Security Advisories (3)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

NAME

Jifty::Action::Record::Create - Automagic creation action

DESCRIPTION

This class is used as the base class for Jifty::Actions that are merely creating Jifty::Record objects. To use it, subclass it and override the record_class method to return the name of the Jifty::Record subclass that this action creates.

METHODS

arguments

Set the default value in each of the fields to whatever the default of the column is in the model

take_action

Overrides the virtual take_action method on Jifty::Action to call the appropriate Jifty::Record's create method when the action is run, thus creating a new object in the database.

The id of the new row is returned in the id content of the Jifty::Result for the action. You can use this in conjunction with request mapping in order to give later parts of the request access to the id.

possible_fields

Returns all of the columns on the record class. This is because, unlike Jifty::Action::Record::Update, columns which are marked as 'immutable' should still be able to be set at creation time.

report_success

Sets the "message" in Jifty::Result to default success message, "Created". Override this if you want to report some other more user-friendly result.