[xwiki-users] Document Tree - visibility

2010-05-03 Thread Ben Stuggler
Hi, I have a security problem in the document tree. People who doesn't have access to a specific space shouldn't even see his name in the tree results. I'm looking for the parameter which has to be modify to solve this problem but unfortunetely, it's very hard to find it. Can somebody help me?

Re: [xwiki-users] Document Tree - visibility

2010-05-03 Thread Caleb James DeLisle
There is a list called $blacklistedSpaces it is set statically in xwikivars.vm http://svn.xwiki.org/svnroot/xwiki/platform/web/trunk/standard/src/main/webapp/templates/xwikivars.vm Spaces on this list will not be shown in the table and I think the same is true for the tree. You could add a

Re: [xwiki-users] Document Tree - visibility

2010-05-03 Thread Ben Stuggler
To avoid performance problem, I thought actually put the filter where there is the condition which add the link in the name space in the three. But in which file it is... -- View this message in context: http://xwiki.475771.n2.nabble.com/Document-Tree-visibility-tp4996738p4996913.html Sent from

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Vincent Massol
Hi Wilson, On Apr 30, 2010, at 6:56 PM, Wilson Leão Neto wrote: Hello all! I'm working with XWiki and I'm a newbie... I've read the tutorial available on http://code.xwiki.org/xwiki/bin/view/Modules/RenderingModule and the customization part of the pdf export. I'm still clueless on how to

Re: [xwiki-users] Hello! Newly Installed XWIKI

2010-05-03 Thread Vincent Massol
On Apr 30, 2010, at 4:15 PM, Caleb James DeLisle wrote: Giuseppe Vallarelli wrote: Hi Sadid 2010/4/30 sadid sahami sadidsah...@gmail.com Hello! while I've been frustrated form installing mediawiki... I found XWIKIThe installation was easy and straight-forward then I

Re: [xwiki-users] [Security Advisory] SQL injection issue.

2010-05-03 Thread Harald Kapper
Hi my request for today: a separate mailinglist for security-advisories so one can subscribe to only those. Thank you in advance Harald Kapper / kapper.net ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] [Security Advisory] SQL injection issue.

2010-05-03 Thread Sergiu Dumitriu
On 05/03/2010 12:07 PM, Vincent Massol wrote: On Apr 30, 2010, at 3:56 PM, Caleb James DeLisle wrote: We do and users should, but there is a function which allows script authors to construct queries for document names so they are allowed to finish an HQL query. If the script author is

Re: [xwiki-users] Hello! Newly Installed XWIKI

2010-05-03 Thread Caleb James DeLisle
Vincent Massol wrote: On Apr 30, 2010, at 4:15 PM, Caleb James DeLisle wrote: Giuseppe Vallarelli wrote: Hi Sadid 2010/4/30 sadid sahami sadidsah...@gmail.com Hello! while I've been frustrated form installing mediawiki... I found XWIKIThe installation was easy and

Re: [xwiki-users] XEM - access issue to wiki instances

2010-05-03 Thread Thomas Mortagne
On Fri, Apr 30, 2010 at 14:43, Marine Julian marine.jul...@gmail.com wrote: How are you trying to access it what did you entered as wiki alias exactly ? Like I just would know how it works, I didn't change anything and let all default parameters. I let the default alias i.e.

Re: [xwiki-users] [Security Advisory] SQL injection issue.

2010-05-03 Thread Gregor Schneider
Having read some of the comments here, this is my 0.02€: I feel that a generic method like seacrhDocuments is way too dangerous, because, as stated in the comments, malicious SQL can be inserted easily. Furthermore, if you try to escape certain characters, you might run into problems when such a

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Wilson Leão Neto
Hello Vincent! Thank you for your answer! I've followed the tutorial on http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Configuration#HCustomizingthePDFexportLookFeel And I've tried to export the pdf using the URL:

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Sergiu Dumitriu
On 05/03/2010 05:50 PM, Vincent Massol wrote: On May 3, 2010, at 5:38 PM, Wilson Leão Neto wrote: Hello Vincent! Thank you for your answer! I've followed the tutorial on http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Configuration#HCustomizingthePDFexportLookFeel And I've tried to

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Wilson Leão Neto
I've tried with both syntaxes. Either way, it just doesn't work.. :/ I've successfully changed the .vm files. But I'm still not able to apply any kind of css. Thanks for the help though. Best regards, Wilson 2010/5/3 Sergiu Dumitriu ser...@xwiki.com On 05/03/2010 05:50 PM, Vincent Massol

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Ludovic Dubost
Which version of XWiki are your running on ? I've been using this succesfully on multiple projects. -- Can you try directly modifying pdf.css in webapps/xwiki/templates/ -- However, note that pdf.css can only be used to style using id and element, but not classes. There is a patch for

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Wilson Leão Neto
Hello Ludovic! Here it is: XWIKI ENTERPRISE 2.2.5.28407 There's no pdf.css. Should I create one? I have another question. Could you tell me where do I find the content of this msg: $msg.get('core.pdf.tableOfContents'). I wanna be able to create some more and eventually change the already

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Ludovic Dubost
Yes create one. For the translation either create a translation page or override the templates using it Envoyé de mon iPhone Le 3 mai 2010 à 21:22, Wilson Leão Neto wilson.leao.n...@gmail.com a écrit : Hello Ludovic! Here it is: XWIKI ENTERPRISE 2.2.5.28407 There's no pdf.css.

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Wilson Leão Neto
Yes! It works with the pdf.css file! With a bit of workarounds I believe I will be able to reach my goals... I think so... I'll be back later with more problems, hehe. Thanks! Wilson 2010/5/3 Ludovic Dubost ludo...@xwiki.com Yes create one. For the translation either create a translation

Re: [xwiki-users] PDF export - Footer/Header/View

2010-05-03 Thread Wilson Leão Neto
Hey Ludovic and all! Could you explain the following to me. Why is the following line of code used almost everywhere in the .vm files used to export pdfs. $pdfdoc.use(XWiki.PDFClass) Is it significant? Also, I would like to create another class like the cover and the toc. For instance,