AddOn Permissions

If I have a class called "Controller" and a class called "AddOn", how do I call one of AddOn's methods from the Controller class safely?
The point is that the AddOn class could have been written by anyone, so I need to make sure that when I call addOn.doSomething() that the addon can't delete all of the system's files or download and run a virus...
Thanks

Well, to call one of AddOn's methods from your Controller class, you'd have to instantiate the AddOn and then call its method.
What makes you think the AddOn coder couldn't fill up his constructor with malicious code? Methods aren't the only way someone with malign intent can play with your system.
... Unless, of course, AddOn's methods are static- in which case you wouldn't need to instantiate it, you'd just need to call AddOn.method().
How are you accessing AddOn's methods? If someone else codes AddOn, and you code Controller, how do you even know what AddOns methods are? Does AddOn inherit any sort of interface? Does it extend an abstract class?
Perhaps there's a way for you to 'check' code via coding a super abstract class for AddOn with a method that validates AddOn's doSomething method.
Perhaps you can somehow deny AddOn access to the file system?
What a fun problem, though. :) Best of luck.

Similar Messages

I need a replacement addon for Perma Tabs

I upgraded to FF 4. from 3.6.17 and either all of my addons upgraded ok or I was able to find satisfactory FF 4 compatible replacements for them.
The only one I could not do that with is Perma Tabs.
This is a vitally important tool for me since every time I open FF there are at least 4 different sites that I go to every time and it is a royal pain to each time have to open new tabs for them.
Does anyone know of a FF4 compatible extension that will emulate the function of Perma Tabs.
Note -- I have emailed the developer and literally begged him to please make Perma Tabs work with FF4.
I will be most grateful for any suggestions re a FF4 compatible extension that will emulate the function of Perma Tabs.

Thank you so much.
I've downloaded the file to my desktop.
It has .xpi at the end of its name.
When I click on it to open it, Windows says it needs to know what program created it.
What is the proper procedure for opening the file? -- do I have to put it somewhere in Firefox?
Please advise where the file should be put and then how to go about opening it -- I've never done anything like this before.
Thank you for your help and patience -- this stuff is really complicated for me

Permissions to run addons on a citrix server

Hi everyone,
I have a customer who is using a Citrix server for their users of B1 but are having problems to run the addons
(in this case XL Reporter and another Swedish local addon) if the user is not a local administrator on
the Citrix server.
The customer does not want all users to be local administrators - so the question is:
What permissions do you need to have to be able to run addons in a Citrix environment?
Best regards,
Susanna

Login to the citrix server console as the Administrator.
Login into SAP B1 (make sure you have all the proper authorizations or Super User)
Install the Addons
That should do it.
We run 3 addons on two Citrix servers and I always install them while logged in as the Admin of the servers.
Edited by: M. Jenkins on Apr 23, 2009 1:25 PM

Three days ago I replaced an earlier Adobe Flash with version 10.1.85.3. This has not appeared in the list in Tools/Addons/Plugins to permit me to enable it in Firefox, and I can't find the answer in the knowledge base.

Re. installing/enabling a Flash plugin
1 I'm running Firefox version 3.6.10 on Windows XP SP3.
2 Three days ago Secunia PSI informed me the installed version of Flash was a security threat so I uninstalled it then installed the latest version 10.1.85.3 . It appears in the Control Panel add and remove programs listings.
3 As of 2 days ago BBC iplayer keeps telling me I need to install (latest version of?) Flash.
4 I don't have this problem using my fallback Internet Explorer.
5 Assuming I needed to enable Flash in Firefox I went to Tools/Addons/Plugins but Flash is not listed there.
6 Firefox Support/Knowledge base/Installing the Flash plugin doesn't help - in step 2 I don't see the yellow 'Additional plugins are required...' bar when I go to the Adobe test page, but then why should I, it's already installed.
6 What's going on - please help!

I have the same problem as luiszamarreno. I tried using the following to update:
sudo apt-get --purge remove adobe-flashplugin flashplugin-nonfree; sudo apt-get --purge autoremove; sudo apt-get clean; sudo apt-get upgrade; sudo apt-get --purge autoremove; sudo apt-get install flashplugin-nonfree
Now I have the "flashplugin-nonfree" v. 10.01.218+really9.0.283.0ubuntu1 and it still doesn't work for the Facebook plugin. I get the notice it has crashed and needs to be updated. I also get a notice to update on the plugins page under tools --> addons. When I try that, it goes to the Adobe Web site, which I have seen on Ubuntu support sites that I do not want to upgrade from there.
Does anybody have an answer to this?

Addon not loading - B1 Usability Package for all users in SAP Business One

Hello, I am a new admin to SAP B1 and am about to go live in a few weeks. We are running SAP Business One v. 8.80.227.
Envirorment details: Dedicated server for SAP database, and Terminal Server for remote connections.
I have a demo group of users in Active Directory that have permission to Remote Desktop to the TS and load SAP. For now, theses users are local admins on the TS. ( Permissions to be revised once addon issues are worked out ). I am the companies tech, and we have a SAP implementation company leading the project development.
Currently the addons that we are running are CRSB1Addon SAP 8.8 and B1UP from boyumit.
For one of the users in the Active Directory Security Group all the addon's work great. However the other users get the error below;
When logging in the system message window shows the following:
Failed to assign SAP Business One user license to SAP Add-ons. The Add on is configured to automatically load on startup, yet once I get the error, I open the Add on Manager and I don't see the B1UP in either tab at all.
The error on the TS in the log is here:
Log Name:      Application
Source:        Application Error
Date:          18/03/2010 10:55:25 AM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      OVCL-TS.laurieroptical.local
Description:
Faulting application SAP Business One.exe, version 8.80.227.0, time stamp 0x4b8fadd4, faulting module ole32.dll, version 6.0.6002.18005, time stamp 0x49e037d7, exception code 0xc0000005, fault offset 0x000472da, process id 0x1f14, application start time 0x01cac6a4a2da01c9.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-03-18T14:55:25.000Z" />
    <EventRecordID>3778</EventRecordID>
    <Channel>Application</Channel>
    <Computer>OVCL-TS.laurieroptical.local</Computer>
    <Security />
</System>
<EventData>
    <Data>SAP Business One.exe</Data>
    <Data>8.80.227.0</Data>
    <Data>4b8fadd4</Data>
    <Data>ole32.dll</Data>
    <Data>6.0.6002.18005</Data>
    <Data>49e037d7</Data>
    <Data>c0000005</Data>
    <Data>000472da</Data>
    <Data>1f14</Data>
    <Data>01cac6a4a2da01c9</Data>
</EventData>
</Event>
Any comments would be greatly appreciated.
Thanks
Edited by: dontforgetken on Mar 18, 2010 4:05 PM

hello Ken - Boyum IT has its own License Administration - path of Administration > Add Ons > B1 Usability Package > License Administration...
Do all of the users have a checkmark to give them access???
When a user has only the Main Menu window open, select the "Form Settings" icon and follow the same path on the Form Settings window that is diplayed and make sure they have checkmarks next to the B1 Usability Package to be "Visible".
Are all of the user set to display Boyum IT on their machines???
LOL - I am not technical so I have no idea what that other stuff means...
Hope that helps...
Zal

How can I move the permissions.sqlite file to a new folder or a subfolder?

I am using a syncing program to keep cookie exceptions on multiple computers all equivalent. Unfortunately this is causing a problem because places.sqlite changes frequently and cannot be synced while FF is running. So I want to move the permissions.sqlite file to a new folder or a subfolder so I can only sync that one folder. Is there a way to specify the location of this file?

Sorry, there is no way to move that file out of the Profile folder, or specify a different location for it, built into Firefox.
One extension that might be able to help you do that is Pike's Bookmark Backup extension. BB allows you to specify which files are backed-up and where those backup files are saved. It also has a backup interval setting, IIRC. <br />
http://www.pikey.me.uk/mozilla/?addon=bb

Load XML file from addon domain without cross-domain Policy file

Hello.
Assuming that there are two addon domains on the same server: /public_html/domain1.com      and      /public_html/domain2.com
I try to load XML file from domain2.com into domain1.com without using cross-domain policy file (since it doesn’t work on xml files in my case).
So the idea is to use php file in order to load XML and read it back to flash.
I’ve found an interesting scripts that seems to do the job but unfortunately I can't get it to work. In my opinion there is somewhere problem with AS3 part. Please take a look.
Here are the AS3/PHP scripts:
AS3 (.swf in www.domain1.com):
// location of the xml that you would like to load, full http address
var xmlLoc:String = "http://www.domain2.com/MyFile.xml";
// location of the php xml grabber file, in relation to the .swf
var phpLoc:String = "loadXML.php";
var xml:XML;
var loader:URLLoader = new URLLoader();
var request:URLRequest = new URLRequest(phpLoc+"?location="+escape(xmlLoc) );
loader.addEventListener(Event.COMPLETE, onXMLLoaded);
loader.addEventListener(IOErrorEvent.IO_ERROR, onIOErrorHandler);
loader.load(request);
function onIOErrorHandler(e:IOErrorEvent):void {
    trace("There was an error with the xml file "+e);
function onXMLLoaded(e:Event):void {
    trace("the rss feed has been loaded");
    xml = new XML(loader.data);
    // set to string, since it is passed back from php as an object
    xml = XML(xml.toString());
    xml_txt.text = xml;
PHP (loadXML.php in www.domain1.com):
<?php
header("Content-type: text/xml");
$location = "";
if(isset($_GET["location"])) {
    $location = $_GET["location"];
    $location = urldecode($location);
$xml_string = getData($location);
// pass the url encoded vars back to Flash
echo $xml_string;
//cURLs a URL and returns it
function getData($query) {
    // create curl resource
    $ch = curl_init();
    // cURL url
    curl_setopt($ch, CURLOPT_URL, $query);
    //Set some necessary params for using CURL
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
   //Execute the curl function, and decode the returned JSON data
    $result = curl_exec($ch);
    return $result;
    // close curl resource to free up system resources
    curl_close($ch);
?>

I think you might be right about permissions/settings on the server for php. Unfortunately I'm not allowed to adjust them.
So I wrote my own script - this time I used file path instead of http address of the XML file. It works fine in my case.
Here it is:
XML file on domain2.com:
<?xml version="1.0" encoding="UTF-8"?>
<gallery>
    <image imagePath="galleries/gallery_1/images/1.jpg" thumbPath="galleries/gallery_1/thumbs/1.jpg" file_name= "1"> </image>
    <image imagePath="galleries/gallery_1/images/2.jpg" thumbPath="galleries/gallery_1/thumbs/2.jpg" file_name= "2"> </image>
    <image imagePath="galleries/gallery_1/images/3.jpg" thumbPath="galleries/gallery_1/thumbs/3.jpg" file_name= "3"> </image>
</gallery>
swf on domain1.com:
var imagesXML:XML;
var variables:URLVariables = new URLVariables();
var varURL:URLRequest = new URLRequest("MyPHPfile.php");
varURL.method = URLRequestMethod.POST;
varURL.data = variables;
var MyLoader:URLLoader = new URLLoader;
MyLoader.dataFormat =URLLoaderDataFormat.VARIABLES;
MyLoader.addEventListener(Event.COMPLETE, XMLDone);
MyLoader.load(varURL);
function XMLDone(event:Event):void {
    var imported_XML:Object = event.target.data.imported_XML;
    imagesXML = new XML(imported_XML);
   MyTextfield_1.text = imagesXML;
   MyTextfield_2.text = imagesXML.image[0].attribute("thumbPath"); // sample reference to attribute "thumbPath" of the first element
php file on domain1.com:
<?php
$xml_file = simplexml_load_file('../../domain2.com/galleries/gallery_1/MyXMLfile.xml'); // directory to XML file on the same server
$imported_XML = $xml_file->asXML();
print "imported_XML=" . $imported_XML;
?>
Regards
PS: for those who read the above discussion: the first and the second script work but you must test which one is better in your situation. The first script will also work between two domains on different servers. No cross domain policy file needed.

Installing Addon Support package (ST-A/PI)

Hello,
Our Earlywatch report is shouting about needing to upgrade ST-A/PI.
So I've used Maintenance Optimizer to download the package, placed it in EPS/in and un-carred the file.
Then I've then gone to SPAM and tried "Support Package > Load Package > from Application Server"
I've then gone to Display/Define and select component ST-A/PI with the following results:
"No Support Package found for this selection"
I have then tried to Upload from Front End instead of Application Server, with the same results.
I've raised a call with SAP but as usual it's now been 4 days without so much as a change in status so I'm hoping someone on here may have an idea.
Many thanks.

Ok guys, thanks for the replies. I haven't given you enough information.
Let me try fill in some gaps.
The result after I selected Load from App Server is to show me the .PAT file and tell me in the message text that: "OCS file already exists in Inbox. Upload not required"
However, if I select "Display" when "New Support Packages" is selected in SPAM, I see nothing with a note at the bottom stating "No OCS Packages found for this selection"
Maintenance Optimizer seemed to want me to select components I did not want to patch. I had a total of 110 files added to my download basket to download the one file I needed!
That file was titled "Servicetools for other App./Netweaver 04s"
I've already installed the ST-A/PI addon using SAINT. This recommendation is to install Support Package SP02 for ST-A/PI.
The recommendation also appears if I run RTCCTOOL in SA38 as well.
I definitely have the correct permissions to run this and, for the record, I have both the .SAR file and the "uncarred version" sat in EPS/in.
Thanks again.

When trying to copy and paste on my MAC using firefox, I keep coming across a message "your browser security settings don't permit the editor to automatically execute pasting operations". This only happens with firfox, not Safari. any help??

When trying to copy and paste on my MAC using firefox, I keep coming across a message "your browser security settings don't permit the editor to automatically execute pasting operations". This only happens with firefox, not Safari. any help??

See:<br />
http://kb.mozillazine.org/Granting_JavaScript_access_to_the_clipboard
https://addons.mozilla.org/firefox/addon/852 - AllowClipboard Helper

FF Mac Desktop Addon and links download errors after upgrade to 35.0.1

My problem started when FF was repeatedly trying to automatically upgrade to 35.0.1. It repeatedly failed the incremental upgrade and said I should download from Mozilla.org. However, after doing that and installing 35.0.1 both addons and application support for links were broken and did not work. I have tried various solutions including deleting mimeTypes.rdf, deleting FireFox and all associated settings using AppZapper. A clean install of FireFox still is having the problem.
When I try to add any addon, such as AdBlock, I see the message "There was an error downloading" as in the attached image.
https://support.cdn.mozilla.net/media/uploads/images/2015-02-07-07-12-42-8eb8ad.png
Similarly if I click on any link which would download a file, it always fails as in the following image where I attempted to download FireFox.
https://support.cdn.mozilla.net/media/uploads/images/2015-02-07-07-19-04-eb8857.png
However, if I click on the download retry widget next to the failed download it will succeed as in the attached image.
These issues first arose after FireFox could not upgrade itself and I did a manual download and install of 35.0.1. Initially, I could not cleanly quit FireFox. It always aborted when I selected Quit. However, since my AppZap delete and reinstall it does quit cleanly. Although, I can not seem to get Addons and link support to work. With out Adblock I really can not use FireFox.
I also use Chrome and Safari. Those are behaving normally. I also used Disk Utility to repair permissions. Nothing was listed in any directory associated with FireFox.
Any suggestions as to how to correct?

''carbohydrates [[#answer-687687|said]]''
<blockquote>
Sounds like a permissions issue. If firefox can not save things to your hard drive, it won't be able to download things. Have you tried completely uninstalling and reinstalling firefox? That can fix issues caused by update problems.
</blockquote>
I have checked permissions, using both Mac OS X tools, and terminal to assure directory was one to which it could write. I have tried to install a fresh clean copy several times without any improvement.
''finitarry [[#answer-687789|said]]''
<blockquote>
You can fix Adblock Plus by setting this in about:config:
* dom.indexedDB.enabled -> true
You could try downloading Firefox from
* https://www.mozilla.org/en-US/firefox/all/
</blockquote>
dom.indexedDB.enabled was already set to true. New installs do not clear the problem

Question about firefox permissions for sites

i have a question about sites permissions
in google chrom it is easy to set permission for each site like (java, flash plugin, image , ...)
http://i58.tinypic.com/nl66v9.png
but i prefer to use firefox
is there any addon or something else to have this options in firefox ?

You can inspect and manage the permissions for the domain in the currently selected tab via these steps:
*Click the "[[Site Identity Button|Site Identity Button]]" (globe/padlock) on the location/address bar
*Click "More Information" to open "Tools > Page Info" with the Security tab selected
*Go to the Permissions tab (Tools > Page Info > Permissions) to check the permissions for the domain in the currently selected tab
You can inspect and manage the permissions for all domains on the <b>about:permissions</b> page.
*https://support.mozilla.org/kb/how-do-i-manage-website-permissions

Where can i find my permissions folder to chande it from 175 to 177 in English

The script cannot either find or write to the
/export/emc-cust01/9/0/1/candyb1/wrapper directory. Please check this setting if the BASEDIR variable, and the permissions of the directory. If you have them set to 755, please change them to 777.

Are you creating an add-on for Firefox? If so, you'd be better off posting that question in the AMO forum @ https://forums.mozilla.org/addons/
Even if you're not developing anything, they're more likely to be the people who can help you with your query.

HANA One Management Console - Addons - logout

Hello,
when I select "Addons" in the HANA One Management Console, I get logged out instantly. I tried clearing cache/cookies as well as switching browsers (Chrome, Firefox, IE10).
Since it's probably hard to answer the question with this information, I tried to debug a little bit:
Problem seems to be that there are some AJAX requests (/hanaonewebadmin/UpdateManager/getPackageList/installpackage/wait, /hanaonewebadmin/UpdateManager/getPackageList/newpackage, /hanaonewebadmin/UpdateManager/getPackageList/installpackage/scheduledwi) are sent to the server and return
"resource": "sessionFilter",
"response": 221
This respone, on the other hand, leads to:
} else if ((installingerrorpackageList.response == '221') || (...) {
window.location = 'login.html';
So what is this sessionFilter and why is it returning 221?
Any hints appreciated,
Fabian

Many thanks to Mandar Khadilkar!
Today he was able to solve the problem.
The issue was that /root permissions were changed. I don't know why cause I did not change anything here (at least not on purpose).
This thread here seemed to have the same problem: https://scn.sap.com/message/15558136
Mandar was able to restore the permissions and will investigate further and maybe fix this in a next release, although the root cause is still unknown.

When using the online editor in our wordpress blog on any other online editor I get this error "Your browser security settings don't permit the editor to automatically execute cutting operations. Please use the keyboard for that (Ctrl+X)" Please help.

I have online editors for our blog and websites for generating articles and blog posts. Different editors from different sites and programmers. Firefox doesn't allow me to use the cut/paste/copy functions with these editors. I get this message or something similar every time. "Your browser security settings don't permit the editor to automatically execute cutting operations. Please use the keyboard for that (Ctrl+X)"

See:
*http://kb.mozillazine.org/Granting_JavaScript_access_to_the_clipboard
*https://addons.mozilla.org/firefox/addon/852 - AllowClipboard Helper

Error While Installing AddOns From OfficeStation

Hi,
There is an error that happened while trying to install any AddOn from OfficeStation. OfficeStation is a device that is just similar as if you are using the server, its like sitting on the server machine from a remote desktop, it has all the features as compared to a desktop but physically it does not have a Harddisk and ram. It has a virtual board with a flash memory built in it and can be worked as an individual CPU. And this OfficeStation is connected to the Server and is accessing all the featured and programmes installed on the server including SAP B1. But while installing an AddOn from a OfficeSation it throws an error message box Microsoft VC++ Runtime Library, Runtime Error, Program C:\Program Files\SAP\SAP Business One\SAP Business One.exe abnormal program termination
And as you click OK the entire B1 Application terminates at that Station and the next time when you logon at that officestation, it gives you the same error (Message Box) and B1 Application terminates. You can run the same addon and SAP B1 sitting on the server, but now you cannot access SAP B1.
So kindly look into it and get us a correction solution.
Thanks & Regards
Murtaza

Hi, Murtaza!
Have a try to log on to the server from the "OfficeStation" with the user name that you use to log on sitting on the server and when the Addon works.
If it does't help, try to re-install the SBO DI API using the "OfficeStation".
I suppose that solution lies around the security permissions.
HTH,
Aleksey

AddOn Permissions

Similar Messages

Maybe you are looking for