×
This forum has been locked. Please submit new Feature Requests on GitHub: github.com/Jensen-Technologies/component-creator-issues/issues
(added) Filters in frontend
John-Paul Takats
New Member
Posts: 6
10 года 2 мес. назад - 10 года 2 мес. назад #373
от John-Paul Takats
John-Paul Takats ответил в теме Filters in frontend
One thing I'd like to point out well you are developing this is potential security risk i noticed of adding the frontend view. I enabled frontend list / editing for a user list table I have. I noticed that I am able to view the list view as a guest.
Example: If I have a component named helloworld with a table called userstable. If I install the component and visit this url on my site I am able to view the whole table as a guest by using a link like "www.test.com/index.php?option=com_helloworld". I am able to see this table whether or not there is a menu item corresponding to it. If I create a menu item I can set it to be "registered" view only, but even when visiting it I am able to see the table, i just get a notice saying I don't have permission, even though it still displays.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
Example: If I have a component named helloworld with a table called userstable. If I install the component and visit this url on my site I am able to view the whole table as a guest by using a link like "www.test.com/index.php?option=com_helloworld". I am able to see this table whether or not there is a menu item corresponding to it. If I create a menu item I can set it to be "registered" view only, but even when visiting it I am able to see the table, i just get a notice saying I don't have permission, even though it still displays.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
Последнее редактирование: 10 года 2 мес. назад пользователем John-Paul Takats.
Пожалуйста Войти или Регистрация, чтобы присоединиться к беседе.
Pedro
New Member
Posts: 12
10 года 2 мес. назад #374
от Pedro
Pedro ответил в теме Filters in frontend
Hi John, I guess this is something that happens with any component out there and it's something to deal in each extension by itself
Пожалуйста Войти или Регистрация, чтобы присоединиться к беседе.
Andres Maeso
Platinum Member
Posts: 338
10 года 2 мес. назад #383
от Andres Maeso
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Адрес электронной почты защищен от спам-ботов. Для просмотра адреса в вашем браузере должен быть включен Javascript.
Andres Maeso ответил в теме Filters in frontend
Hi everybody!
The feature is online!
I wanted to tell you before we make an official announcement because I guessed you need it asap. Feel free to report any bugs via contact form so they are fixed immediately www.component-creator.com/en/contact
I think this may be a different feature request, John. If there's more people that find that useful, we will gladly work on implementing it. Would you mind to write a different post?
Best regards,
Andrés.
The feature is online!
I wanted to tell you before we make an official announcement because I guessed you need it asap. Feel free to report any bugs via contact form so they are fixed immediately www.component-creator.com/en/contact
One thing I'd like to point out well you are developing this is potential security risk i noticed of adding the frontend view. I enabled frontend list / editing for a user list table I have. I noticed that I am able to view the list view as a guest.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
I think this may be a different feature request, John. If there's more people that find that useful, we will gladly work on implementing it. Would you mind to write a different post?
Best regards,
Andrés.
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Адрес электронной почты защищен от спам-ботов. Для просмотра адреса в вашем браузере должен быть включен Javascript.
Пожалуйста Войти или Регистрация, чтобы присоединиться к беседе.
John-Paul Takats
New Member
Posts: 6
10 года 2 мес. назад - 10 года 2 мес. назад #384
от John-Paul Takats
John-Paul Takats ответил в теме Filters in frontend
Should the filters appear automatically in a frontend list view? I am not seeing them at the moment, i'll look into it
EDIT - oops noticed you said to file any bugs in the contact us, i will respond once i do a bit more testing... but it looks like the default_filter view that was added was never included anywhere to be displayed alongside other default view. So all I see is default with no filtering.
EDIT - oops noticed you said to file any bugs in the contact us, i will respond once i do a bit more testing... but it looks like the default_filter view that was added was never included anywhere to be displayed alongside other default view. So all I see is default with no filtering.
Последнее редактирование: 10 года 2 мес. назад пользователем John-Paul Takats.
Пожалуйста Войти или Регистрация, чтобы присоединиться к беседе.
Andres Maeso
Platinum Member
Posts: 338
10 года 2 мес. назад #386
от Andres Maeso
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Адрес электронной почты защищен от спам-ботов. Для просмотра адреса в вашем браузере должен быть включен Javascript.
Andres Maeso ответил в теме Filters in frontend
Hi John-Paul
You will need to add some drop-down fields like JList, Radio buttoms or JCategory to see the filters.
You will need to add some drop-down fields like JList, Radio buttoms or JCategory to see the filters.
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Адрес электронной почты защищен от спам-ботов. Для просмотра адреса в вашем браузере должен быть включен Javascript.
Пожалуйста Войти или Регистрация, чтобы присоединиться к беседе.
John-Paul Takats
New Member
Posts: 6
10 года 2 мес. назад #387
от John-Paul Takats
John-Paul Takats ответил в теме Filters in frontend
Andres, there was one issue in the first release that I filed a ticket for that it looks like Victor (on your team) corrected this morning. The filtering is displaying now, however there was an issue with the values - I put in another ticket for that earlier.
Thanks,
JP
Thanks,
JP
Пожалуйста Войти или Регистрация, чтобы присоединиться к беседе.
Время создания страницы: 0.065 секунд