I havent tried it, but are the paths in the address bar the wicket kind, 
or do they make sense to humans?

I wonder how much it overlaps with a good, RESTful interface, in terms 
of what we want to expose?

Generally positive :)

-Arne


Andrea Aime wrote:
> Hey,
> I just noticed I committed by accident a new component
> I'm working on in web-core, in package
> org.geoserver.web.wicket.browser
>
> I wanted to talk about it later, but since it already
> escaped my local fs, whatever, let's do it now.
>
> The thing it's not complete, for the moment I have two
> component:
> - a table based listing of the files in a
> directory, directly inpired by the Apache file listing,
> - a breadcrumb component that shows the relative path
> between a root path and a current path as a set of
> clickable links.
>
> The first is heavily inspired by the Apache standard
> file listing:
> http://presentations.opengeo.org/2008_FOSS4G/
> http://presentations.opengeo.org/
> The second by the usual site breadcrumbs.
>
> Put them together, wire the events, add a selector
> of base paths that one can look into (a simple
> dropdown would do), add file filtering,
> and you get a reasonably nice server side file
> browser that can be used to go and choose files
> on the server: useful to select shapefiles,
> directories and all coverage types, especially
> if GeoServer is sitting in a remote host
> where one has only ssh access.
>
> One thing I'm concerned about, is how much
> of the file system do we allow the admin
> to browse? Only the data dir contents is
> somewhat safe, but limited. All the file
> system seems to be risky, even if the component
> itself does not allow one to download files,
> it would allow anyone breaking into the
> admin auth to see the whole filesystem layout.
> Maybe allow configuration of the browsable paths?
> Yet that would be something that is configured
> in some way that cannot be overriden by the web
> UI.
>
> Am I thinking too much? Maybe just adding HTTPS
> on the web admin console (something much overdue)
> would relax the above worries?
>
> Opinions welcomed.
> Cheers
> Andrea
>
>
>   


-- 
Arne Kepp
OpenGeo - http://opengeo.org
Expert service straight from the developers


------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to