Windows Workflow Foundation links

Couple of useful articles.

WF not WWF
What to use WF for

Theories of Scaling

Mike and I went to a .NET usergroup meeting called "The Scaling Habits of ASP.NET Applications" by the excellent Richard Campbell (of DotNetRocks radio, Strangeloop etc) on Monday.


I highly recommend watching a screencast of his presentation(pptx), but this post tries to summarise his key points

Globalization in ASP.net

Scott Hanselman blog posting about MVC3 globalisation. Some useful titbits. He visits Globalization quite frequently, so it's worth keeping an eye on his blog.

http://www.hanselman.com/blog/GlobalizationInternationalizationAndLocalizationInASPNETMVC3JavaScriptAndJQueryPart1.aspx

Entity Framework entity splitting

We were talking about how we can be smarter about setting up models for objects where the required fields change depending on who is looking at it - e.g. Where an administrator is setting up a user they should only need to set up email address, username, dummy password and client. When the user logs in it should then force them to fill in more details, such as name and address. One way of doing this is documented below.

http://www.robbagby.com/entity-framework/entity-framework-modeling-entity-splitting/

Entity Framework 4.1 Release Candidate available for download

Update from CTP 5.

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=2dc5ddac-5a96-48b2-878d-b9f49d87569a

Procedurally generated culture sensitive validation for ExtJS.

So here's a quick update of what I've been doing in the last week.  My estimate for this was way of the mark but I encountered a couple of bugs in ExtJS concerning at which point ExtJS receives its validation data, and at which point we can hook in to use its nifty features, but now I think I've got the best part of a pattern down for how to go about building custom controls with culturally sensitive validation.

CSRF Prevention with MVC.NET

There's plenty of information on the inter-tube on the Cross Site Request Forgery Hack (CSRF, also known as XSRF and Confused Deputy - go on just Google those acronyms) so I'm only going to give a general overview of the exploit but know that it is a problem that has been around pretty much since the birth of of the internet, that browsers cannot prevent it (and have in the past aided it), and pretty much relies on a User's Trust / Stupidity.