×
This forum has been locked. Please submit new Feature Requests on GitHub: github.com/Jensen-Technologies/component-creator-issues/issues
(added) Filters in frontend
John-Paul Takats
New Member
Posts: 6
10 år 2 måneder dager siden - 10 år 2 måneder dager siden #373
av John-Paul Takats
Besvart av John-Paul Takats i emne Filters in frontend
One thing I'd like to point out well you are developing this is potential security risk i noticed of adding the frontend view. I enabled frontend list / editing for a user list table I have. I noticed that I am able to view the list view as a guest.
Example: If I have a component named helloworld with a table called userstable. If I install the component and visit this url on my site I am able to view the whole table as a guest by using a link like "www.test.com/index.php?option=com_helloworld". I am able to see this table whether or not there is a menu item corresponding to it. If I create a menu item I can set it to be "registered" view only, but even when visiting it I am able to see the table, i just get a notice saying I don't have permission, even though it still displays.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
Example: If I have a component named helloworld with a table called userstable. If I install the component and visit this url on my site I am able to view the whole table as a guest by using a link like "www.test.com/index.php?option=com_helloworld". I am able to see this table whether or not there is a menu item corresponding to it. If I create a menu item I can set it to be "registered" view only, but even when visiting it I am able to see the table, i just get a notice saying I don't have permission, even though it still displays.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
Last edit: 10 år 2 måneder dager siden by John-Paul Takats.
Vennligst Logg inn eller Registrer konto for å bli med i samtalen.
Pedro
New Member
Posts: 12
10 år 2 måneder dager siden #374
av Pedro
Besvart av Pedro i emne Filters in frontend
Hi John, I guess this is something that happens with any component out there and it's something to deal in each extension by itself
Vennligst Logg inn eller Registrer konto for å bli med i samtalen.
Andres Maeso
Platinum Member
Posts: 338
10 år 2 måneder dager siden #383
av Andres Maeso
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Denne e-postadressen er beskyttet mot programmer som samler e-postadresser. Du må aktivere javaskript for å kunne se den.
Besvart av Andres Maeso i emne Filters in frontend
Hi everybody!
The feature is online!
I wanted to tell you before we make an official announcement because I guessed you need it asap. Feel free to report any bugs via contact form so they are fixed immediately www.component-creator.com/en/contact
I think this may be a different feature request, John. If there's more people that find that useful, we will gladly work on implementing it. Would you mind to write a different post?
Best regards,
Andrés.
The feature is online!
I wanted to tell you before we make an official announcement because I guessed you need it asap. Feel free to report any bugs via contact form so they are fixed immediately www.component-creator.com/en/contact
One thing I'd like to point out well you are developing this is potential security risk i noticed of adding the frontend view. I enabled frontend list / editing for a user list table I have. I noticed that I am able to view the list view as a guest.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
I think this may be a different feature request, John. If there's more people that find that useful, we will gladly work on implementing it. Would you mind to write a different post?
Best regards,
Andrés.
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Denne e-postadressen er beskyttet mot programmer som samler e-postadresser. Du må aktivere javaskript for å kunne se den.
Vennligst Logg inn eller Registrer konto for å bli med i samtalen.
John-Paul Takats
New Member
Posts: 6
10 år 2 måneder dager siden - 10 år 2 måneder dager siden #384
av John-Paul Takats
Besvart av John-Paul Takats i emne Filters in frontend
Should the filters appear automatically in a frontend list view? I am not seeing them at the moment, i'll look into it
EDIT - oops noticed you said to file any bugs in the contact us, i will respond once i do a bit more testing... but it looks like the default_filter view that was added was never included anywhere to be displayed alongside other default view. So all I see is default with no filtering.
EDIT - oops noticed you said to file any bugs in the contact us, i will respond once i do a bit more testing... but it looks like the default_filter view that was added was never included anywhere to be displayed alongside other default view. So all I see is default with no filtering.
Last edit: 10 år 2 måneder dager siden by John-Paul Takats.
Vennligst Logg inn eller Registrer konto for å bli med i samtalen.
Andres Maeso
Platinum Member
Posts: 338
10 år 2 måneder dager siden #386
av Andres Maeso
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Denne e-postadressen er beskyttet mot programmer som samler e-postadresser. Du må aktivere javaskript for å kunne se den.
Besvart av Andres Maeso i emne Filters in frontend
Hi John-Paul
You will need to add some drop-down fields like JList, Radio buttoms or JCategory to see the filters.
You will need to add some drop-down fields like JList, Radio buttoms or JCategory to see the filters.
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Denne e-postadressen er beskyttet mot programmer som samler e-postadresser. Du må aktivere javaskript for å kunne se den.
Vennligst Logg inn eller Registrer konto for å bli med i samtalen.
John-Paul Takats
New Member
Posts: 6
10 år 2 måneder dager siden #387
av John-Paul Takats
Besvart av John-Paul Takats i emne Filters in frontend
Andres, there was one issue in the first release that I filed a ticket for that it looks like Victor (on your team) corrected this morning. The filtering is displaying now, however there was an issue with the values - I put in another ticket for that earlier.
Thanks,
JP
Thanks,
JP
Vennligst Logg inn eller Registrer konto for å bli med i samtalen.
Tid til å lage siden: 0.059 sekunder