1. Wednesday, February 28 2007 12:59146 todos

    146* things to be done before beta release…

    storm

    photo © systhread.net

    Before Zena is released as beta:

    • 2007-02-28: 146 things to be done.
    • 2007-03-08: 128 left : 32 commits since last week and a lot of bug fixes

    FIXME


    1. application.rb (312): [SECURITY] is there a better way to do this ?

    2. node_controller.rb (25): redirect to a better error page

    3. note_controller.rb (19): [SECURITY] is there a better way to find the class without using eval ?

    4. page_controller.rb (5): [SECURITY] is there a better way to find the class without using eval ?

    5. version_controller.rb (175): BUG when two version (fr,en). fr = red, en = pub. removing

    6. application_helper.rb (532): [SECURITY] is there a better way to do this ?

    7. application_helper.rb (987): [SECURITY] is there a better way to do this ?

    8. document_content.rb (105): this should not be needed… find another fix.

    9. form_seizure.rb (17): [SECURITY] is there any risk here ?

    10. form_seizure.rb (70): what do we do with these errors ?

    11. image_content.rb (96): remove cached image as well !!

    12. node.rb (575): use a ‘before_remove’ callback to make sure all sub-nodes can be removed…

    13. text_document_content.rb (21): this should not be needed… find another fix.

    14. zena.rb (555): could SQL injection be possible here ? (all params are passed to the ‘find’)


    <h4>TODO</h4>

<ol class="orange">
 <li>-application.rb (28)<span class='descr'>: test</span>-</li>
 <li>application.rb (112)<span class='descr'>: implement</span></li>
 <li>application.rb (124)<span class='descr'>: implement</span></li>
 <li>application.rb (213)<span class='descr'>: test time_zone..</span></li>
 <li>application.rb (274)<span class='descr'>: test</span></li>
 <li>application.rb (310)<span class='descr'>: test</span></li>
 <li>application.rb (323)<span class='descr'>: test</span></li>
 <li>application.rb (329)<span class='descr'>: test</span></li>
 <li>comment_controller.rb (5)<span class='descr'>: test</span></li>
 <li>comment_controller.rb (19)<span class='descr'>: test</span></li>
 <li>comment_controller.rb (29)<span class='descr'>: test</span></li>
 <li>comment_controller.rb (42)<span class='descr'>: test</span></li>
 <li>comment_controller.rb (57)<span class='descr'>: test</span></li>
 <li>comment_controller.rb (72)<span class='descr'>: test</span></li>
 <li>comment_controller.rb (83)<span class='descr'>: test</span></li>
 <li>comment_controller.rb (90)<span class='descr'>: test</span></li>
 <li>discussion_controller.rb (3)<span class='descr'>: test</span></li>
 <li>discussion_controller.rb (9)<span class='descr'>: test</span></li>
 <li>discussion_controller.rb (16)<span class='descr'>: test</span></li>
 <li>discussion_controller.rb (23)<span class='descr'>: test</span></li>
 <li>discussion_controller.rb (31)<span class='descr'>: test</span></li>
 <li>-document_controller.rb (52)<span class='descr'>: cache_document not tested yet. Also need sweepers !!</span>-</li>
 <li>-document_controller.rb (75)<span class='descr'>: test</span>-</li>
 <li>group_controller.rb (5)<span class='descr'>: test</span></li>
 <li>group_controller.rb (10)<span class='descr'>: test?</span></li>
 <li>group_controller.rb (18)<span class='descr'>: test</span></li>
 <li>group_controller.rb (25)<span class='descr'>: test</span></li>
 <li>group_controller.rb (32)<span class='descr'>: add new group to user session if admin or do not cache groups</span></li>
 <li>group_controller.rb (35)<span class='descr'>: test</span></li>
 <li>link_controller.rb (5)<span class='descr'>: test multiple/single values</span></li>
 <li>login_controller.rb (15)<span class='descr'>: test after_login_url</span></li>
 <li>main_controller.rb (16)<span class='descr'>: test new path</span></li>
 <li>main_controller.rb (41)<span class='descr'>: test</span></li>
 <li>node_controller.rb (15)<span class='descr'>: test</span></li>
 <li>node_controller.rb (30)<span class='descr'>: test</span></li>
 <li>node_controller.rb (50)<span class='descr'>: test</span></li>
 <li>preferences_controller.rb (5)<span class='descr'>: test</span></li>
 <li>preferences_controller.rb (10)<span class='descr'>: test</span></li>
 <li>preferences_controller.rb (30)<span class='descr'>: test</span></li>
 <li>preferences_controller.rb (46)<span class='descr'>: test</span></li>
 <li>search_controller.rb (3)<span class='descr'>: finish test for '[project], [note], nodes...'</span></li>
 <li>trans_controller.rb (23)<span class='descr'>: test</span></li>
 <li>trans_controller.rb (29)<span class='descr'>: test</span></li>
 <li>trans_controller.rb (34)<span class='descr'>: test</span></li>
 <li>trans_controller.rb (41)<span class='descr'>: test</span></li>
 <li>user_controller.rb (10)<span class='descr'>: test</span></li>
 <li>-user_controller.rb (15)<span class='descr'>: test</span>-</li>
 <li>user_controller.rb (23)<span class='descr'>: test</span></li>
 <li>user_controller.rb (32)<span class='descr'>: test</span></li>
 <li>user_controller.rb (44)<span class='descr'>: test</span></li>
 <li>version_controller.rb (98)<span class='descr'>: test</span></li>
 <li>version_controller.rb (157)<span class='descr'>: test</span></li>
 <li>-application_helper.rb (252)<span class='descr'>: test</span>-</li>
 <li>application_helper.rb (412)<span class='descr'>: use time_zone here ?</span></li>
 <li>application_helper.rb (463)<span class='descr'>: test</span></li>
 <li>application_helper.rb (489)<span class='descr'>: test</span></li>
 <li>application_helper.rb (530)<span class='descr'>: test</span></li>
 <li>application_helper.rb (565)<span class='descr'>: test</span></li>
 <li>application_helper.rb (571)<span class='descr'>: test</span></li>
 <li>application_helper.rb (583)<span class='descr'>: test</span></li>
 <li>application_helper.rb (603)<span class='descr'>: test</span></li>
 <li>application_helper.rb (672)<span class='descr'>: test</span></li>
 <li>application_helper.rb (676)<span class='descr'>: test</span></li>
 <li>application_helper.rb (717)<span class='descr'>: test</span></li>
 <li>application_helper.rb (737)<span class='descr'>: test</span></li>
 <li>application_helper.rb (825)<span class='descr'>: test</span></li>
 <li>application_helper.rb (930)<span class='descr'>: test</span></li>
 <li>application_helper.rb (980)<span class='descr'>: test</span></li>
 <li>comment.rb (24)<span class='descr'>: test</span></li>
 <li>contact.rb (5)<span class='descr'>: test</span></li>
 <li>discussion.rb (25)<span class='descr'>: test</span></li>
 <li>document.rb (2)<span class='descr'>: on name change make sure content name changes too...</span></li>
 <li>document_content.rb (112)<span class='descr'>: clear cache</span></li>
 <li>document_content.rb (128)<span class='descr'>: clear cache</span></li>
 <li>document_content.rb (134)<span class='descr'>: set content_id of versions whose content_id was self[:version_id]</span></li>
 <li>group.rb (13)<span class='descr'>: test</span></li>
 <li>image_version.rb (10)<span class='descr'>: test</span></li>
 <li>link.rb (2)<span class='descr'>: use a registration when a class calls 'link' to avoid this</span></li>
 <li>link.rb (3)<span class='descr'>: test</span></li>
 <li>node.rb (490)<span class='descr'>: test</span></li>
 <li>node.rb (499)<span class='descr'>: test</span></li>
 <li>project.rb (27)<span class='descr'>: test</span></li>
 <li>tag.rb (22)<span class='descr'>: test</span></li>
 <li>tag.rb (30)<span class='descr'>: test</span></li>
 <li>template.rb (8)<span class='descr'>: test</span></li>
 <li>text_document.rb (1)<span class='descr'>: test all</span></li>
 <li>text_document_content.rb (25)<span class='descr'>: clear cache</span></li>
 <li>text_document_content.rb (30)<span class='descr'>: raise error</span></li>
 <li>text_document_content.rb (34)<span class='descr'>: clear cache</span></li>
 <li>text_document_content.rb (35)<span class='descr'>: set content_id of versions whose content_id was self[:version_id]</span></li>
 <li>trans_phrase.rb (63)<span class='descr'>: test</span></li>
 <li>user.rb (9)<span class='descr'>: when a user is 'destroyed', pass everything he owns to another user or just mark the user as 'deleted'...</span></li>
 <li>user.rb (15)<span class='descr'>: test link between user and contact</span></li>
 <li>user.rb (64)<span class='descr'>: test</span></li>
 <li>user.rb (90)<span class='descr'>: test</span></li>
 <li>user.rb (96)<span class='descr'>: test</span></li>
 <li>user.rb (146)<span class='descr'>: test</span></li>
 <li>doc_version.rb (38)<span class='descr'>: check for errors on info_class create</span></li>
 <li>README_FOR_APP (7)<span class='descr'>: !! DO NOT PUT 'PATH TO FILES' IN ZENA.rb</span></li>
 <li>README_FOR_APP (8)<span class='descr'>: !! TRY TO KEEP ONLY ONE CONFIGURATION FILE, LOADED</span></li>
 <li>README_FOR_APP (9)<span class='descr'>: !! BY environment/...</span></li>
 <li>README_FOR_APP (10)<span class='descr'>: !! BUG WITH DISCUSSION REMOVE: not working</span></li>
 <li>README_FOR_APP (11)<span class='descr'>: deletion of node</span></li>
 <li>README_FOR_APP (12)<span class='descr'>: USER : CONTACT_ID ??</span></li>
 <li>README_FOR_APP (13)<span class='descr'>: popup 'drive' should show vertical scroll bar...</span></li>
 <li>README_FOR_APP (14)<span class='descr'>: traduire le texte de base pour l'aide en anglais</span></li>
 <li>README_FOR_APP (15)<span class='descr'>: APPLICATION_TEST : should use same testing as application_helper...</span></li>
 <li>README_FOR_APP (16)<span class='descr'>: PATH_LINKS: correct and try to find some way to cache the base in project ?</span></li>
 <li>README_FOR_APP (17)<span class='descr'>: is app/views/node/_tags used ?</span></li>
 <li>README_FOR_APP (18)<span class='descr'>: multiversion: version finder: why use lang = ? Testing needed</span></li>
 <li>README_FOR_APP (19)<span class='descr'>: open/close note: the :as option should be worked out in zazen, when using limit to get the text.</span></li>
 <li>README_FOR_APP (26)<span class='descr'>: We should use attr_protected instead of filtering forms.</span></li>
 <li>README_FOR_APP (27)<span class='descr'>: * Remove all .utc (now using ENV['TZ'])</span></li>
 <li>README_FOR_APP (28)<span class='descr'>: * Provide a 'grows with zena' // 'runs with zena' logo and link</span></li>
 <li>README_FOR_APP (29)<span class='descr'>: * Provide a link from zena to teti.ch</span></li>
 <li>README_FOR_APP (38)<span class='descr'>: test...</span></li>
 <li>zena.rb (52)<span class='descr'>: what do we do here with dates ?</span></li>
 <li>zena.rb (60)<span class='descr'>: format with @params[:format] and @params[:tformat] &lt;&lt; translated format</span></li>
 <li>zena.rb (194)<span class='descr'>: test</span></li>
 <li>zena.rb (217)<span class='descr'>: add parent_id into the form !</span></li>
 <li>zena.rb (254)<span class='descr'>: test</span></li>
 <li>zena.rb (403)<span class='descr'>: test</span></li>
 <li>zena.rb (755)<span class='descr'>: test</span></li>
 <li>zena.rb (760)<span class='descr'>: test</span></li>
 <li>secure.rb (789)<span class='descr'>: test</span></li>
 <li>secure_test.rb (31)<span class='descr'>: CORRECT THESE TESTS FROM CHANGES TO RULES ========</span></li>
 <li>secure_test.rb (219)<span class='descr'>: continue test when 'remove, replace, rollback, ...' are implemented</span></li>
 <li>user_test.rb (104)<span class='descr'>: finish tests for User</span></li>
</ol>

    Gaspard Bucher