Re: Users - Formatting Data in XML or JSON

Posted by Vinay Agarwal on
URL: http://ofbiz.116.s1.nabble.com/Users-Formatting-Data-in-XML-or-JSON-tp139799p139804.html

BJ,

"My point being that all data retrieval should be done on the servers side
or thru communication that has to have a certificate at both ends."

This is exactly how it happens even on JSON-RPC-Java. The server function
being called is responsible for authentication just like a servlet request.

Vinay Agarwal


-----Original Message-----
From: [hidden email] [mailto:[hidden email]]
On Behalf Of BJ Freeman
Sent: Saturday, June 10, 2006 9:07 AM
To: OFBiz Users / Usage Discussion
Subject: Re: [OFBiz] Users - Formatting Data in XML or JSON

Java script by it very nature is open to anyone that can see the source code
of an HTML page.
so if you have the object that is declaring how to access a field of data
from the source, all someone has to do is change the quest to get more data
in the same area.
I would think look at this from a security point of view is very important,
since ofbiz carries Financial and Employee records.
My point being that all data retrieval should be done on the servers side or
thru communication that has to have a certificate at both ends.

It world seem that using an XSL to transform data would be just as simple as
JSON with out introduction another layer.

Vinay Agarwal sent the following on 6/10/06 8:43 AM:

> BJ,
>
> JSON-RPC-Java can only call existing functions on the server which
> should authenticate requests like any other type of call.
>
> Regarding XUI for POS, unfortunately I am not familiar with it so I
> don't know whether it can do the same thing.
>
>>From my research yesterday, I also get feeling that this kind of
> communication (AJAX) is clearly moving from XML encoding to JSON
> encoding because of its ease of use in Javascript. I saw Yahoo
> services becoming available with JSON encoding and IBM using it in its
> Eclipse plugin for AJAX (through dojo toolset).
>
> Regards,
> Vinay Agarwal
>
>
> -----Original Message-----
> From: [hidden email]
> [mailto:[hidden email]]
> On Behalf Of BJ Freeman
> Sent: Saturday, June 10, 2006 8:19 AM
> To: OFBiz Users / Usage Discussion
> Subject: Re: [OFBiz] Users - Formatting Data in XML or JSON
>
> one question, if a page has sensitive data on it, could some one uses
> the information in JSON, being java script, to gain access to the
> complete database?
> The one thing now is all data is created on the server side, so no
> information about how to access the data is not available to the end user.
>
> Also ofbiz now uses XUI for POS, I would think that a RMI client that
> supports that would be something to consider.
>
>
>
> Vinay Agarwal sent the following on 6/10/06 7:45 AM:
>
>>BJ,
>>
>>JSON and JSON-RPC-Java can get information from server into the
>>browser without disturbing the current page. This can be used to
>>implement richer
>
> UI
>
>>or simplify server to browser data transfer. I don't know if RMI can
>>do that.
>>
>>Regards,
>>Vinay Agarwal
>>
>>
>>-----Original Message-----
>>From: [hidden email]
>>[mailto:[hidden email]]
>>On Behalf Of BJ Freeman
>>Sent: Friday, June 09, 2006 8:14 PM
>>To: OFBiz Users / Usage Discussion
>>Subject: Re: [OFBiz] Users - Formatting Data in XML or JSON
>>
>>There is already an RPC (RMI) framework in ofbiz.
>>what dos json-rpc offer, above this?
>>here is a non ofbiz example
>>
>
> http://java.sun.com/developer/onlineTraining/rmi/exercises/UMLDefiniti
> on/ind
>
>>ex.html
>>
>>I have taken the sourceforge AS2 (java EDINT) and integrated it as a
>>separate application.  this is more so I can interface with VANS and
>
> create
>
>>my Own VANS between ofbiz installations.
>>http://faq.businessesnetwork.com/default.asp?Action=Cat&ID=15
>>
>>Vinay Agarwal sent the following on 6/9/06 5:59 PM:
>>
>>
>>>David,
>>>
>>>You are right that deserialization of a somewhat complex data
>>>structure, from xml to javascript, can be complex. On the other hand,
>>>JSON can be deserialized in javascript by a single statement.
>>>Therfore, I am looking to use org.json library to serialize java
>>>objects for now. Another library JSON-RPC-Java
>>>(http://oss.metaparadigm.com/jsonrpc/) makes data transfer completely
>>
>>transparent but possibly requires interfacing with servlet.
>>
>>
>>>Regards,
>>>Vinay Agarwal
>>>
>>>
>>>-----Original Message-----
>>>From: [hidden email]
>>>[mailto:[hidden email]]
>>>On Behalf Of David E. Jones
>>>Sent: Friday, June 09, 2006 2:49 PM
>>>To: OFBiz Users / Usage Discussion
>>>Subject: Re: [OFBiz] Users - Formatting Data in XML or JSON
>>>
>>>
>>>You could try the XmlSerializer class in OFBiz to see if it does what
>>>you need/want. Of course, then you need something on the other side
>>>in JavaScript to do something with the XML. You might want to
>>>consider more special purpose formats to make that easier. Of course,
>>>I have no experience with this... just some thoughts on it.
>>>
>>>-David
>>>
>>>
>>>Vinay Agarwal wrote:
>>>
>>>
>>>
>>>>Hello,
>>>>
>>>>
>>>>
>>>>I want to send a somewhat complex data structure (made up of Maps
>>>>and
>>>>Lists) from server to client in either XML or JSON format as
>>>>response to xmlHttpRequest using a regular request url. Since OFBiz
>>>>already does SOAP, it has functionality to convert data structure into
XML.

>>>>Can it be used to create generalized XML output? I would appreciate
>>>>your
>>>
>>>suggestions.
>>>
>>>
>>>
>>>>Thanks in advance,
>>>>
>>>>Vinay Agarwal
>>>>
>>>>
>>>>
>>>>
>>>>--------------------------------------------------------------------
>>>>--
>>>>--
>>>>
>>>>
>>>>_______________________________________________
>>>>Users mailing list
>>>>[hidden email]
>>>>http://lists.ofbiz.org/mailman/listinfo/users
>>>
>>>
>>>_______________________________________________
>>>Users mailing list
>>>[hidden email]
>>>http://lists.ofbiz.org/mailman/listinfo/users
>>>
>>>_______________________________________________
>>>Users mailing list
>>>[hidden email]
>>>http://lists.ofbiz.org/mailman/listinfo/users
>>>
>>
>>
>>_______________________________________________
>>Users mailing list
>>[hidden email]
>>http://lists.ofbiz.org/mailman/listinfo/users
>>
>>_______________________________________________
>>Users mailing list
>>[hidden email]
>>http://lists.ofbiz.org/mailman/listinfo/users
>>
>
>  
> _______________________________________________
> Users mailing list
> [hidden email]
> http://lists.ofbiz.org/mailman/listinfo/users
>  
> _______________________________________________
> Users mailing list
> [hidden email]
> http://lists.ofbiz.org/mailman/listinfo/users
>
 
_______________________________________________
Users mailing list
[hidden email]
http://lists.ofbiz.org/mailman/listinfo/users
 
_______________________________________________
Users mailing list
[hidden email]
http://lists.ofbiz.org/mailman/listinfo/users