dodo | 7 Sep 05:04
Picon

snipsnap

dodoflying <at> gmail.com
BEHRING Carsten | 12 Sep 10:17

link not working with parameters

Hi all,
I created a link like this:
{link excel|http://intranet/livelink/livelink.exe?func=ll&objId=1105426&objAction=Open}
 
This creates a clickable link(with the correct URL shown), but by clicking on the URL its wrong. Its somethink like:
 
I think the ';' in it makes problems.
 
Did somebody have the same problem ? I suppose it's a bug.
 
Carsten
_______________________________________________
SnipSnap-Users Mailing List
snipsnap-users <at> snipsnap.org | http://snipsnap.org/
http://snipforge.org/cgi-bin/mailman/listinfo/snipsnap-users
Michael Kaltschmidt | 12 Sep 10:42

Re: link not working with parameters

Hi Carsten,

no problem here, running a slightly modified version of 1.0b2. Works on 
snipsnap.org, too.

Regards,
Michael

Hi all,
I created a link like this:
{link 
excel|http://intranet/livelink/livelink.exe?func=ll&objId=1105426&objAction=Open}

This creates a clickable link(with the correct URL shown), but by clicking 
on the URL its wrong. Its somethink like:
http://intranet/livelink/livelink.exe?func=ll&#38;objId=1105426&#38;objAction=Open

I think the ';' in it makes problems.

Did somebody have the same problem ? I suppose it's a bug.

Carsten_______________________________________________
SnipSnap-Users Mailing List
snipsnap-users <at> snipsnap.org | http://snipsnap.org/
http://snipforge.org/cgi-bin/mailman/listinfo/snipsnap-users

=============================================================================================================================
The information contained in this communication is confidential, may be subject to legal privileges, may
constitute inside information, and is intended only for the use of the addressee.  It is the property of
Abbott Laboratories or its relevant affiliate.  Unauthorized use, disclosure or copying of this
communication or any part thereof is strictly prohibited and may be unlawful.  If you have received this
communication in error, please notify Abbott Laboratories immediately by return e-mail and destroy
this communication and all copies thereof, including all attachments.
=============================================================================================================================
Kashif Noorani | 14 Sep 00:48

Disabling access to snipsnap unless authenticated

Hi,

I did a search of the forums but couldn't find anything specific on this issue. If I missed something, my apologies.

My issue is that I want to create a private snipsnap for just my wife and I, which is available off of a public url. I would like to limit read/write access to just us two users. Is this currently possible in snipsnap?

I know I can use the authentication mechanism of tomcat (or any other appserver) to challenge the user on access to snipsnap; however, this would result in a double login. It would be awesome to get an out-of-the-box solution for this; though I don't mind writing a servlet or two to implement this functionality, if I can get the documentation on how to get this done.

Any comments appreciated.

kash


_______________________________________________
SnipSnap-Users Mailing List
snipsnap-users <at> snipsnap.org | http://snipsnap.org/
http://snipforge.org/cgi-bin/mailman/listinfo/snipsnap-users
Jeremy Cowgar | 17 Sep 15:27
Gravatar

Image Alignment

Is there anyway to make the images align correctly with wrapped words?

For instance:

+---------+ Hello, this is just an example
| Image   | in ASCII that probably will not
|         | look right on most email
+---------+ clients because they are not using
a fixed width font like I am. Regardless, this
is the example that I am talking about.

It seems that {image:align=flow-left|img=pic.jpg} does not accomplish 
the above task like I thought it would.

Thanks for any info!

Jeremy
Jeremy Cowgar | 18 Sep 05:03
Gravatar

Protected Page

Is it possible to have a page not visible to people not logged in? or 
maybe a only a select few people?

Jeremy
Matthias L. Jugel | 18 Sep 07:58
Picon

Re: Protected Page

This would need some hacking in 1.0b2-uttoxeter. It can be achieved  
by using the label mechanism in conjunction with a small script.
It will only protect the content of the snip, not labels, attachments  
or the meta-data, but its a start:

Create a Snip somewhere, like SnipSnap/SecuredContentViewer

Paste the following into this snip:

<%
org.snipsnap.app.Application app = org.snipsnap.app.Application.get();
org.snipsnap.user.User user = app.getUser();
org.snipsnap.user.Roles roles = new org.snipsnap.user.Roles();
roles.add(org.snipsnap.user.Roles.AUTHENTICATED);

if(org.snipsnap.user.Security.hasRoles(user, roles)) {
println(app.getParameters().get("viewed").getXMLContent());
} else {
println("You are not allowed to view the contents of this snip.");
}
%>

Then add a label to this snip, Select TypeLabel and use text/gsp as  
type.
Go back to the normal view of this snip and click [lock] as an admin  
user (important!)

Then go to the snip you want to protect:

add a TypeLabel and select anything (i.e. Summary) and select  
SecuredContentViewer as the view handler.

Now only authenticated users can view your snip.

Leo.

On 18.09.2005, at 05:03, Jeremy Cowgar wrote:

> Is it possible to have a page not visible to people not logged in?  
> or maybe a only a select few people?
>
> Jeremy
>
> _______________________________________________
> SnipSnap-Users Mailing List
> snipsnap-users <at> snipsnap.org | http://snipsnap.org/
> http://snipforge.org/cgi-bin/mailman/listinfo/snipsnap-users
>

--
Mud.DE -- Gemeinschaft Virtueller Welten Deutschland
Matthias L. Jugel http://www.mud.de  Info: info <at> mud.de
Matthias L. Jugel | 18 Sep 08:03
Picon

Re: Protected Page

The script is nice, but I just tested and it does not really protect  
the contents, as the /raw/SnipSnap still shows the raw content ...

We have started implementing a real security model for the next  
release which currently has no release data, unfortunately :( There  
is a light at the horizon as we have an internal project which needs  
this too.

Leo.

On 18.09.2005, at 05:03, Jeremy Cowgar wrote:

> Is it possible to have a page not visible to people not logged in?  
> or maybe a only a select few people?
>
> Jeremy
>
> _______________________________________________
> SnipSnap-Users Mailing List
> snipsnap-users <at> snipsnap.org | http://snipsnap.org/
> http://snipforge.org/cgi-bin/mailman/listinfo/snipsnap-users
>

--
Mud.DE -- Gemeinschaft Virtueller Welten Deutschland
Matthias L. Jugel http://www.mud.de  Info: info <at> mud.de
Jan Grant | 19 Sep 10:08
Picon
Picon
Favicon

Re: Protected Page

On Sun, 18 Sep 2005, Matthias L. Jugel wrote:

> The script is nice, but I just tested and it does not really protect the
> contents, as the /raw/SnipSnap still shows the raw content ...
> 
> We have started implementing a real security model for the next release which
> currently has no release data, unfortunately :( There is a light at the
> horizon as we have an internal project which needs this too.
> 
> Leo.

If you're implementing a "real" security model, will this extend "under 
the hood" - are you thinking about locking down security policies and 
scripting capabilities? Currently embedding scripting capabilities into 
snipsnap means exposing the entire app to the danger of malicious 
scripts: hence the "it is only permitted for admin users" types of 
workarounds.

When I last had a look at Rhino for the purposes of plugging it into 
snipsnap, it transpired that it needed quite a few security capabilities 
in order to operate properly. To get properly "sandboxed" script 
capabilities really means adequately separating the rendering and 
storage engines and having the storage layer require some kind of 
credential (capability?) in order to perform storage ops. If you have 
that, you're a smallish step away from wrapping the privileged 
operations in doPrivileged and being able to properly sandbox 
user-supplied scripts.

--

-- 
jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/
Tel +44 (0)117 3317661   http://ioctl.org/jan/
"...perl has been dead for more than 4 years." - Abigail in the Monastery

Gmane