Improving the editor: business logic for permissions

Moderators: krankyd, Unholy

Re: Improving the editor: business logic for permissions

Postby AlanOfTheBerg » Mon Nov 12, 2012 1:23 am

bgodette wrote:
jhfrontz wrote:Then why was it possible to circumvent that in cartouche_old?
Because it was a different backend.

And whether the code which is doing different permissions checking now is part of something in the webserver or within the database, we don't know and it doesn't really matter. Permissions are taken care of server side and there's little we could do from the browser side except make things more restrictive. Which, ultimately, could be easily circumvented with userscripts.
Wiki Resources: Map Editing Manual | Oregon Project/To-Do List
Oregon-based US Country Manager | iPhone5 - VZ - iOS 7.0.6 | Waze v3.7.9.992
AlanOfTheBerg
Waze Global Champs
Waze Global Champs
 
Posts: 19472
Joined: Sat Aug 28, 2010 8:48 pm
Location: US Country Manager - Oregon, USA
Has thanked: 649 times
Been thanked: 2249 times

Re: Improving the editor: business logic for permissions

Postby bgodette » Sun Nov 11, 2012 5:55 pm

jhfrontz wrote:Anyone looked into this?
Modifications are verified server side, and have been ever since Papyrus was been around in 2009, that's why you get save errors.
ImageImage
bgodette
Waze Global Champs
Waze Global Champs
 
Posts: 2937
Joined: Wed Jul 06, 2011 8:19 pm
Location: Denver, CO
Has thanked: 36 times
Been thanked: 229 times

Re: Improving the editor: business logic for permissions

Postby bgodette » Sun Nov 11, 2012 10:46 pm

jhfrontz wrote:Then why was it possible to circumvent that in cartouche_old?
Because it was a different backend.
ImageImage
bgodette
Waze Global Champs
Waze Global Champs
 
Posts: 2937
Joined: Wed Jul 06, 2011 8:19 pm
Location: Denver, CO
Has thanked: 36 times
Been thanked: 229 times

Improving the editor: business logic for permissions

Postby jhfrontz » Sat Nov 10, 2012 1:22 am

Has there been a major change to the API that the editors use (with the demise of cartouche_old)?

I'm really annoyed at no longer being able to "work around" permission issues by using cartouche_old, so I'm contemplating a deep-dive into the WME javascript to come up with another workaround. Assuming they're still implementing the permissions business logic in the editor (and allowing essentially a free-for-all at the raw web services interface), it should be possible to come up with a more intelligent permissions mechanism using an extension.

Anyone looked into this?

On the other hand, I'm just about to cross 200K edits-- is that still the threshold for loosening the shackles?
jhfrontz
Waze Global Champs
Waze Global Champs
 
Posts: 272
Joined: Sun Nov 27, 2011 11:05 pm
Location: oHIo
Has thanked: 56 times
Been thanked: 22 times

Re: Improving the editor: business logic for permissions

Postby jhfrontz » Sun Nov 11, 2012 7:39 pm

bgodette wrote:
jhfrontz wrote:Anyone looked into this?
Modifications are verified server side, and have been ever since Papyrus was been around in 2009, that's why you get save errors.


Then why was it possible to circumvent that in cartouche_old?
jhfrontz
Waze Global Champs
Waze Global Champs
 
Posts: 272
Joined: Sun Nov 27, 2011 11:05 pm
Location: oHIo
Has thanked: 56 times
Been thanked: 22 times

Re: Re: Improving the editor: business logic for permissions

Postby Kuhlkatz » Sun Nov 11, 2012 8:57 pm

jhfrontz wrote:Then why was it possible to circumvent that in cartouche_old?


Maybe the different URLs should provide a hint that they likely made use of different Web server back end interfaces.

I thought the whole idea of the level locks were to STOP editors from changing whatever they shouldn't.
I'm not expecting you to get much traction here or much help from Waze to try and circumvent their locking mechanism.
Carel Cornelius
AM : Centurion & Sandton, ZA
CM & Coordinator, South Africa
Using HTC One, Stock ROM, Android 4.2.2
Image
South African Wiki Waze Wiki Map Editing
Kuhlkatz
Beta tester
Beta tester
 
Posts: 846
Joined: Fri Jul 20, 2012 6:11 pm
Location: Centurion, Pretoria, South Africa
Has thanked: 25 times
Been thanked: 130 times


Return to Ranks and Points

Who is online

Users browsing this forum: No registered users