search for: perenic

Modelsecurity aims to provide access control within the data model so that it becomes easy & efficient to specify read or write access to individual fields. It has one of those "why didn''t I think of that?" designs which make a lot of sense. Has anyone else tried using the latest release of ModelSecurity? What has been your experience? Home

Hiall, I would be very interested in your opinions on the ModelSecurity plugin by Bruce Perens. http://perens.com/FreeSoftware/ModelSecurity/Tutorial.html Some time ago, I read on a few pages that it is the way to go, on this list however, I didn''t read much about it. Apart from it''s security level, quoted from comments in source code: # FIX: At the moment we only support

Protest the Microsoft-Novell Patent Agreement self explanatory http://techp.org/petition/show/1 Craig

Hi, I''m building an application which is going to require quite fine grained access control. Deciding if a user is allowed to access an action will probably require checking quite number of different rules, so a simple role-based system won''t be flexible enough. The approach I think I will try first is, if it''s possible, to ignore permission issues inside the

On Wed, Aug 12, 2009 at 11:53 AM, Damjan Perenic<damjan.perenic at guest.arnes.si> wrote: > On Tue, Aug 11, 2009 at 11:04 PM, Richard > Elling<richard.elling at gmail.com> wrote: >> On Aug 11, 2009, at 7:39 AM, Ed Spencer wrote: >> >>> I suspect that if we ''rsync'' one of these filesystems t...

I''m impressed by the latest release of wxRuby2! Thanks to all the developers who worked on making this possible. It''s great to have wxWidgets working with Ruby - and the new sample programs are a tremendous help. There is a 700+ page book on wxWidgets - Cross-Platform GUI Programming with

Hi all, I''m posting this in the hope that someone who understands rails dependencies can shed some light. I''ve implemented a "ModelSecurity" module in the vein of Bruce Peren''s old ModelSecurity plugin (http://rubyforge.org/projects/model- security/). My ModelSecurity module lives in $RAILS_ROOT/lib. It is automatically included into ActiveRecord::Base by a

Hi there, This is my first post :) I''ve read Agile and Rails Recipes book. Now i''m learning on making a good authentication system and as i read this maillist archive, i''m interested to have a demo source code (any .sit or .zip .tgz .bz2 would be fine, i''m using tiger 10.4.5) for Security Model by Bruce Perens or any other demos (like a part of

Hi, I''m looking to create an online internet community for managing user profiles and other data. Thus, I would need that has the following features: o authentication - protect individual member pages/directories o session management o retrieve and reset passwords In short, I''m looking to create an online community. Thus, can someone direct me to a plugin(s) for

I just saw a mention here of LoginEngine, which I hadn''t heard of before. Last week when I was digging for user-account sample code for my web-app, I instead found the LoginGenerator and started using that: http://wiki.rubyonrails.com/rails/pages/LoginGenerator Is one of these preferred over the other? From skimming the API docs, it does seem that LoginEngine has more features,

I''m trying to install Bruce Perens'' ModelSecurity gem, but it keeps asking me if I want to install rails too (I have already installed rails). It exits if I say no and crashes if I say yes: C:\>"c:\ruby\bin\ruby.exe" "c:\ruby\bin\gem" install model_security_generator Attempting local installation of ''model_security_generator'' Local gem

I''d like to always add a condition to any version of "find" (e.g. Thing.find(), Thing.find_by_name(), Thing.find_by_whatever) so that in addition to whatever conditions are set, an additional condition is set :conditions=>"user_id=#{current_user.id}" I''d like to make sure that a user only sees/edits/creates entries in the database that have the user_id

Does anyone know a way to restrict access to specific columns in the model to specific users? My plan was to use the session hash to check the permissions of the logged in user in an overridden method of the same name as the model accessor I wanted to restrict, but the model can''t acecss the session. Any other ideas? -- Posted via http://www.ruby-forum.com/.

Hello everyone, I used to be able to mount an MS NT4 DOMAIN share from a machine running RedHat 9 (Samba v2.2.7a), but after upgrading to WHEL (also tried with SuSE 9.1/kernel 2.6.x running Samba 3 and it appears to have the same problem) (Samba v3.0.4) my samba mount script will no longer work. It successfully mounts the share but I get permission denied errors when attempting to ls -l ,

Hi List, I didn''t like the way store_location worked in rails. It doesn''t know you''ve pushed the "back" button, and it always returns to the top of a page. On a large page, the part you were looking at would no longer be on the screen. People try to deal with this using an AJAX hack, but it seems to me that the proper way to fix it is to store the return

I want to setup an api for my web app, but i had a few question on the best way to do this. I was hoping for some input from you experienced individuals and rails rock stars. 1) Is there a way to implement a login in feature so that api methods cant be called without proper authorization? This is so i can log activity and use of the api from different people and so -------------- next part

(Seems to me that Icecast folks would be particularly concerned about this. Please consider the following, lend your signatures, and also *send it on* to appropriate interested parties. If you are a blogger or know clueful bloggers, please try to have it posted in a highly visible forum. -- Seth Johnson) Hello folks, Please review the important joint statement below, related to the WIPO

Hi group, I was wondering if anyone more experienced could help me to find a good pattern for two things: 1. How to group controllers. Example: We have an admin panel with: user_managment_controller.rb priv_managment_controller.rb widget_controller.rb User panel with: mystuff_controller.rb mytags_controller.rb profile_controller.rb And frontend with: widget_controller.rb etc... How do I group

Hi folks, I was curious what's known about the patent situation with the DV format. Google turns up a number of press articles describing it as an "open standard with no associated licensing fees" but also, for example, US Patent number 5,691,81 which, while I've not done a careful comparison of the claims, sounds like it covers the block-rearrangement scheme that's the

Hello ! When I am trying to install the file " http://www.ci.tuwien.ac.at/R/bin/i386-linux/RedHat-5.0/r-base-0.61.1-2.i386.rpm" on my RedHat 5.0 system I get the following message: libncurses.so.3.4 is needed by r-base-0.61.1-2 Where is it possible to get this (preferably as an rpm) Regards Trond Rafoss Norwegian Institute of Crop Research Plant Protection Centre Fellesbygget