Issue status update for http://drupal.org/node/29136 Post a follow up: http://drupal.org/project/comments/add/29136 Project: Drupal Version: cvs Component: base system Category: tasks Priority: normal Assigned to: chx Reported by: chx Updated by: chx Status: patch (code needs review) Attachment: http://drupal.org/files/issues/autocomplete_13.patch (11.14 KB) I made a grave error which would've blown a security hole. chx Previous comments: ------------------------------------------------------------------------ Thu, 18 Aug 2005 17:23:02 +0000 : chx Attachment: http://drupal.org/files/issues/autocomplete_12.patch (11.08 KB) This is a patch which changes significantly the work of autocomplete. Instead of loading the full Drupal and using the menu system to find out the correct handler, we only bootstrap to the PAGE_CACHE phase, and load the necessary module only. Autocomplete functions need to check for permissions themselves! ------------------------------------------------------------------------ Thu, 18 Aug 2005 17:27:05 +0000 : chx Attachment: http://drupal.org/files/issues/autocomplete.php (971 bytes) Here is the autocomplete.php which makes this work. ------------------------------------------------------------------------ Thu, 18 Aug 2005 17:32:49 +0000 : walkah +1 for the functionality *BUT* I'd like to see something similar used for files as well (i.e. private and/or permisisons on files) ... *and* i'd really rather see this incorporated into index.php ... i.e. a single end point. perhaps some $_GET (or safer for $_SESSION?) triggers that indicate bootstrap levels . note gallery2 (i.e. http://gallery.menalto.com) uses a system sort of like this ... i.e. there is 2 init processes and for "item downloading" (i.e. fetching an image) only a partial init is done (enough to verify permissions). that is to say - let's see if we can't generalize this to accomodate file fetching as well as ajax stuff, etc.