Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Issue tags:
Reporter:
Created:
29 Nov 2012 at 20:15 UTC
Updated:
4 Jan 2014 at 02:42 UTC
Jump to comment: Most recent
Comments
Comment #1
monymirzaHi,
Project URL?
seems like you still have to much work on it.
> README.txt is missing
further errors and warnings can be found here. http://ventral.org/pareview/httpgitdrupalorgsandboxjohannesdr1854260git
Comment #2
johannesdr commentedThanks for the review monymirza. It's my first module submission, so I apologize for the mistakes.
What do you mean by "seems like you still have to much work on it."? Work to resolve the missing readme and errors, or work to add more functionality?
The functionality is very limited for now, because we first need to finalize our restaurant API before it can be accessed by the drupal module.
Comment #3
mohs3n71 commentedi have read your .module file line by line.every thing is ok just in lines 16 and 25 there is blank line that you can remove them from the code
in the .info file isn't that better that you define a package for you module ?
Comment #4
klausiWe are currently quite busy with all the project applications and I can only review projects with a review bonus. Please help me reviewing and I'll take a look at your project right away :-)
Priority is normal right now, see http://drupal.org/node/539608
Comment #5
anwar_maxThanks for your contribution to the drupal community. Your code looks good I found one issue in manual review it is a minor issue please try to fix it.
Manual Review:
1) Do not generate HTML by yourself use l() function on line no. 106 in tablebooker.module file
Comment #6
johannesdr commentedThanks for all the comments.
@klausi I will do my best to review some modules myself.
Comment #7
anwar_maxManual Review:
1. tablebooker_reservation_block_view(): The output of this function is vulnerable to XSS exploits. You need to sanitize data before printing it. see http://drupal.org/node/28984
Comment #8
johannesdr commented@mohs3n71 package in the info file is optional http://drupal.org/node/542202. I don't think there is a main package category it should go under?
@anwar_max: I added check_url and check_plain for text that can be configured on the settings page.
Comment #9
anwar_maxEverything looks good to me.
Comment #10
johannesdr commentedWho can approve this so I can convert my sandbox to a full project?
Comment #11
klausihttp://groups.drupal.org/node/142454
We are currently quite busy with all the project applications and I can only review projects with a review bonus. Please help me reviewing and I'll take a look at your project right away :-)
Comment #12
jthorson commentedA few comments:
This doesn't affect the module currently (other than the fact that there is no access restrictions on the functionality) ... and I don't see any other issues. So ... either remove the hook_perm or fix it before generating your first release. :D
Thanks for your contribution, johannesdr!
I updated your account to let you promote this to a full project and also create new projects as either a sandbox or a "full" project.
Here are some recommended readings to help with excellent maintainership:
You can find lots more contributors chatting on IRC in #drupal-contribute. So, come hang out and get involved!
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
Thanks to the dedicated reviewer(s) as well.
Comment #13
mitchell commentedjohannesdr, I apologize, but I have rolled back this approval.
A project should demonstrate sufficient hook usage and/or API integration. You can find more info at Working with the Drupal API.
This is an important criterion so that code integrates well and can be improved over time.
I encourage you to continue developing and gaining from the feedback available in the git approval process.
Thank you for you contributions and understanding.
Comment #14
klausiRe-opening this for discussion
If we do not approve a user we at least promote the project manually for them.
@mitchell: I disagree, this module implements plenty of Drupal hooks and I think it is sufficient for approval.
But there are some blockers anyway:
Comment #15
johannesdr commentedHi everyone.
@mitchell I am all for only approving quality modules without errors and that aren't totally useless. But I must say it is quite discouraging If a project is first approved and then totally disapproved (closed, won't fix).
I know the module currently isn't very big and doesn't provide a lot of functionality. But we are working on an API so we can show much more information on the restaurant website like opening hours and a restaurant menu. Since most of our users have Drupal websites I thought a module to help them integrate our services in their website would be very useful.
@klausi, good points. I will fix these as soon as possible.
Comment #16
gregglesA bit of feedback on process: Something as drastic as reversing an approval should be discussed before acting on. At least getting a thumbs up in irc if not posting a comment and waiting 24 hours.
@johannesdr - you're so close, keep it going ;)
Comment #17
mitchell commented@johannesdr, @klausi, & @greggles: Thank you for keeping the issue open; I didn't mean to suggest we cut short the dialogue or the quest for johannesdr's achievement.
klausi's solution of promoting this project, one-time, is great for johannesdr's needs and for contrib.
To explain this action further, I did this, even unfortunately stepping on peoples' toes, because there was a circumstance in the recent past where a user was approved with a block and an iframe, then he went on to create a bunch of very poor quality, paid projects, for which he's now being called out.
This measure, that a project meet a minimum level of complexity, is now in the Core Review Templates, and I sincerely believe it will help.
@johannesdr, I hope you don't feel as though I'm singling you out. I sincerely try to do right by my peers and act kindly in the project application issue queue. If there's anything else I can do for yor application, I'm happy to help.
@jthorson, I apologize for stepping on your toes. If you search by my participated issues, you'll find that I've done my best to expedite this process and make it more welcoming to applicants.
Comment #18
jthorson commented@mitchell: In this case, there is plenty of additional code in johannesdr's other sandboxes to justify promotion ... no, it's not 100% perfect, but there's another thousand lines of code there demonstrating (in my opinion) more than sufficient competence with the API to move this forward. This was a major factor in my decision to promote the project.
The other major factor is that this application sat in the queue for 12 weeks, despite having been marked RTBC. With that much delay in the RTBC queue, bumping it back to 'needs work' is paramount to sentencing jonhannesdr to another couple of months of waiting before being granted the 'git vetted' user status.
Maybe only those who have been through this process themselves truly understand just how demotivating that waiting period is ... it damn near drove me out of the community before I even started. Rather than inflicting that pain on yet another applicant, I chose instead to point out the remaining concerns (yes, I missed the variable_del()) and approve the application.
In my opinion, reversing that approval on the basis that projects must meet a minimum level of complexity is doing a great disservice to johannesdr. Not only was his other code taken into consideration before the approval, but the entire 'code must meet minimum length' standard was implemented without a strong consensus in the g.d.o thread (other than it being a 'guideline'), and the 'code must meet minimum complexity' tweak was added without any discussion at all. Yes, Drupal is a do-ocracy ... but this sort of unilateral process change does NOT occur without discussion, and SHOULD NOT occur without consensus.
For the record, I re-approved johannesdr as soon as I had noticed the permission had been removed. If we need to have further discussion on the topic, then so be it ... but I trust him to take the feedback into account and fix the identified issues before packaging a release, and we should not make him wait while we work to sort out our own dirty laundry.
Comment #19
mitchell commentedComment #20
johannesdr commentedThanks for the feedback everyone.
I have resolved the remaining issues in revision 77f5418 (http://drupalcode.org/sandbox/johannesdr/1854260.git/commit/77f5418).
I will do my best to keep improving the module in the correct way.