? Error

User tests: Successful: Unsuccessful:

avatar phproberto
phproberto
8 Apr 2014

Votes

# of Users Experiencing Issue
1/1
Average Importance Score
5.00

avatar phproberto phproberto - open - 8 Apr 2014
avatar beat
beat - comment - 9 Apr 2014

Hi Roberto,
Thanks for this improvement (and of course for all your other contributions).

Shouldn't this PR be made against 3.3-dev branch as it seems to introduce potential backwards compatibility issues ?

avatar Bakual
Bakual - comment - 9 Apr 2014

Shouldn't this PR be made against 3.3-dev branch as it seems to introduce potential backwards compatibility issues ?

Why do you think there could be BC issues? All it does is

  • deprecate the existing field. Extensions can still used it as before. Nothing changes here.
  • Change the use in com_users to the other field. I don't see how that could affect 3rd party extensions. Especially as it does the same thing (as I understand).

However according to SemVer which we will use starting with 3.4, it would indeed have to go into the new minor. But only because new deprecations aren't allowed to go into a patch (see point 7).

avatar beat
beat - comment - 9 Apr 2014

Hi Thomas,
It is a backwards-compatibility issue because:

  1. Any extension extending that JForm will not find that field anymore (ok, not a lot of extensions affected but still a BC issue)
  2. Potentially filling logs with suddenly deprecate messages is a DoS/DDsS vulnerability issue.

Those are the exact reasons why SemVer requests deprectations to go into minor release increment.

Best Regards

avatar Bakual
Bakual - comment - 9 Apr 2014

Any extension extending that JForm will not find that field anymore (ok, not a lot of extensions affected but still a BC issue)

Please note that the field is still there. We don't remove it. We just deprecate it.
It will then be removed with 4.0, not earlier.

Potentially filling logs with suddenly deprecate messages is a DoS/DDsS vulnerability issue.

The log message is only written if the admin has that message logging ("Log deprecated API" in the "Logging" tab) enabled in the debug plugin.
It's disabled by default for the exact reason you noted. Try it once yourself, the log will already be filled fast, I promise :smile:

avatar phproberto
phproberto - comment - 9 Apr 2014

Thanks @Bakual & @beat for the feedback.

My initial thought was to merge it for 3.3 because it's a simple change B/C. But I'm ok with 3.4 too, I created UserGroupList to avoid dealing with the UserGroup field. So anybody that needs it can use the new field.

avatar beat
beat - comment - 9 Apr 2014

@phproberto: 3.3 is fine. Now wondering: is "staging" branch 3.3 or 3.2.next ? There is still a "3.3-dev" branch, thus I supposed that staging was 3.2.next. Thus looks like i got confused ?

avatar Bakual
Bakual - comment - 9 Apr 2014

Currently, staging is still Joomla 3.2. 3.3-dev holds the code of the current 3.3 beta.
This will change once 3.3 is released.
Then staging will become 3.2.x, 3.3-dev becomes the new staging and there will be a new branch 3.4-dev.
However I have no clue what happens with PRs targeted at staging. I guess they will change their target automatically to 3.2.x but we will see.

Everything clear? :smiley:

avatar beat
beat - comment - 9 Apr 2014

Thanks Thomas, then this PR should not go to staging but to 3.3-dev for various good reasons listed above ;-)

avatar phproberto
phproberto - comment - 9 Apr 2014

We don't accept PRs against 3.3-dev branch. All PRs have to be done vs staging and then (for 3.3 ) they are picked manually by @mbabker

So even not being done against 3.3-dev that doesn't mean it cannot be merged into 3.3. I'll try to talk about this with Michael and if not replace the deprecated tag with 3.4.

Thanks!

avatar beat
beat - comment - 9 Apr 2014

ok, even more different than I thought, learning every day. As said it's 100% fine for 3.3.0. :+1:

avatar mbabker
mbabker - comment - 9 Apr 2014

We can take PRs to 3.3-dev just fine if that's what version the PR is
intended for. Or if it's against staging, I can just manually grab it like
you said. Either or works.

On Wed, Apr 9, 2014 at 9:36 AM, Roberto Segura notifications@github.comwrote:

We don't accept PRs against 3.3-dev branch. All PRs have to be done vs
staging and then (for 3.3 ) they are picked manually by @mbabkerhttps://github.com/mbabker

So even not being done against 3.3-dev that doesn't mean it cannot be
merged into 3.3. I'll try to talk about this with Michael and if not
replace the deprecated tag with 3.4.

Thanks!

Reply to this email directly or view it on GitHub#3421 (comment)
.

avatar wilsonge
wilsonge - comment - 10 Apr 2014

It would be nice if that form field is deprecated to put it in the legacy folder as well - try and start getting this stuff reorganized

avatar Bakual
Bakual - comment - 10 Apr 2014

It would be nice if that form field is deprecated to put it in the legacy folder as well - try and start getting this stuff reorganized

There is not really a point in moving that file to legacy. Legacy doesn't exactly mean "deprecated".
The deprecation tag and the log notice is all which is needed.
Also moving files could potentially break someones code if he load it manually (which is bad behaviour, but still). So we would have no gain but a low risk. :smile:

avatar nicksavov nicksavov - change - 21 Aug 2014
Labels Removed: ?
avatar nicksavov nicksavov - change - 21 Aug 2014
Title
[imp] deprecate buggy usergroup field and replace ocurrences with usergrouplist. Fixes #3419
[#33580] [imp] deprecate buggy usergroup field and replace ocurrences with usergrouplist. Fixes #3419
avatar brianteeman brianteeman - change - 21 Aug 2014
Status New Pending
avatar phproberto phproberto - change - 21 Aug 2014
Title
[imp] deprecate buggy usergroup field and replace ocurrences with usergrouplist. Fixes #3419
[#33580] [imp] deprecate buggy usergroup field and replace ocurrences with usergrouplist. Fixes #3419
avatar davdebcom davdebcom - test_item - 28 Feb 2015 - Tested successfully
avatar davdebcom
davdebcom - comment - 28 Feb 2015

How to test:

  • Open this file /plugins/authentication/joomla/joomla.xml
  • Before </extension> add the following code:
 <config>
        <fields name="params">
        <fieldset name="basic">
        <field
                name="myfield"
                type="usergroup"
                label="User Group">
            <option value="">No Group</option>
        </field>
        </fieldset>
        </fields>
 </config>
  • Go to Extension > Plugin Manager search for "authentication"
  • Open the "Authentication - Joomla"
  • You should see a dropdown with default option "Show all groups" which is bad because you set <option value="">No Group</option> in the above code

  • Apply the patch

  • Go back to /plugins/authentication/joomla/joomla.xml
  • Change type="usergroup" to type="usergrouplist"
  • Go the "Authentication - Joomla" plugin again
  • You should now see the dropdown shows "No group"
  • If you do see "No group" in the dropdown, it works!
avatar davdebcom
davdebcom - comment - 28 Feb 2015

@test
Works

avatar davdebcom davdebcom - test_item - 28 Feb 2015 - Tested successfully
avatar davdebcom
davdebcom - comment - 28 Feb 2015

How to test:

  • Open this file /plugins/authentication/joomla/joomla.xml
  • Before </extension> add the following code:
 <config>
        <fields name="params">
        <fieldset name="basic">
        <field
                name="myfield"
                type="usergroup"
                label="User Group">
            <option value="">No Group</option>
        </field>
        </fieldset>
        </fields>
 </config>
  • Go to Extension > Plugin Manager search for "authentication"
  • Open the "Authentication - Joomla"
  • You should see a dropdown with default option "Show all groups" which is bad because you set <option value="">No Group</option> in the above code

  • Apply the patch

  • Go back to /plugins/authentication/joomla/joomla.xml
  • Change type="usergroup" to type="usergrouplist"
  • Go the "Authentication - Joomla" plugin again
  • You should now see the dropdown shows "No group"
  • If you do see "No group" in the dropdown, it works!
    This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/3421.
avatar phproberto phproberto - change - 28 Feb 2015
Milestone Added:
avatar phproberto
phproberto - comment - 28 Feb 2015

I have updated this PR but I'm closing it and create a new PR against 3.5-dev branch.

Thanks everybody for your comments / tests!

avatar phproberto phproberto - change - 28 Feb 2015
Status Pending Closed
Closed_Date 0000-00-00 00:00:00 2015-02-28 13:16:09
avatar phproberto phproberto - close - 28 Feb 2015
avatar phproberto phproberto - close - 28 Feb 2015
avatar phproberto phproberto - change - 5 Mar 2015
Status Closed New
avatar phproberto phproberto - reopen - 5 Mar 2015
avatar phproberto phproberto - reopen - 5 Mar 2015
avatar phproberto
phproberto - comment - 5 Mar 2015

Reopened so this is merged into staging branch.

avatar wilsonge wilsonge - change - 5 Mar 2015
Status New Closed
Closed_Date 2015-02-28 13:16:09 2015-03-05 22:11:31
avatar wilsonge wilsonge - close - 5 Mar 2015
avatar wilsonge wilsonge - reference | - 5 Mar 15
avatar wilsonge wilsonge - merge - 5 Mar 2015
avatar wilsonge wilsonge - close - 5 Mar 2015
avatar wilsonge wilsonge - change - 5 Mar 2015
Milestone Added:
avatar wilsonge wilsonge - change - 5 Mar 2015
Milestone Removed:
avatar phproberto phproberto - head_ref_deleted - 7 Mar 2015

Add a Comment

Login with GitHub to post a comment