svn commit: r761978 - in /ofbiz/trunk/applications: content/webapp/content/website/ marketing/webapp/marketing/campaign/ marketing/webapp/marketing/datasource/ party/webapp/partymgr/communication/ party/widget/partymgr/ product/webapp/catalog/promo/ pr...

Author: jleroux
Date: Sat Apr  4 18:14:01 2009
New Revision: 761978

URL: http://svn.apache.org/viewvc?rev=761978&view=rev
Log:
Securing URLs, link element in screens and menus : 31th set + tabs to 4 spaces

Modified:
    ofbiz/trunk/applications/content/webapp/content/website/WebSiteForms.xml
    ofbiz/trunk/applications/marketing/webapp/marketing/campaign/MarketingCampaignForms.xml
    ofbiz/trunk/applications/marketing/webapp/marketing/datasource/DataSourceForms.xml
    ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml
    ofbiz/trunk/applications/party/widget/partymgr/PartyClassificationForms.xml
    ofbiz/trunk/applications/product/webapp/catalog/promo/PromoForms.xml
    ofbiz/trunk/applications/product/webapp/catalog/store/ProductStoreForms.xml
    ofbiz/trunk/applications/product/webapp/facility/labels/InventoryItemLabelForms.xml

Modified: ofbiz/trunk/applications/content/webapp/content/website/WebSiteForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/content/webapp/content/website/WebSiteForms.xml?rev=761978&r1=761977&r2=761978&view=diff
==============================================================================
--- ofbiz/trunk/applications/content/webapp/content/website/WebSiteForms.xml (original)
+++ ofbiz/trunk/applications/content/webapp/content/website/WebSiteForms.xml Sat Apr  4 18:14:01 2009
@@ -166,8 +166,9 @@
         <field name="webSiteId"><hidden/></field>
         <!-- three possibilities for the Party: person, partyGroup, neither... just print everything and if it's empty, no biggie -->
         <field name="partyId" widget-style="buttontext">
-            <hyperlink target-type="inter-app" target="/partymgr/control/viewprofile?partyId=${webSiteRole.partyId}"
-                description="${person.personalTitle} ${person.firstName} ${person.middleName} ${person.lastName} ${person.suffix} ${partyGroup.groupName} [${webSiteRole.partyId}]"/>
+            <hyperlink target-type="inter-app" target="/partymgr/control/viewprofile" description="${person.personalTitle} ${person.firstName} ${person.middleName} ${person.lastName} ${person.suffix} ${partyGroup.groupName} [${webSiteRole.partyId}]">
+                <parameter param-name="partyId" from-field="webSiteRole.partyId"/>
+            </hyperlink>
         </field>
         <field name="roleTypeId">
             <display description="${roleType.description}"/>

Modified: ofbiz/trunk/applications/marketing/webapp/marketing/campaign/MarketingCampaignForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/marketing/webapp/marketing/campaign/MarketingCampaignForms.xml?rev=761978&r1=761977&r2=761978&view=diff
==============================================================================
--- ofbiz/trunk/applications/marketing/webapp/marketing/campaign/MarketingCampaignForms.xml (original)
+++ ofbiz/trunk/applications/marketing/webapp/marketing/campaign/MarketingCampaignForms.xml Sat Apr  4 18:14:01 2009
@@ -81,8 +81,9 @@
             <display/>
         </field>
         <field name="deleteLink" title="&amp;nbsp;" widget-style="buttontext">
-            <hyperlink target="removeMarketingCampaign?marketingCampaignId=${marketingCampaignId}"
-                description="${uiLabelMap.CommonDelete}" also-hidden="false"/>
+            <hyperlink target="removeMarketingCampaign" description="${uiLabelMap.CommonDelete}" also-hidden="false">
+                <parameter param-name="marketingCampaignId" from-field="marketingCampaignId"/>
+            </hyperlink>
         </field>
     </form>
 

Modified: ofbiz/trunk/applications/marketing/webapp/marketing/datasource/DataSourceForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/marketing/webapp/marketing/datasource/DataSourceForms.xml?rev=761978&r1=761977&r2=761978&view=diff
==============================================================================
--- ofbiz/trunk/applications/marketing/webapp/marketing/datasource/DataSourceForms.xml (original)
+++ ofbiz/trunk/applications/marketing/webapp/marketing/datasource/DataSourceForms.xml Sat Apr  4 18:14:01 2009
@@ -93,8 +93,9 @@
         <field name="dataSourceTypeId" title="${uiLabelMap.DataSourceDataSourceTypeId}"><display/></field>
         <field name="description" title="${uiLabelMap.CommonDescription}"><display/></field>
         <field name="editLink" title="&amp;nbsp;" widget-style="buttontext">
-            <hyperlink target="EditDataSourceType?dataSourceTypeId=${dataSourceTypeId}"
-                description="${uiLabelMap.CommonEdit}" also-hidden="false"/>
+            <hyperlink target="EditDataSourceType" description="${uiLabelMap.CommonEdit}" also-hidden="false">
+                <parameter param-name="dataSourceTypeId" from-field="dataSourceTypeId"/>
+            </hyperlink>
         </field>
         <field name="deleteLink" title="&amp;nbsp;" widget-style="buttontext">
             <hyperlink target="deleteDataSourceType" description="${uiLabelMap.CommonDelete}" also-hidden="false">

Modified: ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml?rev=761978&r1=761977&r2=761978&view=diff
==============================================================================
--- ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml (original)
+++ ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml Sat Apr  4 18:14:01 2009
@@ -646,8 +646,9 @@
         <field name="relatedDetailId" map-name="dataResource" title="Survey Response ID"
             use-when="dataResource!=null &amp;&amp; &quot;SURVEY_RESPONSE&quot;.equals(dataResource.getString(&quot;dataResourceTypeId&quot;))">
             <lookup target-form-name="LookupSurveyResponse">
-                <sub-hyperlink target="EditSurveyResponse?surveyResponseId=${dataResource.relatedDetailId}"
-                    description="Edit Survey Response" link-style="smallSubmit" use-when="dataResource!=null &amp;&amp; dataResource.get(&quot;relatedDetailId&quot;)!=null"/>
+                <sub-hyperlink target="EditSurveyResponse" description="Edit Survey Response" link-style="smallSubmit" use-when="dataResource!=null &amp;&amp; dataResource.get(&quot;relatedDetailId&quot;)!=null">
+                    <parameter param-name="surveyResponseId" from-field="dataResource.relatedDetailId"/>
+                </sub-hyperlink>
             </lookup>
         </field>
         <field name="surveyResponseLink" map-name="dummy" widget-style="smallSubmit"

Modified: ofbiz/trunk/applications/party/widget/partymgr/PartyClassificationForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/party/widget/partymgr/PartyClassificationForms.xml?rev=761978&r1=761977&r2=761978&view=diff
==============================================================================
--- ofbiz/trunk/applications/party/widget/partymgr/PartyClassificationForms.xml (original)
+++ ofbiz/trunk/applications/party/widget/partymgr/PartyClassificationForms.xml Sat Apr  4 18:14:01 2009
@@ -50,8 +50,9 @@
             <entity-condition entity-name="PartyClassificationGroup"/>
         </actions>
         <field name="partyClassificationGroupId" title="${uiLabelMap.PartyClassificationGroupId}" widget-style="buttontext">
-            <hyperlink target="EditPartyClassificationGroup?partyClassificationGroupId=${partyClassificationGroupId}"
-                description="${partyClassificationGroupId}" also-hidden="false"/>
+            <hyperlink target="EditPartyClassificationGroup" description="${partyClassificationGroupId}" also-hidden="false">
+                <parameter param-name="partyClassificationGroupId" from-field="partyClassificationGroupId"/>
+            </hyperlink>
         </field>
         <field name="partyClassificationTypeId">
             <display-entity entity-name="PartyClassificationType" key-field-name="partyClassificationTypeId" description="${description}"/>
@@ -59,8 +60,9 @@
         <field name="parentGroupId"><display/></field>
         <field name="description" title="${uiLabelMap.CommonEmptyHeader}"><display/></field>
         <field name="deleteLink" title="${uiLabelMap.CommonEmptyHeader}" widget-style="buttontext">
-            <hyperlink target="deletePartyClassificationGroup?partyClassificationGroupId=${partyClassificationGroupId}"
-                description="${uiLabelMap.CommonDelete}" also-hidden="false"/>
+            <hyperlink target="deletePartyClassificationGroup" description="${uiLabelMap.CommonDelete}" also-hidden="false">
+                <parameter param-name="partyClassificationGroupId" from-field="partyClassificationGroupId"/>
+            </hyperlink>
         </field>
     </form>
 

Modified: ofbiz/trunk/applications/product/webapp/catalog/promo/PromoForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/product/webapp/catalog/promo/PromoForms.xml?rev=761978&r1=761977&r2=761978&view=diff
==============================================================================
--- ofbiz/trunk/applications/product/webapp/catalog/promo/PromoForms.xml (original)
+++ ofbiz/trunk/applications/product/webapp/catalog/promo/PromoForms.xml Sat Apr  4 18:14:01 2009
@@ -23,8 +23,9 @@
     <form name="ListProductPromos" type="list" title="" list-name="productPromos"
         paginate-target="FindProductPromo" odd-row-style="alternate-row" default-table-style="basic-table">
         <field name="productPromoId" widget-style="buttontext">
-            <hyperlink target="EditProductPromo?productPromoId=${productPromoId}"
-                description="${productPromoId}" also-hidden="false"/>
+            <hyperlink target="EditProductPromo" description="${productPromoId}" also-hidden="false">
+                <parameter param-name="productPromoId" from-field="productPromoId"/>
+            </hyperlink>
         </field>
         <field name="promoName"><display/></field>
         <field name="promoText"><display/></field>
@@ -106,8 +107,9 @@
         <auto-fields-entity entity-name="ProductPromoCode" default-field-type="display"/>
         <field name="productPromoId"><hidden/></field>
         <field name="productPromoCodeId" widget-style="buttontext">
-            <hyperlink target="EditProductPromoCode?productPromoCodeId=${productPromoCodeId}"
-                description="${productPromoCodeId}" also-hidden="false"/>
+            <hyperlink target="EditProductPromoCode" description="${productPromoCodeId}" also-hidden="false">
+                <parameter param-name="productPromoCodeId" from-field="productPromoCodeId"/>
+            </hyperlink>
         </field>
         <field name="deleteLink" title="${uiLabelMap.CommonEmptyHeader}" widget-style="buttontext">
             <hyperlink target="deleteProductPromoCode" description="${uiLabelMap.CommonDelete}" also-hidden="false">

Modified: ofbiz/trunk/applications/product/webapp/catalog/store/ProductStoreForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/product/webapp/catalog/store/ProductStoreForms.xml?rev=761978&r1=761977&r2=761978&view=diff
==============================================================================
--- ofbiz/trunk/applications/product/webapp/catalog/store/ProductStoreForms.xml (original)
+++ ofbiz/trunk/applications/product/webapp/catalog/store/ProductStoreForms.xml Sat Apr  4 18:14:01 2009
@@ -568,8 +568,9 @@
         <field name="segmentGroupTypeId" title="${uiLabelMap.ProductSegmentGroupTypeId}"><display-entity entity-name="SegmentGroupType"/></field>
         <field name="description" title="${uiLabelMap.CommonDescription}"><display/></field>
         <field name="deleteLink" title="${uiLabelMap.CommonEmptyHeader}" widget-style="buttontext">
-            <hyperlink target="/marketing/control/deleteSegmentGroup?segmentGroupId=${segmentGroupId}"
-                description="${uiLabelMap.CommonDelete}" also-hidden="false" target-type="inter-app"/>
+            <hyperlink target="/marketing/control/deleteSegmentGroup" description="${uiLabelMap.CommonDelete}" also-hidden="false" target-type="inter-app">
+                <parameter param-name="segmentGroupId" from-field="segmentGroupId"/>
+            </hyperlink>
         </field>
     </form>
     <form name="ListProductStoreShipmentMeths" target="" title="" type="list"  list-name="storeShipMethods"
@@ -981,8 +982,9 @@
         odd-row-style="alternate-row" default-table-style="basic-table">
         <field name="productStoreId"><hidden/></field>
         <field name="productPromoId" widget-style="buttontext">
-            <hyperlink target="EditProductPromo?productPromoId=${productPromoId}"
-                description="${productPromoId}" also-hidden="true"/>
+            <hyperlink target="EditProductPromo" description="${productPromoId}" also-hidden="true">
+                <parameter param-name="productPromoId" from-field="productPromoId"/>
+            </hyperlink>
         </field>
         <field name="promoName"><display/></field>
         <field name="fromDate"><display/></field>

Modified: ofbiz/trunk/applications/product/webapp/facility/labels/InventoryItemLabelForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/product/webapp/facility/labels/InventoryItemLabelForms.xml?rev=761978&r1=761977&r2=761978&view=diff
==============================================================================
--- ofbiz/trunk/applications/product/webapp/facility/labels/InventoryItemLabelForms.xml (original)
+++ ofbiz/trunk/applications/product/webapp/facility/labels/InventoryItemLabelForms.xml Sat Apr  4 18:14:01 2009
@@ -48,23 +48,26 @@
         </field>
         <field name="submitButton" title="${uiLabelMap.CommonUpdate}"><submit button-type="button"/></field>
         <field name="deleteLink" title="${uiLabelMap.CommonEmptyHeader}" widget-style="buttontext">
-            <hyperlink target="deleteInventoryItemLabelType?inventoryItemLabelTypeId=${inventoryItemLabelTypeId}"
-                description="${uiLabelMap.CommonDelete}" also-hidden="false"/>
+            <hyperlink target="deleteInventoryItemLabelType" description="${uiLabelMap.CommonDelete}" also-hidden="false">
+                <parameter param-name="inventoryItemLabelTypeId" from-field="inventoryItemLabelTypeId"/>
+            </hyperlink>
         </field>
     </form>
     <form name="ListInventoryItemLabels" type="list" title="" list-name="inventoryItemLabels"
         odd-row-style="alternate-row" default-table-style="basic-table hover-bar">
         <auto-fields-entity entity-name="InventoryItemLabel" default-field-type="display"/>
         <field name="inventoryItemLabelId" widget-style="buttontext">
-            <hyperlink target="EditInventoryItemLabel?inventoryItemLabelId=${inventoryItemLabelId}"
-                description="${inventoryItemLabelId}" also-hidden="true"/>
+            <hyperlink target="EditInventoryItemLabel" description="${inventoryItemLabelId}" also-hidden="true">
+                <parameter param-name="inventoryItemLabelId" from-field="inventoryItemLabelId"/>
+            </hyperlink>
         </field>
         <field name="inventoryItemLabelTypeId">
             <display-entity entity-name="InventoryItemLabelType" description="${description} [${inventoryItemLabelTypeId}]" also-hidden="true"/>
         </field>
         <field name="deleteLink" title="${uiLabelMap.CommonEmptyHeader}" widget-style="buttontext">
-            <hyperlink target="deleteInventoryItemLabel?inventoryItemLabelId=${inventoryItemLabelId}"
-                description="${uiLabelMap.CommonDelete}" also-hidden="false"/>
+            <hyperlink target="deleteInventoryItemLabel" description="${uiLabelMap.CommonDelete}" also-hidden="false">
+                <parameter param-name="inventoryItemLabelId" from-field="inventoryItemLabelId"/>
+            </hyperlink>
         </field>
     </form>
     <form name="EditInventoryItemLabel" type="single" target="createInventoryItemLabel" title="" default-map-name="inventoryItemLabel"
@@ -91,8 +94,9 @@
         <field name="inventoryItemLabelTypeId"><hidden/></field>
         <field name="inventoryItemId" widget-style="buttontext">
             <display-entity entity-name="InventoryItem" description="${productId}">
-                <sub-hyperlink target="EditInventoryItem?inventoryItemId=${inventoryItemId}"
-                               description="[${inventoryItemId}]"/>
+                <sub-hyperlink target="EditInventoryItem"                description="[${inventoryItemId}]">
+                <parameter param-name="inventoryItemId" from-field="inventoryItemId"/>
+            </sub-hyperlink>
             </display-entity>
         </field>
         <field name="submitButton" title="${uiLabelMap.CommonUpdate}"><submit button-type="button"/></field>