IRC log of #schooltool for Monday, 2004-11-29

**** BEGIN LOGGING AT Mon Nov 29 12:35:24 2004
-->You are now talking on #schooltool12:35
---Topic for #schooltool is http://schooltool.org12:35
---Topic for #schooltool set by Aiste at Mon Oct 18 12:47:26 200412:35
---#schooltool :[freenode-info] help freenode weed out clonebots, please register your IRC nick and auto-identify: http://freenode.net/faq.shtml#nicksetup12:35
**** ENDING LOGGING AT Mon Nov 29 13:03:45 2004
**** BEGIN LOGGING AT Mon Nov 29 13:03:45 2004
**** ENDING LOGGING AT Mon Nov 29 13:03:59 2004
**** BEGIN LOGGING AT Mon Nov 29 13:03:59 2004
**** ENDING LOGGING AT Mon Nov 29 13:04:40 2004
**** BEGIN LOGGING AT Mon Nov 29 13:04:40 2004
**** ENDING LOGGING AT Mon Nov 29 13:05:25 2004
**** BEGIN LOGGING AT Mon Nov 29 13:05:25 2004
-->gintas (~gintas@office.pov.lt) has joined #schooltool13:22
---Disconnected ().15:39
**** ENDING LOGGING AT Mon Nov 29 15:39:31 2004
**** BEGIN LOGGING AT Mon Nov 29 17:39:00 2004
-->You are now talking on #schooltool17:39
---Topic for #schooltool is http://schooltool.org17:39
---Topic for #schooltool set by Aiste at Mon Oct 18 12:47:26 200417:39
-->tvon|x31 (~tvon@h-66-167-148-192.mclnva23.dynamic.covad.net) has joined #schooltool18:03
---Disconnected ().18:33
**** ENDING LOGGING AT Mon Nov 29 18:33:35 2004
**** BEGIN LOGGING AT Mon Nov 29 20:24:59 2004
-->You are now talking on #schooltool20:24
---Topic for #schooltool is http://schooltool.org20:24
---Topic for #schooltool set by Aiste at Mon Oct 18 12:47:26 200420:24
jintyth1a: Ok, let me know what patches to backport when you are finished?20:25
th1aShould I make the changes to the trunk and you'll move them to the release?  Or should I commit to the release tree?20:25
jintyif you want, comit them to both release and trunk.20:27
th1aThe manager should be able to designate a "form" which is a group of students that has several classes together.20:27
th1aIt is essentially a short cut.20:27
jintyth1a: what is the time frame?20:27
bskahanwhat's the use case for the "form"20:28
th1aSo you when you set up a section you can specify the "form" as a roster instead of the individual students.20:28
th1aActually, it is analogous to an elementary school class in the US.20:28
th1aWe just can't call all these things "classes."20:28
bskahanheh20:29
th1ajinty:  I'm not sure I can get this done today.20:29
bskahanwe really have to figure out how to make all of these things "drop-in" eventually.  As we add features the distinction between a "US Elementary School", a "US Highschool", a "UK Secondary School" are going to grow20:30
bskahannot an issue at the moment20:31
bskahanjust something to think about20:31
th1aYeah, overall it isn't as bad as you might think.20:31
th1aMostly terminology.20:32
*bskahan nods20:32
jintyth1a: It's not ideal, but I can build on wed morning.20:32
<--tvon|x31 has quit ("Leaving")20:33
th1ajinty:  Yeah, I know it isn't ideal.  I've got some other issues that aren't ideal either that I have to deal with.20:33
th1amgedmin:  can we disable that calendar index page that is accessible through the REST interface on the release branch.  It is a bit of a security problem.20:34
mgedminhow so?20:36
jintyth1a: I see, the IRC looks like a traffic jam now. Let me know if there is anything else I can do...20:36
th1aAn unauthorized user shouldn't be able to get a list of the student names.20:36
th1ajinty:  Thanks.20:37
mgedminthere are more ways that an unauthorized user can get this list20:37
mgedminthe security requirements were unknown to us20:37
-->tvon|x31 (tvon@dsl093-119-225.blt1.dsl.speakeasy.net) has joined #schooltool20:37
mgedminso the whole RESTive interface is available (read-only) for unauthorized users20:37
th1aWhoops.20:38
th1aOK.  We'll have to fix that.20:38
th1aBut not for this release.20:38
mgedminjust tell us who should be able to do what20:38
mgedminand I agree that changing this is not feasible for 0.820:38
th1aInitially, the REST interface should just be similar to the web interface.  If you aren't an authorized user, you shouldn't be able to see anything, really.20:40
bskahanmy guess is that everything should require auth off the bat.  managers keep full access. teachers get ro access on only students they have a URITeaching relationship with20:40
th1aIn the long run, it is very complicated.20:41
bskahanyeah, but we have to start from so restricitve its broken and open up from there20:41
bskahanbecause of the legal implications20:41
th1aRight.20:41
th1aI'm glad we'll be using Zope 3's access control.20:42
*bskahan nods20:42
bskahanmgedmin: how similar is Z3 ACL to zope 2?20:43
bskahanroles are defined in zcml, but its still role based?20:44
th1ajinty:  the bugfix in rev 2166 needs to be in the release.20:47
jintyth1a: Marius already let me know, backported in revision 217020:50
th1ajinty:  OK.  Didn't see that.  Thanks.20:50
<--gintas has quit ("Bye")20:52
th1ajinty:  I _should_ be able to finish what I need to do tonight.  I'll let you know.20:52
<--bskahan has quit ("Leaving")20:55
*mgedmin wakes up21:02
*mgedmin looks around21:02
-->bskahan (~bskahan@dsl093-119-225.blt1.dsl.speakeasy.net) has joined #schooltool21:14
jintyth1a: I'm trying my hand at the release page now, but it seems we have twohttp://www.schooltool.org/schoolbell and http://www.schooltool.org/releases/ should there be separate release pages for schooltool and schoolbell? Or perhaps http://www.schooltool.org/schoolbell could only talk about the features of schoolbell and leave the release to http://www.schooltool.org/releases?21:39
SysTray Integration Plugin unloaded21:51
Python interface unloaded21:51
Tcl interface unloaded21:51
**** ENDING LOGGING AT Mon Nov 29 21:51:27 2004

Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!