I last visited Basel and we talked about what can and cannot be done in a selector. The original Web design notes forbid the use of GET for any action that is considered to have side-effects, because such an implementation allows users to be

Re: [microsling] SlingServlet interface, HTTP methods (was: microsling script resolution rewritten)

2007-10-16 Thread Roy T. Fielding
On Oct 16, 2007, at 1:18 AM, Bertrand Delacretaz wrote: On 10/15/07, Bertrand Delacretaz [EMAIL PROTECTED] wrote: ...We could for example define that adding a slingMethod=PUT parameter to the request causes SlingServlet.doPut to be called instead of doPost To clarify, note that I

Re: svn commit: r598331 [1/22] - in /incubator/sling/trunk/scripting/jsp: ./ src/main/java/org/apache/jasper/ src/main/java/org/apache/jasper/compiler/ src/main/java/org/apache/jasper/compiler/tagplug

2007-11-26 Thread Roy T. Fielding
On Nov 26, 2007, at 8:15 AM, [EMAIL PROTECTED] wrote: SLING-98 Migrate JSP scripting support + plus include Jasper Compiler and EL implementation Ouch. Just out of curiosity, why do we need the source of jasper? Is it to replace the back-end storage bits with JCR? Would it be possible to

Re: Sling / microsling sessions at ApacheCon EU 2008?

2007-11-30 Thread Roy T. Fielding
On Nov 30, 2007, at 1:32 AM, Bertrand Delacretaz wrote: I did propose a discover microsling talk, that we meant to give together with Felix. It has not been accepted for the main track, but the planners suggest proposing it for the fast feather track (that's shorter 15 minute talks). Was

Re: use case: resolving a resource based on a nod e´s version

2007-12-12 Thread Roy T. Fielding
On Dec 12, 2007, at 1:10 PM, Bertrand Delacretaz wrote: How about /content/some/resource.html/s:version:1.4/s:lang:fr/somefile.pdf where suffixes starting with s: are reserved for Sling usage? yuck. A general principle of web design is that you shouldn't be able to tell how a server is

[jira] Commented: (SLING-53) Add request filter for method overwrite

2007-12-19 Thread Roy T. Fielding (JIRA)
[ https://issues.apache.org/jira/browse/SLING-53?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12553455 ] Roy T. Fielding commented on SLING-53: -- This needs to be very well documented. Some companies will consider

Re: Support for direct script addressing (was: How to I chmod -x on Javascript files)

2008-02-22 Thread Roy T. Fielding
I think executing a script upon GET of a URI should only be possible on generated (symlink or alias) URIs that are specifically configured for that purpose and have separate access control from the URIs used to edit/view those scripts. This follows the same practice used in Web servers with CGI

Re: Post Servlet Response Codes

2008-04-29 Thread Roy T. Fielding
What about using extensions to specify the desired behaviour? This could look as follows: POST to /foo- 200 OK and a XHTML representation POST to /foo.html - 200 OK and a XHTML representation POST to /foo.xml- correct response codes and a XML

Re: Post Servlet Response Codes

2008-05-05 Thread Roy T. Fielding
On May 5, 2008, at 11:07 AM, Felix Meschberger wrote: Am Montag, den 05.05.2008, 16:58 +0200 schrieb Bertrand Delacretaz: On Mon, May 5, 2008 at 4:24 PM, Felix Meschberger [EMAIL PROTECTED] wrote: If :status is alwaysok, the 200 response is sent According to SLING-422, this is

[jira] Commented: (SLING-438) Rename scripting/resolver module to scripting/core

2008-05-08 Thread Roy T. Fielding (JIRA)
[ https://issues.apache.org/jira/browse/SLING-438?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12595341#action_12595341 ] Roy T. Fielding commented on SLING-438: --- Naming anything core is unwise if you expect

Re: Continuum mails are not sent to our list

2008-05-28 Thread Roy T. Fielding
On May 28, 2008, at 2:16 PM, Jukka Zitting wrote: On Thu, May 29, 2008 at 12:13 AM, Roy T. Fielding [EMAIL PROTECTED] wrote: I thought that was because Jukka disabled Continuum. I did that only for Jackrabbit. Haven't touched any Sling infra. I think there is something wrong with the Sling

Re: svn commit: r662458 - in /incubator/sling/trunk/launchpad: app/NOTICE base/NOTICE content/NOTICE jcrapp/NOTICE webapp/NOTICE

2008-06-02 Thread Roy T. Fielding
Unnecessary whitespace, headers, horizontal rules, page breaks, instructions on how to edit, and related nonsense should never appear in the NOTICE file that is required by our license to be displayed by downstream binary distributions like an About box. Roy On Jun 2, 2008, at 8:10 AM,

Re: Sling Release

2008-06-03 Thread Roy T. Fielding
On Jun 3, 2008, at 5:41 AM, Felix Meschberger wrote: Am Dienstag, den 03.06.2008, 14:32 +0200 schrieb Bertrand Delacretaz: On Tue, Jun 3, 2008 at 1:52 PM, Bertrand Delacretaz [EMAIL PROTECTED] wrote: ...I'm generating the NOTICEs as we speak, ETA 30 minutes... Done (took 34 minutes, sorry

Re: JSON is missing an entry in the notice file

2008-06-04 Thread Roy T. Fielding
On Jun 4, 2008, at 5:41 AM, Carsten Ziegeler wrote: the following line needs to be added to the notice file in the commons/json module: This product includes software developed at http://json.org. NOTICE is only for attributions that are required by their corresponding copyright license or

Re: Sling Release

2008-06-04 Thread Roy T. Fielding
On Jun 3, 2008, at 11:45 PM, Bertrand Delacretaz wrote: On Wed, Jun 4, 2008 at 12:35 AM, Roy T. Fielding [EMAIL PROTECTED] wrote: ...I'd rather have a set of hand-edited NOTICE files that accurately reflect each of the release packages I see your point, and thanks for your changes

Re: License and notice files

2008-06-11 Thread Roy T. Fielding
On Jun 11, 2008, at 1:48 AM, Felix Meschberger wrote: Am Mittwoch, den 11.06.2008, 10:10 +0200 schrieb Carsten Ziegeler: Bertrand Delacretaz wrote: Note also that the current notice files include several things that, according to Roy in his revision 662927 changes, do not require notices.

Re: License and notice files

2008-06-11 Thread Roy T. Fielding
On Jun 11, 2008, at 1:33 AM, Jukka Zitting wrote: On Wed, Jun 11, 2008 at 10:40 AM, Carsten Ziegeler [EMAIL PROTECTED] wrote: It would be great if some people could check everything, so that we're safe for our upcomming release. There's FeedParser license information at the end of

Re: License and notice files

2008-06-12 Thread Roy T. Fielding
On Jun 11, 2008, at 10:43 PM, Jukka Zitting wrote: On Thu, Jun 12, 2008 at 7:46 AM, Roy T. Fielding [EMAIL PROTECTED] wrote: I am struggling to understand what is going on here. LICENSE and NOTICE refer to the copyrightable material in *this* package. Surely we don't distribute Derby

Re: License and notice files

2008-06-12 Thread Roy T. Fielding
On Jun 12, 2008, at 12:18 AM, Carsten Ziegeler wrote: I just talked with Felix offline about this and we came up with the following solution which should meet the requirements. As Roy points out we have to distinguish between source and binary distributions (and yes, the ASF does only

Re: License and notice files

2008-06-13 Thread Roy T. Fielding
On Jun 13, 2008, at 12:54 AM, Jukka Zitting wrote: - The src/main/resources/META-INF(LICENSE file has no reference to the LICENSE.slf4j file The LICENSE.* files seem pretty obvious, so I'm not sure if the reference is really needed. I'd say we either leave it as is (no references), or include

Re: svn commit: r668178 - in /incubator/sling/trunk: jcr/api/src/main/resources/META-INF/ launchpad/app/ launchpad/app/src/main/resources/META-INF/ launchpad/webapp/src/main/webapp/WEB-INF/

2008-06-17 Thread Roy T. Fielding
Umm, this is incomplete. Apache doesn't redistribute the JCR jar under the Specification License. Apache can distribute the binary under the additional terms that are posted on the Day maven site http://www.day.com/maven/jsr170/jars/LICENSE.txt so that should be included in the launchpad

[jira] Commented: (SLING-562) Pretty print the json dump

2008-07-03 Thread Roy T. Fielding (JIRA)
[ https://issues.apache.org/jira/browse/SLING-562?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12610336#action_12610336 ] Roy T. Fielding commented on SLING-562: --- I think using segment parameters would

[jira] Commented: (SLING-562) Pretty print the json dump

2008-07-03 Thread Roy T. Fielding (JIRA)
[ https://issues.apache.org/jira/browse/SLING-562?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12610354#action_12610354 ] Roy T. Fielding commented on SLING-562: --- They are just a part of the URI path

Re: [jira] Commented: (SLING-249) Allow mapping nodes to internet domains

2008-11-21 Thread Roy T. Fielding
Sounds like an easy way to bypass delegated security. I don't like the idea of sprinkling root-level aliases all over the content tree. I think it would be incredibly complex and impossible to maintain over time, and not even remotely scalable for virtual hosting setups. I think that Sling

Re: [jira] Commented: (SLING-249) Allow mapping nodes to internet domains

2008-11-26 Thread Roy T. Fielding
On Nov 23, 2008, at 1:42 PM, Felix Meschberger wrote: Roy T. Fielding schrieb: I think that Sling should use a content tree to establish the root mappings; e.g., /etc/map/{scheme}/{host.port}/{uri_path} with the default contents being /etc/map/http/example.com.80

Re: [jira] Commented: (SLING-249) Allow mapping nodes to internet domains

2008-11-26 Thread Roy T. Fielding
On Nov 24, 2008, at 5:06 AM, Felix Meschberger wrote: Better yet, we might do regular expression matching and referencing: /etc/map/http/www.(.)*.com.80/ +-- sling:contentPrefix = /content/sites/$1/ Question, though, is how to get these strings into the

[jira] Commented: (SLING-964) MimeTypeService: set correct default xml mimetype

2009-05-12 Thread Roy T. Fielding (JIRA)
[ https://issues.apache.org/jira/browse/SLING-964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12708587#action_12708587 ] Roy T. Fielding commented on SLING-964: --- Should this be fixed in Sling or in Commons

Re: Releases in the future

2009-05-12 Thread Roy T. Fielding
On May 12, 2009, at 12:40 AM, Bertrand Delacretaz wrote: On Mon, May 11, 2009 at 10:29 PM, Roy T. Fielding field...@gbiv.com wrote: On May 11, 2009, at 12:03 PM, Felix Meschberger wrote: Carsten and I have been reasoning about the releases in the future, mainly the ones for end-users who

Re: A CMS for the ASF

2009-05-24 Thread Roy T. Fielding
On May 24, 2009, at 7:36 AM, Andreas Hartmann wrote: Hi J. Aaron, thanks for the pointer! J Aaron Farr schrieb: There's a thread starting on infrastructure apache.org about the requirements for a CMS for the ASF. Here's a snippet from Paul: Is this archive accessible to the public? I