COS 470 Iteration 5

Starting Goals Move from controller-centric operations to service layer Adapt to REST architecture Complete Order Fufillment requirements Catch up on integration/unit testing Finish security/access control and adapt views to restrict sensitive information Shift from using scaffolding in UI

What happened.... Is that some things worked better than others.

Services Moved update, delete and save to services. Implemented specialized exception classes Moving list and edit functions == code bloat Integration tests that passed before still worked

Order Fulfillment Currently, admin manually fills in the order form Future enhancement- cron-style auto fill?? Email functionality partially implemented Mail plugin hard to work with on local machine, possible need of local SMTP mail server instance?

REST Writing controller actions, easy Executing and rendering in views, not so much Get XML, see XML, what to do with it? Online tutorials of limited use Helps with writing controllers Showing rendered views, nope

Testing Caught up on integration testing Some tests worked, others... Sometimes tests fail with working site functionality 2 of 3 Book integration tests failed due to no signature method of Books.save() is applicable error. Other test passed... with same definition. Why? Site book functionality works, as long as REST URL mapping is disabled

Security Last iteration, URL access was wide open. Due to “/**” : [IS_AUTHENTICATED_ANONYMOUSLY] Cut one asterisk off == hey, it works! Used sec tag in show and list views User passwords shouldn't be seen to everyone, hashed or not Added new roles for finer role distinction and updated nav bar to have more links based on role

What didn't work- Book REST issues def xml = request.XML results in a premature end of file exception when creating a new object Said request comes from the Create Book view Solutions to working around Grails bad XML?? List view & withFormat Using html closure = show list view, no Books XML closure = XML text tree