Re: Filters before SlingMainServlet

2010-09-30 Thread Ian Boston
On 30 Sep 2010, at 17:16, Ian Boston wrote: On 30 Sep 2010, at 16:50, Ian Boston wrote: Looking in the code most of those methods are synchronised, which feels wrong as it will make the server single threaded to read, write I can understand, but not read. I thought Jackrabbit

Filters before SlingMainServlet

2010-09-29 Thread Ian Boston
Hi, Is it possible to register a filter before the SlingMainServlet ? I can register a filter via the extended http service (PAX Web WebContainer in my case) but I cant get the filter to bind to the SlingMainServlet, IIUC because I cant get hold SlingMainServlets HttpContext. For background

Content Loader and Overwrite logic

2010-09-24 Thread Ian Boston
Hi, I have been looking at the content loader and the overwrite/uninstall logic. I have 2 jars. contenttest1 and contenttest2. Each jar has Sling-Initial-ContentSLING-INF/content;overwrite:=true;uninstall:=false;path:=/contenttest/Sling-Initial-Content content test 1 has

Re: Content Loader and Overwrite logic

2010-09-24 Thread Ian Boston
On 24 Sep 2010, at 10:15, Ian Boston wrote: Bug or expected behaviour ? The registered bundle content contains no uninstall-paths so IIUC, nothing should have been uninstalled and yet the folders go awal x43543-2:contenttest ieb$ curl http://localhost:8080/var/sling/bundle-content.tidy.3

Re: Content Loader and Overwrite logic

2010-09-24 Thread Ian Boston
On 24 Sep 2010, at 10:35, Ian Boston wrote: On 24 Sep 2010, at 10:15, Ian Boston wrote: Bug or expected behaviour ? The registered bundle content contains no uninstall-paths so IIUC, nothing should have been uninstalled and yet the folders go awal x43543-2:contenttest ieb$ curl

Re: Content Loader and Overwrite logic

2010-09-24 Thread Ian Boston
On 24 Sep 2010, at 10:54, Felix Meschberger wrote: Do we need such a flag ? Shouldn't this be default ? Not really sure and not having thought of all the backwards-compatibility consequences. Well that would make sense, at the moment an updated bundle doesn't result in updated content,

Re: Content Loader and Overwrite logic

2010-09-24 Thread Ian Boston
On 24 Sep 2010, at 11:21, Carsten Ziegeler wrote: Ian Boston wrote On 24 Sep 2010, at 11:06, Carsten Ziegeler wrote: So if you want to update this content, you should update the corresponding bundle. Thats the bit thats not really working (unless I say overwrite:=true) Yes, right

Re: Content Loader and Overwrite logic

2010-09-24 Thread Ian Boston
On 24 Sep 2010, at 11:21, Carsten Ziegeler wrote: Ian Boston wrote On 24 Sep 2010, at 11:06, Carsten Ziegeler wrote: So if you want to update this content, you should update the corresponding bundle. Thats the bit thats not really working (unless I say overwrite:=true) Yes, right

[jira] Created: (SLING-1802) ContentLoader does not update the content from a bundle when the bundle is updated.

2010-09-24 Thread Ian Boston (JIRA)
: Sling Issue Type: Bug Components: JCR Affects Versions: JCR ContentLoader 2.1.0 Reporter: Ian Boston If you create an updated bundle containing content to be installed by the content loader, that updated content does not get installed. You can use overwrite

Re: Content Loader and Overwrite logic

2010-09-24 Thread Ian Boston
On 24 Sep 2010, at 12:12, Felix Meschberger wrote: Use that, and fall back to Bundle.getLastModified() is missing? The correct thing is to use URLConnection.getLastModified(), which unfortunately gives you the Bundle.getLastModified() in Felix but may at the same time give you the

[jira] Commented: (SLING-1802) ContentLoader does not update the content from a bundle when the bundle is updated.

2010-09-24 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1802?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12914433#action_12914433 ] Ian Boston commented on SLING-1802: --- Using last modified of the bundle and comparing

[jira] Assigned: (SLING-1802) ContentLoader does not update the content from a bundle when the bundle is updated.

2010-09-24 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston reassigned SLING-1802: - Assignee: Ian Boston ContentLoader does not update the content from a bundle when the bundle

[jira] Resolved: (SLING-1802) ContentLoader does not update the content from a bundle when the bundle is updated.

2010-09-24 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston resolved SLING-1802. --- Fix Version/s: JCR ContentLoader 2.1.2 Resolution: Fixed Fixed Bundles will now update

Re: versioning support in POST servlet

2010-09-23 Thread Ian Boston
IIRC the thread at the time discussed making versioning non default. I think there is a configuration switch that allows it to be non default, but the default for that switch is versioning on, ie checkin checkout. Ian On 23 Sep 2010, at 15:13, Felix Meschberger wrote: Hi, I just stumbled on

Re: Launchpad port consistency

2010-09-20 Thread Ian Boston
On 20 Sep 2010, at 16:21, Felix Meschberger wrote: Hi all, We currently have an inconsistency in the setup of the jetty:run configuration in the the launchpad/builder module and the default port used by the Sling standalone application. The jetty plugin is configured to use port by

[jira] Commented: (SLING-1745) Do not redirect AJAX requests with expired cookie to login form

2010-09-20 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1745?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12912723#action_12912723 ] Ian Boston commented on SLING-1745: --- LGTM. Ian Do not redirect AJAX requests

Re: Launchpad port consistency

2010-09-20 Thread Ian Boston
On 21 Sep 2010, at 00:16, Carsten Ziegeler wrote: Bertrand Delacretaz wrote On Mon, Sep 20, 2010 at 11:01 AM, Felix Meschberger fmesc...@gmail.com wrote: ...IIUIC the launchpad/testing module uses a build-helper plugin to use a random port for integration testing That's correct.

Re: Authentication Issue

2010-09-20 Thread Ian Boston
On 21 Sep 2010, at 00:19, Felix Meschberger wrote: Hi all, I have uploaded a proposed patch including support for both issues to http://codereview.appspot.com/2192046/. Please comment. Thanks. The patch addresses all my earlier concerns with Ajax calls, thank you. I can see that Justin

Re: Welcome Mike Mueller as a new member of the Sling PMC

2010-09-20 Thread Ian Boston
On 21 Sep 2010, at 04:07, Felix Meschberger wrote: Hi all, It is with utmost pleasure that I announce that the Apache Sling PMC recently voted to invite Mike Müller as a new PMC member and he accepted. Mike has been doing and is continuing to do a great job on all fronts of Sling, most

Re: Welcome Clemens Wyss

2010-09-17 Thread Ian Boston
Welcome Clemens. Ian On 18 Sep 2010, at 01:00, Justin Edelson wrote: Welcome aboard Clemens. If I haven't said so already, the Explorer looks great and I'm sure is only going to get better. Seconded :), been very useful already. On 9/17/10 2:34 AM, Felix Meschberger wrote: Hi all, I

Re: Authentication Issue

2010-09-17 Thread Ian Boston
On 18 Sep 2010, at 00:59, Felix Meschberger wrote: Hi all, I am trying to tackle issues SLING-1400 [1] and SLING-1745 [2]. The first issue is about WebDAV clients connecting to Sling on root with an OPTIONS request and not being happy with a redirect response, obviously. The second

Re: Authentication/Authorization and jackrabbit.usermanager functionality

2010-09-15 Thread Ian Boston
On 15 Sep 2010, at 05:01, Justin Edelson wrote: FYI - Created JCR-2748 and submitted a patch to provide a simple way to disable anonymous access to the security workspace. Ian - have you looked at turning the Sakai server bundle into a fragment attached to the Sling JCR Jackrabbit Server

Re: Authentication/Authorization and jackrabbit.usermanager functionality

2010-09-13 Thread Ian Boston
IIRC the security workspace is not set up with access controllable nodes, so you cant use a policy on a node. We did [1] for the securty workspace. 1

Re: Authentication/Authorization and jackrabbit.usermanager functionality

2010-09-12 Thread Ian Boston
On 12 Sep 2010, at 00:25, Felix Meschberger wrote: There is one situation where an admin session is always retrieved: The CreeateUser servlet. This is probably a bug and should only use an admin session for self-registration. +1, I think we have modified out CreateUser servlet to do this,

Re: [SLING-1729] Use of SecureRandom

2010-09-06 Thread Ian Boston
but would solve the problem Regards Felix On 05.09.2010 11:16, Ian Boston wrote: java.util.Random does not have enough entropy to be used for security purposes. IIRC the sequence can be repeated as the seed is based on the epoch, and so is predictable. You could use

Re: [VOTE] Release Apache Sling JCR API, JCR Base, JCR Content Loader, and Jackrabbit Server 2.1.0

2010-09-06 Thread Ian Boston
Artefacts all check out Ok and release lgtm +1 Ian On 6 Sep 2010, at 16:10, Justin Edelson wrote: Hi, We solved a total of 33 issues in these releases: JCR API - 1 issue: https://issues.apache.org/jira/browse/SLING/fixforversion/12314564 JCR Base - 6 issues:

[jira] Created: (SLING-1727) Access Denied Exceptions fill up the logs with tracebacks that give no additional information

2010-09-03 Thread Ian Boston (JIRA)
Project: Sling Issue Type: Bug Components: Servlets Affects Versions: Servlets Post 2.0.4 Reporter: Ian Boston Assignee: Ian Boston Fix For: Servlets Post 2.0.6 All errors in AbstractSlingPostOperation are logged with full

Re: SlingPostServlet

2010-09-02 Thread Ian Boston
IIRC you can post a Json file in the body of the post and it becomes the node tree. Ian On 2 Sep 2010, at 17:42, John Crawford wrote: Greetings, I was curious if anyone knows of a way to create an entire branch from a single POST request to the SlingPostServlet? By entire branch, I mean

Re: [VOTE] Apache Sling Engine 2.1.0, Apache Sling Adapter 2.0.6, Apache Sling Settings 1.0.0

2010-08-27 Thread Ian Boston
+1 Ian On 27 Aug 2010, at 09:38, Felix Meschberger wrote: Hi, Here are the Apache Sling Engine 2.1.0, Apache Sling Adapter 2.0.6, and Apache Sling Settings 1.0.0 releases We have solved 36 issues for Sling Engine: https://issues.apache.org/jira/browse/SLING/fixforversion/12314287 We

Re: sling 6 releases visualization

2010-08-26 Thread Ian Boston
Hey thats excellent, makes it much easier to see what needs to be worked on. ( feeling very Guilty of not having enough time to do that work just at the moment) Thanks Ian On 25 Aug 2010, at 22:42, Justin Edelson wrote: I put this together to help visualize the releases leading up to Sling 6:

Re: [VOTE] Release Commons ClassLoader 1.2.0 and JCR ClassLoader 3.1.2

2010-08-25 Thread Ian Boston
+1, Artifacts all check out ok. Ian On 25 Aug 2010, at 13:33, Carsten Ziegeler wrote: Hi, We solved some issues in the classloaders: https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=truepid=12310710fixfor=12314758

Re: [VOTE] Release Apache Sling Auth Core 1.0.0, Auth Form 1.0.0, Auth OpenID 1.0.0, Auth Selector 1.0.0

2010-08-24 Thread Ian Boston
+1 Ian On 23 Aug 2010, at 19:48, Felix Meschberger wrote: Hi, Here are the 1.0.0 releases of the Apache Sling Auth Core, Auth Form, Auth OpenID, and Auth Selector bundles. We have solved 36 issues for Auth Core: https://issues.apache.org/jira/browse/SLING/fixforversion/12314514 We

Re: [VOTE] Release Apache Sling Auth Core 1.0.2

2010-08-24 Thread Ian Boston
+1, release checks out ok. Ian On 24 Aug 2010, at 08:58, Felix Meschberger wrote: +1 Regards Felix On 24.08.2010 09:58, Felix Meschberger wrote: Hi, Here is the Apache Sling Auth Core 1.0.2 release. There appeared two issues after the call for votes for the Auth Core 1.0.0

Re: [VOTE] Release Apache Sling Web Console Branding 1.0.0 and Apache Sling Web Console Security Provider 1.0.0

2010-08-23 Thread Ian Boston
+1, all checks out ok, not a great deal in the branding jars to validate :) Ian On 21 Aug 2010, at 21:56, Felix Meschberger wrote: Hi, Here are the Apache Sling Web Console Branding 1.0.0 and Apache Sling Web Console Security Provider 1.0.0 releases. For the Web Console Branding we fixed

Re: WebDAV

2010-08-23 Thread Ian Boston
Looks very interesting, and might solve some of the problems we have been having caused by pooled content that has no structure. Presumably the webdav is writable and will present anything that is resolvable. Any idea how it copes with non listable parent resources? (listChildren returns an

Re: Sling API Release

2010-08-18 Thread Ian Boston
I havent said this before, so: +1, a good move imho. Thanks Ian On 17 Aug 2010, at 21:21, Felix Meschberger wrote: Hi all, Just so you know: I will create the release candidate for the Sling API tomorrow morning... This is the last chance to throw in a veto ;-) Regards Felix

Re: [VOTE] Release Sling API 2.1.0

2010-08-18 Thread Ian Boston
+1 Signatures all check out ok, and API LGTM Ian On 18 Aug 2010, at 17:32, Felix Meschberger wrote: +1 Regards Felix On 18.08.2010 17:28, Felix Meschberger wrote: Hi, At long last here it is: The Sling API 2.1.0 release vote. We solved 25 issues in this release:

Exception when bundling commons auth

2010-07-29 Thread Ian Boston
Hi I am seeing the following when executing the maven bundle plugin in commons auth. The MANIFEST.MF looks Ok. I think its caused by Import-Package org.apache.sling.api.auth;version=[$(version;==;$(@)),$(version;=+;$(@))), *

[jira] Resolved: (SLING-1615) When importing content all the nodes to the parent node must exists, whereas a Sling POST creates the node.

2010-07-29 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1615?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston resolved SLING-1615. --- Resolution: Fixed Applied patch having left for comments. passes build, integration tests

Resource API changes.

2010-07-29 Thread Ian Boston
Hi, I am seeing failures with things that implement the Resource api from the 2.0.8 bundle that are used by ResourceUtil.getName(resource) in the 2.0.9-SNAPSHOT bundle. IIUC the Resource API from 2.0.9-SNAPSHOT has getName(). ResourceUtil.getName() in 2.0.9-SNAPSHOT calls resource.getName()

[jira] Commented: (SLING-1193) Extend Resource interface and provide AbstractResource base class

2010-07-29 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1193?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12893582#action_12893582 ] Ian Boston commented on SLING-1193: --- Also problems with fsresource and bundleresource

[jira] Assigned: (SLING-1613) JSON Content loader converts all arrays to arrays of String.

2010-07-28 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1613?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston reassigned SLING-1613: - Assignee: Ian Boston JSON Content loader converts all arrays to arrays of String

Re: Form Auth and Cookie Timeout

2010-07-28 Thread Ian Boston
On 28 Jul 2010, at 15:08, Justin Edelson wrote: On 7/28/10 4:12 AM, Ian Boston wrote: On 28 Jul 2010, at 08:02, Felix Meschberger wrote: Hi, I would say, this is a new bug. IMO a timed-out cookie should actually be deleted by the Form authentication handler and the request should

[jira] Resolved: (SLING-1613) JSON Content loader converts all arrays to arrays of String.

2010-07-28 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1613?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston resolved SLING-1613. --- Resolution: Fixed Fixed, type is derived from the json object not a string representation

[jira] Resolved: (SLING-1588) form auth can create an endless redirect loop

2010-07-28 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1588?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston resolved SLING-1588. --- Resolution: Fixed I think this is now fixed, From the curl sequence the cookie is removed before

[jira] Commented: (SLING-1614) Form Auth is not returning user to anonymous JCR state after timeout

2010-07-28 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1614?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12893215#action_12893215 ] Ian Boston commented on SLING-1614: --- SLING-1588 has been fixed (just now), so no infinite

Re: Form Auth and Cookie Timeout

2010-07-28 Thread Ian Boston
/SLING-1614 On Jul 28, 2010, at 7:41 AM, Ian Boston wrote: On 28 Jul 2010, at 15:08, Justin Edelson wrote: On 7/28/10 4:12 AM, Ian Boston wrote: On 28 Jul 2010, at 08:02, Felix Meschberger wrote: Hi, I would say, this is a new bug. IMO a timed-out cookie should actually be deleted

Re: Form Auth and Cookie Timeout

2010-07-28 Thread Ian Boston
All done, please test. Ian On 28 Jul 2010, at 16:47, Ian Boston wrote: Ok fixed SLING-1588, Looking at adding config to allow Form or no Form when the token expires. Ian On 28 Jul 2010, at 16:15, Mike Moulton wrote: Thank you for the prompt responses. I have created SLING-1614 [1

[jira] Created: (SLING-1615) When importing content all the nodes to the parent node must exists, whereas a Sling POST creates the node.

2010-07-28 Thread Ian Boston (JIRA)
/jira/browse/SLING-1615 Project: Sling Issue Type: Bug Components: JCR Affects Versions: JCR Contentloader 2.0.6 Reporter: Ian Boston Fix For: JCR ContentLoader 2.0.8 If a POST with a that invokes the import operation is made to a path

Re: Pooled content

2010-07-28 Thread Ian Boston
On 28 Jul 2010, at 17:29, Justin Edelson wrote: On 7/27/10 9:11 AM, Ian Boston wrote: On 27 Jul 2010, at 13:59, Ian Boston wrote: On 27 Jul 2010, at 13:38, Justin Edelson wrote: Ian- I'm not near a Sling working copy right now, but have you looked at using the NodeNameGenerator

[jira] Commented: (SLING-1615) When importing content all the nodes to the parent node must exists, whereas a Sling POST creates the node.

2010-07-28 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1615?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12893281#action_12893281 ] Ian Boston commented on SLING-1615: --- Since one solution to this is a large re-factor

Pooled content

2010-07-27 Thread Ian Boston
Hi, We have a requirement to store content based on a ID not on a path. I know that this will violate aspects of David's model but the requirement is still there and I have to support it. Details (for background reading only are at [1] and [2]). I have an implementation that is close to

Re: [DISCUSS] SlingServlet service, ok to merge branch? (was: BackgroundRequestProcessor...)

2010-07-27 Thread Ian Boston
+1, All looks good to me, will be a good addition for UI/client driven background processing. Ian On 27 Jul 2010, at 12:50, Bertrand Delacretaz wrote: Hi, Coming back to the SLING-1603 discussion, I have progressed on the contrib/extensions/bgservlets implementation and the API as defined

Re: Pooled content

2010-07-27 Thread Ian Boston
On 27 Jul 2010, at 13:38, Justin Edelson wrote: Ian- I'm not near a Sling working copy right now, but have you looked at using the NodeNameGenerator interface? I added it to solve a similar use case. Will do, thanks for the pointer. Ian

Re: Pooled content

2010-07-27 Thread Ian Boston
On 27 Jul 2010, at 13:59, Ian Boston wrote: On 27 Jul 2010, at 13:38, Justin Edelson wrote: Ian- I'm not near a Sling working copy right now, but have you looked at using the NodeNameGenerator interface? I added it to solve a similar use case. Will do, thanks for the pointer. Ian

[jira] Commented: (SLING-1531) Upgrade to Jackrabbit 2.1

2010-07-26 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1531?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12892281#action_12892281 ] Ian Boston commented on SLING-1531: --- Unfortunately the upgrade to JR2.1 this did break

[jira] Issue Comment Edited: (SLING-1531) Upgrade to Jackrabbit 2.1

2010-07-26 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1531?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12892281#action_12892281 ] Ian Boston edited comment on SLING-1531 at 7/26/10 8:34 AM

[jira] Commented: (SLING-1531) Upgrade to Jackrabbit 2.1

2010-07-26 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1531?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12892289#action_12892289 ] Ian Boston commented on SLING-1531: --- yes, however if the patch was accepted, it wouldn't

[jira] Commented: (SLING-1531) Upgrade to Jackrabbit 2.1

2010-07-26 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1531?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12892295#action_12892295 ] Ian Boston commented on SLING-1531: --- Good, point, I will try and work around the problem

Re: [VOTE] Release Sling GWT Support version 3.0.0 (take 2)

2010-07-20 Thread Ian Boston
+1 Artifacts all check out ok. Ian On 19 Jul 2010, at 14:40, Justin Edelson wrote: Hi, We solved 2 issues in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12315189 Staging repository:

Re: seem to have lost some karma on JIRA

2010-07-17 Thread Ian Boston
On 16 Jul 2010, at 20:23, Bertrand Delacretaz bdelacre...@apache.org wrote: On Fri, Jul 16, 2010 at 3:14 PM, Justin Edelson justinedel...@gmail.com wrote: I used to be able to create versions in the SLING project. Can I get this permission back? Me too, please, I also seem to have lost

Re: Request Dispatching.

2010-07-15 Thread Ian Boston
On 15 Jul 2010, at 08:44, Bertrand Delacretaz wrote: On Wed, Jul 14, 2010 at 5:51 PM, Ian Boston i...@tfd.co.uk wrote: ...also, did you mean to use tabs, afaik the rest of the code is space based and it can make life hard if the 2 are mixed ?... Sure, sorry about that, seems like my

Re: [jira] Commented: (SLING-1531) Upgrade to Jackrabbit 2.1

2010-07-15 Thread Ian Boston
On 15 Jul 2010, at 13:24, Justin Edelson wrote: On 7/15/10 2:04 AM, Ian Boston wrote: On 15 Jul 2010, at 03:09, Justin Edelson wrote: I say yes. Ian has asked/suggested that we first do a JR 2 release of the impacted bundles, followed by a JR 2.1 release and then include the JR 2.1

[jira] Commented: (SLING-1593) Decouple authentication mechanism from JCR

2010-07-09 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12886658#action_12886658 ] Ian Boston commented on SLING-1593: --- IIUC this removes the need to add

Re: Preventing Listing of child nodes of a resource.

2010-07-09 Thread Ian Boston
On 6 Jul 2010, at 17:04, Ian Boston wrote: On 6 Jul 2010, at 09:21, Ian Boston wrote: 1. In the WebDav area: We could modify the webdav servlet to allow other bundles to provide an implementation of SlingResourceConfig or ItemFilter in the Sling webdav bundle or some other service

[jira] Commented: (SLING-1590) OSGi events should contain a userID when possible.

2010-07-08 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12886501#action_12886501 ] Ian Boston commented on SLING-1590: --- Although the patch is a bit confusing, just because

[jira] Commented: (SLING-1590) OSGi events should contain a userID when possible.

2010-07-08 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12886514#action_12886514 ] Ian Boston commented on SLING-1590: --- Justin, Yes go for it, coding with red wine in hand

Re: [VOTE] Release Sling GWT Support version 3.0.0

2010-07-08 Thread Ian Boston
Unpacking the jar I find that there is a copy of the gwt jar and a subset of the class files that it contains. com/google/gwt/rpc/server/** com/google/gwt/user/server/** com/google/gwt/user/client/** I assume that this is Ok and caused by an export statement ? If so +1, everything else lgtm Ian

Re: Preventing Listing of child nodes of a resource.

2010-07-07 Thread Ian Boston
On 6 Jul 2010, at 22:15, Alexander Klimetschek wrote: You would not have an anonymous user here at all, as you'd enforce authentication for the /_user tree. Unfortunately that does not work. /_user/userid/** *must* be accessible by anon so we cant force authentication. Without

Re: Preventing Listing of child nodes of a resource.

2010-07-07 Thread Ian Boston
On 7 Jul 2010, at 12:33, Alexander Klimetschek wrote: On Wed, Jul 7, 2010 at 09:45, Ian Boston i...@tfd.co.uk wrote: On 6 Jul 2010, at 22:15, Alexander Klimetschek wrote: You would not have an anonymous user here at all, as you'd enforce authentication for the /_user tree

Re: Preventing Listing of child nodes of a resource.

2010-07-07 Thread Ian Boston
On 7 Jul 2010, at 14:16, Justin Edelson wrote: IIUC the number of child nodes isn't relevant. If you broke down the children of /users to /users/a, /users/b, /users/c ... /users/z, you STILL wouldn't want to allow the children of those nodes to be listed. Yes thats right, no listing or

Re: Preventing Listing of child nodes of a resource.

2010-07-07 Thread Ian Boston
On 7 Jul 2010, at 14:25, Alexander Klimetschek wrote: That would allow listing of all the users. Ah, right, now I am finally getting to the point of this discussion ;-). Thats probably down to my poor explanation, sorry. In this case I would give the /content/users node an explicit

Re: change versioning scheme for gwt contrib module

2010-07-07 Thread Ian Boston
On 7 Jul 2010, at 16:26, Justin Edelson wrote: I'd like to release the contrib/gwt/servlet module, but have some misgivings about the versioning scheme used there. Currently, the version of this module is the same as the underlying GWT version. So currently, it is 2.0.3-SNAPSHOT. However,

Re: Preventing Listing of child nodes of a resource.

2010-07-06 Thread Ian Boston
On 2 Jul 2010, at 13:00, Ian Boston wrote: On 2 Jul 2010, at 11:58, Alexander Klimetschek wrote: I have a feeling this is just not possible in JCR2 at the AccessManager level since it cant distinguish between a direct request and a listing request, can you confirm ? Conceptually

Re: Preventing Listing of child nodes of a resource.

2010-07-06 Thread Ian Boston
On 6 Jul 2010, at 10:15, Alexander Klimetschek wrote: On Tue, Jul 6, 2010 at 11:13, Alexander Klimetschek aklim...@day.com wrote: On Tue, Jul 6, 2010 at 10:21, Ian Boston i...@tfd.co.uk wrote: A follow up on this, low level permissions wont work since they cant discriminate between list

Re: Preventing Listing of child nodes of a resource.

2010-07-06 Thread Ian Boston
On 6 Jul 2010, at 11:31, Alexander Klimetschek wrote: On Tue, Jul 6, 2010 at 12:24, Ian Boston i...@tfd.co.uk wrote: On 6 Jul 2010, at 10:15, Alexander Klimetschek wrote: On Tue, Jul 6, 2010 at 11:13, Alexander Klimetschek aklim...@day.com wrote: On Tue, Jul 6, 2010 at 10:21, Ian

Re: Preventing Listing of child nodes of a resource.

2010-07-06 Thread Ian Boston
On 6 Jul 2010, at 12:36, Bertrand Delacretaz wrote: On Tue, Jul 6, 2010 at 12:53 PM, Ian Boston i...@tfd.co.uk wrote: The data protection policy that is driving this is that, we have 50K users, all with user ID's we have to prevent anyone from getting a list of the user ID's, but still

Re: Preventing Listing of child nodes of a resource.

2010-07-06 Thread Ian Boston
On 6 Jul 2010, at 13:12, Alexander Klimetschek wrote: On Tue, Jul 6, 2010 at 12:53, Ian Boston i...@tfd.co.uk wrote: All users have read to /_user/userid becuase there are public materials in /_user/userid No users have list on /_user because of the policy. With principal-based ACLs I

Re: Preventing Listing of child nodes of a resource.

2010-07-06 Thread Ian Boston
On 6 Jul 2010, at 16:01, Alexander Klimetschek wrote: On Tue, Jul 6, 2010 at 16:42, Ian Boston i...@tfd.co.uk wrote: I understand the principal based ACLs (or at least I think I do). I will have to integrate it into the extension of the Standard ACE/ACE AccessControlProvider since

Re: Preventing Listing of child nodes of a resource.

2010-07-06 Thread Ian Boston
On 6 Jul 2010, at 09:21, Ian Boston wrote: 1. In the WebDav area: We could modify the webdav servlet to allow other bundles to provide an implementation of SlingResourceConfig or ItemFilter in the Sling webdav bundle or some other service implementation to provide filtering of webdav

Re: Preventing Listing of child nodes of a resource.

2010-07-06 Thread Ian Boston
Inline: Sent from my iPhone On 6 Jul 2010, at 17:37, Alexander Klimetschek aklim...@day.com wrote: On Tue, Jul 6, 2010 at 17:35, Ian Boston i...@tfd.co.uk wrote: Yes, I am not explaining myself clearly. Sorry. /_user/aaa is jcr:read anon ... /_user/ieb is jcr:read anon ... /_user/zzz

Re: [jira] Commented: (SLING-1583) Recent changes to content loader swallow name property in nodes, which was previously used only for Princiapls, breaks existing code.

2010-07-03 Thread Ian Boston
-1583 Project: Sling Issue Type: Bug Components: JCR Affects Versions: JCR ContentLoader 2.0.8 Reporter: Ian Boston Assignee: Ian Boston Fix For: JCR ContentLoader 2.0.8 Name should be changed to something that wont be used in a node

Leaky JCR 1.0 Apis

2010-07-02 Thread Ian Boston
Hi, This is FYI. For anyone depending on Sling you may find that you get build errors relating to the things like session.getNode(nodePath); This is a JCR2 only API, and even if you are certain you have specified JCR2 in your maven pom you may still get build and test errors. The reason is

Re: Preventing Listing of child nodes of a resource.

2010-07-02 Thread Ian Boston
On 2 Jul 2010, at 11:58, Alexander Klimetschek wrote: I have a feeling this is just not possible in JCR2 at the AccessManager level since it cant distinguish between a direct request and a listing request, can you confirm ? Conceptually there is no listing request. When you list sub

Http auth bundle in the list.

2010-07-02 Thread Ian Boston
Hi I notice that the extension http auth bundle is still in list.xml, however the Authentication hander does http basic by default if all else fails ? are both still needed ? Ian

Re: sling:Resource mixin

2010-07-02 Thread Ian Boston
On 2 Jul 2010, at 18:56, Justin Edelson wrote: On 7/2/10 1:45 PM, Ian Boston wrote: Hi, I have just updated my dependencies to match trunk head (sorry been fighting fires so needed to be behind trunk), and a lots of the files that used to load via the content loader wont any more

Re: sling:Resource mixin

2010-07-02 Thread Ian Boston
On 2 Jul 2010, at 20:25, Justin Edelson wrote: What is the nodetype of the node? I just added a brief test with and without the mixins to the test-services module and it *seems* to work (I'll commit this later with a test case to verify the results - http://codereview.appspot.com/1729048)

[jira] Created: (SLING-1582) Content loader doesnt give much feedback when something goes wrong.

2010-07-02 Thread Ian Boston (JIRA)
Affects Versions: JCR Contentloader 2.0.6 Reporter: Ian Boston Assignee: Ian Boston Fix For: JCR ContentLoader 2.0.8 There is not a great deal of debug information available in content loader. Probably doesnt matter for small file sets but if you have several

[jira] Created: (SLING-1583) Recent changes to content loader swallow name property in nodes, which was previously used only for Princiapls, breaks existing code.

2010-07-02 Thread Ian Boston (JIRA)
: SLING-1583 URL: https://issues.apache.org/jira/browse/SLING-1583 Project: Sling Issue Type: Bug Components: JCR Affects Versions: JCR ContentLoader 2.0.8 Reporter: Ian Boston Assignee: Ian Boston Fix For: JCR

[jira] Resolved: (SLING-1585) The HttpAuth Extension which provides a Http BASIC Auth AuthenticationHandler is loaded and should not be.

2010-07-02 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1585?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston resolved SLING-1585. --- Resolution: Duplicate see SLING-1584 The HttpAuth Extension which provides a Http BASIC Auth

[jira] Created: (SLING-1585) The HttpAuth Extension which provides a Http BASIC Auth AuthenticationHandler is loaded and should not be.

2010-07-02 Thread Ian Boston (JIRA)
/jira/browse/SLING-1585 Project: Sling Issue Type: Bug Components: Launchpad Affects Versions: Launchpad Bundles 5 Reporter: Ian Boston Assignee: Ian Boston Fix For: Launchpad Bundles 5 There is already a Http BASIC Auth

[jira] Resolved: (SLING-1583) Recent changes to content loader swallow name property in nodes, which was previously used only for Princiapls, breaks existing code.

2010-07-02 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1583?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston resolved SLING-1583. --- Resolution: Fixed Fixed, to give the node a name other than the key or file name use :name

Preventing Listing of child nodes of a resource.

2010-07-01 Thread Ian Boston
Hi, I want to be able to stop the listing of all child nodes at specific urls, but still allow direct access to items in a subtree. Any ideas how this is best done in Sling? (and webdav) I have lots, but dont know which is going to be best. eg Use a ServletFilter to filter all access to /_user

Re: Preventing Listing of child nodes of a resource.

2010-07-01 Thread Ian Boston
On 1 Jul 2010, at 14:19, Vidar Ramdal wrote: On Thu, Jul 1, 2010 at 1:52 PM, Ian Boston i...@tfd.co.uk wrote: Hi, I want to be able to stop the listing of all child nodes at specific urls, but still allow direct access to items in a subtree. Any ideas how this is best done in Sling

Re: [jira] Commented: (SLING-1573) Support for Versionable nodes in post servlet

2010-06-24 Thread Ian Boston
Could we make the :skipCheckin :checkin? We are going to have to find all our posts in lots of javascript and add the param, or ask ops to buy lots more disk. We use the jcr to store portal state, which we really do not want to be versioned. Ian Sent from my iPhone On 24 Jun 2010, at

Re: [jira] Commented: (SLING-1573) Support for Versionable nodes in post servlet

2010-06-24 Thread Ian Boston
On 24 Jun 2010, at 13:10, Justin Edelson wrote: On Jun 24, 2010, at 5:34 AM, Ian Boston ianbos...@gmail.com wrote: Could we make the :skipCheckin :checkin? How about :performCheckin and have the default value set via ConfigAdmin? that would be better, from a sakai point of view we

Re: [jira] Commented: (SLING-1573) Support for Versionable nodes in post servlet

2010-06-24 Thread Ian Boston
On 24 Jun 2010, at 15:17, Justin Edelson wrote: On 6/24/10 9:49 AM, Ian Boston wrote: On 24 Jun 2010, at 13:10, Justin Edelson wrote: On Jun 24, 2010, at 5:34 AM, Ian Boston ianbos...@gmail.com wrote: Could we make the :skipCheckin :checkin? How about :performCheckin and have

Re: [jira] Commented: (SLING-860) OpenId authenticator problem

2010-06-21 Thread Ian Boston
On 21 Jun 2010, at 11:28, Felix Meschberger (JIRA) wrote: [ https://issues.apache.org/jira/browse/SLING-860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12880776#action_12880776 ] Felix Meschberger commented on SLING-860:

Re: [jira] Commented: (SLING-860) OpenId authenticator problem

2010-06-21 Thread Ian Boston
Regards Felix On 21.06.2010 12:44, Ian Boston wrote: On 21 Jun 2010, at 11:28, Felix Meschberger (JIRA) wrote: [ https://issues.apache.org/jira/browse/SLING-860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12880776#action_12880776 ] Felix

Re: versioning support in POST servlet

2010-06-15 Thread Ian Boston
On 14 Jun 2010, at 13:23, Justin Edelson wrote: On 6/14/10 3:02 PM, Ian Boston wrote: A quick question, Does every modification create a new version or is versioning only enabled if a parameter to request a new version is set ? Right now, every request does a checkin upon completion

<    5   6   7   8   9   10   11   12   13   >