Just came across this on TechNet: http://www.microsoft.com/technet/security/Bulletin/MS06-056.mspx

This update resolves a newly discovered, privately reported vulnerability. The vulnerability is documented in the "Vulnerability Details" section of this bulletin.

The vulnerability could allow an attacker to gain unauthorized access to information. Note that this vulnerability would not allow an attacker to execute code to elevate their user rights directly, but it could be used to acquire information that could be used to further compromise the affected system.

We recommend that customers consider applying the security update.

So we are trying to put the wraps on out ASP.Net 2.0 app for a client here and I thought it would be cool to check out the ValidationGroup thing that they added to the Validators. So lets say I have something like this for example:

<asp:DropDownList ID="survey_list" runat="server" />
<asp:RequiredFieldValidator InitialValue="" Id="RequiredFieldValidator3"
runat="Server" Display="dynamic"
ControlToValidate="survey_list" ErrorMessage="You must select a survey to copy to." />

<asp:DropDownList ID="survey_questionsstart" runat="server" OnDataBound="list_DataBound" />
<asp:RequiredFieldValidator InitialValue="" Id="RequiredFieldValidator1" runat="Server" ControlToValidate="survey_questionsstart" ValidationGroup="CopyByRange" ErrorMessage="You must select a start question." />

So it's a dropdownlist of Surveys, followed by a question list and a button to copy a range of questions followed by another dropdown of questions and a button to copy a single question.

What I decided todo was have a ValidationGroup on each button so the validators could be seperated and give the user a rich UI so they can correct any mistakes they have.

Now what I would think would happen would be that if I click on either of the buttons the ValidationGroup would fire and then any items that don’t have a group would fire. Unfortunately that’s not what happens. It just looks at the group and then goes it merry way.

So if I want to have one control that needs to be validated on multiple conditions, like above and like so many other times in my career, I need to have two required validators for that item. Anyone know if what I want is possible. When my project winds down at the end of the week I hope to look into this some later.

Eli has notes from the SharePoint V3 Collab & Tracking session at PDC up.

This next version is sounding sexier and sexier the more I hear about it. I like the idea of subscribing to my items on my Sharepoint boxen and the blogging thing will allow us to ditch CommunityServer for a more all-in-one solution. The wiki stuff is meh to me.

The biggest item on my list of things I want to see is the updated UI. That has always been the item that people wanted to change and it wasn’t the easiest thing in the world todo. Not that other portal software was either, though Plumtree took the winner on customization. Hopefully with a tighter integration with ASP.Net and MPages/Themes this will be much easier on us.

Thinking out loud on:

“Microsoft Redefines Workflow With Windows Workflow Foundation (WWF)”

Wonder how long it will take the World Wild Life Foundation before they try and force Microsoft to change the acronym like they did to the World Wrestling FederationEntertainment.

Scoble points to Microsoft Gadgets.

Because as desktop users what we need is another set of widgets that clutters up our desktop. You guys do realize that Konfabulator is now free right? There is also DesktopX from Stardock. How about Kapsules? Or maybe you guys a classic Samurize style? Or maybe that one night I had with AveDesk got you jealous.

Let’s not get started on all the docks/sidebars/annoying places to store crap I’ve downloaded and installed over the years. My Google one works just as good as the MSN one I used to use, if not better in someways.

The only “potential” benefit of these gadgets is for the fanciful auxillury display tech that is coming in Longhorn, but even then the going rate of items being dropped out of the product lately it probably won’t survive post Beta 2.

My opinion: Focus on making a solid OS and let us developers make the wiz bang stuff for you. Or can we not be trusted?

So I’m happily coding away converting a legacy system ( not really legacy I guess, ASP.Net 1.1) and get to a part where I can add some new functionality to the site. I decide to update to the GridView and check things out. CommandField columns are a god send, or so I thought.

So like most real apps out there we all have some sort of DataBind() function in our libraries to preform calls to BLL or DAL’s depending on how things go. So I wire all this up, add some CommandField columns for editing, updating and deleting and start to run through the new part.

First error I get is when I try to cancel the in line edit function. I get an exception thrown stating that I hadn’t wired up the RowCancelingEdit Event. Fine, I don’t see the point but okay I’ll do it. Really at most I set the editindex to -1 and rebind the data. I don’t get why the framework can’t just do that for me only with ViewState data. Anyway, I wire that up. Now comes the huge pain in the ass. I have my RowUpdating event wired up and I notice that the GridViewDeleteEventArgs have concurrency built in with the OldValues and NewValues collection. Sweet! I can get the new value set my BLL value to the new value and hit save and be done. 10 lines of code cut down to 4, fantastic!

If only it was that easy. Instead I get nothing from these collections. Nothing at all. I’ve tried every combo of attributes on the GridView and CommandField column with none of them working. So I did some digging, I couldn’t find any real good examples of people actually databinding the GridView without using the declartive DataSources. I did happen to stumble across a post on the beta forums about this and the result was that I had to find the TextBox control that was generated an get the value that way. If this is so, I don’t see the value in using the GridView at all and will happily switch back to the old busted way. I’d really prefer the new hotness way though.

So if anyone can shed some light on this and hopefully prove me to be just lazy and not very good at google then that would be great.

So I've finally got some free time coming up after spending the past 2 years of my life working doing phonetic and linquistics algorithms for an ASP.Net application we wrote, it feels good to get to start something new.

So I'm jumping into some stuff I've missed especially SOA's and all the ideas around it. I'm trying to figure out how SOA's are different then what I've been doing for years. I work for a Plumtree portal integrator for a few years now and I don't see how SOA's are any different. I've taken clients disperate systems and brought them all into the portal for one common view for each business user. Is it different? And if it is, how so? These are some of the things I hope to be discovering soon.

On a side not, has anyone checked out this app Ta-Da from 37Signals? I've only started messing with it and so far I like what I see. It's simple and exports my stuff to RSS.

For those of you that are using Currently Hearing 2.0 plugin for Winamp 2/5 (If your not, you should be), I've posted on my site a quick web control for .Text that you can use on your site. You'll need to modify the code abit, mostly just where your song.txt file lives and the styles you want to use. It's probably very buggy but I whipped it up in an hour for a friend.

Quick update while I take a break from Nant, Nunit, CruiseControl and the Avalon bits. A buddy sent this new search engine my way called koders. It's used for searching through code and it's currently indexed 125,112,016 lines of code. It's got c# and vb.net listed and you can even search by a particular license.

Like a few other people I was a little disapointed that Google Desktop doesn't index Mozilla apps (Fireforx, Thunderbird). Since I'm sure they will be adding that functionality, be sure to hit the Suggestion center (http://desktop.google.com/support/bin/request.py?type=features&submit=Continue) at Google and add your vote to have them support Firefox.