Re: [orion-dev] "orion.project.handler" service unable to dynamically cr

[John Arthorne <John_Arthorne@xxxxxxxxxx>]

Hi William,

Indeed it is not permitted for plugins
to create files and folders in the user workspace. This is an important
security principle to protect against malicious plugins. It can only be
done today if the plugin is hosted directly on the same domain as the Orion
server (e.g., orionhub.org), but not on a different domain or even a sub-domain.
There is a long standing request for a notion of "trusted plugins",
which would be signed and authenticated to be from a trusted provider.
The trusted plugin could then in turn be permitted to make destructive
changes on the user workspace. There has not been any recent progress on
this idea, but if you are interested in participating or following along,
here is the bug reference:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=393711

john





From:      
 William A Escobar <waescoba@xxxxxxxxxx>
To:      
 orion-dev@xxxxxxxxxxx
Date:      
 07/21/2015 03:20 PM
Subject:    
   [orion-dev]
"orion.project.handler" service unable to dynamically  
     create project
Sent by:    
   orion-dev-bounces@xxxxxxxxxxx

---

Hello,

I am trying to create a plugin that implements the "orion.project.handler"
service, when I do so I use its initProject function to gather the parameters
needed. On my approach I tried to use http POST request to create the new
project but the request does not go through due to orionhub.org throwing
error "No 'Access-Control-Allow-Origin' header is present on the requested
resource". I am making the request from the plugin which is hosted
on a sub orionhub domain. I am not sure whether I am supposed to somehow
get through this error using a different request mechanism or if I am approaching
the Workspace and File API in the wrong manner. How am I supposed to dynamically
create files and folders in the orion workspace? all existing plugins,
such as gitplugin.js, hide that implementation so any help would be appreciated.

link to wiki I am following: https://wiki.eclipse.org/Orion/Documentation/Developer_Guide/Project_services#orion.project.handler_______________________________________________
orion-dev mailing list
orion-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe
from this list, visit
https://dev.eclipse.org/mailman/listinfo/orion-dev