Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 205 of 796  Not logged in ELOG logo
ID Date Icon Author Author Email Category OSup ELOG Version Subject
  1325   Tue Jul 26 10:51:12 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Emiliano Gabrielli wrote:
Substitute is the only way I have to be assure it is as I want ...


No, that's not true. A
Locked attributes = Author

will do the job as well.
  1326   Tue Jul 26 10:55:03 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
Substitute is the only way I have to be assure it is as I want ...


No, that's not true. A
Locked attributes = Author

will do the job as well.


I can't argue how it works ...
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?
Locked attributes = Author
Preset on Reply Author = $long_name

how works in details the "Locked Attribute" parameter then ?? ...
  1327   Tue Jul 26 10:59:45 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Emiliano Gabrielli wrote:
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?


Ok, you're right. But that requires quite some knowledge to change the generated HTML by hand. So for paranoiac people the "Subst" might be better. Actually you could have both the "Preset on Reply" and the "Subst on Reply", so on the reply entry form one sees already the correct author.
  1328   Tue Jul 26 12:02:35 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?


Ok, you're right. But that requires quite some knowledge to change the generated HTML by hand. So for paranoiac people the "Subst" might be better. Actually you could have both the "Preset on Reply" and the "Subst on Reply", so on the reply entry form one sees already the correct author.


It's my actual configuration infact Wink
  1329   Tue Jul 26 16:44:41 2005 Reply Juliana Pengjpeng@yorku.caRequestLinuxV2.6.0Re: hide attributes when view the logbook

Stefan Ritt wrote:

Juliana Peng wrote:
Thanks so much. But the new feature seems not working.


Are you sure you got the latest CVS version and recompiled correctly?

I tried with following config:
[global]
port = 8080

[demo]
Attributes = Name, SysAdmin, OS, Manufacturer, Model, Serial Number, Description, Main Function, Location, Memory, CPU Speed, Num CPU, Owner, Contact Name, Contact Phone, Contact Email, Bought From, Bought Date, Maintenance, Network Drop, Console Drop
Options OS = SunOs{1}, Linux{2}, Aix
{1} Show Attributes = Name, SysAdmin, OS, Manufacturer, Model, Serial Number, Description

Then I added two entries, where OS = SunOS and Aix. As soon as I select SunOS, the attributes except those listed in {1} disappear. The same is true then for the single entry display. Here is the one with the Aix:

and here with SunOS:

So can you reproduce this?


Thanks. But what I want is to hide the unwanted attributes at summary view, not just hide them when I click on entry.

Here is the example, can i hide the attributes at this page when I select SunOS:

  1330   Tue Jul 26 16:50:59 2005 Reply Stefan Rittstefan.ritt@psi.chRequestLinuxV2.6.0Re: hide attributes when view the logbook

Juliana Peng wrote:
Thanks. But what I want is to hide the unwanted attributes at summary view, not just hide them when I click on entry.


No you can't do that.

Assume that you have different types of entries, ones where your unwanted attributes are missing and ones where they are present. If you would hide them, they would be missing even for the entries where you want them. Or you would change the table layout for every line, meaning that attributes which are common in all entries do not line up nicely below each other.

An other approach would be to make elog hide those columns which do not contain any value in the whole page, but that is not (yet) implemented.
  1331   Tue Jul 26 17:28:31 2005 Reply Juliana Pengjpeng@yorku.caRequestLinuxV2.6.0Re: hide attributes when view the logbook

Stefan Ritt wrote:

Juliana Peng wrote:
Thanks. But what I want is to hide the unwanted attributes at summary view, not just hide them when I click on entry.


No you can't do that.

Assume that you have different types of entries, ones where your unwanted attributes are missing and ones where they are present. If you would hide them, they would be missing even for the entries where you want them. Or you would change the table layout for every line, meaning that attributes which are common in all entries do not line up nicely below each other.

An other approach would be to make elog hide those columns which do not contain any value in the whole page, but that is not (yet) implemented.


I may have all the attributes in logbook to keep a full record of all the machine. But for daily use, some of the attibutes we are not using so often. Too many attributes will make the window so big that can not be hold in one screen which is the reason why I want to hide some of them. Of course the hidden attributes have data, but those data are rarely used so we'd rather hide them.

Since "show attributes" prevent from inputing attributes, may not be suitable in this case. We appreciate if you can impletement a new feature like "view attibutes" which do not affect adding new entry, just hide attributes at summary view.
  1332   Tue Jul 26 17:32:59 2005 Smile Chris Greengreenc@fnal.govQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?
Thanks for this, gents.

Chris.
ELOG V3.1.5-2eba886