/ 
Jifty-0.60616
/ Jifty::Action::Record::Create
Security Advisories (4)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

CPANSA-Jifty-2006-01 (2006-07-06)

Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local files.

NAME

Jifty::Action::Record::Create - Automagic creation action

DESCRIPTION

This class is used as the base class for Jifty::Actions that are merely creating Jifty::Record objects. To use it, subclass it and override the record_class method to return the name of the Jifty::Record subclass that this action creates.

METHODS

arguments

Set the default value in each of the fields to whatever the default of the column is in the model

take_action

Overrides the virtual take_action method on Jifty::Action to call the appropriate Jifty::Record's create method when the action is run, thus creating a new object in the database.

The id of the new row is returned in the id content of the Jifty::Result for the action. You can use this in conjunction with request mapping in order to give later parts of the request access to the id.

possible_fields

Returns all of the columns on the record class. This is because, unlike Jifty::Action::Record::Update, columns which are marked as 'immutable' should still be able to be set at creation time.

report_success

Sets the "message" in Jifty::Result to default success message, "Created". Override this if you want to report some other more user-friendly result.