**** BEGIN LOGGING AT Mon Nov 29 12:35:24 2004 | ||
-->You are now talking on #schooltool | 12:35 | |
---Topic for #schooltool is http://schooltool.org | 12:35 | |
---Topic for #schooltool set by Aiste at Mon Oct 18 12:47:26 2004 | 12:35 | |
---#schooltool :[freenode-info] help freenode weed out clonebots, please register your IRC nick and auto-identify: http://freenode.net/faq.shtml#nicksetup | 12:35 | |
**** ENDING LOGGING AT Mon Nov 29 13:03:45 2004 | ||
**** BEGIN LOGGING AT Mon Nov 29 13:03:45 2004 | ||
**** ENDING LOGGING AT Mon Nov 29 13:03:59 2004 | ||
**** BEGIN LOGGING AT Mon Nov 29 13:03:59 2004 | ||
**** ENDING LOGGING AT Mon Nov 29 13:04:40 2004 | ||
**** BEGIN LOGGING AT Mon Nov 29 13:04:40 2004 | ||
**** ENDING LOGGING AT Mon Nov 29 13:05:25 2004 | ||
**** BEGIN LOGGING AT Mon Nov 29 13:05:25 2004 | ||
-->gintas (~gintas@office.pov.lt) has joined #schooltool | 13:22 | |
---Disconnected (). | 15:39 | |
**** ENDING LOGGING AT Mon Nov 29 15:39:31 2004 | ||
**** BEGIN LOGGING AT Mon Nov 29 17:39:00 2004 | ||
-->You are now talking on #schooltool | 17:39 | |
---Topic for #schooltool is http://schooltool.org | 17:39 | |
---Topic for #schooltool set by Aiste at Mon Oct 18 12:47:26 2004 | 17:39 | |
-->tvon|x31 (~tvon@h-66-167-148-192.mclnva23.dynamic.covad.net) has joined #schooltool | 18:03 | |
---Disconnected (). | 18:33 | |
**** ENDING LOGGING AT Mon Nov 29 18:33:35 2004 | ||
**** BEGIN LOGGING AT Mon Nov 29 20:24:59 2004 | ||
-->You are now talking on #schooltool | 20:24 | |
---Topic for #schooltool is http://schooltool.org | 20:24 | |
---Topic for #schooltool set by Aiste at Mon Oct 18 12:47:26 2004 | 20:24 | |
jinty | th1a: Ok, let me know what patches to backport when you are finished? | 20:25 |
---|---|---|
th1a | Should I make the changes to the trunk and you'll move them to the release? Or should I commit to the release tree? | 20:25 |
jinty | if you want, comit them to both release and trunk. | 20:27 |
th1a | The manager should be able to designate a "form" which is a group of students that has several classes together. | 20:27 |
th1a | It is essentially a short cut. | 20:27 |
jinty | th1a: what is the time frame? | 20:27 |
bskahan | what's the use case for the "form" | 20:28 |
th1a | So you when you set up a section you can specify the "form" as a roster instead of the individual students. | 20:28 |
th1a | Actually, it is analogous to an elementary school class in the US. | 20:28 |
th1a | We just can't call all these things "classes." | 20:28 |
bskahan | heh | 20:29 |
th1a | jinty: I'm not sure I can get this done today. | 20:29 |
bskahan | we really have to figure out how to make all of these things "drop-in" eventually. As we add features the distinction between a "US Elementary School", a "US Highschool", a "UK Secondary School" are going to grow | 20:30 |
bskahan | not an issue at the moment | 20:31 |
bskahan | just something to think about | 20:31 |
th1a | Yeah, overall it isn't as bad as you might think. | 20:31 |
th1a | Mostly terminology. | 20:32 |
*bskahan nods | 20:32 | |
jinty | th1a: It's not ideal, but I can build on wed morning. | 20:32 |
<--tvon|x31 has quit ("Leaving") | 20:33 | |
th1a | jinty: Yeah, I know it isn't ideal. I've got some other issues that aren't ideal either that I have to deal with. | 20:33 |
th1a | mgedmin: can we disable that calendar index page that is accessible through the REST interface on the release branch. It is a bit of a security problem. | 20:34 |
mgedmin | how so? | 20:36 |
jinty | th1a: I see, the IRC looks like a traffic jam now. Let me know if there is anything else I can do... | 20:36 |
th1a | An unauthorized user shouldn't be able to get a list of the student names. | 20:36 |
th1a | jinty: Thanks. | 20:37 |
mgedmin | there are more ways that an unauthorized user can get this list | 20:37 |
mgedmin | the security requirements were unknown to us | 20:37 |
-->tvon|x31 (tvon@dsl093-119-225.blt1.dsl.speakeasy.net) has joined #schooltool | 20:37 | |
mgedmin | so the whole RESTive interface is available (read-only) for unauthorized users | 20:37 |
th1a | Whoops. | 20:38 |
th1a | OK. We'll have to fix that. | 20:38 |
th1a | But not for this release. | 20:38 |
mgedmin | just tell us who should be able to do what | 20:38 |
mgedmin | and I agree that changing this is not feasible for 0.8 | 20:38 |
th1a | Initially, the REST interface should just be similar to the web interface. If you aren't an authorized user, you shouldn't be able to see anything, really. | 20:40 |
bskahan | my guess is that everything should require auth off the bat. managers keep full access. teachers get ro access on only students they have a URITeaching relationship with | 20:40 |
th1a | In the long run, it is very complicated. | 20:41 |
bskahan | yeah, but we have to start from so restricitve its broken and open up from there | 20:41 |
bskahan | because of the legal implications | 20:41 |
th1a | Right. | 20:41 |
th1a | I'm glad we'll be using Zope 3's access control. | 20:42 |
*bskahan nods | 20:42 | |
bskahan | mgedmin: how similar is Z3 ACL to zope 2? | 20:43 |
bskahan | roles are defined in zcml, but its still role based? | 20:44 |
th1a | jinty: the bugfix in rev 2166 needs to be in the release. | 20:47 |
jinty | th1a: Marius already let me know, backported in revision 2170 | 20:50 |
th1a | jinty: OK. Didn't see that. Thanks. | 20:50 |
<--gintas has quit ("Bye") | 20:52 | |
th1a | jinty: I _should_ be able to finish what I need to do tonight. I'll let you know. | 20:52 |
<--bskahan has quit ("Leaving") | 20:55 | |
*mgedmin wakes up | 21:02 | |
*mgedmin looks around | 21:02 | |
-->bskahan (~bskahan@dsl093-119-225.blt1.dsl.speakeasy.net) has joined #schooltool | 21:14 | |
jinty | th1a: I'm trying my hand at the release page now, but it seems we have twohttp://www.schooltool.org/schoolbell and http://www.schooltool.org/releases/ should there be separate release pages for schooltool and schoolbell? Or perhaps http://www.schooltool.org/schoolbell could only talk about the features of schoolbell and leave the release to http://www.schooltool.org/releases? | 21:39 |
SysTray Integration Plugin unloaded | 21:51 | |
Python interface unloaded | 21:51 | |
Tcl interface unloaded | 21:51 | |
**** ENDING LOGGING AT Mon Nov 29 21:51:27 2004 |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!