March 2009 - Development - lists.drupal.org

Re: [development] remove or give priority to hook_node_grants
by Scott Reynolds 01 Apr '09

01 Apr '09

Was actually thinking about this the other day. I feel its a lil silly to have modules provide the priority for access control. I would really love to develop a drag and drop weight interface for the priority settings. Essentially, develop a node_access interface that assigns the priority for all node_access modules exposed currently. Wondering if theres any traction in that idea, and if so I can start hashing it out. > You no longer need to fiddle with priorities when overriding OG > records - > http://cvs.drupal.org/viewvc.py/drupal/contributions/modules/og/modules/og_… > . > > There is currently no hook for adjusting grants. > > On Tue, Mar 31, 2009 at 7:26 AM, Llu?s <enboig(a)gmail.com> wrote: > > I am developing a module to create "sub user types" inside OG. > > I have been able to modify hook_node_access_records using the > > "priority" so in certain cases I override OG access system. > > > > Now I need to "override" the hook_node_grants so In certain cases a > > user who should be able to see certain nodes don't see them; how can I > > achieve this? > > > > Thanks > > > > -- > > *La vida ?s com una taronja, que esperes a exprimir-la? > > *Si creus que l'educaci? ?s cara, prova la ignor?ncia. > > *La vida ?s com una moneda, la pots gastar en el que vulguis per? > > nom?s una vegada. > > *Abans d'imprimir aquest missatge, pensa en el medi ambient. > > > > -- Scott Reynolds Cell: 630-254-2474 http://www.scottreynolds.us

5 7

should I alter the sessions table?
by David Cohen 31 Mar '09

31 Mar '09

I have a special need, in the Drupal for Facebook modules, to honor a session key that comes from Facebook, instead of the key Drupal normally uses. So far the way I've approached this is to have Drupal use the passed-in session_key, so the sid column of the sessions table is that value. My problem is the the length of these session keys is sometimes longer than the 64 character limit of the sid column. According to Facebook these keys could be 128 characters or even longer. (http://forum.developers.facebook.com/viewtopic.php?id=21931) My first thought is to alter Drupal's sessions table. That is, in my module's .install file I would alter sessions so that the sid column is varchar(256) instead of varchar(64). Is there a performance drawback to this? Is it bad form to alter the table this way? My other options include finding some way to compress the session_key down to 64 chars. Or, create a table that maps longer session_keys to Drupal's sids. Is there any reason to go with one of these options as opposed to altering the table? Thanks in advance, -Dave

6 7

remove or give priority to hook_node_grants
by Lluís 31 Mar '09

31 Mar '09

I am developing a module to create "sub user types" inside OG. I have been able to modify hook_node_access_records using the "priority" so in certain cases I override OG access system. Now I need to "override" the hook_node_grants so In certain cases a user who should be able to see certain nodes don't see them; how can I achieve this? Thanks -- *La vida és com una taronja, que esperes a exprimir-la? *Si creus que l'educació és cara, prova la ignorància. *La vida és com una moneda, la pots gastar en el que vulguis però només una vegada. *Abans d'imprimir aquest missatge, pensa en el medi ambient.

2 2

Process and technology questionnaire
by Florian Thiel 31 Mar '09

31 Mar '09

Hello drupal developers, I'm in the process of writing my diploma thesis on the prevention of web application security vulnerabilities and I'd like to know a bit about your fine project from the developer's view. It would be great if you could take a couple of minutes and think about the questions below. The questions are mostly open-ended. Not all may apply to all developers, but I've chosen to not only address project leads. Elaborate and skip questions at will. Thank you very much in advance. I will provide you with the results of my thesis when it's done it you want. There will probably be some findings about what can be done to prevent security vulnerabilities, in particular XSS and SQL injections in open source web applications. Florian The questions: About technical aspects: - Are you using a web application framework? Which one? - Do you use explicit data modeling for all business objects in the application? - Do you have a specific layers for input/output validation/filtering? (If applicable) What does the input/output layer do (respectively)? How? Are you using external libraries? Why? Why not? (for HTML sanitation. object-relational mappers, database abstractions with prepared statements)? - (If applicable) What responsibilities do the input/output layers have, respectively? - How do you ensure that all input passed through validation/ filtering? Do you have an API that must be used? - Do you provide services to independently developed modules/ components? Is there a defined API? - Which other external libraries do you use? About the development process: - Is there public documentation about the responsibilities of the input/output layers? - Is there public documentation about *when* input/output validation/ filtering should happen? (Like: "output filtering must always happen in the method that renders the data") - Do you have automatic tests for the whole system? Bonus question: - Do you do manual code review?

3 2

Search
by Ámon Tamás 30 Mar '09

30 Mar '09

Hello, I like to add some search result from a different site to drupal. I like to show the search results mixed in the other and drupal site. I try to use mnogosearch to index the other site, but I can not insert the results to the drupal results. How can I make it? Ámon Tamás Sitefejlesztő és programozó -- 5NET Informatikai Kft. 1062 Budapest, Aradi utca 38. A 3/11 telefon: (1) 461-0205 | fax: (1) 461-0206 e-mail: amont(a)5net.hu | web: http://www.5net.hu

3 6

Changing default search page
by Ámon Tamás 30 Mar '09

30 Mar '09

Hello, I written my mnogosearch module. It is working, but I like to use it as default search page. For example if somebody search in the search box I like to show my results. How can I make it? Ámon Tamás Sitefejlesztő és programozó -- 5NET Informatikai Kft. 1062 Budapest, Aradi utca 38. A 3/11 telefon: (1) 461-0205 | fax: (1) 461-0206 e-mail: amont(a)5net.hu | web: http://www.5net.hu

1 0

Best way to let a user notify other users about a new node they created?
by Brad Flora 30 Mar '09

30 Mar '09

Hi, list, I'm running a Drupal-powered social news site and want to give my users some tools to promote their submissions. Right now I'm using the excellent Tweet module to let them tweet out their stories after they go on the site, but I'd like to have something that would notify other users on my site of the new node, preferably with an e-mail. Digg's got a feature like this called "Shout." Are there any existing modules in Drupal that do this or approximate it? How else could I better arm my users to promote their content to other users and across the web. Thanks -Brad P.S. I'm running a D5 site with Drigg as the core of the social news piece. I'm also using Buddylist for social networking features.

3 2

node not fully loaded in hook_view() when previewing
by augustin (beginner) 28 Mar '09

28 Mar '09

Hello, In a module with its own node type, the node is not fully loaded when using preview. In hook_load(), I return my own extra fields to the node: return array('mynodetype' => $extra); In hook_view(), $node->mynodetype is set when viewing the node, but not when editing then previewing the same node. Isn't the node loaded as for a normal node view? I've searched drupal.org but didn't find anything terribly useful. I found this old forum post: Philosophy of 'Preview' http://drupal.org/node/126750 And this old core issue, which I had helped reviewing at the time, but which is supposed to be fixed (though it was not said how it was fixed): node previews broken by missing hook_submit http://drupal.org/node/104047 Is this a known issue? Blessings, Augustin.

4 7

Help revolutionize project work and collaboration on drupal.org!
by Daniel F. Kudwien 27 Mar '09

27 Mar '09

Derek Wright (dww) has been so kind to create a public and focused ChipIn for the one thing we are all waiting for: #34496 Add Flag integration [1] It is a major milestone for the way we work with projects and issues on drupal.org. I encourage everyone who would like to see projects emerging faster, and especially everyone who builds Drupal sites for clients to contribute to this ChipIn. It will allow the dedicated developers, Derek Wright, Chad Philips, and David Strauss, to work on the implementation on drupal.org. Benefits for you: - One-click subscribing to issues of your interest! No more need to leave a senseless comment. No more "+1" or "subscribing". Just click. Only follow-up when you have something relevant to say. - Know how popular a feature or serious a bug is by the amount of subscribers! A new way for developers to identify issues that should be done. A new way to identify the needs and interests of users of a module. - Allow your co-maintainers to co-maintain! Finally, anyone will be able to have the same project issue view like project owners. Your co-maintainers see all new issues and issue updates like you. Removing the burden from the primary maintainer! - A whole new contributor role: sub-maintainers! Anyone can easily keep an eye on any project of interest. You can't code? But you know how a module works? Then you can help with support requests, design decisions, documentation issues, and whatnot. Removing even more burden from the project maintainers, meaning: more time to actually DO and improve something! - Get issue updates of all subscribed issues via mail or RSS! You'll be able to granularly define for which issues you want e-mail notifications. Read about further details and contribute on http://3281d.com/2009/03/27/death-to-subscribe-comments Thanks, sun [1] #34496 Add Flag integration http://drupal.org/node/34496

1 0

calling node_add from another url
by Lluís 26 Mar '09

26 Mar '09

I am creating submenus integrated inside a module using OG, I need something like $items['node/%node/proveidors/afegir'] = array( 'title' => 'Afegir Provïedor', //trans 'page callback' => 'node_add', 'page arguments' => array('proveidor'), 'access arguments' => array('create',0,$user), 'access callback' => 'proveidors_access', 'type' => MENU_LOCAL_TASK, ); but it don't work because "node_add" is inside a .inc file; a solution could be make it an alias of "node/create/proveidor&gid[]%node", where %node is the id of the organic group, but I don't know how to do this (neither if it is possible). Any idea? thanks -- *La vida és com una taronja, que esperes a exprimir-la? *Si creus que l'educació és cara, prova la ignorància. *La vida és com una moneda, la pots gastar en el que vulguis però només una vegada. *Abans d'imprimir aquest missatge, pensa en el medi ambient.

2 2