[Treebase-devel] Fwd: trunk/treebase-web/src/main/webapp/WEB-INF/pages /algorithm.jsp

[Hilmar L. <hl...@dr...>]

Isn't the study ID implied in the analysisStep or analysis? I.e., why  
does this need to be passed along (in which case it can be tampered  
with), when the server-side application should be able to figure it  
out by itself?

Or am I missing something?

	-hilmar

Begin forwarded message:

> From: rv...@us...
> Date: January 19, 2010 12:54:20 PM EST
> To: tre...@li...
> Subject: [Treebase-guts] SF.net SVN: treebase:[472] trunk/treebase- 
> web/src/main/webapp/WEB-INF/pages /algorithm.jsp
>
> Revision: 472
>          http://treebase.svn.sourceforge.net/treebase/? 
> rev=472&view=rev
> Author:   rvos
> Date:     2010-01-19 17:54:19 +0000 (Tue, 19 Jan 2010)
>
> Log Message:
> -----------
> Added study id so that reviewer study-level access can be verified.
>
> Modified Paths:
> --------------
>    trunk/treebase-web/src/main/webapp/WEB-INF/pages/algorithm.jsp
>
> Modified: trunk/treebase-web/src/main/webapp/WEB-INF/pages/ 
> algorithm.jsp
> ===================================================================
> --- trunk/treebase-web/src/main/webapp/WEB-INF/pages/algorithm.jsp	 
> 2010-01-19 16:24:47 UTC (rev 471)
> +++ trunk/treebase-web/src/main/webapp/WEB-INF/pages/algorithm.jsp	 
> 2010-01-19 17:54:19 UTC (rev 472)
> @@ -44,7 +44,7 @@
> 				title="<fmt:message key="analysis.notvalidated"/>"
> 				alt="<fmt:message key="analysis.notvalidated"/>"/>			
> 		</span>
> -		<a href="/treebase-web/search/downloadAnAnalysisStep.html? 
> analysisid=${analysisStepCommand.id}">
> +		<a href="/treebase-web/search/downloadAnAnalysisStep.html? 
> analysisid=${analysisStepCommand.id}&id=$ 
> {analysisStepCommand.analysis.study.id}">
> 			<img
> 				class="iconButton"
> 				src="<fmt:message key="icons.download.reconstructed"/>"
>
>
> This was sent by the SourceForge.net collaborative development  
> platform, the world's largest Open Source development site.
>
> ------------------------------------------------------------------------------
> Throughout its 18-year history, RSA Conference consistently attracts  
> the
> world's best and brightest in the field, creating opportunities for  
> Conference
> attendees to learn about information security's most important  
> issues through
> interactions with peers, luminaries and emerging and established  
> companies.
> http://p.sf.net/sfu/rsaconf-dev2dev
> _______________________________________________
> Treebase-guts mailing list
> Tre...@li...
> https://lists.sourceforge.net/lists/listinfo/treebase-guts

-- 
===========================================================
: Hilmar Lapp -:- Durham, NC -:- hlapp at drycafe dot net :
===========================================================