Henri Bergius | 4 Feb 11:49
Favicon
Gravatar

Minor m-p.org updates

Greetings!

I've made two updates to m-p.org today:

* Single sign-on between Aegir and the site works again

   Go to www.midgard-project.org/aegir/newframeset/ to get
   in without login prompt

* Site has been upgraded to MidCOM 2.1.2

   This has several major improvements, including usage of
   datamanager's creation mode to prevent empty "ghost articles"
   when you're creating some new item. Now the article is
   created only after you press submit for first time.

   The site also now supports PermaLinks. If you're linking to
   some specific page on m-p.org, please *always* link via
   PermaLink instead of the regular URL. This gives us the freedom
   to rearrange stuff as we need. You can find the PermaLink from
   the HTML <head /> block. It looks like this:

   <link rel="PermaLink" 
href="http://www.midgard-project.org/midcom-permalink-3d3ede714321278381f630fb1d3a0abd" 
/>

Enjoy!

/Bergie

(Continue reading)

Torben Nehmer | 4 Feb 12:29
Gravatar

Re: Minor m-p.org updates


Hi,

--Henri Bergius wrote on 2005-02-04 11:49:
> * Site has been upgraded to MidCOM 2.1.2
> 
> This has several major improvements, including usage of datamanager's
> creation mode to prevent empty "ghost articles" when you're creating some new
> item. Now the article is created only after you press submit for first time.
> 
> The site also now supports PermaLinks. If you're linking to some specific
> page on m-p.org, please *always* link via PermaLink instead of the regular
> URL. This gives us the freedom to rearrange stuff as we need. You can find
> the PermaLink from the HTML <head /> block. It looks like this:
> 
> <link rel="PermaLink" 
> href="http://www.midgard-project.org/midcom-permalink-3d3ede714321278381f630fb1d3a0abd"
>  />

Please add this link somewhere on the bottom of the site where you can just
right-click + copy-link-location them.

I (and a few others I guess) won't view the source of each and every page they
want to link to.

Live long and Prosper!
Torben Nehmer

--
Torben Nehmer, Guenzburg, Bavaria, Germany
(Continue reading)

Henri Bergius | 4 Feb 12:37
Favicon
Gravatar

Re: Minor m-p.org updates

Torben Nehmer wrote:
> Hi,

Greetings!

> Please add this link somewhere on the bottom of the site where you can just
> right-click + copy-link-location them.

Ok, it is now on the site footer together with the "Printer Friendly"
link.

However, autodetection would be way cooler:
http://bergie.iki.fi/blog/enabling-permalink-autodetection.html

> Torben Nehmer

/Bergie

--

-- 
Henri Bergius                           Henri.Bergius@...
Consultant Partner                      Tel: +358-20-198 6032
Nemein Oy                               http://www.nemein.com/
Piotras | 7 Feb 16:15

midcom , m-t and ais

Hi all, 

This is my first trial to use fs-midcom with page which is not root page of a host.
( it is a subpage and can not be root page if you want to ask :)
( and can not be prefixed host )

Following http://www.nathan-syntronics.de/midgard/midcom_fs-transition/test-setup.html
I can get ais without login box , so I am always anonymous and can not edit anything.

If I try to follow m-t page elements I can login in ais but after login i have blank pages without 
any errors in php.log file. These elements also try to include some snippets , and I have no idea
how should I get them.

Is there any real howto, docs , whatever?

Piotras
Tarjei Huse | 7 Feb 20:10
Picon
Favicon
Gravatar

Re: midcom , m-t and ais

man, 07,.02.2005 kl. 16.15 +0100, skrev Piotras:
> Hi all, 
> 
> This is my first trial to use fs-midcom with page which is not root page of a host.
> ( it is a subpage and can not be root page if you want to ask :)
> ( and can not be prefixed host )
> 
> Following http://www.nathan-syntronics.de/midgard/midcom_fs-transition/test-setup.html
> I can get ais without login box , so I am always anonymous and can not edit anything.
> 
> If I try to follow m-t page elements I can login in ais but after login i have blank pages without 
> any errors in php.log file. These elements also try to include some snippets , and I have no idea
> how should I get them.

I bet you haven't checked that the right elements are inheritable.

Tarjei

> 
> Is there any real howto, docs , whatever?
> 
> Piotras
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@...
> For additional commands, e-mail: dev-help@...
> 
--

-- 
(Continue reading)

Piotras | 7 Feb 21:43

Re: midcom , m-t and ais

>> Following
>> http://www.nathan-syntronics.de/midgard/midcom_fs-transition/test-setup.html
>> I can get ais without login box , so I am always anonymous and can not edit
>> anything.

I should create some auth-handling element, right?
If this is mandatory, couldn't be this inluded in midcom?

>> If I try to follow m-t page elements I can login in ais but after login i have
>> blank pages without
>> any errors in php.log file. These elements also try to include some snippets , and
>> I have no idea
>> how should I get them.
>
> I bet you haven't checked that the right elements are inheritable.

Man, some elements in midcom-admin exists exactly the same as inheritable ones
in m-t , so this is very difficult to guess which should do what.
Besides, edit-this-page can not work correctly with not rootpage, so everything
should be checked :/

Piotras
Henri Bergius | 8 Feb 07:31
Favicon
Gravatar

MidCOM locking issue

Greetings!

I think I had to release the first ever Midgard security advisory
yesterday:

http://www.midgard-project.org/updates/security-advisory--unauthorized-locking-in-midcom.html

The problem is that MidCOM enables users without adequate permissions
to try editing a document. While obviously their attempt to save the
form would fail with "Access denied", they still see the form and
can edit.

This would not be a big deal except that in Midgard users can add
parameters to objects they're not owners of. This is a quite handy
feature, but one that can cause also problems. Non-owners can't modify
parameters set by owners, though.

In this case the problem is that MidCOM uses parameters for document
locking in datamanager. When user without adequate permissions tries
to edit a document the document will be locked by them, denying
access from the actual owners for one hour. While this is not a critical
problem it can cause panic at end-users, when they see message noting
that user X (who doesn't have permissions) has opened the document
for editing.

There are several things that should be done to fix this:
   * Datamanager should lock a document only if user has adequate
     permissions
   * AIS (or the component) should check for permissions before
     displaying the "Edit" link
(Continue reading)

Piotras | 8 Feb 18:34

Re: midcom , m-t and ais


Hi all , 

What is the best way to define own breadcrumb and navi-dynamic elements?

If I define it as style elements and use  $midgard->self and  $midcom['uri'] comparison.
( http://www.midgard-project.org/documentation/howto/midcom/styles.html )
elements are not displayed.

Defined directly as style elements produce errors:

PHP Fatal error:  Call to a member function on a non-object in /var/cache/midgard/61-562-68-0.php on line 454
454: echo $GLOBALS["midcom_site"]['nap']->get_breadcrumb_line(" &raquo; ","breadcrumb");

Any hints? 

Piotras
Marcelo N. Halpern | 8 Feb 21:29
Favicon

Midcom objects from HTMLArea

Hi (and sorry for the crossposting),

We are trying to access some midcom objects from within HTMLArea, to no 
avail. The idea is to replace the insert_image function (already tried 
the insert_image_from_gallery, but it's too cumbersome for end users). 
So we want to provide the end user (in midcom AIS) with a list of images 
to select from.

We'd like to be able to do something like this:

global $midgard;
$attachments = mgd_fetch_to_array($this->_topic->listattachments());

if (!$attachments) {
     print "No attachments in this topic. Please create some!\n";
} else {
     foreach ($attachments as $id) {
        $view = mgd_get_attachment ($id);
        $guid = $view->guid();
        print "<img src=\"" . $midgard->self . "midcom-serveattachment-";
        print "$view->id/$view->name\" ";
        print "alt=\"$view->title\" /><br>\n";
           }
}

The above code goes together with the relevant changes to the 
widget_html/config snippet, pointing to a newly created insert_image.php 
instead of insert_image.html

To this point, we were able to register the button properly, call the 
(Continue reading)

Sonic | 10 Feb 13:51
Picon

Re: Aegir-1.0.2.tar.bz2, was Re: [midgard-user] donwload Aegir 1.0.2

Good news!

I recently stumbled acorss 1.0.2 on one of my old backups, so if you still 
need it, you can get it from here:

http://www.contentcontrol-berlin.de/Aegir-1.0.2.tar.bz2

Bye,

Andreas

Am Freitag, 14. Januar 2005 11:34 schrieb Henri Bergius:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Uung H.R Bhuwono wrote:
> | Hi Guys,
>
> Greetings!
>
> | Where can i download Aegir 1.0.2?
> | In midgard-project.org only aegir 1.0.3 that available for download.
>
> Looks like it isn't available through Google or Wayback machine
> either.
>
> So, if anyone finds the file Aegir-1.0.2.tar.bz2 lying around,
> please either put it online and send me the link or mail it
> to me directly. I'll add it to the Midgard website.
>
(Continue reading)


Gmane