MoinMoin: MoinMoinChat/Logs/moin-dev/2005-12-08

2005-12-08T00:05:34  <xorAxAx> [PERIODIC ANNOUNCEMENT] Logs can be found on http://moinmoin.wikiwikiweb.de/MoinMoinChat/Logs/moin-dev
2005-12-08T00:09:30  *** Fabi has quit IRC
2005-12-08T00:29:58  <ThomasWaldmann> moin
2005-12-08T00:39:57  <ThomasWaldmann> http://moinmoin.wikiwikiweb.de/ParserMarket?action=diff&date=1133960269000000 wtf?
2005-12-08T00:41:00  *** starshine_away is now known as starshine
2005-12-08T00:49:59  <xorAxAx> ThomasWaldmann: hmm?
2005-12-08T00:50:03  <xorAxAx> ThomasWaldmann: a broken browser.
2005-12-08T00:50:11  <xorAxAx> ThomasWaldmann: look up the UA in the logs :)
2005-12-08T00:54:12  <ThomasWaldmann> 2005/12/07 22:50 CET [-] 212.147.126.238 - - [07/Dec/2005:21:50:22 +0000] "POST /ParserMarket HTTP/1.0" 200 61342 "http://moinmoin.wikiwikiweb.
2005-12-08T00:54:15  <ThomasWaldmann> de/ParserMarket?action=edit" "w3m/0.5.1"
2005-12-08T00:55:29  <xorAxAx> we conclude: w3m is evil :-)
2005-12-08T00:55:52  <xorAxAx> (or $EDITOR - who knows)
2005-12-08T01:37:31  <nwp_> or $USER?
2005-12-08T02:31:32  *** starshine is now known as starshine_away
2005-12-08T03:53:07  *** starshine_away is now known as starshine
2005-12-08T08:43:09  <lydon> moin
2005-12-08T08:45:02  <ThomasWaldmann> moin
2005-12-08T09:39:11  <Fabi> page_group_regex = u'[a-z0-9]Group$'
2005-12-08T09:39:27  <Fabi> What is the [a-z0-9] doing there? Anyone an idea?
2005-12-08T09:40:12  *** starshine is now known as starshine_away
2005-12-08T09:50:57  <ThomasWaldmann> it makes sure it is lowercase
2005-12-08T09:51:13  <ThomasWaldmann> (at least for English stuff)
2005-12-08T09:51:55  <Fabi> that only matches the char directly before "Group"
2005-12-08T09:52:08  <Fabi> What should this help?
2005-12-08T09:52:46  <ThomasWaldmann> it makes sure it looks similar to a WikiName :)
2005-12-08T09:52:48  <Fabi> it makes some non CamelCase groups break
2005-12-08T09:52:53  <Fabi> but others work
2005-12-08T09:53:08  <Fabi> this confuses the users
2005-12-08T09:53:25  <Fabi> had two people yesterday this problems about this
2005-12-08T09:53:54  <Fabi> either require CamelCase and loudly state so or remove this redicious char
2005-12-08T09:55:30  <ThomasWaldmann> the questions is whether simply Group$ is enough or makes other trouble
2005-12-08T10:40:02  *** Fabi has quit IRC
2005-12-08T16:12:38  *** lydon has quit IRC
2005-12-08T17:48:23  *** Fabi has quit IRC
2005-12-08T20:44:36  <ThomasWaldmann> moin
2005-12-08T21:38:52  <xorAxAx> ThomasWaldmann: "auth_username = cookievalue[0] # having this cookie means user auth has already been done!" looks very insecure :-)
2005-12-08T21:39:08  <xorAxAx> ThomasWaldmann: you dont fear colleagues trying to login as the boss?
2005-12-08T21:45:13  <ThomasWaldmann> what are you talking of?
2005-12-08T21:45:51  <xorAxAx> ThomasWaldmann: contrib/auth_cookie (sp?)
2005-12-08T21:46:20  <xorAxAx> or is the cookie set by the proxy and filtered beforehand?
2005-12-08T21:47:51  <ThomasWaldmann> you can set it however you like
2005-12-08T21:49:16  <xorAxAx> but if the user sets it, he can fake other users trivially
2005-12-08T21:49:49  <ThomasWaldmann> yes
2005-12-08T21:50:33  <nwp_> unless you happen to have had an auth handler in your apache config which uses that cookie for authentication, or something like that
2005-12-08T21:50:52  <nwp_> which is how that kind of thing is usually intended to work
2005-12-08T21:51:10  <ThomasWaldmann> it is just a sample how an auth method can be done, not a best practice sample
2005-12-08T21:51:45  <nwp_> hence "externalcookie" -- something external is managing it
2005-12-08T21:52:05  <nwp_> but it might be good to point that out in comments
2005-12-08T21:52:09  <nwp_> or something like that
2005-12-08T21:52:46  <xorAxAx> ThomasWaldmann: but it looks like it is done in .lu like that
2005-12-08T21:52:56  <xorAxAx> judging from the structure of the code
2005-12-08T21:56:55  <xorAxAx> "user.email = email ; changed = True " urgs %-)
2005-12-08T22:01:05  * xorAxAx found a bug - untested code, obviously :)
2005-12-08T22:02:40  <ThomasWaldmann> maybe rather work on some 1.5 todo than on debugging sample code
2005-12-08T22:03:11  <ThomasWaldmann> like packaging system/help pages with your packager
2005-12-08T22:04:00  <xorAxAx> i am currently working on a project that is not related to core moin
2005-12-08T22:04:14  <xorAxAx> so i am doing more than just debugging sample code ;-)
2005-12-08T22:06:48  <xorAxAx> ThomasWaldmann: why did you introduce that changed param for create_or_update?
2005-12-08T22:08:19  <ThomasWaldmann> because you only need to save when changed
2005-12-08T22:09:58  <xorAxAx> yeah
2005-12-08T22:10:24  <xorAxAx> hmm, normally, the user obj should track that internally
2005-12-08T22:39:16  <xorAxAx> hmm, lost highway soundtrack on www.einslive.de :)
2005-12-08T23:08:56  *** starshine_away is now known as starshine
2005-12-08T23:09:32  <xorAxAx> ThomasWaldmann: how is the alias name used?
2005-12-08T23:09:36  <xorAxAx> ThomasWaldmann: this is not documented
2005-12-08T23:14:40  <xorAxAx> ah, mouse over
2005-12-08T23:45:03  *** Fabi has quit IRC