Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
25 Feb 2012 at 13:42 UTC
Updated:
4 Jan 2014 at 01:39 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #1
farald commentedHey!
I ran a review using http://ventral.org/pareview, with following result:
You may want to consider configuring your development IDE to follow Drupal's coding standards as best as possible.
Comment #2
jygastaud commentedHi,
Thanks for its first review. You're right.
I've corrected errors and warning.
ventra.org/pareview
Comment #3
patrickd commentedI'm a little confused about which branch to review, you got an 2.x but the 1.x is more recent, did you unintentionally created the 2.x one or does it contain yet-not-stable code?

as there are currently many applications in queue we need more reviewers,
so think about getting a review bonus and we will come back to your application sooner.
Comment #4
anilbhatt commentedAutomatic Review:
Please visit below page, i will suggest you to remove the following warning and errors:-
http://ventral.org/pareview/httpgitdrupalorgsandboxjygastaud1445640git
Manual Review:
function entityconnect_edit($cache_id) {you are returning return $cache_id; but before this you are calling drupal_goto() which will not allow next statement to call it.Comment #5
jygastaud commented@patrickd
You're right. It's a bit confusing.
The fact is that I have backport some issues fixing I checked into 2.x into 1.x.
When I submit the process review I hope for a 1.x review and continue working on 2.x branch.
However, my work on branch 2.x is currently focus on optimization of functions of 1.x branch. So I think I should merge 2.x into 1.x.
Do you think it's the right way?
You're right. I will try to give a hand to help the process review.
@anilbhatt
Thanks for review.
As mention 2.x was the "work in progress" branch and I knew that some coding standards was not respected.
I now updated my code with your recommendations.
One more thing, you said:
I don't see how I can do it on my menu item because I use it to access to node add, user add (and I hope for more entity types soon).
Moreover these peace of code comes from the original module and I haven't modified it (nodeconnect)
The only way I see to add access argument is to create my own permissions for the module as "allow users to see add button" and "allow users to see edit button".
Did you see any better way to do it?
EDIT: I followed my idea mention above, so I add 2 permissions for menu access and some checks for user_access.
Comment #6
jygastaud commentedHi all,
I merge branch 7.x-2.x into the 7.x-1.x and update README.txt.
So, everything should be more clear now.
Waiting for your review.
Comment #7
patrickd commentedHi jygastaud,
please keep discussions in the issue,
If you've done 3 or more manual reviews you can simply add the review bonus tag your self.
But, I had a quick look at your reviews an I got a few problems with them that you can improve for future reviews:
Don't get me wrong, I'm very happy that you've decided to help out in the queue!
But it would be great if you'd spend a little more time and effort on your reviews :)
Comment #8
jygastaud commentedHi @patrickd,
I well understand your recommandations about autmated review (or long errors reports when I test a project).
I keep it in my mind.
I also aggree when you said that 3 manual reviews should be at least made.
That was indirectly a part of my previous question.
You said that I made few manual review and you right I have made maybe 2 manual reviews.
There a reason for me to provide first a automated review, show if applicant do the effort of take care about the recommandations then take the time to made the manual review.
But if there is no comments, actions or anything else, I will not give more time to manual review of the project.
I thought it s the best way to process to review. Don t you think?
Comment #9
patrickd commentedIt's absolutely okay if you first point the applicant to automated reviews at the beginning (I do it the same way) but as mentioned above, just don't paste in the whole review. ;)
Comment #9.0
patrickd commentedReviews of other projects
Comment #10
jygastaud commentedAdded 3 projects where I made a manual reviews.
Let me know if it is "not enough" to pretend to the right to put review bonus tag.
See you?
Comment #11
klausiReview of the 7.x-1.x branch:
This automated report was generated with PAReview.sh, your friendly project application review script. You can also use the online version to check your project. Get a review bonus and we will come back to your application sooner.
manual review:
Removing review bonus tag, you can add it again if you have done another 3 reviews of other projects.
Comment #12
jygastaud commentedHi,
Thanks Klausi for review.
I did all change in doc blocks and fixed menu access security issue (I thought).
entityconnect_form_alter(): why do you access $_REQUEST here? Why can't you use $form_state or $form?
I should admit that a part of nodeconnect module I reused and modified to focus on my needs.
We use $_REQUEST to get build_cache_id and "is child" information from the URL. URLs are build via drupal_goto with parameters or form_state redirection with "cache id" put in the URL.
Also, as we can have potentialy multi-cache form (eg: I create an node "article" which contains an entityreference from others "articles", I need a new node which doesn't exist yet, I click on button "add" and create my new article. This article could also need a new article ... ), I thought it is the easy way to still get access to the information.
Comment #12.0
jygastaud commentedModify list of reviews done
Comment #13
jygastaud commentedAdded 3 more reviews.
Comment #14
klausiPlease don't remove the security tag, we keep that for statistics and to show examples of security problems.
Comment #15
jygastaud commentedOops sorry. will not do it anymore ;)
Comment #16
ceardach commentedGreat job getting PAReview to show absolutely no errors. That's a tough job, and I'm impressed. Plus your wysiwyg_exclude? Doubly impressed.
Applying Drupal's branching strategy with our development workflows is rather tricky, ain't it? Alright, so the 1.x, 2.x, 3.x kind of stuff is for api changes. If a module that extended your module would totally break after you pushed some code, you need to move up an increment. If you have not made an official release, feel free to make as many api changes and rewrites as you want without increasing a major version. Although, oftentimes people will increment a major version if they're doing a significant rewrite. Others will need to do a major version increment even if they are on dev just because they are so popular and have been on dev way too ridiculously long... pathauto
In your case, it looks like you wanted to create some experimental changes without messing up your current stable branch. Awesome, that is exactly how you should do it, and that is why Git is awesome. But, you shouldn't be using the 7.x-x.x branch naming scheme for those sorts of experimental branches. How you name them could be entirely personal preference. It could be the issue number plus description, like "1456272-refactor_forms", or something more explicit like "7.x-1.x-refactor_forms" which clearly demonstrates what it is a branch from.
Great README.
Your
.gitignoreseems to be personal to you. Not a good idea, you should probably take that out. That could be tough for your workflow I know. If you let me know your use case I may be able to give you some tips to work around it. Not a blocker, but you'll want to remove it.Your .info file surrounds some values with quote, and others with nothing. It'd be best to be consistent. Surrounding with quotes is best. Minor, not a blocker.
You use
arg()a bunch, and we're trying to reduce that usage. Minor, not a blocker. Just something to think about.Appropriate usage of hooking into Drupal's jQuery behaviors.
You tackled a rather significant project and demonstrated a solid understanding of Drupal community standards, FormAPI, entities (duh), and how to progressively enhance through module development (++). Just what we want in a contributor, so I for one would like to welcome you with open arms.
Comment #17
klausimanual review:
But that are just minor issues, so ...
Thanks for your contribution, jygastaud! Welcome to the community of project contributors on drupal.org.
I've granted you the git vetted user role which will let you promote this to a full project and also create new projects as either sandbox or "full" projects depending on which you feel is best.
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
As you continue to work on your module, keep in mind: Commit messages - providing history and credit and Release naming conventions.
Thanks to the dedicated reviewer(s) as well.
Comment #18
mlncn commentedCongratulations, jygastaud! You are now a "vetted" git user (with a good understanding of git tricks!) and can promote experimental sandboxes to full projects.
Thank you all for solid reviews, looks like there is more work before a full release but perhaps it is in alpha. Please review the recommendations above, at the least, before releasing.
Comment #19
jygastaud commentedHi all,
Thanks everyone for your reviews and for access.
To answers your last comments I made some part of change:
@ceardach
Your .gitignore seems to be personal to you.
You right. it was to remove my netbeans files and folder but it is not useful anymore. I removed it.
Your .info file surrounds some values with quote, and others with nothing. It'd be best to be consistent. Surrounding with quotes is best.
Done
Also thank you very much about advice for manage version.
By reading also @mlncn comments I thought I will made from now a 7.x-1.x-alpha version.
RC will come when I will have add others core entities.
Then version 7.x-2.x will be made with support of other entities types or maybe with the add of Ctools support.
@klausi
"'#language' => 'und',": use the constant LANGUAGE_NONE.
Done
"$item['href'] = 'admin/people/create/' . $cache_id . '';": why do you need to append the empty string at the end?
It was a typo. I corrected it.
Comment #20.0
(not verified) commentedAdd reviews done for other projects