Gerard van Enk <[EMAIL PROTECTED]> wrote:
I think these are fixed, but I don't use SCAN. Could be that it should be rejected. There is a small issue with typerels still. If e.g. you define news->urls and you ask in a news node 'getRelatedNodes("object")', (or in a multilevel), should it then return the urls, or should it return nothing because you did not define the relation news->object? I think the latter is the case now, and this might be correct. This doubt made me not close these bugs.
Hmmm...interesting question....maybe it should return only the object info of the related urls?
But it doesn't in Jsp, I think. Hence perhaps the bug. On the other hand, perhaps this is wanted behaviour, and is more like a bug in SCAN that it does.
I think that having inheritance there can be distinguished 'mayFollowRelation' and 'mayCreateRelation'.
You could argue that object->object (any relation type) is always allowed to follow. It could could also be argued that a relation may only be followed if it 'exists' in the original sense.
That's true....I hadn't thought of the security related issues.....
Gerard
