access control feature, ctx removal from locateChild and renderHTTP, what's going on?
Hi. As everyone seems to either asleep or leaving IRC _right_ _now_, and I do really want some review and answers, I'm pasting this bit from IRC here. Hopefully someone will have more time to reply in this more asynchronous medium.. <Tv> Hey, I really want someone to review my access control thingie. ... <Tv> Nevow/sandbox/tv/access, people! ... <radix> anyway! good inght * radix flees to sleep. <exarkun> Tv: it'll break when ctx is removed as an argument to locateChild et al ... <Tv> exarkun: err, wouldn't a _lot_ break with that change? <exarkun> Tv: yes! but this, too. <Tv> well, I can make it give a wrapper resource from locateChild <Tv> that does the access checking at render time.. <exarkun> ctx will be removed from renderHTTP at about the same time <Tv> so huh <Tv> 1) what's the reasoning behind that <Tv> 2) what, then? <exarkun> those questions are big and I have to catch a bus
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tommi Virtanen wrote: [snip]
<exarkun> Tv: it'll break when ctx is removed as an argument to locateChild et al ... <Tv> exarkun: err, wouldn't a _lot_ break with that change? <exarkun> Tv: yes! but this, too. <Tv> well, I can make it give a wrapper resource from locateChild <Tv> that does the access checking at render time.. <exarkun> ctx will be removed from renderHTTP at about the same time <Tv> so huh <Tv> 1) what's the reasoning behind that <Tv> 2) what, then? <exarkun> those questions are big and I have to catch a bus
Jp, I assume you caught you bus now ;-) so please could you post your ideas about removing the context arg from IResource. That is a *major* change that would affect every single Nevow application so it needs proper discussion, including how to handle backwards compatability. Thanks, Matt - -- __ / \__ Matt Goodall, Pollenation Internet Ltd \__/ \ w: http://www.pollenation.net __/ \__/ e: matt@pollenation.net / \__/ \ t: +44 (0)113 2252500 \__/ \__/ / \ Any views expressed are my own and do not necessarily \__/ reflect the views of my employer. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDGWbUPpOMbs6rEZERAi2iAKCZVlO0AvvWc2s5/dRRyzsPAHhxqgCeNvr+ QztFrYP9whpitnMJXXua/qc= =aIrS -----END PGP SIGNATURE-----
On Sat, 03 Sep 2005 10:03:16 +0100, Matt Goodall <matt@pollenation.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Tommi Virtanen wrote:
[snip]
<exarkun> Tv: it'll break when ctx is removed as an argument to locateChild et al ... <Tv> exarkun: err, wouldn't a _lot_ break with that change? <exarkun> Tv: yes! but this, too. <Tv> well, I can make it give a wrapper resource from locateChild <Tv> that does the access checking at render time.. <exarkun> ctx will be removed from renderHTTP at about the same time <Tv> so huh <Tv> 1) what's the reasoning behind that <Tv> 2) what, then? <exarkun> those questions are big and I have to catch a bus
Jp, I assume you caught you bus now ;-) so please could you post your ideas about removing the context arg from IResource.
That is a *major* change that would affect every single Nevow application so it needs proper discussion, including how to handle backwards compatability.
This is a very long term plan. There will be no changes of this sort in the immediate future. When the changes are made, there will be a very clear migration path. Since the ways in which the context can be used are legion, I am not sure if there will be a completely backwards compatible API layer, but this will be the goal for as long as possible. When the time comes to make this change, there will be an opportunity for more discussion (it won't just be mentioned in passing on IRC and then done willy nilly). I'd welcome any ideas or proposals anyone has now, but I doubt I'll have time to participate in any discussion that happens in the foreseeable future. Jp
participants (3)
-
Jp Calderone -
Matt Goodall -
Tommi Virtanen