Re: How to make the user profile and user admin pages more secure

2006-01-10 Thread David M Johnson
OK, Roller now does scheme enforcement via Acegi configured via roller.properties. Since I'm new to Acegi, I've summarized the changes below for your review. - Dave == roller.properties If you want to protect URLs by using HTTPS, you simply turn on scheme enforcement in your

Re: problem building in contrib/plugins/sandbox/atomprotocol

2006-01-10 Thread David M Johnson
Hi Jeff, I'm not sure what is going on. The Atom protocol directory is in sandbox/atomprotocol not contrib/plugins. Maybe this is an Ant version issue. Are you building with the build.sh file? Or perhaps the basedir variable is set incorrectly. Did you make any changes to

Re: How to make the user profile and user admin pages more secure

2006-01-10 Thread Matt Raible
Looks good Dave - thanks for doing this. Matt On 1/10/06, Allen Gilliland [EMAIL PROTECTED] wrote: Nicely done Dave. I had thought the Acegi stuff for setting the secure urls would have been easier, but oh well. That's always one of the drawbacks to using new frameworks, there is often a

Re: Proposal: Asynchronous Referrer Processing

2006-01-10 Thread Allen Gilliland
I've gone ahead and moved the referrer spam checking logic into the RefererFilter to make sure that we can send an appropriate response to spammers. The drawback is that the RefererFilter now requires a lookup of a WebsiteData object per request, and that can be time consuming. I *very*

Fwd: CP: Question About Roller

2006-01-10 Thread Matt Raible
Forwarding to Roller mailing list as the other developers are more familiar with the scripts than I am. Matt On 1/10/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hey Matt, I'm having one of the brain farts where I'd almost sworn you had written something about Roller was changing the way

Re: PlanetRoller Troubles

2006-01-10 Thread Elias Torres
I'm sorry for the second email, but maybe you might have missed it the first time. I was able to get a planet experiment going with a tar release I found in your weblog. However, the PlanetTool in SVN seems to require too much from Roller classes and configuration to run. I was not able to get too

Local configuration [Fwd: Re: Multi-language ApplicationResources.properties?]

2006-01-10 Thread Sean Gilligan
Hello Anil, et. al. What we'd like to do is just add a property in roller.properties that if present overrides the JVM's default locale. (At a minimum, I'm assuming this is easier than making it work based upon the request or the user's preference, but I don't know yet.) Also, you could

Re: PlanetRoller Troubles

2006-01-10 Thread David M Johnson
Hi Elias, I saw your email and I've got a fix just about ready to commit. - Dave On Jan 10, 2006, at 10:20 PM, Elias Torres wrote: I'm sorry for the second email, but maybe you might have missed it the first time. I was able to get a planet experiment going with a tar release I found in

Re: Local configuration [Fwd: Re: Multi-language ApplicationResources.properties?]

2006-01-10 Thread Anil Gangolli
Sean: To do what you describe, the one spot is BasePageModel; I think that's all that would need to change for your desired thing. The bundle is currently initialized in a static initializer using the default locale (no locale argument supplied). You'd have to change that to initialize,