Re: Using Cayenne Servlet Filter can bring the web application down

From: Michael Gentry (mgentr..asslight.net)
Date: Tue Sep 15 2009 - 09:23:19 EDT

  • Next message: Arnaud Garcia: "Re: getThreadObjectContext with domain parameter - code -"

    Nice. Did you have any integration issues? I'm just starting to use
    Cayenne with T5 and it has been surprisingly smooth thus far, but I
    still have lingering memories of the hoops I had to jump through with
    T4 (especially looping over data objects) serializing my objects.

    Thanks,

    mrg

    On Mon, Sep 14, 2009 at 12:26 PM, Borut Bolčina <borut.bolcin..mail.com> wrote:
    > Yes, we successfully deployed a T5 application (openid server (70K users and
    > rising) and much more) and yes it uses Cayenne 3M6. :-)
    >
    > I am again gaining momentum to continue writing.
    >
    > Cheers,
    > Borut
    >
    >
    > 2009/9/14 Michael Gentry <mgentr..asslight.net>
    >
    >> Hi Borut,
    >>
    >> I'm just curious if you are still using Tapestry 5 (and if using
    >> Cayenne with T5)?  I also liked your blog where you were writing about
    >> T5.  I found that useful when I was just starting to read about T5 and
    >> get started in it (I'm still learning, of course -- no expert here).
    >>
    >> mrg
    >>
    >>
    >> On Mon, Sep 14, 2009 at 4:07 AM, Borut Bolčina <borut.bolcin..mail.com>
    >> wrote:
    >> > Hello,
    >> >
    >> > I think web developers should be given an advice at
    >> > http://cayenne.apache.org/doc/web-applications.html that if using
    >> Cayenne
    >> > Servlet Filter the web application can be brought to a halt if a
    >> malicious
    >> > user sends lots of  cookie-less requests (every request bounds data
    >> context
    >> > to a new session). We were testing our app with JMeter and found out we
    >> can
    >> > not afford to use filter approach.
    >> >
    >> > It would be of most value if some debates from the mailing list about how
    >> to
    >> > use DataContext based on different web application needs would be at the
    >> > http://cayenne.apache.org/doc/obtaining-datacontext.html. What I have in
    >> > mind is a tiny cookbook, just two or three recipes, on why it is good to
    >> > gave one data context shared for all users, some data context created for
    >> > each request, some saved in the session, when not to put dc in the
    >> session
    >> > etc.
    >> >
    >> > Should I open an issue in the JIRA?
    >> >
    >> > Cheers,
    >> > Borut
    >> >
    >>
    >



    This archive was generated by hypermail 2.0.0 : Tue Sep 15 2009 - 09:23:57 EDT