From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,INVALID_MSGID autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,e507e3d80b7abf1e X-Google-Attributes: gid103376,public From: dsmith@clark.net (Doug Smith) Subject: Re: Fun with WebAda/GNAT Date: 1996/08/20 Message-ID: #1/1 X-Deja-AN: 175325327 references: <32120233.484C@lmtas.lmco.com> <4uv6bs$ffd@dfw.dfw.net> <3215B8EC.932@lmtas.lmco.com> <32181E12.7427@lmtas.lmco.com> content-type: TEXT/PLAIN; charset=ISO-8859-1 organization: AdaSmith mime-version: 1.0 newsgroups: comp.lang.ada Date: 1996-08-20T00:00:00+00:00 List-Id: In article <32181E12.7427@lmtas.lmco.com>, Ken Garlington wrote: > [snip] > > By the way, Doug Smith says: > > > The delete unit operation will be available soon. It is not as > > straightforward as it sounds to have a clean interface using forms and > > cgi scripts and to maintain some level of protection from accidentally > > deleting someone else's file (or a predefined package specification!). > > I'm not sure I see the difficulty. Currently, WebAda only shows me my files > on the file list. I can't edit other people's files, or pre-defined packages, > from that list. Just add a Delete button next to the Edit button on the file > list. Ohhh, but you can see other people's files. And you can surf the units which gives you an edit button. Try this: You are surfing some code in my WebAda directory. Notice the edit button! Guess what happens.....drum roll.....you get a copy in your own directory to edit. You'll have to "edit" the spec also to get your copy to compile. Now consider what happens when I add the delete cgi-bin script. You could type in a URL by hand, such as the one above, and substitute "delete" for "surfada". I have to make sure you don't delete my file. By the way, you can surf the predefined packages and edit them...well at least a copy which goes into your own directory. All the more reason to have a delete operation! And, of course, I plan (and have already started) to add a library (i.e. directory) search path ability to WebAda. Which will allow clients to more easily share their code...again, I don't want anyone to delete units that aren't theirs. No unix permissions don't help here because everyone going through the http server has the same permissions. Well, I've talked this one to death. I need to work on the problem instead of talking about it! Doug.