Hi Yishay, On Dec 19, 2008, at 3:54 AM, Yishay Mor wrote:
> I've posted a snippet: > http://code.xwiki.org/xwiki/bin/view/Snippets/GenericXMLapiSnippet > > Which adds a very simple XML API to a site. This API allows other > sites to > programmaticaly query the XWiki site, and display data from it in > any form > they choose. > You can see an example here: > http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/api/ > genericXML In case you didn't know about it, all xwiki pages can be viewed as XML right (just add xpage=xml i the URL)? Then all you need is an XPath expression to query whatever part you're interested in. Or a XSL transformation to transform it into another XML document. The snippet looks cool but it's quite hard to understand what it does. Maybe you could add some more explanation and examples? > I came across two problems in the process of writing this. One is > general, > and onw specific to my site - and fatal. > > the first problem is that is seems like this API can deliver > protected data > to a non-registered user. To avoid this on my site, I restricted it > not to > show classes under the XWiki space. Shouldn't this be blocked at a > lower > level? It's already blocked by the permission system and for password fields you shouldn't be able to see the value. If you don't want users to view some data you must make the page non viewable for them. > The second problem was that I have some fields (propoerties) in some > of the > classes which I'm not using. Since I can't delete them, I decided to > change > the name to ".unused" and filter. However, once I did this it seems > to have > completly crashed the class at hand. I can't even look at the Class > in the > ClassEditor to delete the latest versions and go back to the latest > good > one. > Here is the corrupted class: > http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/CaseClass I've never seen that :) Something is indeed deeply broken since the rendering is failing to display but I don't know why. Thanks -Vincent _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
