Tweet |
One mechanism is to create an interim Visualforce page with a page action attribute tied to a controller method that inserts the record and then redirects the user to the actual Visualforce edit page. The downside to this method is that I would end up with two pages and two controllers, as its not safe for this to be incorporated into a single controller due to the fact that order of execution cannot be guaranteed.
An alternative solution, and the route that I chose to go, is to use javascript to invoke an action method on the controller, and have this action method carry out the DML operation. In order to ensure that this doesn't happen every time that the page is refreshed, I have an "initialised" flag in my controller that is set to false in the constructor, and updated to true once the DML has taken place.
The controller is shown below:
public class InsertObjectController { public Boolean initialised{get; set;} public Account acc {get; set;} public InsertObjectController() { initialised=false; } public void init() { if (!initialised) { acc=new Account(); acc.Name='Blog Account'; insert acc; initialised=true; } } }
On the page side, the main change was to put out a please wait spinner while the initialisation was going on, so that the user wasn't tempted to start entering data while the initialisation was taking place. The DML operation is executed via an actionfunction tied to the onload handler, and once this completes the main body of the page is rerendered, replacing the spinner with the newly inserted record detail (including the id of the account).
Note that it this will overwrite any existing onload handler - for details of how to add a function to the end of the existing onload handler see this blog post.
The page markup is shown below:
<apex:page controller="InsertObjectController"> <apex:form > <apex:actionFunction name="doInit" action="{!init}" rerender="allPanel"/> <apex:outputPanel id="allPanel"> <apex:outputPanel rendered="{!NOT(initialised)}"> <p align="center" style='{font-family:"Arial", Helvetica, sans-serif; font-size:20px;}'><apex:image value="/img/loading.gif"/> Please wait</p> <script> window.onload=function() { doInit(); }; </script> </apex:outputPanel> <apex:outputPanel rendered="{!initialised}"> <apex:pageBlock title="Account Details"> <apex:pageBlockSection > <apex:inputField value="{!acc.id}"/> <apex:inputField value="{!acc.name}"/> <apex:inputField value="{!acc.type}"/> <apex:inputField value="{!acc.industry}"/> </apex:pageBlockSection> </apex:pageBlock> </apex:outputPanel> </apex:outputPanel> </apex:form> </apex:page>
Hey Bob,
ReplyDeleteVery cool workaround, but there is a cleaner way to do this using the page action attribute. You can put any action function in this attribute and it will run after the constructor. You should be careful using this since it opens up some security holes as the CSRF token isn't needed to perform the action. However, in most instances the benefit outweighs the risk. There is a detailed discussion of this available on developer force at http://wiki.developerforce.com/index.php/Secure_Coding_Cross_Site_Request_Forgery#Apex_and_Visualforce_Applications.
Here's what it would look like. Not that because tags are removed from comments I've had to strip the "<" and ">" and replace them with pipes in the visual force page code.
public class InsertObjectController
{
public Account acc {get; set;}
public InsertObjectController() { }
public void init()
{
acc=new Account();
acc.Name='Blog Account';
insert acc;
}
}
|apex:page controller="InsertObjectController" action="{!init}"\|
|apex:form|
|apex:pageBlock title="Account Details"|
|apex:pageBlockSection|
|apex:inputField value="{!acc.id}"/|
|apex:inputField value="{!acc.name}"/|
|apex:inputField value="{!acc.type}"/|
|apex:inputField value="{!acc.industry}"/|
|/apex:pageBlockSection|
|/apex:pageBlock|
|/apex:form|
|/apex:page|
Actually the reason I didn't go the page action route is mentioned in the blog post - order of execution. There's no guarantee (as far as I'm aware) that the page action will run before the getter.
ReplyDeleteI have used it in the past without issue, but it isn't advised for this reason.
I haven't investigated this in full depth, but as the action method fires before the page renders it will fire before the getters unless the getters are referenced in the constructor or action function itself.
ReplyDeleteHi Ralph,
ReplyDeleteI have researched this though - I suggest you read the following discussion board thread:
http://boards.developerforce.com/t5/Visualforce-Development/Reason-why-action-attribute-of-apex-page-should-not-be-used-for/td-p/104343
This is the reason I was looking for another mechanism - if the Visualforce developers tell me I shouldn't use that method as the order of execution isn't guaranteed, that's good enough for me.
Alternatively is it possible to do the insert in a static block of the controller ?
ReplyDeleteMy page is stuck at "loading Please Wait!". What is the problem. Is it necessary to provide some value through controller. Please help me.
ReplyDeleteThat sounds like the init action method failed to set the initialised flag. Best bet is to post your code up the to developerforce visualforce board and tweet/dm/comment the link, and I'll try to help.
DeleteBB/K-
ReplyDeleteI am using action= on a page that is embedded in a std page. The actioned Apex code then calls another class that does a REST Callout. When a Save happens I get an initial refresh then a second refresh after getting results.
It basically works but the waits and refreshes are clunky. Any thoughts on how to do better? I really only want the callout when email field changed and I go validate and then a rerender. Trigger seems a problem with REST and Synchronous calls..not allowed I think.
I'm doing some testing, and this seems to work fine except when I have renderAs="PDF"
ReplyDeleteAny idea why that wouldn't work?
Thanks,
Yes - this solution relies on JavaScript and PDF doesn't have a JavaScript engine, so there is nothing to interpret the JavaScript and execute the code.
DeleteHi Bob,
ReplyDeleteI am facing the similar problem.we have a visualforce page with standardController attribute set to QuoteLineItem object. We are using this page for custom buttons content source and we have added this button on detail page Quote Line Item object, Now when user clicks on this button we need some dml to happen in the controller action of this page. I can not directly do that DML in the action method of that page as it will be vulnerable to CSRF attack. The technique you have mentioned above to to call the method from javascript using actionfunction and the form on page to get built in CSRF protection is accepted by salesforce security review is this technique CSRF attack proof ?
Hi Bob, what do you think about using Javascript remoting? A POST can be started from the Window.OnLoad() event, and as of Spring '14, it will have a CSRF token.
ReplyDeleteHi, my init method is not even being called. As i do not see anything in debug logs from that method.
ReplyDelete