Security Advisories (2)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

NAME

Jifty::Plugin::ActorMetadata::Mixin::Model::ActorMetadata - ActorMetadata mixin

SYNOPSIS

package MyApp::Model::CoffeeShop;
use Jifty::DBI::Schema;
use MyApp::Record schema {
    # custom column defrinitions
};

use Jifty::Plugin::ActorMetadata::Mixin::Model::ActorMetadata; # created_by, created_on, updated_on

DESCRIPTION

SCHEMA

This mixin adds the following columns to the model schema:

created_by

created_on

updated_on

METHODS

# XXX: podcoverage should count parent classes. these pods are useless

register_triggers

Adds the triggers to the model this mixin is added to.

before_create

Sets created_by, created_on, updated_on based on the current user and time.

current_user_can

Rejects creation unless there's a current_user. Rejects update or deletion unless the current_user is the creator. (Jesse says: this feels like wrong logic for this mixin)