Hi,
I'm planning to do the following:
Each document based on a certain template autmatically gets it's own standard poll. (No customisation.) Each user visiting the page can vote.
Having looked at the polls application and played around with templates a bit, I think I know all the ingredients I will need.
I have one problem though: Anyone who votes needs write permissions on the document that saves the votes (whereever that may be). If I'm not mistaken that means anyone who can vote theoretically can manipulate voting data by accessing these objects directly.
Is there any way to secure this against manipulation
a) from users who can vote?
b) from the user who created the page?
Probably that question is equivalent to: Is there a way to let users save changes on an object only via a script while hindering that very same user from editing it directly?
Any hints are greatly appreciated!
----- "Scott Serr" <serrs(a)theserrs.net> wrote:
> In the dev mailing list, I saw years ago that $datetool was changed to
> point to ComparisonDateTool. This gave it added functionality. Also,
> the documentation on
> http://platform.xwiki.org/xwiki/bin/view/DevGuide/Scripting says it is
> a ComparisonDateTool.
>
> My problem is, it doesn't act like a ComparisonDateTool, it acts like
> DateTool.
>
> Works:
> $datetool.get('dd.MM.yyyy HH:mm')
>
> Does not work:
> $datetool.difference('2005-07-04','2007-02-15')
Apparently I can't pass String as Object, I have to pass Date?
Anyway, sorry for the traffic.
I ran into an interesting side effect of having a form in my Class Sheet.
<input type="hidden" name="parent" value="${doc.fullName}" />
The above line is in a form which posts to the current page, but then redirects to a sub-page. The process is exactly like the FAQ Example. The trouble is, when doing Inline Editing on a page with the class object. No matter what you put in as the parent in the UI for the parent property, it gets reset to itself on save. The wiki and WYSYWIG editors don't do this of course.
I think this is a problem because...
1. Should this form (and form element) really be evaluated? No one hit the submit button.
2. It doesn't seem very safe for variable spaces to mix so easily. Unless this is a feature.
In the dev mailing list, I saw years ago that $datetool was changed to point to ComparisonDateTool. This gave it added functionality. Also, the documentation on http://platform.xwiki.org/xwiki/bin/view/DevGuide/Scripting says it is a ComparisonDateTool.
My problem is, it doesn't act like a ComparisonDateTool, it acts like DateTool.
Works:
$datetool.get('dd.MM.yyyy HH:mm')
Does not work:
$datetool.difference('2005-07-04','2007-02-15')
Is there a way to get a ComparisonDateTool object? And is it known that it's simply a DateTool again, or am I wrong?
Hi,
I'm trying some basic functionality on a multilanguage Wiki (3.1)
I create a class
I create the default Class sheet and add a object on it (like suggested in the default)
I create the default Class template and add a object on it (like suggested in the default)
Then I create a object;
It creates a page containing the object, I use the inline form editor to enter some data and save.
Now I want to create a translation in another language?
How should I do that?
The inline form editor does not have a "translate option", when I create a translation with the wiki editor i'm probably
create a new wiki document with a different language, but it seems to point to the SAME object. when I change the content of the object in the other language, these changes also show when I navigate back to the english page
It looks like I should instantiate a new object of the class, but then the page language is still 'en'
And how do we manage then that these objects still relate to each other? If I change the english version of a record this should be related to the content of the translations!
Gerritjan
Hi All,
I have successfully implemented XWiki 3.1 with LDAP authentication. Since
user name and password managment is addressed by the LDAP provider it doesnt
make sense to have these enabled on the LOGIN page.
What is the best way to remove these links/options from that page.
Thank you!
Chris
I have a data model that follow this page structure:
Detectors
-> Detector1
-> Detector1History1
-> Detector1History2
-> Detector2
(Implemented with my DetectorClass and DetectorHistoryClass)
The Detectors is like a dashboard for Detectors and their history. It's mostly working. My issue is that my Velocity code on that top dashboard page is looking pretty ugly. It has nested loops and I don't know how to do any encapsulation. If I could do things like detector1.getNewestHistory() that would be very helpful. But my Detector Object Class is limited to what I can define in XWiki. To my knowledge, XWiki's "user defined" classes aren't able to encapsulate code. Am I wrong?
It seems like defining my Velocity macros would help, but my understanding is a macro can't return anything, just evaluates to output.
If I'm wrong-headed, please correct me.
Thanks,
Scott
The XWiki development team is proud to announce the availability of
XWiki Enterprise 3.2 Milestone 3, the last milestone of the XWiki
Enterprise 3.2 version (see the roadmap at
http://enterprise.xwiki.org/xwiki/bin/Main/Roadmap ). Main new features
include:
* improved Lucene scoring
* new implementation of the sheet system
* support for OpenOffice 3.3 as the backend of the office importer
* better support for IE9 in the WYSIWYG editor
* many improvements in the extension manager and extension repository
* the removal of the Albatross skin from the distribution
* ... and quite a lot of dependency upgrades and bug fixes
See the full release notes at
http://www.xwiki.org/xwiki/bin/ReleaseNotes/ReleaseNotesXWikiEnterprise32M3
for more details.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/