/ 
Jifty-0.60221
/ Jifty::Action::Record
Security Advisories (4)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

CPANSA-Jifty-2006-01 (2006-07-06)

Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local files.

NAME

Jifty::Action::Record -- An action tied to a record in the database.

DESCRIPTION

Represents a web-based action that is a create, update, or delete of a Jifty::Record object. This automatically populates the arguments method of Jifty::Action so that you don't need to bother. To actually use this class, you probably want to inherit from one of Jifty::Action::Record::Create, Jifty::Action::Record::Update, or Jifty::Action::Record::Delete and override the record_class method.

METHODS

record

Access to the underlying Jifty::Record object for this action is through the record accessor.

record_class

This method can either be overridden to return a string specifying the name of the record class, or the name of the class can be passed to the constructor.

new PARAMHASH

Construct a new Jifty::Action::Record (as mentioned in Jifty::Action, this should only be called by framework->new_action. The record value, if provided in the PARAMHASH, will be used to load the "record"; otherwise, the parimary keys will be loaded from the action's argument values, and the "record" loaded from those primary keys.

arguments

Overrides the "arguments" in Jifty::Action method, to automatically provide a form field for every writable attribute of the underlying "record".

_canonicalize_argument ARGUMENT_NAME

Canonicalizes the argument named ARGUMENT_NAME. This routine actually just makes sure we canonicalize dates and then passes on to the superclass.

_canonicalize_date DATE

Parses and returns the date using Time::ParseDate.

take_action

Throws an error unless it is overridden; use Jifty::Action::Record::Create, ::Update, or ::Delete

SEE ALSO

Jifty::Action, Jifty::Record, Jifty::DBI::Record, Jifty::Action::Record::Create, Jifty::Action::Record::Update