hypercontent-users Mailing List for HyperContent (Page 9)
Brought to you by:
alexvigdor
You can subscribe to this list here.
2004 |
Jan
|
Feb
(4) |
Mar
(6) |
Apr
(4) |
May
(3) |
Jun
(1) |
Jul
(7) |
Aug
(4) |
Sep
(31) |
Oct
(11) |
Nov
(30) |
Dec
(22) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2005 |
Jan
(23) |
Feb
(11) |
Mar
(22) |
Apr
(13) |
May
(31) |
Jun
(27) |
Jul
(32) |
Aug
(4) |
Sep
(25) |
Oct
(21) |
Nov
(31) |
Dec
(28) |
2006 |
Jan
(14) |
Feb
(12) |
Mar
(17) |
Apr
(21) |
May
(6) |
Jun
(4) |
Jul
(26) |
Aug
(24) |
Sep
(19) |
Oct
(24) |
Nov
(34) |
Dec
(17) |
2007 |
Jan
(10) |
Feb
(43) |
Mar
(60) |
Apr
(10) |
May
(20) |
Jun
(2) |
Jul
(17) |
Aug
(38) |
Sep
(45) |
Oct
(5) |
Nov
(4) |
Dec
(5) |
2008 |
Jan
|
Feb
(1) |
Mar
|
Apr
(10) |
May
(2) |
Jun
(2) |
Jul
|
Aug
(4) |
Sep
(1) |
Oct
(5) |
Nov
(1) |
Dec
(1) |
2009 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: Alex V. <al...@bi...> - 2007-03-15 14:10:04
|
On Mar 14, 2007, at 10:33 PM, tom tom wrote: > > I was able to get the styles loaded in the list box > but came with following issues > > 1)if I highlight some paragraph and select style to > styleA I can see the change (in Edit mode) but again > if I select the same paragraph and select styleB the > previous style does not get cleared it remains the > same This is an issue with TinyMCE. I suggest you search their forums, and perhaps try to apply an update; it is installed in the bootstrap repository under /js/ > > > 2)I can see the style changes in the edit mode only > but when I go to view mode it get lost. Can you verify that the style attributes are present in the output? |
From: Alex V. <al...@bi...> - 2007-03-15 14:03:29
|
Hi Tom, XSL is configured to use a special template which shows you what the output will look like when the XSL is applied to XML. This is useful for rapid previewing of XSL changes, without having to save the changes. This is set up in the bootstrap pipelines.xml: <pipeline mode="preview" binding="/**/*.xsl"> <dependencies> <permission activity="read"/> </dependencies> <exec stage="org.hypercontent.project.engine.stage.XSLPreviewStage"/> </pipeline> You can override this within your project for all XSL or just certain XSL, or disable it globally. If you would like to leave this enabled and just want to know how to get the actual XSL, you can either use the contextual menu in the directory listing to download the XSL file, or open it for edit and use the download link. Cheers, Alex On Mar 14, 2007, at 10:47 PM, tom tom wrote: > Hi, > > When I try to view the /config/skins/base.xsl it > renders some other xml files which I created. > > I cant view even the common.xsl, Is there any entry > that I should have in the project-definition.xml > > > Thanks > > > > ______________________________________________________________________ > ______________ > We won't tell. Get more on shows you hate to love > (and love to hate): Yahoo! TV's Guilty Pleasures list. > http://tv.yahoo.com/collections/265 > |
From: tom t. <j_l...@ya...> - 2007-03-15 02:47:12
|
Hi, When I try to view the /config/skins/base.xsl it renders some other xml files which I created. I cant view even the common.xsl, Is there any entry that I should have in the project-definition.xml Thanks ____________________________________________________________________________________ We won't tell. Get more on shows you hate to love (and love to hate): Yahoo! TV's Guilty Pleasures list. http://tv.yahoo.com/collections/265 |
From: tom t. <j_l...@ya...> - 2007-03-15 02:34:51
|
We got the access to this machine did further investigation and later realized it got something to do with tomcat deployment permission issue. We resolved the issue and initial setup looks all right Thanks --- Alex Vigdor <al...@bi...> wrote: > Hi Tom, > Are there any errors in the log? It looks like > some kind of error > getting the vCard. It is possible to silence this > error by changing > the catch() on line 45 of User.java to catch all > Exceptions > (currently it only catches HyperExceptions), but I > suspect there may > be other errors that led up to this one. > > Alex > > On Mar 14, 2007, at 12:50 AM, tom tom wrote: > > > Hi, > > > > Before it goes to UAT, I asked one of my core > > developers to install HC from the scratch with new > > changes. > > > > He encountered the following error. > > > > What could be the reason > > > > There was an error processing your request > > null > > > > > > > org.hypercontent.security.User.getFullName(User.java:43) > > > > > sun.reflect.NativeMethodAccessorImpl.invoke0(Native > > Method) > > > > sun.reflect.NativeMethodAccessorImpl.invoke > > (NativeMethodAccessorImpl.java:39) > > > > sun.reflect.DelegatingMethodAccessorImpl.invoke > > (DelegatingMethodAccessorImpl.java:25) > > > java.lang.reflect.Method.invoke(Method.java:585) > > > > > org.apache.velocity.runtime.parser.node.PropertyExecutor.execute > > > (PropertyExecutor.java:111) > > > > > org.apache.velocity.util.introspection.UberspectImpl > > > $VelGetterImpl.invoke(UberspectImpl.java:302) > > > > > org.apache.velocity.runtime.parser.node.ASTIdentifier.execute > > > (ASTIdentifier.java:157) > > > > > org.apache.velocity.runtime.parser.node.ASTReference.execute > > > (ASTReference.java:175) > > > > > org.apache.velocity.runtime.parser.node.ASTReference.value > > > (ASTReference.java:327) > > > > > org.apache.velocity.runtime.parser.node.ASTExpression.value > > > (ASTExpression.java:51) > > > > > org.apache.velocity.runtime.parser.node.ASTSetDirective.render > > > (ASTSetDirective.java:95) > > > > > org.apache.velocity.runtime.parser.node.ASTBlock.render > > > (ASTBlock.java:55) > > > > > org.apache.velocity.runtime.parser.node.ASTIfStatement.render > > > (ASTIfStatement.java:70) > > > > > org.apache.velocity.runtime.parser.node.SimpleNode.render > > > (SimpleNode.java:230) > > > > > org.apache.velocity.runtime.directive.Parse.render(Parse.java:181) > > org.apache.velo > > > > > > > > > > > ______________________________________________________________________ > > > ______________ > > The fish are biting. > > Get more visitors on your site using Yahoo! Search > Marketing. > > > http://searchmarketing.yahoo.com/arp/sponsoredsearch_v2.php > > > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get > the chance to share your > opinions on IT & business topics through brief > surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Hypercontent-users mailing list > Hyp...@li... > https://lists.sourceforge.net/lists/listinfo/hypercontent-users > ____________________________________________________________________________________ Food fight? Enjoy some healthy debate in the Yahoo! Answers Food & Drink Q&A. http://answers.yahoo.com/dir/?link=list&sid=396545367 |
From: tom t. <j_l...@ya...> - 2007-03-15 02:33:14
|
Hi, See my comments below > The reason I thought to introduce another parameter > is that there may > be circumstances where you only want to login the > user if they are > not already logged in - forcing the login unbinds > all the form > processors from their session, which could for > example break back > button compatibility for certain screens, so should > be done > judiciously. Also, it is possible to execute > command=Login (which > runs this class) without mode=login, although > generally when using > CAS you will see the mode during login. This is > just a small detail > that I think might make for a more generalizable > solution! I did change as per above instructions and everything works > You can configure this in the project's > /config/pipelines.xml by > overriding the xml-edit pipeline. This sample shows > the > configuration for the CAS web site, with css at > /config/skins/cas/ > styles.css .... .... .... .... As far as the styles are concerned I did the following in the bootstrap project with the intention this will reflect across all the projects (not in the individual project) 1) created a 'skins' directory inside bootstrap config directory 2)save the my.css inside the skins folder 3) change the pipelines.xml in the bootstrap as follows (see bottom of the mail) I was able to get the styles loaded in the list box but came with following issues 1)if I highlight some paragraph and select style to styleA I can see the change (in Edit mode) but again if I select the same paragraph and select styleB the previous style does not get cleared it remains the same 2)I can see the style changes in the edit mode only but when I go to view mode it get lost. Currently I have incooperated all the styles in my.css in the specific project's /config/../../common.xsl. Am I doing something wrong pipelines.xml of the bootstrap project as follows <pipeline name="xml" mode="xml-edit" basedir="/" content-type="text/html" permissions="read,write"> <open-file/> <bind-form processor="org.hypercontent.form.xml.XmlFormProcessor" as="xml-form"/> <exec stage="org.hypercontent.form.xml.XmlPrepStage"/> <exec stage="org.hypercontent.project.engine.stage.XSLTransformStage"> <with-param name="source" value="/screens/modal-xml-tiny-mce.xsl"/> <with-param name="localize-with" value="/l10n/xml"/> <with-param name="content-css" value="/config/skins/my.css"/> <with-param name="baseActionURL" value="${baseActionURL}"/> </exec> </pipeline> Thanks ____________________________________________________________________________________ 8:00? 8:25? 8:40? Find a flick in no time with the Yahoo! Search movie showtime shortcut. http://tools.search.yahoo.com/shortcuts/#news |
From: Alex V. <al...@bi...> - 2007-03-14 13:05:14
|
Hi Tom, Are there any errors in the log? It looks like some kind of error getting the vCard. It is possible to silence this error by changing the catch() on line 45 of User.java to catch all Exceptions (currently it only catches HyperExceptions), but I suspect there may be other errors that led up to this one. Alex On Mar 14, 2007, at 12:50 AM, tom tom wrote: > Hi, > > Before it goes to UAT, I asked one of my core > developers to install HC from the scratch with new > changes. > > He encountered the following error. > > What could be the reason > > There was an error processing your request > null > > > org.hypercontent.security.User.getFullName(User.java:43) > > sun.reflect.NativeMethodAccessorImpl.invoke0(Native > Method) > > sun.reflect.NativeMethodAccessorImpl.invoke > (NativeMethodAccessorImpl.java:39) > > sun.reflect.DelegatingMethodAccessorImpl.invoke > (DelegatingMethodAccessorImpl.java:25) > java.lang.reflect.Method.invoke(Method.java:585) > > org.apache.velocity.runtime.parser.node.PropertyExecutor.execute > (PropertyExecutor.java:111) > > org.apache.velocity.util.introspection.UberspectImpl > $VelGetterImpl.invoke(UberspectImpl.java:302) > > org.apache.velocity.runtime.parser.node.ASTIdentifier.execute > (ASTIdentifier.java:157) > > org.apache.velocity.runtime.parser.node.ASTReference.execute > (ASTReference.java:175) > > org.apache.velocity.runtime.parser.node.ASTReference.value > (ASTReference.java:327) > > org.apache.velocity.runtime.parser.node.ASTExpression.value > (ASTExpression.java:51) > > org.apache.velocity.runtime.parser.node.ASTSetDirective.render > (ASTSetDirective.java:95) > > org.apache.velocity.runtime.parser.node.ASTBlock.render > (ASTBlock.java:55) > > org.apache.velocity.runtime.parser.node.ASTIfStatement.render > (ASTIfStatement.java:70) > > org.apache.velocity.runtime.parser.node.SimpleNode.render > (SimpleNode.java:230) > > org.apache.velocity.runtime.directive.Parse.render(Parse.java:181) > org.apache.velo > > > > > ______________________________________________________________________ > ______________ > The fish are biting. > Get more visitors on your site using Yahoo! Search Marketing. > http://searchmarketing.yahoo.com/arp/sponsoredsearch_v2.php > |
From: Alex V. <al...@bi...> - 2007-03-14 13:00:39
|
On Mar 13, 2007, at 6:37 PM, tom tom wrote: > Thanks Alex, > > Can there be other instances (internal or external) > that mode=login is used apart from a force login where > we give mode=login in the query string. I thought the > only instance the code get executed if we give > mode=login in the query string. That is why I have a > if lock for that. I thought no need to introduce > another parameter. The reason I thought to introduce another parameter is that there may be circumstances where you only want to login the user if they are not already logged in - forcing the login unbinds all the form processors from their session, which could for example break back button compatibility for certain screens, so should be done judiciously. Also, it is possible to execute command=Login (which runs this class) without mode=login, although generally when using CAS you will see the mode during login. This is just a small detail that I think might make for a more generalizable solution! > > Any how let me know once you check in. Also think > about the possibility of calling session.invalidate() > which will be a cleaner approach to cleanout the > session. > > > > I got a seperate question, > > In the Hypercontent Editing in the bottom, I can see a > check box with the name styles, It got zero entries > there. Is it possible to hook our css into this so > that all the styles get loaded into the combo box. You can configure this in the project's /config/pipelines.xml by overriding the xml-edit pipeline. This sample shows the configuration for the CAS web site, with css at /config/skins/cas/ styles.css <pipeline name="xml" mode="xml-edit" basedir="/" content-type="text/ html" permissions="read,write"> <open-file/> <bind-form processor="org.hypercontent.form.xml.XmlFormProcessor" as="xml-form"/> <exec stage="org.hypercontent.form.xml.XmlPrepStage"/> <exec stage="org.hypercontent.project.engine.stage.XSLTransformStage"> <with-param name="source" value="/screens/modal-xml-tiny-mce.xsl"/> <with-param name="content-css" value="/config/skins/cas/styles.css"/> <with-param name="localize-with" value="/l10n/xml"/> </exec> </pipeline> Cheers, Alex > > > Thanks, > > > > > > > --- Alex Vigdor <al...@bi...> wrote: > >> Hi Tom, >> Your changes look fine. For the code in CVS, I >> might consider a >> slightly less invasive approach where you would have >> to specify that >> you want to force login, e.g. with a request >> parameter "force- >> login=true" >> >> >> > if("true".equalsIgnoreCase(request.getParameter("force-login"))) >> { >> session.logout(); >> session.cleanSubject(); >> } >> >> if(!session.isAuthenticated()){ >> ... >> >> Cheers, >> Alex >> >> On Mar 8, 2007, at 11:57 PM, tom tom wrote: >> >>> Hi Alex, >>> >>> I did some code change, looks it's working but I >> dont >>> know the side effects, Please look at the changes, >> If >>> the following got side effects pls do let me know >> a >>> safe approach (I couldnt find any place to call >>> HttpSession.invalidate() any how see the >> following) >>> >>> 1) I introduced the following in the >>> org.hypercontent.server.Session >>> >>> public void cleanSubject() { >>> subject = new Subject(); >>> >> subject.getPrincipals().add(Anybody.instance); >>> } >>> >>> >>> 2) now the execute method in Login.java looks as >>> follows, please observ that am calling >>> session.logout(); and session.cleanSubject(); and >> also >>> executing the authentication unconditionaly. >>> >>> >>> >>> Please let me know about this change >>> >>> Thanks >>> >>> >>> public void execute(IRequest request) throws >>> Exception { >>> //String user = >> request.getParameter("user"); >>> //String pass = >> request.getParameter("pass"); >>> Session session = request.getSession(); >>> >>> >>> if >>> >> > ("login".equalsIgnoreCase(request.getParameter("mode"))) >>> { >>> session.logout(); >>> session.cleanSubject(); >>> } >>> >>> if (true){ >>> CallbackHandler handler = new >>> RequestCallbackHandler(request); >>> Subject subject = >> session.getSubject(); >>> LoginContext lc = new >>> LoginContext("HyperContent", subject,handler); >>> try{ >>> lc.login(); >>> } >>> catch(FailedLoginException e){ >>> failLogin(session); >>> return; >>> } >>> >>> IUser user = null; >>> String username = null; >>> Set set = subject.getPrincipals(); >>> for(Iterator iterator=set.iterator(); >>> iterator.hasNext();){ >>> Object o = iterator.next(); >>> //System.out.println("Checking out >>> principal "+o); >>> Principal p = (Principal)o; >>> >>> if(!p.equals(Anybody.instance)){ >>> username = p.getName(); >>> System.out.println("User name >> in >>> if block is "+username); >>> //let's translate generic >>> principals into HyperContent Users and SuperUsers >>> Set princs = >>> subject.getPrincipals(); >>> princs.remove(p); >>> user = getUserImpl(username); >>> princs.add(user); >>> >> session.setAuthenticated(true); >>> break; >>> } >>> } >>> if(!session.isAuthenticated()){ >>> failLogin(session); >>> } >>> Logger.info(Strings.concat("User >>> ",username," logged in")); >>> } >>> else{ >>> failLogin(session); >>> } >>> .... >>> .... >>> ... >>> >>> >>> >>> >>> >>> >>> >>> --- Alex Vigdor <al...@bi...> wrote: >>> >>>> Hi, >>>> I think the problem may be traced to >>>> org.hypercontent.server.commands.Login: on line >> 82 >>>> this class checks >>>> whether the current session is already >> authenticated >>>> before running >>>> authentication providers. You might try >> disabling >>>> this check to see >>>> if you get the desired behavior. A more >>>> sophisticated fix would, as >>>> you suggest, run the authentication providers and >>>> compare the results >>>> with the existing authenticated user. >>>> >>>> Cheers, >>>> Alex >>>> >>>> On Mar 7, 2007, at 10:56 PM, tom tom wrote: >>>> >>>>> Hi Alex, >>>>> >>>>> Sometime back I asked you a question regarding >> HC >>>>> logout and you cleared the doubts I had, I have >>>>> attached the disucussion we had bottom of the >>>> mail, >>>>> >>>>> (http://sourceforge.net/mailarchive/forum.php? >>>>> thread_id=30987603&forum_id=38700) >>>>> >>>>> >>>>> Well I thought I got more suggestions into this, >>>>> Similar to the HC Link in the uPortal, we got >>>> links >>>>> for WebCT and Mail and Library etc all SSO >> enabled >>>> and >>>>> also all the links pops up in a new window with >>>> the >>>>> application. None of these got the issue we had >>>> with >>>>> HC which describes in the bottom of this mail, >>>> that >>>>> is eventhough we dont close all the browser >>>> instances, >>>>> if we logout uPortal login back again as a >>>> different >>>>> user and click WebCT or Mail link it will not >> pick >>>> the >>>>> previous user but the new user. >>>>> >>>>> I understand that Logging out of uPortal and CAS >>>> does >>>>> NOT terminate the browser's session with >>>> HyperContent, >>>>> >>>>> but let me know whether following makes any >> sense >> > === message truncated === > > > > > ______________________________________________________________________ > ______________ > Food fight? Enjoy some healthy debate > in the Yahoo! Answers Food & Drink Q&A. > http://answers.yahoo.com/dir/?link=list&sid=396545367 > |
From: Carl P B. <C.P...@hu...> - 2007-03-14 09:08:47
|
***************************************************************************************** To view the terms under which this email is distributed, please go to http://www.hull.ac.uk/legal/email_disclaimer.html ***************************************************************************************** |
From: tom t. <j_l...@ya...> - 2007-03-14 04:50:26
|
Hi, Before it goes to UAT, I asked one of my core developers to install HC from the scratch with new changes. He encountered the following error. What could be the reason There was an error processing your request null org.hypercontent.security.User.getFullName(User.java:43) sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) java.lang.reflect.Method.invoke(Method.java:585) org.apache.velocity.runtime.parser.node.PropertyExecutor.execute(PropertyExecutor.java:111) org.apache.velocity.util.introspection.UberspectImpl$VelGetterImpl.invoke(UberspectImpl.java:302) org.apache.velocity.runtime.parser.node.ASTIdentifier.execute(ASTIdentifier.java:157) org.apache.velocity.runtime.parser.node.ASTReference.execute(ASTReference.java:175) org.apache.velocity.runtime.parser.node.ASTReference.value(ASTReference.java:327) org.apache.velocity.runtime.parser.node.ASTExpression.value(ASTExpression.java:51) org.apache.velocity.runtime.parser.node.ASTSetDirective.render(ASTSetDirective.java:95) org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:55) org.apache.velocity.runtime.parser.node.ASTIfStatement.render(ASTIfStatement.java:70) org.apache.velocity.runtime.parser.node.SimpleNode.render(SimpleNode.java:230) org.apache.velocity.runtime.directive.Parse.render(Parse.java:181) org.apache.velo ____________________________________________________________________________________ The fish are biting. Get more visitors on your site using Yahoo! Search Marketing. http://searchmarketing.yahoo.com/arp/sponsoredsearch_v2.php |
From: tom t. <j_l...@ya...> - 2007-03-13 22:37:14
|
Thanks Alex, Can there be other instances (internal or external) that mode=login is used apart from a force login where we give mode=login in the query string. I thought the only instance the code get executed if we give mode=login in the query string. That is why I have a if lock for that. I thought no need to introduce another parameter. Any how let me know once you check in. Also think about the possibility of calling session.invalidate() which will be a cleaner approach to cleanout the session. I got a seperate question, In the Hypercontent Editing in the bottom, I can see a check box with the name styles, It got zero entries there. Is it possible to hook our css into this so that all the styles get loaded into the combo box. Thanks, --- Alex Vigdor <al...@bi...> wrote: > Hi Tom, > Your changes look fine. For the code in CVS, I > might consider a > slightly less invasive approach where you would have > to specify that > you want to force login, e.g. with a request > parameter "force- > login=true" > > > if("true".equalsIgnoreCase(request.getParameter("force-login"))) > { > session.logout(); > session.cleanSubject(); > } > > if(!session.isAuthenticated()){ > ... > > Cheers, > Alex > > On Mar 8, 2007, at 11:57 PM, tom tom wrote: > > > Hi Alex, > > > > I did some code change, looks it's working but I > dont > > know the side effects, Please look at the changes, > If > > the following got side effects pls do let me know > a > > safe approach (I couldnt find any place to call > > HttpSession.invalidate() any how see the > following) > > > > 1) I introduced the following in the > > org.hypercontent.server.Session > > > > public void cleanSubject() { > > subject = new Subject(); > > > subject.getPrincipals().add(Anybody.instance); > > } > > > > > > 2) now the execute method in Login.java looks as > > follows, please observ that am calling > > session.logout(); and session.cleanSubject(); and > also > > executing the authentication unconditionaly. > > > > > > > > Please let me know about this change > > > > Thanks > > > > > > public void execute(IRequest request) throws > > Exception { > > //String user = > request.getParameter("user"); > > //String pass = > request.getParameter("pass"); > > Session session = request.getSession(); > > > > > > if > > > ("login".equalsIgnoreCase(request.getParameter("mode"))) > > { > > session.logout(); > > session.cleanSubject(); > > } > > > > if (true){ > > CallbackHandler handler = new > > RequestCallbackHandler(request); > > Subject subject = > session.getSubject(); > > LoginContext lc = new > > LoginContext("HyperContent", subject,handler); > > try{ > > lc.login(); > > } > > catch(FailedLoginException e){ > > failLogin(session); > > return; > > } > > > > IUser user = null; > > String username = null; > > Set set = subject.getPrincipals(); > > for(Iterator iterator=set.iterator(); > > iterator.hasNext();){ > > Object o = iterator.next(); > > //System.out.println("Checking out > > principal "+o); > > Principal p = (Principal)o; > > > > if(!p.equals(Anybody.instance)){ > > username = p.getName(); > > System.out.println("User name > in > > if block is "+username); > > //let's translate generic > > principals into HyperContent Users and SuperUsers > > Set princs = > > subject.getPrincipals(); > > princs.remove(p); > > user = getUserImpl(username); > > princs.add(user); > > > session.setAuthenticated(true); > > break; > > } > > } > > if(!session.isAuthenticated()){ > > failLogin(session); > > } > > Logger.info(Strings.concat("User > > ",username," logged in")); > > } > > else{ > > failLogin(session); > > } > > .... > > .... > > ... > > > > > > > > > > > > > > > > --- Alex Vigdor <al...@bi...> wrote: > > > >> Hi, > >> I think the problem may be traced to > >> org.hypercontent.server.commands.Login: on line > 82 > >> this class checks > >> whether the current session is already > authenticated > >> before running > >> authentication providers. You might try > disabling > >> this check to see > >> if you get the desired behavior. A more > >> sophisticated fix would, as > >> you suggest, run the authentication providers and > >> compare the results > >> with the existing authenticated user. > >> > >> Cheers, > >> Alex > >> > >> On Mar 7, 2007, at 10:56 PM, tom tom wrote: > >> > >>> Hi Alex, > >>> > >>> Sometime back I asked you a question regarding > HC > >>> logout and you cleared the doubts I had, I have > >>> attached the disucussion we had bottom of the > >> mail, > >>> > >>> (http://sourceforge.net/mailarchive/forum.php? > >>> thread_id=30987603&forum_id=38700) > >>> > >>> > >>> Well I thought I got more suggestions into this, > >>> Similar to the HC Link in the uPortal, we got > >> links > >>> for WebCT and Mail and Library etc all SSO > enabled > >> and > >>> also all the links pops up in a new window with > >> the > >>> application. None of these got the issue we had > >> with > >>> HC which describes in the bottom of this mail, > >> that > >>> is eventhough we dont close all the browser > >> instances, > >>> if we logout uPortal login back again as a > >> different > >>> user and click WebCT or Mail link it will not > pick > >> the > >>> previous user but the new user. > >>> > >>> I understand that Logging out of uPortal and CAS > >> does > >>> NOT terminate the browser's session with > >> HyperContent, > >>> > >>> but let me know whether following makes any > sense > === message truncated === ____________________________________________________________________________________ Food fight? Enjoy some healthy debate in the Yahoo! Answers Food & Drink Q&A. http://answers.yahoo.com/dir/?link=list&sid=396545367 |
From: Alex V. <al...@bi...> - 2007-03-13 14:59:34
|
Hi Tom, Your changes look fine. For the code in CVS, I might consider a slightly less invasive approach where you would have to specify that you want to force login, e.g. with a request parameter "force- login=true" if("true".equalsIgnoreCase(request.getParameter("force-login"))) { session.logout(); session.cleanSubject(); } if(!session.isAuthenticated()){ ... Cheers, Alex On Mar 8, 2007, at 11:57 PM, tom tom wrote: > Hi Alex, > > I did some code change, looks it's working but I dont > know the side effects, Please look at the changes, If > the following got side effects pls do let me know a > safe approach (I couldnt find any place to call > HttpSession.invalidate() any how see the following) > > 1) I introduced the following in the > org.hypercontent.server.Session > > public void cleanSubject() { > subject = new Subject(); > subject.getPrincipals().add(Anybody.instance); > } > > > 2) now the execute method in Login.java looks as > follows, please observ that am calling > session.logout(); and session.cleanSubject(); and also > executing the authentication unconditionaly. > > > > Please let me know about this change > > Thanks > > > public void execute(IRequest request) throws > Exception { > //String user = request.getParameter("user"); > //String pass = request.getParameter("pass"); > Session session = request.getSession(); > > > if > ("login".equalsIgnoreCase(request.getParameter("mode"))) > { > session.logout(); > session.cleanSubject(); > } > > if (true){ > CallbackHandler handler = new > RequestCallbackHandler(request); > Subject subject = session.getSubject(); > LoginContext lc = new > LoginContext("HyperContent", subject,handler); > try{ > lc.login(); > } > catch(FailedLoginException e){ > failLogin(session); > return; > } > > IUser user = null; > String username = null; > Set set = subject.getPrincipals(); > for(Iterator iterator=set.iterator(); > iterator.hasNext();){ > Object o = iterator.next(); > //System.out.println("Checking out > principal "+o); > Principal p = (Principal)o; > > if(!p.equals(Anybody.instance)){ > username = p.getName(); > System.out.println("User name in > if block is "+username); > //let's translate generic > principals into HyperContent Users and SuperUsers > Set princs = > subject.getPrincipals(); > princs.remove(p); > user = getUserImpl(username); > princs.add(user); > session.setAuthenticated(true); > break; > } > } > if(!session.isAuthenticated()){ > failLogin(session); > } > Logger.info(Strings.concat("User > ",username," logged in")); > } > else{ > failLogin(session); > } > .... > .... > ... > > > > > > > > --- Alex Vigdor <al...@bi...> wrote: > >> Hi, >> I think the problem may be traced to >> org.hypercontent.server.commands.Login: on line 82 >> this class checks >> whether the current session is already authenticated >> before running >> authentication providers. You might try disabling >> this check to see >> if you get the desired behavior. A more >> sophisticated fix would, as >> you suggest, run the authentication providers and >> compare the results >> with the existing authenticated user. >> >> Cheers, >> Alex >> >> On Mar 7, 2007, at 10:56 PM, tom tom wrote: >> >>> Hi Alex, >>> >>> Sometime back I asked you a question regarding HC >>> logout and you cleared the doubts I had, I have >>> attached the disucussion we had bottom of the >> mail, >>> >>> (http://sourceforge.net/mailarchive/forum.php? >>> thread_id=30987603&forum_id=38700) >>> >>> >>> Well I thought I got more suggestions into this, >>> Similar to the HC Link in the uPortal, we got >> links >>> for WebCT and Mail and Library etc all SSO enabled >> and >>> also all the links pops up in a new window with >> the >>> application. None of these got the issue we had >> with >>> HC which describes in the bottom of this mail, >> that >>> is eventhough we dont close all the browser >> instances, >>> if we logout uPortal login back again as a >> different >>> user and click WebCT or Mail link it will not pick >> the >>> previous user but the new user. >>> >>> I understand that Logging out of uPortal and CAS >> does >>> NOT terminate the browser's session with >> HyperContent, >>> >>> but let me know whether following makes any sense >>> >>> uPortal channel got a link to HC as follows >>> >>> http://<HC server>/hypercontent?mode=login >>> >>> this guarantees(because mode=login) that HC will >> again >>> contact CAS by calling serviceValidate, the >>> serviceValidate will give the CAS XML with uid and >>> other attributes. >>> >>> Isnt it possible to cross check the this uid with >> the >>> session userId and if different call the session >>> invalidate() method or throw out a error, >>> >>> >>> Please let me know if am in the wrong track, What >> my >>> objective is to get HC logout behaviour similar to >> the >>> WebCT and mail so that everything look consistent. >>> >>> Thanks >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> -------------FROM A PREVIOUS >>> MAIL-------------------------- >>> >>> I observed the following behaviour (defect ?) in >> HC >>> while doing the following. >>> >>> >>> HC is casified and working fine with CAS and >> uPortal. >>> Users login to uPortal via CAS and one of uPortal >>> channel got a link to HC. Look at the following >> use >>> case. >>> >>> 1) user 'AUTHOR_HC' login to uPortal via >>> CAS.(authentication is successful) >>> >>> 2)clicks HC link to edit content >>> >>> 3)HC opens in a new window with 'You are logged >> in as >>> AUTHOR_HC' >>> >>> 4) user edits contents and saves >>> >>> 5) closes the HC browser window (wihout pressing >>> logout link in HC). >>> >>> 6) user presses uPortal logout which in turn call >> the >>> cas/logout >>> >>> 7) Different user login to uPortal via CAS as >> user >>> 'APPOVER_HC' >>> >>> 8) click the HC link in uPortal, HC opens in a >> new >>> browser Window .............. >>> >>> But still it shows the previous users welcome >> message >>> which is 'You are logged in as AUTHOR_HC' >>> >>> Why doesnt the HC cleans out everything. Is this a >>> limitation? >>> Different users can use the same workstation in >> our >>> case. >>> >>> Alex's answer >>> ------------- >>> >>> >>> This is the expected behavior. Logging out of >> uPortal >>> and CAS does >>> NOT terminate the browser's session with >> HyperContent. >>> The user must >>> close all browser windows for the session cookies >> to >>> be cleared. >>> This should be clearly conveyed to the user. >> Single >>> Sign Out, the >>> ability for the user to log out of CAS and all >>> applications that use >>> CAS for login, is a planned feature for a future >> CAS >>> release. >>> >>> >>> >>> >>> >> > ______________________________________________________________________ >> >>> ______________ >>> It's here! Your new message! >>> Get new email alerts with the free Yahoo! Toolbar. >>> >> http://tools.search.yahoo.com/toolbar/features/mail/ >>> >> >> >> > ---------------------------------------------------------------------- > --- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get >> the chance to share your >> opinions on IT & business topics through brief >> surveys-and earn cash >> > http://www.techsay.com/default.php? > page=join.php&p=sourceforge&CID=DEVDEV >> _______________________________________________ >> Hypercontent-users mailing list >> Hyp...@li... >> > https://lists.sourceforge.net/lists/listinfo/hypercontent-users >> > > > > > ______________________________________________________________________ > ______________ > Now that's room service! Choose from over 150,000 hotels > in 45,000 destinations on Yahoo! Travel to find your fit. > http://farechase.yahoo.com/promo-generic-14795097 > |
From: Alex V. <al...@bi...> - 2007-03-13 14:07:41
|
Hi Carl, Try patching org.hypercontent.workflow.work.WorkList with the =20= following bounds check at line 142 - let me know if this resolves the =20= issue and I'll check it into CVS. <code> if(ea.length=3D=3D0){ if(ea1.length=3D=3D0){ return 0; } return -1; } if(ea1.length=3D=3D0){ return 1; } </code> Cheers, Alex On Mar 12, 2007, at 10:02 AM, Carl Barrow wrote: > Hi Alex, > > > > I have a problem with one of my users being able to access the =20 > workflow section to build pages. All was working fine but now they =20 > get the error below. I=92ve done everything I can think of to solve =20= > the problem to no avail. It is only for one User, anyone else can =20= > access workflow without problems. Do you have any idea of what =20 > might have wrong? > > Cheers > > Carl > > > > > > There was an error processing your request > > -1 > > org.hypercontent.workflow.work.WorkList$LastEventComparator.compare=20 > (WorkList.java:143) > java.util.Arrays.mergeSort(Arrays.java:1278) > java.util.Arrays.mergeSort(Arrays.java:1290) > java.util.Arrays.mergeSort(Arrays.java:1290) > java.util.Arrays.mergeSort(Arrays.java:1290) > java.util.Arrays.mergeSort(Arrays.java:1290) > java.util.Arrays.sort(Arrays.java:1261) > org.hypercontent.workflow.work.WorkList.sort(WorkList.java:117) > org.hypercontent.workflow.work.WorkList.sortByLastEvent=20 > (WorkList.java:121) > org.hypercontent.workflow.impl.WorkflowFactoryImpl.getWorkList=20 > (WorkflowFactoryImpl.java:303) > sun.reflect.GeneratedMethodAccessor130.invoke(Unknown Source) > sun.reflect.DelegatingMethodAccessorImpl.invoke=20 > (DelegatingMethodAccessorImpl.java:25) > java.lang.reflect.Method.invoke(Method.java:324) > org.apache.velocity.util.introspection.UberspectImpl=20 > $VelMethodImpl.invoke(UberspectImpl.java:267) > org.apache.velocity.runtime.parser.node.ASTMethod.execute=20 > (ASTMethod.java:197) > org.apache.velocity.runtime.parser.node.ASTReference.execute=20 > (ASTReference.java:175) > org.apache.velocity.runtime.parser.node.ASTReference.value=20 > (ASTReference.java:327) > org.apache.velocity.runtime.parser.node.ASTExpression.value=20 > (ASTExpression.java:51) > org.apache.velocity.runtime.parser.node.ASTSetDirective.render=20 > (ASTSetDirective.java:95) > org.apache.velocity.runtime.parser.node.ASTBlock.render=20 > (ASTBlock.java:55) > org.apache.velocity.runtime.parser.node.SimpleNode.render=20 > (SimpleNode.java:230) > org.apache.velocity.runtime.parser.node.ASTIfStatement.render=20 > (ASTIfStatement.java:89) > org.apache.velocity.runtime.parser.node.SimpleNode.render=20 > (SimpleNode.java:230) > org.apache.velocity.Template.merge(Template.java:256) > org.hypercontent.project.engine.stage.VelocityStage.process=20 > (VelocityStage.java:186) > org.hypercontent.project.engine.Pipeline.process(Pipeline.java:307) > org.hypercontent.project.engine.Pipeline.process(Pipeline.java:281) > org.hypercontent.project.AssetRequest.getAsset(AssetRequest.java:194) > org.hypercontent.server.ContentServer.service(ContentServer.java:441) > org.hypercontent.servlet.CompositionServlet.doGet=20 > (CompositionServlet.java:104) > javax.servlet.http.HttpServlet.service(HttpServlet.java:689) > javax.servlet.http.HttpServlet.service(HttpServlet.java:802) > org.apache.catalina.core.ApplicationFilterChain.internalDoFilter=20 > (ApplicationFilterChain.java:237) > org.apache.catalina.core.ApplicationFilterChain.doFilter=20 > (ApplicationFilterChain.java:157) > org.apache.catalina.core.StandardWrapperValve.invoke=20 > (StandardWrapperValve.java:214) > org.apache.catalina.core.StandardValveContext.invokeNext=20 > (StandardValveContext.java:104) > org.apache.catalina.core.StandardPipeline.invoke=20 > (StandardPipeline.java:520) > org.apache.catalina.core.StandardContextValve.invokeInternal=20 > (StandardContextValve.java:198) > org.apache.catalina.core.StandardContextValve.invoke=20 > (StandardContextValve.java:152) > org.apache.catalina.core.StandardValveContext.invokeNext=20 > (StandardValveContext.java:104) > org.apache.catalina.core.StandardPipeline.invoke=20 > (StandardPipeline.java:520) > org.apache.catalina.core.StandardHostValve.invoke=20 > (StandardHostValve.java:137) > org.apache.catalina.core.StandardValveContext.invokeNext=20 > (StandardValveContext.java:104) > org.apache.catalina.valves.ErrorReportValve.invoke=20 > (ErrorReportValve.java:118) > org.apache.catalina.core.StandardValveContext.invokeNext=20 > (StandardValveContext.java:102) > org.apache.catalina.core.StandardPipeline.invoke=20 > (StandardPipeline.java:520) > org.apache.catalina.core.StandardEngineValve.invoke=20 > (StandardEngineValve.java:109) > org.apache.catalina.core.StandardValveContext.invokeNext=20 > (StandardValveContext.java:104) > org.apache.catalina.core.StandardPipeline.invoke=20 > (StandardPipeline.java:520) > org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929) > org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:=20 > 160) > org.apache.coyote.http11.Http11Processor.process=20 > (Http11Processor.java:799) > org.apache.coyote.http11.Http11Protocol=20 > $Http11ConnectionHandler.processConnection(Http11Protocol.java:705) > org.apache.tomcat.util.net.TcpWorkerThread.runIt=20 > (PoolTcpEndpoint.java:577) > org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run=20 > (ThreadPool.java:683) > java.lang.Thread.run(Thread.java:534) > > > > > > > > > > ************************************* > > Carl Barrow > Systems Integrator > e-Services > The University of Hull > Cottingham Road > Hull > HU6 7RX > Ext. 6838 > > http://www.hull.ac.uk/cms > > ************************************* > > > > **********************************************************************=20= > ******************* > To view the terms under which this email is distributed, please go =20 > to http://www.hull.ac.uk/legal/email_disclaimer.html > **********************************************************************=20= > *******************---------------------------------------------------=20= > ---------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to =20 > share your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?=20 > page=3Djoin.php&p=3Dsourceforge&CID=3DDEVDEV____________________________= ____=20 > _______________ > Hypercontent-users mailing list > Hyp...@li... > https://lists.sourceforge.net/lists/listinfo/hypercontent-users |
From: Carl B. <C.P...@hu...> - 2007-03-12 14:02:42
|
***************************************************************************************** To view the terms under which this email is distributed, please go to http://www.hull.ac.uk/legal/email_disclaimer.html ***************************************************************************************** |
From: tom t. <j_l...@ya...> - 2007-03-11 23:02:54
|
I created a Jira issue on this http://www.ja-sig.org/issues/browse/HYP-38 Thanks --- Alex Vigdor <al...@bi...> wrote: > > On Mar 7, 2007, at 6:48 PM, tom tom wrote: > > > Alex, > > > > At this stage we decided to keep things as it is > > > > but Let me state what my suggestion is, This is > just > > loud thinking > > > > It looks to me litteral references are tightly > coupled > > with some programming logic as well, If there is > any > > way to decouple and allow users to change the > screen > > constants that will be great. > > > > > >> View Built currently uses an HTTP redirect, which > >> can't be pointed at > >> a separate window. One thing to consider is > >> pointing the redirect to > >> a page with javascript that will pop open a new > >> window, then redirect > >> the existing window back to HC. > > > > Please do think possibility of opening this in a > new > > window instead of a redirect, Reason is someone > who > > selects view Built or view Published allready > decided > > go for a staging area, Now we need to press the > > browser back button to get the HC screen. > > > > If I want to go ahead with your suggestion which > file > > should I modify. > > I would just create a static HTML file in the > repository, and in the > view-built event redirect to that file. Within that > file I would add > a javascript command to pop the new window, then to > go back in the > history. I realize this is not terribly elegant, a > better solution > would be to make it possible to specify a target for > workflow events, > please feel free to add that as a feature request in > Jira. > > > > > Thanks > > > > > > > > > ______________________________________________________________________ > > > ______________ > > Food fight? Enjoy some healthy debate > > in the Yahoo! Answers Food & Drink Q&A. > > > http://answers.yahoo.com/dir/?link=list&sid=396545367 > > > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get > the chance to share your > opinions on IT & business topics through brief > surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Hypercontent-users mailing list > Hyp...@li... > https://lists.sourceforge.net/lists/listinfo/hypercontent-users > ____________________________________________________________________________________ Sucker-punch spam with award-winning protection. Try the free Yahoo! Mail Beta. http://advision.webevents.yahoo.com/mailbeta/features_spam.html |
From: Scott B. <sco...@ru...> - 2007-03-09 12:41:12
|
You can actually find it here: http://www.ja-sig.org/issues/browse/HYP Scott Battaglia Application Developer, Architecture & Engineering Team Enterprise Systems and Services, Rutgers University v: 732.445.0097 | f: 732.445.5493 | sco...@ru... tom tom wrote: >Where can I find the Hypercontent project in > >https://issues.apache.org/jira/secure/Dashboard.jspa > >to make a jira issue, > >--- Alex Vigdor <al...@bi...> wrote: > > > >>On Mar 7, 2007, at 6:48 PM, tom tom wrote: >> >> >> >>>Alex, >>> >>>At this stage we decided to keep things as it is >>> >>>but Let me state what my suggestion is, This is >>> >>> >>just >> >> >>>loud thinking >>> >>>It looks to me litteral references are tightly >>> >>> >>coupled >> >> >>>with some programming logic as well, If there is >>> >>> >>any >> >> >>>way to decouple and allow users to change the >>> >>> >>screen >> >> >>>constants that will be great. >>> >>> >>> >>> >>>>View Built currently uses an HTTP redirect, which >>>>can't be pointed at >>>>a separate window. One thing to consider is >>>>pointing the redirect to >>>>a page with javascript that will pop open a new >>>>window, then redirect >>>>the existing window back to HC. >>>> >>>> >>>Please do think possibility of opening this in a >>> >>> >>new >> >> >>>window instead of a redirect, Reason is someone >>> >>> >>who >> >> >>>selects view Built or view Published allready >>> >>> >>decided >> >> >>>go for a staging area, Now we need to press the >>>browser back button to get the HC screen. >>> >>>If I want to go ahead with your suggestion which >>> >>> >>file >> >> >>>should I modify. >>> >>> >>I would just create a static HTML file in the >>repository, and in the >>view-built event redirect to that file. Within that >>file I would add >>a javascript command to pop the new window, then to >>go back in the >>history. I realize this is not terribly elegant, a >>better solution >>would be to make it possible to specify a target for >>workflow events, >>please feel free to add that as a feature request in >>Jira. >> >> >> >>>Thanks >>> >>> >>> >>> >>> >>> >______________________________________________________________________ > > >>>______________ >>>Food fight? Enjoy some healthy debate >>>in the Yahoo! Answers Food & Drink Q&A. >>> >>> >>> >http://answers.yahoo.com/dir/?link=list&sid=396545367 > > >> >> >> >------------------------------------------------------------------------- > > >>Take Surveys. Earn Cash. Influence the Future of IT >>Join SourceForge.net's Techsay panel and you'll get >>the chance to share your >>opinions on IT & business topics through brief >>surveys-and earn cash >> >> >> >http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > >>_______________________________________________ >>Hypercontent-users mailing list >>Hyp...@li... >> >> >> >https://lists.sourceforge.net/lists/listinfo/hypercontent-users > > > > > > >____________________________________________________________________________________ >It's here! Your new message! >Get new email alerts with the free Yahoo! Toolbar. >http://tools.search.yahoo.com/toolbar/features/mail/ > >------------------------------------------------------------------------- >Take Surveys. Earn Cash. Influence the Future of IT >Join SourceForge.net's Techsay panel and you'll get the chance to share your >opinions on IT & business topics through brief surveys-and earn cash >http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >_______________________________________________ >Hypercontent-users mailing list >Hyp...@li... >https://lists.sourceforge.net/lists/listinfo/hypercontent-users > > |
From: tom t. <j_l...@ya...> - 2007-03-09 05:43:12
|
Where can I find the Hypercontent project in https://issues.apache.org/jira/secure/Dashboard.jspa to make a jira issue, --- Alex Vigdor <al...@bi...> wrote: > > On Mar 7, 2007, at 6:48 PM, tom tom wrote: > > > Alex, > > > > At this stage we decided to keep things as it is > > > > but Let me state what my suggestion is, This is > just > > loud thinking > > > > It looks to me litteral references are tightly > coupled > > with some programming logic as well, If there is > any > > way to decouple and allow users to change the > screen > > constants that will be great. > > > > > >> View Built currently uses an HTTP redirect, which > >> can't be pointed at > >> a separate window. One thing to consider is > >> pointing the redirect to > >> a page with javascript that will pop open a new > >> window, then redirect > >> the existing window back to HC. > > > > Please do think possibility of opening this in a > new > > window instead of a redirect, Reason is someone > who > > selects view Built or view Published allready > decided > > go for a staging area, Now we need to press the > > browser back button to get the HC screen. > > > > If I want to go ahead with your suggestion which > file > > should I modify. > > I would just create a static HTML file in the > repository, and in the > view-built event redirect to that file. Within that > file I would add > a javascript command to pop the new window, then to > go back in the > history. I realize this is not terribly elegant, a > better solution > would be to make it possible to specify a target for > workflow events, > please feel free to add that as a feature request in > Jira. > > > > > Thanks > > > > > > > > > ______________________________________________________________________ > > > ______________ > > Food fight? Enjoy some healthy debate > > in the Yahoo! Answers Food & Drink Q&A. > > > http://answers.yahoo.com/dir/?link=list&sid=396545367 > > > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get > the chance to share your > opinions on IT & business topics through brief > surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Hypercontent-users mailing list > Hyp...@li... > https://lists.sourceforge.net/lists/listinfo/hypercontent-users > ____________________________________________________________________________________ It's here! Your new message! Get new email alerts with the free Yahoo! Toolbar. http://tools.search.yahoo.com/toolbar/features/mail/ |
From: tom t. <j_l...@ya...> - 2007-03-09 04:57:50
|
Hi Alex, I did some code change, looks it's working but I dont know the side effects, Please look at the changes, If the following got side effects pls do let me know a safe approach (I couldnt find any place to call HttpSession.invalidate() any how see the following) 1) I introduced the following in the org.hypercontent.server.Session public void cleanSubject() { subject = new Subject(); subject.getPrincipals().add(Anybody.instance); } 2) now the execute method in Login.java looks as follows, please observ that am calling session.logout(); and session.cleanSubject(); and also executing the authentication unconditionaly. Please let me know about this change Thanks public void execute(IRequest request) throws Exception { //String user = request.getParameter("user"); //String pass = request.getParameter("pass"); Session session = request.getSession(); if ("login".equalsIgnoreCase(request.getParameter("mode"))) { session.logout(); session.cleanSubject(); } if (true){ CallbackHandler handler = new RequestCallbackHandler(request); Subject subject = session.getSubject(); LoginContext lc = new LoginContext("HyperContent", subject,handler); try{ lc.login(); } catch(FailedLoginException e){ failLogin(session); return; } IUser user = null; String username = null; Set set = subject.getPrincipals(); for(Iterator iterator=set.iterator(); iterator.hasNext();){ Object o = iterator.next(); //System.out.println("Checking out principal "+o); Principal p = (Principal)o; if(!p.equals(Anybody.instance)){ username = p.getName(); System.out.println("User name in if block is "+username); //let's translate generic principals into HyperContent Users and SuperUsers Set princs = subject.getPrincipals(); princs.remove(p); user = getUserImpl(username); princs.add(user); session.setAuthenticated(true); break; } } if(!session.isAuthenticated()){ failLogin(session); } Logger.info(Strings.concat("User ",username," logged in")); } else{ failLogin(session); } .... .... ... --- Alex Vigdor <al...@bi...> wrote: > Hi, > I think the problem may be traced to > org.hypercontent.server.commands.Login: on line 82 > this class checks > whether the current session is already authenticated > before running > authentication providers. You might try disabling > this check to see > if you get the desired behavior. A more > sophisticated fix would, as > you suggest, run the authentication providers and > compare the results > with the existing authenticated user. > > Cheers, > Alex > > On Mar 7, 2007, at 10:56 PM, tom tom wrote: > > > Hi Alex, > > > > Sometime back I asked you a question regarding HC > > logout and you cleared the doubts I had, I have > > attached the disucussion we had bottom of the > mail, > > > > (http://sourceforge.net/mailarchive/forum.php? > > thread_id=30987603&forum_id=38700) > > > > > > Well I thought I got more suggestions into this, > > Similar to the HC Link in the uPortal, we got > links > > for WebCT and Mail and Library etc all SSO enabled > and > > also all the links pops up in a new window with > the > > application. None of these got the issue we had > with > > HC which describes in the bottom of this mail, > that > > is eventhough we dont close all the browser > instances, > > if we logout uPortal login back again as a > different > > user and click WebCT or Mail link it will not pick > the > > previous user but the new user. > > > > I understand that Logging out of uPortal and CAS > does > > NOT terminate the browser's session with > HyperContent, > > > > but let me know whether following makes any sense > > > > uPortal channel got a link to HC as follows > > > > http://<HC server>/hypercontent?mode=login > > > > this guarantees(because mode=login) that HC will > again > > contact CAS by calling serviceValidate, the > > serviceValidate will give the CAS XML with uid and > > other attributes. > > > > Isnt it possible to cross check the this uid with > the > > session userId and if different call the session > > invalidate() method or throw out a error, > > > > > > Please let me know if am in the wrong track, What > my > > objective is to get HC logout behaviour similar to > the > > WebCT and mail so that everything look consistent. > > > > Thanks > > > > > > > > > > > > > > > > > > > > > > > > -------------FROM A PREVIOUS > > MAIL-------------------------- > > > > I observed the following behaviour (defect ?) in > HC > > while doing the following. > > > > > > HC is casified and working fine with CAS and > uPortal. > > Users login to uPortal via CAS and one of uPortal > > channel got a link to HC. Look at the following > use > > case. > > > > 1) user 'AUTHOR_HC' login to uPortal via > > CAS.(authentication is successful) > > > > 2)clicks HC link to edit content > > > > 3)HC opens in a new window with 'You are logged > in as > > AUTHOR_HC' > > > > 4) user edits contents and saves > > > > 5) closes the HC browser window (wihout pressing > > logout link in HC). > > > > 6) user presses uPortal logout which in turn call > the > > cas/logout > > > > 7) Different user login to uPortal via CAS as > user > > 'APPOVER_HC' > > > > 8) click the HC link in uPortal, HC opens in a > new > > browser Window .............. > > > > But still it shows the previous users welcome > message > > which is 'You are logged in as AUTHOR_HC' > > > > Why doesnt the HC cleans out everything. Is this a > > limitation? > > Different users can use the same workstation in > our > > case. > > > > Alex's answer > > ------------- > > > > > > This is the expected behavior. Logging out of > uPortal > > and CAS does > > NOT terminate the browser's session with > HyperContent. > > The user must > > close all browser windows for the session cookies > to > > be cleared. > > This should be clearly conveyed to the user. > Single > > Sign Out, the > > ability for the user to log out of CAS and all > > applications that use > > CAS for login, is a planned feature for a future > CAS > > release. > > > > > > > > > > > ______________________________________________________________________ > > > ______________ > > It's here! Your new message! > > Get new email alerts with the free Yahoo! Toolbar. > > > http://tools.search.yahoo.com/toolbar/features/mail/ > > > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get > the chance to share your > opinions on IT & business topics through brief > surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Hypercontent-users mailing list > Hyp...@li... > https://lists.sourceforge.net/lists/listinfo/hypercontent-users > ____________________________________________________________________________________ Now that's room service! Choose from over 150,000 hotels in 45,000 destinations on Yahoo! Travel to find your fit. http://farechase.yahoo.com/promo-generic-14795097 |
From: tom t. <j_l...@ya...> - 2007-03-09 04:47:24
|
Hi Alex, I did some code change, looks it's working but I dont know the side effects, Please look at the changes, If the following got side effects pls do let me know a safe approach 1) I introduced the following in the org.hypercontent.server.Session public void cleanSubject() { subject = new Subject(); subject.getPrincipals().add(Anybody.instance); } 2) now the execute method in Login.java looks as follows, please observ that am calling session.logout(); and session.cleanSubject(); and also executing the authentication unconditionaly. Please let me know about this change Thanks public void execute(IRequest request) throws Exception { //String user = request.getParameter("user"); //String pass = request.getParameter("pass"); Session session = request.getSession(); if ("login".equalsIgnoreCase(request.getParameter("mode"))) { session.logout(); session.cleanSubject(); } if (true){ CallbackHandler handler = new RequestCallbackHandler(request); Subject subject = session.getSubject(); LoginContext lc = new LoginContext("HyperContent", subject,handler); try{ lc.login(); } catch(FailedLoginException e){ failLogin(session); return; } IUser user = null; String username = null; Set set = subject.getPrincipals(); for(Iterator iterator=set.iterator(); iterator.hasNext();){ Object o = iterator.next(); //System.out.println("Checking out principal "+o); Principal p = (Principal)o; if(!p.equals(Anybody.instance)){ username = p.getName(); System.out.println("User name in if block is "+username); //let's translate generic principals into HyperContent Users and SuperUsers Set princs = subject.getPrincipals(); princs.remove(p); user = getUserImpl(username); princs.add(user); session.setAuthenticated(true); break; } } if(!session.isAuthenticated()){ failLogin(session); } Logger.info(Strings.concat("User ",username," logged in")); } else{ failLogin(session); } .... .... ... --- tom tom <j_l...@ya...> wrote: > I did the change but the problem still remains the > same, > > It looks to me new Principal does not replace the > existing one. > > Some how old stuff remains the same > > Thanks > > > --- Alex Vigdor <al...@bi...> wrote: > > > Hi, > > I think the problem may be traced to > > org.hypercontent.server.commands.Login: on line > 82 > > this class checks > > whether the current session is already > authenticated > > before running > > authentication providers. You might try disabling > > this check to see > > if you get the desired behavior. A more > > sophisticated fix would, as > > you suggest, run the authentication providers and > > compare the results > > with the existing authenticated user. > > > > Cheers, > > Alex > > > > On Mar 7, 2007, at 10:56 PM, tom tom wrote: > > > > > Hi Alex, > > > > > > Sometime back I asked you a question regarding > HC > > > logout and you cleared the doubts I had, I have > > > attached the disucussion we had bottom of the > > mail, > > > > > > (http://sourceforge.net/mailarchive/forum.php? > > > thread_id=30987603&forum_id=38700) > > > > > > > > > Well I thought I got more suggestions into this, > > > Similar to the HC Link in the uPortal, we got > > links > > > for WebCT and Mail and Library etc all SSO > enabled > > and > > > also all the links pops up in a new window with > > the > > > application. None of these got the issue we had > > with > > > HC which describes in the bottom of this mail, > > that > > > is eventhough we dont close all the browser > > instances, > > > if we logout uPortal login back again as a > > different > > > user and click WebCT or Mail link it will not > pick > > the > > > previous user but the new user. > > > > > > I understand that Logging out of uPortal and CAS > > does > > > NOT terminate the browser's session with > > HyperContent, > > > > > > but let me know whether following makes any > sense > > > > > > uPortal channel got a link to HC as follows > > > > > > http://<HC server>/hypercontent?mode=login > > > > > > this guarantees(because mode=login) that HC will > > again > > > contact CAS by calling serviceValidate, the > > > serviceValidate will give the CAS XML with uid > and > > > other attributes. > > > > > > Isnt it possible to cross check the this uid > with > > the > > > session userId and if different call the session > > > invalidate() method or throw out a error, > > > > > > > > > Please let me know if am in the wrong track, > What > > my > > > objective is to get HC logout behaviour similar > to > > the > > > WebCT and mail so that everything look > consistent. > > > > > > Thanks > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -------------FROM A PREVIOUS > > > MAIL-------------------------- > > > > > > I observed the following behaviour (defect ?) > in > > HC > > > while doing the following. > > > > > > > > > HC is casified and working fine with CAS and > > uPortal. > > > Users login to uPortal via CAS and one of > uPortal > > > channel got a link to HC. Look at the following > > use > > > case. > > > > > > 1) user 'AUTHOR_HC' login to uPortal via > > > CAS.(authentication is successful) > > > > > > 2)clicks HC link to edit content > > > > > > 3)HC opens in a new window with 'You are logged > > in as > > > AUTHOR_HC' > > > > > > 4) user edits contents and saves > > > > > > 5) closes the HC browser window (wihout > pressing > > > logout link in HC). > > > > > > 6) user presses uPortal logout which in turn > call > > the > > > cas/logout > > > > > > 7) Different user login to uPortal via CAS as > > user > > > 'APPOVER_HC' > > > > > > 8) click the HC link in uPortal, HC opens in a > > new > > > browser Window .............. > > > > > > But still it shows the previous users welcome > > message > > > which is 'You are logged in as AUTHOR_HC' > > > > > > Why doesnt the HC cleans out everything. Is this > a > > > limitation? > > > Different users can use the same workstation in > > our > > > case. > > > > > > Alex's answer > > > ------------- > > > > > > > > > This is the expected behavior. Logging out of > > uPortal > > > and CAS does > > > NOT terminate the browser's session with > > HyperContent. > > > The user must > > > close all browser windows for the session > cookies > > to > > > be cleared. > > > This should be clearly conveyed to the user. > > Single > > > Sign Out, the > > > ability for the user to log out of CAS and all > > > applications that use > > > CAS for login, is a planned feature for a future > > CAS > > > release. > > > > > > > > > > > > > > > > > > ______________________________________________________________________ > > > > > ______________ > === message truncated === ____________________________________________________________________________________ It's here! Your new message! Get new email alerts with the free Yahoo! Toolbar. http://tools.search.yahoo.com/toolbar/features/mail/ |
From: tom t. <j_l...@ya...> - 2007-03-09 03:57:59
|
I did the change but the problem still remains the same, It looks to me new Principal does not replace the existing one. Some how old stuff remains the same Thanks --- Alex Vigdor <al...@bi...> wrote: > Hi, > I think the problem may be traced to > org.hypercontent.server.commands.Login: on line 82 > this class checks > whether the current session is already authenticated > before running > authentication providers. You might try disabling > this check to see > if you get the desired behavior. A more > sophisticated fix would, as > you suggest, run the authentication providers and > compare the results > with the existing authenticated user. > > Cheers, > Alex > > On Mar 7, 2007, at 10:56 PM, tom tom wrote: > > > Hi Alex, > > > > Sometime back I asked you a question regarding HC > > logout and you cleared the doubts I had, I have > > attached the disucussion we had bottom of the > mail, > > > > (http://sourceforge.net/mailarchive/forum.php? > > thread_id=30987603&forum_id=38700) > > > > > > Well I thought I got more suggestions into this, > > Similar to the HC Link in the uPortal, we got > links > > for WebCT and Mail and Library etc all SSO enabled > and > > also all the links pops up in a new window with > the > > application. None of these got the issue we had > with > > HC which describes in the bottom of this mail, > that > > is eventhough we dont close all the browser > instances, > > if we logout uPortal login back again as a > different > > user and click WebCT or Mail link it will not pick > the > > previous user but the new user. > > > > I understand that Logging out of uPortal and CAS > does > > NOT terminate the browser's session with > HyperContent, > > > > but let me know whether following makes any sense > > > > uPortal channel got a link to HC as follows > > > > http://<HC server>/hypercontent?mode=login > > > > this guarantees(because mode=login) that HC will > again > > contact CAS by calling serviceValidate, the > > serviceValidate will give the CAS XML with uid and > > other attributes. > > > > Isnt it possible to cross check the this uid with > the > > session userId and if different call the session > > invalidate() method or throw out a error, > > > > > > Please let me know if am in the wrong track, What > my > > objective is to get HC logout behaviour similar to > the > > WebCT and mail so that everything look consistent. > > > > Thanks > > > > > > > > > > > > > > > > > > > > > > > > -------------FROM A PREVIOUS > > MAIL-------------------------- > > > > I observed the following behaviour (defect ?) in > HC > > while doing the following. > > > > > > HC is casified and working fine with CAS and > uPortal. > > Users login to uPortal via CAS and one of uPortal > > channel got a link to HC. Look at the following > use > > case. > > > > 1) user 'AUTHOR_HC' login to uPortal via > > CAS.(authentication is successful) > > > > 2)clicks HC link to edit content > > > > 3)HC opens in a new window with 'You are logged > in as > > AUTHOR_HC' > > > > 4) user edits contents and saves > > > > 5) closes the HC browser window (wihout pressing > > logout link in HC). > > > > 6) user presses uPortal logout which in turn call > the > > cas/logout > > > > 7) Different user login to uPortal via CAS as > user > > 'APPOVER_HC' > > > > 8) click the HC link in uPortal, HC opens in a > new > > browser Window .............. > > > > But still it shows the previous users welcome > message > > which is 'You are logged in as AUTHOR_HC' > > > > Why doesnt the HC cleans out everything. Is this a > > limitation? > > Different users can use the same workstation in > our > > case. > > > > Alex's answer > > ------------- > > > > > > This is the expected behavior. Logging out of > uPortal > > and CAS does > > NOT terminate the browser's session with > HyperContent. > > The user must > > close all browser windows for the session cookies > to > > be cleared. > > This should be clearly conveyed to the user. > Single > > Sign Out, the > > ability for the user to log out of CAS and all > > applications that use > > CAS for login, is a planned feature for a future > CAS > > release. > > > > > > > > > > > ______________________________________________________________________ > > > ______________ > > It's here! Your new message! > > Get new email alerts with the free Yahoo! Toolbar. > > > http://tools.search.yahoo.com/toolbar/features/mail/ > > > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get > the chance to share your > opinions on IT & business topics through brief > surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Hypercontent-users mailing list > Hyp...@li... > https://lists.sourceforge.net/lists/listinfo/hypercontent-users > ____________________________________________________________________________________ Never miss an email again! Yahoo! Toolbar alerts you the instant new Mail arrives. http://tools.search.yahoo.com/toolbar/features/mail/ |
From: Alex V. <al...@bi...> - 2007-03-08 14:40:21
|
On Mar 7, 2007, at 6:48 PM, tom tom wrote: > Alex, > > At this stage we decided to keep things as it is > > but Let me state what my suggestion is, This is just > loud thinking > > It looks to me litteral references are tightly coupled > with some programming logic as well, If there is any > way to decouple and allow users to change the screen > constants that will be great. > > >> View Built currently uses an HTTP redirect, which >> can't be pointed at >> a separate window. One thing to consider is >> pointing the redirect to >> a page with javascript that will pop open a new >> window, then redirect >> the existing window back to HC. > > Please do think possibility of opening this in a new > window instead of a redirect, Reason is someone who > selects view Built or view Published allready decided > go for a staging area, Now we need to press the > browser back button to get the HC screen. > > If I want to go ahead with your suggestion which file > should I modify. I would just create a static HTML file in the repository, and in the view-built event redirect to that file. Within that file I would add a javascript command to pop the new window, then to go back in the history. I realize this is not terribly elegant, a better solution would be to make it possible to specify a target for workflow events, please feel free to add that as a feature request in Jira. > > Thanks > > > > ______________________________________________________________________ > ______________ > Food fight? Enjoy some healthy debate > in the Yahoo! Answers Food & Drink Q&A. > http://answers.yahoo.com/dir/?link=list&sid=396545367 > |
From: Alex V. <al...@bi...> - 2007-03-08 14:37:06
|
Hi, I think the problem may be traced to org.hypercontent.server.commands.Login: on line 82 this class checks whether the current session is already authenticated before running authentication providers. You might try disabling this check to see if you get the desired behavior. A more sophisticated fix would, as you suggest, run the authentication providers and compare the results with the existing authenticated user. Cheers, Alex On Mar 7, 2007, at 10:56 PM, tom tom wrote: > Hi Alex, > > Sometime back I asked you a question regarding HC > logout and you cleared the doubts I had, I have > attached the disucussion we had bottom of the mail, > > (http://sourceforge.net/mailarchive/forum.php? > thread_id=30987603&forum_id=38700) > > > Well I thought I got more suggestions into this, > Similar to the HC Link in the uPortal, we got links > for WebCT and Mail and Library etc all SSO enabled and > also all the links pops up in a new window with the > application. None of these got the issue we had with > HC which describes in the bottom of this mail, that > is eventhough we dont close all the browser instances, > if we logout uPortal login back again as a different > user and click WebCT or Mail link it will not pick the > previous user but the new user. > > I understand that Logging out of uPortal and CAS does > NOT terminate the browser's session with HyperContent, > > but let me know whether following makes any sense > > uPortal channel got a link to HC as follows > > http://<HC server>/hypercontent?mode=login > > this guarantees(because mode=login) that HC will again > contact CAS by calling serviceValidate, the > serviceValidate will give the CAS XML with uid and > other attributes. > > Isnt it possible to cross check the this uid with the > session userId and if different call the session > invalidate() method or throw out a error, > > > Please let me know if am in the wrong track, What my > objective is to get HC logout behaviour similar to the > WebCT and mail so that everything look consistent. > > Thanks > > > > > > > > > > > > -------------FROM A PREVIOUS > MAIL-------------------------- > > I observed the following behaviour (defect ?) in HC > while doing the following. > > > HC is casified and working fine with CAS and uPortal. > Users login to uPortal via CAS and one of uPortal > channel got a link to HC. Look at the following use > case. > > 1) user 'AUTHOR_HC' login to uPortal via > CAS.(authentication is successful) > > 2)clicks HC link to edit content > > 3)HC opens in a new window with 'You are logged in as > AUTHOR_HC' > > 4) user edits contents and saves > > 5) closes the HC browser window (wihout pressing > logout link in HC). > > 6) user presses uPortal logout which in turn call the > cas/logout > > 7) Different user login to uPortal via CAS as user > 'APPOVER_HC' > > 8) click the HC link in uPortal, HC opens in a new > browser Window .............. > > But still it shows the previous users welcome message > which is 'You are logged in as AUTHOR_HC' > > Why doesnt the HC cleans out everything. Is this a > limitation? > Different users can use the same workstation in our > case. > > Alex's answer > ------------- > > > This is the expected behavior. Logging out of uPortal > and CAS does > NOT terminate the browser's session with HyperContent. > The user must > close all browser windows for the session cookies to > be cleared. > This should be clearly conveyed to the user. Single > Sign Out, the > ability for the user to log out of CAS and all > applications that use > CAS for login, is a planned feature for a future CAS > release. > > > > > ______________________________________________________________________ > ______________ > It's here! Your new message! > Get new email alerts with the free Yahoo! Toolbar. > http://tools.search.yahoo.com/toolbar/features/mail/ > |
From: Alex V. <al...@bi...> - 2007-03-08 13:20:18
|
You can configure it however you like, but if you want index pages in =20= new directories you can have both doctypes <xml-doctype create=3D"manual" definition=3D"" label=3D"Page" path=3D"/**/*.xml" root=3D"html"> <output basedir=3D"/plain/" content-type=3D"text/html"> <transform source=3D"/config/skins/plain/common.xsl"> <with-param name=3D"link-base" value=3D"/plain"/> </transform> </output> </xml-doctype> <xml-doctype create=3D"manual" definition=3D"" label=3D"Index Page" path=3D"/**/index.xml" root=3D"html"> <output basedir=3D"/plain/" content-type=3D"text/html"> <transform source=3D"/config/skins/plain/common.xsl"> <with-param name=3D"link-base" value=3D"/plain"/> </transform> </output> </xml-doctype> When the user is prompted for a name for an index page, it will be =20 used to name the directory that contains the index page. Cheers, Alex On Mar 7, 2007, at 6:25 PM, tom tom wrote: > Hi Alex, > > I decided to keep the following so that user can > manually add any xml with any name inside any folder. > > Hope there is no issues with this? > > > > <xml-doctype create=3D"manual" definition=3D"" > label=3D"Page" path=3D"/**/*.xml" root=3D"html"> > <output basedir=3D"/plain/" > content-type=3D"text/html"> > <transform > source=3D"/config/skins/plain/common.xsl"> > <with-param name=3D"link-base" value=3D"/plain"/> > </transform> > </output> > </xml-doctype> > > > > > --- Alex Vigdor <al...@bi...> wrote: > >> If you just want an index in a new folder, you >> should have the user >> create an instance of a doctype "/**/index.xml". >> This will >> automatically create the enclosing folder. You can >> even label the >> index doctype "Folder" if you feel it is more clear. >> >> Alex >> >> On Mar 6, 2007, at 10:20 PM, tom tom wrote: >> >>> >>>> To automatically have an index file created >> inside >>>> every directory, >>>> you could use create=3D"auto" with your index >> doctype, >>>> e.g. >>>> >>>> <xml-doctype path=3D"/**/index.xml" create=3D"auto" >> ... >>> >>> What I want is not to create index file in every >>> directory but only in the new folder being >> created. >>> Above will create index.xml in each folder. >>> >>> I allready go the xml-doctype as follows in my >> project >>> definition >>> >>> <xml-doctype create=3D"manual" definition=3D"" >>> label=3D"Page" path=3D"/**/*.xml" root=3D"html"> >>> =E2=88=92 >>> <output basedir=3D"/plain/" >> content-type=3D"text/html"> >>> =E2=88=92 >>> <transform >> source=3D"/config/skins/plain/common.xsl"> >>> <with-param name=3D"link-base" value=3D"/plain"/> >>> </transform> >>> </output> >>> </xml-doctype> >>> >>> >>> Thanks >>> >>> >>> >>> >>> >> > ______________________________________________________________________ >> >>> ______________ >>> It's here! Your new message! >>> Get new email alerts with the free Yahoo! Toolbar. >>> >> http://tools.search.yahoo.com/toolbar/features/mail/ >>> >> >> >> > ----------------------------------------------------------------------=20= > --- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get >> the chance to share your >> opinions on IT & business topics through brief >> surveys-and earn cash >> > http://www.techsay.com/default.php?=20 > page=3Djoin.php&p=3Dsourceforge&CID=3DDEVDEV >> _______________________________________________ >> Hypercontent-users mailing list >> Hyp...@li... >> > https://lists.sourceforge.net/lists/listinfo/hypercontent-users >> > > > > > ______________________________________________________________________=20= > ______________ > Finding fabulous fares is fun. > Let Yahoo! FareChase search your favorite travel sites to find =20 > flight and hotel bargains. > http://farechase.yahoo.com/promo-generic-14795097 > |
From: tom t. <j_l...@ya...> - 2007-03-08 03:57:06
|
Hi Alex, Sometime back I asked you a question regarding HC logout and you cleared the doubts I had, I have attached the disucussion we had bottom of the mail, (http://sourceforge.net/mailarchive/forum.php?thread_id=30987603&forum_id=38700) Well I thought I got more suggestions into this, Similar to the HC Link in the uPortal, we got links for WebCT and Mail and Library etc all SSO enabled and also all the links pops up in a new window with the application. None of these got the issue we had with HC which describes in the bottom of this mail, that is eventhough we dont close all the browser instances, if we logout uPortal login back again as a different user and click WebCT or Mail link it will not pick the previous user but the new user. I understand that Logging out of uPortal and CAS does NOT terminate the browser's session with HyperContent, but let me know whether following makes any sense uPortal channel got a link to HC as follows http://<HC server>/hypercontent?mode=login this guarantees(because mode=login) that HC will again contact CAS by calling serviceValidate, the serviceValidate will give the CAS XML with uid and other attributes. Isnt it possible to cross check the this uid with the session userId and if different call the session invalidate() method or throw out a error, Please let me know if am in the wrong track, What my objective is to get HC logout behaviour similar to the WebCT and mail so that everything look consistent. Thanks -------------FROM A PREVIOUS MAIL-------------------------- I observed the following behaviour (defect ?) in HC while doing the following. HC is casified and working fine with CAS and uPortal. Users login to uPortal via CAS and one of uPortal channel got a link to HC. Look at the following use case. 1) user 'AUTHOR_HC' login to uPortal via CAS.(authentication is successful) 2)clicks HC link to edit content 3)HC opens in a new window with 'You are logged in as AUTHOR_HC' 4) user edits contents and saves 5) closes the HC browser window (wihout pressing logout link in HC). 6) user presses uPortal logout which in turn call the cas/logout 7) Different user login to uPortal via CAS as user 'APPOVER_HC' 8) click the HC link in uPortal, HC opens in a new browser Window .............. But still it shows the previous users welcome message which is 'You are logged in as AUTHOR_HC' Why doesnt the HC cleans out everything. Is this a limitation? Different users can use the same workstation in our case. Alex's answer ------------- This is the expected behavior. Logging out of uPortal and CAS does NOT terminate the browser's session with HyperContent. The user must close all browser windows for the session cookies to be cleared. This should be clearly conveyed to the user. Single Sign Out, the ability for the user to log out of CAS and all applications that use CAS for login, is a planned feature for a future CAS release. ____________________________________________________________________________________ It's here! Your new message! Get new email alerts with the free Yahoo! Toolbar. http://tools.search.yahoo.com/toolbar/features/mail/ |
From: tom t. <j_l...@ya...> - 2007-03-07 23:48:16
|
Alex, At this stage we decided to keep things as it is but Let me state what my suggestion is, This is just loud thinking It looks to me litteral references are tightly coupled with some programming logic as well, If there is any way to decouple and allow users to change the screen constants that will be great. > View Built currently uses an HTTP redirect, which > can't be pointed at > a separate window. One thing to consider is > pointing the redirect to > a page with javascript that will pop open a new > window, then redirect > the existing window back to HC. Please do think possibility of opening this in a new window instead of a redirect, Reason is someone who selects view Built or view Published allready decided go for a staging area, Now we need to press the browser back button to get the HC screen. If I want to go ahead with your suggestion which file should I modify. Thanks ____________________________________________________________________________________ Food fight? Enjoy some healthy debate in the Yahoo! Answers Food & Drink Q&A. http://answers.yahoo.com/dir/?link=list&sid=396545367 |
From: tom t. <j_l...@ya...> - 2007-03-07 23:26:00
|
Hi Alex, I decided to keep the following so that user can manually add any xml with any name inside any folder. Hope there is no issues with this? <xml-doctype create="manual" definition="" label="Page" path="/**/*.xml" root="html"> <output basedir="/plain/" content-type="text/html"> <transform source="/config/skins/plain/common.xsl"> <with-param name="link-base" value="/plain"/> </transform> </output> </xml-doctype> --- Alex Vigdor <al...@bi...> wrote: > If you just want an index in a new folder, you > should have the user > create an instance of a doctype "/**/index.xml". > This will > automatically create the enclosing folder. You can > even label the > index doctype "Folder" if you feel it is more clear. > > Alex > > On Mar 6, 2007, at 10:20 PM, tom tom wrote: > > > > >> To automatically have an index file created > inside > >> every directory, > >> you could use create="auto" with your index > doctype, > >> e.g. > >> > >> <xml-doctype path="/**/index.xml" create="auto" > ... > > > > What I want is not to create index file in every > > directory but only in the new folder being > created. > > Above will create index.xml in each folder. > > > > I allready go the xml-doctype as follows in my > project > > definition > > > > <xml-doctype create="manual" definition="" > > label="Page" path="/**/*.xml" root="html"> > > â > > <output basedir="/plain/" > content-type="text/html"> > > â > > <transform > source="/config/skins/plain/common.xsl"> > > <with-param name="link-base" value="/plain"/> > > </transform> > > </output> > > </xml-doctype> > > > > > > Thanks > > > > > > > > > > > ______________________________________________________________________ > > > ______________ > > It's here! Your new message! > > Get new email alerts with the free Yahoo! Toolbar. > > > http://tools.search.yahoo.com/toolbar/features/mail/ > > > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get > the chance to share your > opinions on IT & business topics through brief > surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Hypercontent-users mailing list > Hyp...@li... > https://lists.sourceforge.net/lists/listinfo/hypercontent-users > ____________________________________________________________________________________ Finding fabulous fares is fun. Let Yahoo! FareChase search your favorite travel sites to find flight and hotel bargains. http://farechase.yahoo.com/promo-generic-14795097 |