Comment 2 for bug 467207

Revision history for this message
Guillaume Bort (guillaume-bort) wrote : Re: [Bug 467207] Re: Feature request: Secure params biding

I think we need a mix of both 2) and 3). Because we need to support
several 'binding context'.

For example, with this User object:

public class User extends Model {

     public String name;

     @Bind(excludeFor="profile")
     public boolean isAdmin;

}

Using the @Bind annotation I say that this field must not been binded
for the 'profile' binding context.

And then in the controller:

public static void editMyProfile(@As("profile") User user) {
    ...
}

On 2 nov. 2009, at 21:17, Nicolas <email address hidden> wrote:

> I see 3 options for that issue:
>
> 1) Provide an helper class that delegates to the jakarta common
> beanutils
> 2) Add a new annotation: @NoBinding
> 3) As I happen to work on the @As annotation that is a binding
> annotation, add a new attribute for it that exclude a propery: @As
> (exclude="myAttribute")
>
> I am still debating between option 2) and 3).
>
> ** Changed in: play
> Assignee: (unassigned) => Nicolas (nicolas-lunatech)
>
> --
> Feature request: Secure params biding
> https://bugs.launchpad.net/bugs/467207
> You received this bug notification because you are a member of play
> framework developers, which is subscribed to play framework.