Security Advisories (3)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

NAME

Jifty::Action::Record::Search

DESCRIPTION

The class is a base class for Jifty::Actions that serve to provide an interface to general searches through Jifty::Record objects. To use it, subclass it and override the record_class method to return the fully qualified name of the model to do searches over.

METHODS

arguments

Remove validators from arguments, as well as ``mandatory'' restrictions. Remove any arguments that render as password fields, or refer to collections.

Generate additional search arguments for each field based on the following criteria:

text or varchar fields

Create field_contains and field_lacks arguments

date, or timestamp fields

Create field_before and field_after arguments

integer fields

Generate field_lt and field_gt arguments

take_action

Return a collection with the result of the search specified by the given arguments.

We interpret a undef argument as SQL NULL, and ignore empty or non-present arguments.

SEE ALSO

Jifty::Action::Record, Jifty::Collection