- Development - lists.drupal.org

Re: [development] Rating module quality
by Kobus Myburgh 27 Jan '06

27 Jan '06

> Because it is an API, and looks like it will be THE API for voting, it will be > maintained. So I would not worry about the monitor/track/audit part too much. I, for one, would definately use an API like this, and I am sure there are many. > Let us please please please, not make the project.module mistake again: > maintain a largish module with only custom-for-drupal.org-code, instead of > having a module that is supported by a large community. I agree with Bèr. Regards, Kobus

3 2

Drupal CVS question
by puregin 27 Jan '06

27 Jan '06

Hi all, perhaps someone can shed some light on this... I'm seeing some strange behaviour while trying to commit some changes for my contrib modules. In my working directory (bookimport) I can commit files with no problem, but when I go to commit a file in a subdirectory bookimport/contrib I get an error: [djun bookimport]$ cvs commit contrib/explode2dir.php cvs [server aborted]: "commit" requires write access to the repository The directory and files in question exist in their expected places in the CVS repository... When I do a 'cvs diff' I get an even stranger situation [djun bookimport]$ cvs diff contrib/explode2dir.php cvs [diff aborted]: no such directory `contrib' Index: contrib/explode2dir.php but then CVS finds the remote file anyway and does the diff. I'm missing something... Djun

1 0

Taxonomy user experience work: screenshots, snippets, and sandbox taxonomy modules wanted for a Taxonomy Garden
by Kieran Lal 26 Jan '06

26 Jan '06

Hi, as part of improving the Drupal administration user experience I conducted a micro survey about categorization user experience. Value: Categorization is critical for organizing sites. There are three main issues with categorization. 1) Managing categories: Creation, editing, updating categories 2) Organizing content with categories: Assigning categories manually, automatically, with user participation 3) Using categories for navigation: Menus, blocks, content overviews by term, term presentation, term based styling I have made a list of the 20 relevant contributed modules and snippets here: http://drupal.org/node/45992 If you have any snippets or sandbox taxonomy modules please let me know so that I can include them on this list and arrange for further collaborative development on them. I am also looking for some volunteers to help install the 20 modules and take screen shots so we can create a Taxonomy Garden. Any help would be appreciated. Please contact me if you have feedback or can help. Cheers, Kieran

2 1

RE: [development] Rating module quality
by Steven Peck 26 Jan '06

26 Jan '06

Not having looked at the voting api... is it merely a rating module or does it have the ability to have the users comments with their vote? Also, assuming that these votes are tied to a user account, do these votes/comments reflect account status? Example, Bob really likes module B and creates several accounts to mess with the results, bob's accounts are blocked... does this reflect into the count? Also, we have more spammers now (not a lot but...) when we block there account can we also delete the comments in the vote (shows up in tracker)? It would definitly be a vector for spam. Download.com has this issue at times with their user supplied review/votes... -sp ________________________________ From: development-bounces(a)drupal.org on behalf of Khalid B Sent: Thu 1/26/2006 9:31 AM To: development(a)drupal.org Subject: Re: [development] Rating module quality I think there is value in both voting and # of downloads. They balance each other and compliment each other so well. If a module is downloaded a lot, but gets a poor rating, it will eventually get less downloads. The number of votes is also important, a module rated 10/10 by 2 people is questionable when compared to a module that got 7/10 from 120 people. So, let us go ahead with both of them.

2 1

Drupal 4.7.0 roadmap
by Dries Buytaert 26 Jan '06

26 Jan '06

Hello, as mentioned earlier, I intend to package up CVS HEAD later this week (after today's bugfix party). The question is: should this be 'beta 4' or 'RC 1' (or 'RC' tout court)? I'm asking because some people approached me saying we should call it a RC. For fun's sake, I figured I'd ask you first before sharing my own opinion. When you answer, please provide some insight as why you think it should be 'beta 4' or 'RC 1' or 'RC'. No brainless answers please. Thanks! -- Dries Buytaert :: http://buytaert.net/

11 16

rating module quality
by ae2005 26 Jan '06

26 Jan '06

Personally I'd be interested in seeing Jeff's voting API or something like it on the modules. Indeed, I've often wondered why we've never implemented something like it. Although some of the same info will be communicated thru number of downloads, what's useful will be the cases where popularity does not indicate quality. two cases previously mentioned 1) One person mentioned they downloaded all 5 similar (ecommerce?) modules to see which one is best. 2)Robert said a module could be great but poorly named and therefore receive few downloads. (eg relativity module). ae2005

2 1

Web Service auth in Core, timeline.
by Benson Wong 25 Jan '06

25 Jan '06

Hi, Sounds like everybody is busy squashing bugs for 4.7's release. I was wondering about the likelihood of authenticated web services (token approach or whatever) being added into 4.7. The project I'm working on right now really needs it (building on 4.7) but if there's not a snowball's chance in hell of it being added I'll take a different approach in the interim. Thanks. Ben. -- blog: http://www.mostlygeek.com

4 6

Token based web service authentication, some clairification
by Benson Wong 25 Jan '06

25 Jan '06

Hi, I think there was some confusion on what I ment with the web service token authentication. A few people have pointed me at single sign on stuff which isn't what I was talking about. Essentially, I wanted to create a way so that clients using the web service weren't always Anonymous users. They can authenticate against the local user database, and become whoever as long as the username and password is correct. When they authenticate (over the web service), they get sent back a session id. Any additional requests are done to /xmlrpc.php?token={session id} and drupal will log them in automatically as that user. I'll submit the patch to the drupal.org for review. -- blog: http://www.mostlygeek.com

1 0

Likelihood of authenticated web services in 4.7
by Benson Wong 25 Jan '06

25 Jan '06

Hi, Sounds like everybody is busy squashing bugs for 4.7's release. I was wondering about the likelihood of authenticated web services (token approach or whatever) being added into 4.7. The project I'm working on right now really needs it (building on 4.7) but if there's not a snowball's chance in hell of it being added I'll take a different approach in the interim. Thanks. Ben. -- blog: http://www.mostlygeek.com

1 0

Token-based web service authentication to core
by Boris Mann 25 Jan '06

25 Jan '06

All: See http://drupal.org/node/46145 I'm going to make sure that Ben is signed up to the dev list. He's on the board of the PHP User's Group here in Vancouver and is a pretty kick ass programmer. For now, making sure this gets the views it deserves. This opens the door to the type of interactions that, e.g. Flickr, does remotely, and lots of rich inter-site functionality. > I'm building a new website in Drupal and there are some > administrative web services that I would like to make available to > middleware together a legacy system. I did some research into > Drupal's XMLRPC system and figured that token based authentication > in the core would be useful. > > This is what I have sketched out on a napkin: > > Scenario: > Client wants to create some new data in the system. This is the > process: > > 1. Client requests a service token, sends username/password of a > Drupal user > 2. Drupal loads the $user matching the crudentials > - creates a random alphanumeric token to send back to the user > - serializes, and caches the $user object, key = md5(token + ip > address of client) > - sends the token back to the client > 3. Client makes an RPC call to say: module.createListing($token, > $arg1,$arg2,...) > 4. In createListing(...) > -- Checks the token, if valid does it's thing, otherwise, returns > an error message. > > I think it would take a fairly small amount of code to accomplish > the above. I haven't given a lot of thought about Drupal's external > authentication system though. I'm not too familiar with it, but > maybe somebody can fill me it. For this system I may write my own > version of user_authenticate() without the variable_get > ('user_register',1) in it so some malicous person doesn't create an > unlimited number of random users in the system. > > Any thoughts or previous work on this? > I would like it to be implemented in core, but it would probably be > just as easy to implement as a module. Since modules will depend on > the functionality, I want to avoid the logic of checking if the > module is enabled or not. > > I took a look at how the blogapi module accomplishes > authentication. It has $username,$password for each request, and > does a user_load(...), which is alright, but I would like have a > shared authentication for web services rather than rolling a custom > one for every module that needs it. > > Privileges and access can be combined into a xmlrpc_check_token > ($token,$privilege) function, e.g: > > xmlrpc_check_token($token,'access content') > > It wouldn't take me long to write the code for this. I wanted some > feedback from the community first before I dive into design/coding. Boris Mann Vancouver 778-896-2747 San Francisco 415-367-3595 SKYPE borismann http://www.bryght.com

6 6