1. COS 470
Iteration 5

2. Starting Goals
Move from controller-centric operations to service layer
Adapt to REST architecture
Complete Order Fufillment requirements
Catch up on integration/unit testing
Finish security/access control and adapt views to restrict sensitive information
Shift from using scaffolding in UI

3. What happened.... Is that some things worked better than others.

4. Services Moved update, delete and save to services.
Implemented specialized exception classes
Moving list and edit functions == code bloat
Integration tests that passed before still worked

5. Order Fulfillment Currently, admin manually fills in the order form
Future enhancement- cron-style auto fill??
functionality partially implemented
Mail plugin hard to work with on local machine, possible need of local SMTP mail server instance?

6. REST Writing controller actions, easy
Executing and rendering in views, not so much
Get XML, see XML, what to do with it?
Online tutorials of limited use
Helps with writing controllers
Showing rendered views, nope

7. Testing Caught up on integration testing Some tests worked, others...
Sometimes tests fail with working site functionality
2 of 3 Book integration tests failed due to no signature method of Books.save() is applicable error.
Other test passed... with same definition. Why?
Site book functionality works, as long as REST URL mapping is disabled

8. Security Last iteration, URL access was wide open.
Due to “/**” : [IS_AUTHENTICATED_ANONYMOUSLY]
Cut one asterisk off == hey, it works!
Used sec tag in show and list views
User passwords shouldn't be seen to everyone, hashed or not
Added new roles for finer role distinction and updated nav bar to have more links based on role

9. What didn't work- Book REST issues
def xml = request.XML results in a premature end of file exception when creating a new object
Said request comes from the Create Book view
Solutions to working around Grails bad XML??
List view & withFormat
Using html closure = show list view, no Books
XML closure = XML text tree