Are OCI Function calls secure enough?

Dear Friends,
I would like to know if the OCI programming is used these days. If yes, are these calls secure enough to take care of the ever increasing frauds.
Regards
Bhaskar Divecha

I am using OCI in my application and using it connect to an Oracle Instance over the network.
How secure will the username, password and data be?
Is it sent over the network as clear text? Or is there any encryption involved?
What is Oracle Advanced Security? How can I configure this?
Found this thread, but it wasnt very helpful.
Re: Are OCI Function calls secure enough?
Thanks in advance,
Harsha

Similar Messages

OCI Function call vs Odatabase Class

In my application I've used ODatabase class to
open a database connection.
At the same time, I use OCI function calls method to connect to the same database. This is use to execute store procedure & query.
My question is that does it cause double connection to Oracle?

Yes.

More function calls in stored procedure

Hi,
I would like to know if there are more function calls in a PL/SQL stored procedure, would it affect the performance of this procedure?
Or will it be more efficient to have the body of those functions inside the procedure itself.
Of course a method call is always costlier than the monolithic procedure but my question is how much would be difference in performance.
Rgds
Varad

Yes, avoid using UDF , means especially a scalar udf... See how you can re-write a scalar udf as table valued udf.
http://sqlblog.com/blogs/alexander_kuznetsov/archive/2008/05/23/reuse-your-code-with-cross-apply.aspx
Best Regards,Uri Dimant SQL Server MVP,
http://sqlblog.com/blogs/uri_dimant/
MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting:
Large scale of database and data cleansing
Remote DBA Services:
Improves MS SQL Database Performance
SQL Server Integration Services:
Business Intelligence

Is a Beta release secure enough for e-commerce ?

I know beta versions are generally''' not''' recommended as everyday browsers,but now that current Firefox betas are conceptually more like release candidates,are they stable and secure enough to be used for e-commerce (ebay and the likes) just like a normal release version? If nothing,they should receive security fixes before the release,whilst critical bugs should have already been dealt with in earlier stages,is that understanding correct?
edit:yes this was posted with a nightly but the question was really aimed at current beta releases.

Firefox 8.0 beta becomes a release version today 11/08 at 8am PST. Security is no issue with any version, as all supported versions are going to get an update today.

ISA5.0 How to know Function called in SAP for ISA.

Hello everybody,
I need to know what are the functions called in SAP to get the information or to create the sales document order.
How could i do to see the functions called?
Please.
I'm on Internet Sales 5.0 and i have an ECC6.0 for the backend.
Thanks

hi,
There is no standard process to know the Called Function Module on particualr action.
The only way most of the developers follow is to see the Log files which displays the Function Module called.
The other way is you have to debug the class files to know.
Regards,
Sateesh Chandra

Are there functions to call Adobe's built-in filters?

Like say I wanted to call Gaussian Blur that photoshop already has, are there functions to do this? Or would I have to create my own Gaussian Blur?
Thanks

Yes, from automation plugins or scripts.
From other plugins: no, you'd have to create your own.

Very urgent...function wise security

Hi all,
-our system has function wise security on forms,which mean each user has different grant on each function(FORM)
-those function are defined in table holds FUN_ID,Fun_Path,Fun_title
-due to workflow difference many functions may refere to the same form but differs only in title and of course function ID(PK)
-the main menu is a list item which fills dynamically with forms title according to user grants,and the value of this list item is FUN_ID
-now i open the form from the main menu i pass list item value (FUN_ID) to a global then read this global from within the form
THE PROBLEM:
if i've to call a FORM from another form how can i set this global to the FUN_ID of the new form..i dont want to hard code this and i want to know if there is a system variable which is unique for each form???
thanks in advance
sinar

I don't think there is something unique for each form but at least there is a system variable to see the current form you're in. isn't that enough.
bye,

Calling secured Web Service

Hi,
I am new in calling web service from PL/SQL block.
From the code I'm successfully able to call non-secured webservice like this "http://www.ignyte.com/webservices/ignyte.whatsshowing.webservice/moviefunctions.asmx?wsdl"
And also by setting the wallet I'm also able to call secured web service like this "https://www.docusign.net/api/3.0/Credential.asmx?WSDL" (ping method).
For calling this secured service I stored certs with chain into the wallet and that works.
But my problem is a different web service where that web service is authenticating me with my certificate. I have VeriSign certificate with private key and that web service has my public key. Whenever I will send SOAP request I need to send my certificate with the request. And communication will be over SSL.
I have created a wallet with complete chain from the PFX file I received from VeriSign and Wallet is in Ready state, also I have included web service's certificate also.
Whenever I am trying to make SOAP call I'm getting
ORA-00600: internal error code, arguments: [kgazmo_1], [], [], [], [], [], [], []
Please let me know where is the problem. May be I'm not able to send my certificate for authentication or may be I'm not able to establish SSL for communication from PL/SQL.
I'm using 10.1.2 as database. I also have 10g AS installed, if that can help in achieving this.
Code is as follows:
FUNCTION CallWS
RETURN xmltype
AS
l_request soap_api.t_request;
l_response soap_api.t_response;
l_url VARCHAR2(32767);
l_namespace VARCHAR2(32767);
l_method VARCHAR2(32767);
l_soap_action VARCHAR2(32767);
l_doc xmltype;
BEGIN
l_url := 'https://secured.webservice.com/WS/WebService.asmx';
l_namespace := 'xmlns="https://secured.webservice.com/WS"';
l_method := 'GetMe';
l_soap_action := 'https://secured.webservice.com/WS/GetMe';
utl_http.set_wallet('file:c:/wallets','pass123');
l_request := soap_api.new_request(p_method => l_method,
p_namespace => l_namespace);
soap_api.add_parameter(p_request => l_request,
p_name => 'param1',
p_type => 'xsd:string',
p_value => 'val1');
soap_api.add_parameter(p_request => l_request,
p_name => 'param2',
p_type => 'xsd:string',
p_value => 'val2');
l_response := soap_api.invoke(p_request => l_request,
p_url => l_url,
p_action => l_soap_action );
l_doc := l_response.doc;
RETURN l_doc;
END CallWS;
You can find SOAP_API package here [SOAP_API|http://www.oracle-base.com/dba/miscellaneous/soap_api.sql] .
Thanks in advance.
-Smith

Thanks again Billy,
I have configured a wallet with all the necessary certificates. Actually I have purchased a VeriSign trusted certificate and convert that into Oracle Wallet (p12) using openssl with appropriate password. And I'm calling UTL_HTTP.set_wallet('<path_to_wallet>','<pass_to_open_it>');
I have send my public key to them (web service company) and they need me to send my certificate with every request so that they can authenticate.
You are saying we don't have to write any code for TLS/SSL UTL_HTTP will take care of that, thats really good.
One more thing I want to mention here...
In Internet Explorer - When I am importing my certificate without my private key and trying to access web service I'm getting 404 page not found error.
But when I'm importing my certificate with the private key, I can see WSDL and all other methods offered by that web service.
I'm guessing Oracle Wallet that I'm creating with my certificate will store private key also. B'coz it is showing me User Certificate in Ready state.
ORA-00600 is not giving me proper location where I can find any error in my code.
Thanks
-Smith

FABridge - Error: You are trying to call recursively into the Flash Player [...]

I'm using FABridge to communicate between JS (and GWT) and a flex component I've written, but I've run into a strange error:
You are trying to call recursively into the Flash Player which is not allowed. In most cases the JavaScript setTimeout function, can be used as a workaround.
I know what the error means, but what I don't understand is why I'm only receiving this error when I run the application locally (127.0.0.1) in this one webapp.
Once I upload the app to the remote testing server, the error goes away and the app functions as it should. I've tried to use setTimeout without any luck.
I thought this might be a crossdomain problem so I set Security.allowDomain("*") in flex and the same on the testing server via a crossdomain.xml file but this did nothing.
The function that is being called takes a parameter (image or an image wrapped in swf file) via the querystring and adds it to the stage. The files all exist on the remote server.
Another strange part is that when I run the flex app via Flash Builder it behaves fine. Also, I've run the component as part of a separate project locally without issue.
The problem only exists when I run the component as part of the this project, when I'm working on it locally. I even have another local app using the same component that works fine.
I'm at a loss. Any ideas?

Ok, I was excited when I noticed I didn't change allowscriptaccess, but that didn't work.
Just to recap:
-I have Security.allowDomain("*") as the first line in the init() (creationComplete) function
-I have a crossdomain.xml file located on the remote server that allows="*" and ports="*" (because gwt debugs through :8888)
-allowscriptaccess is set to always
-I am using FABridge to communicate between JS and the swf. Calling the function directly from Firebug causes the same error.
Even trying to call a function that is completely unrelated to the remote domain produces the same error. For example, getAppHeight(). So at second glance, this doesn't seem to be a security issue?
The only post (Google Cache) about the error suggests I use FABridge.MethodsToCallLater which doesn't seem to exist anymore in the version of FABridge that I downloaded. The copy of FABridge I have doesn't have any version information in the file, but I believe I pulled it from the Flex 3 SDK.
Can anyone tell me if that feature has been removed/added in recent versions? Or any other insights into my current situation? Thanks for looking!

Function call in procedure within Package Body

I am a novice in PL/SQL so that I can't find out where the problem is. I am testing a function call in procedure within a Package Body.
But the PL/SQL Complier doesn't compile the package body but I don't know what I do wrong. Plz let me know how to call a function in procedure within a Package Body?
Here are the Packaget test programs..
CREATE OR REPLACE PACKAGE manage_students
IS
PROCEDURE find_sname;
PROCEDURE find_test;
PROCEDURE find_test_called;
FUNCTION GET_LASTMT
RETURN SEQUENCE_TEST.SEQ_NO%TYPE;
END manage_students;
CREATE OR REPLACE PACKAGE BODY manage_students AS
v_max_nbr SEQUENCE_TEST.SEQ_NO%TYPE;
PROCEDURE find_sname
IS
BEGIN
BEGIN
SELECT MAX(SEQ_NO)
INTO v_max_nbr
from SEQUENCE_TEST;
DBMS_OUTPUT.PUT_LINE('MAX NUMBER is : '||v_max_nbr);
EXCEPTION
WHEN OTHERS
THEN DBMS_OUTPUT.PUT_LINE('Error in finding student_id: ');
RETURN;
END;
COMMIT;
EXCEPTION
WHEN OTHERS
THEN DBMS_OUTPUT.PUT_LINE('Error in finding student_id: ');
END find_sname;
PROCEDURE find_test
IS
BEGIN
BEGIN
DBMS_OUTPUT.PUT_LINE('MAX NUMBER Called from another procedure : '||v_max_nbr);
EXCEPTION
WHEN OTHERS
THEN DBMS_OUTPUT.PUT_LINE('Error in finding student_id: ');
RETURN;
END;
COMMIT;
EXCEPTION
WHEN OTHERS
THEN DBMS_OUTPUT.PUT_LINE('Error in finding student_id: ');
END find_test;
FUNCTION GET_LASTMT
RETURN SEQUENCE_TEST.SEQ_NO%TYPE
IS
v_max_nbr SEQUENCE_TEST.SEQ_NO%TYPE;
BEGIN
SELECT MAX(SEQ_NO)
INTO v_max_nbr
from SEQUENCE_TEST;
RETURN v_max_nbr;
EXCEPTION
WHEN OTHERS
THEN
DECLARE
v_sqlerrm VARCHAR2(250) :=
SUBSTR(SQLERRM,1,250);
BEGIN
RAISE_APPLICATION_ERROR(-20003,
'Error in instructor_id: '||v_sqlerrm);
END;
END GET_LASTMT;
PROCEDURE find_test_called
IS
BEGIN
BEGIN
V_max := Manage_students.GET_LASTMT;
DBMS_OUTPUT.PUT_LINE('MAX_NUMBER :'|| V_max);
EXCEPTION
WHEN OTHERS
THEN DBMS_OUTPUT.PUT_LINE('Error in finding student_id: ');
RETURN NULL;
END;
COMMIT;
EXCEPTION
WHEN OTHERS
THEN DBMS_OUTPUT.PUT_LINE('Error in finding student_id: ');
END find_test_called;
END manage_students;
DECLARE
v_max SEQUENCE_TEST.SEQ_NO%TYPE;
BEGIN
manage_students.find_sname;
DBMS_OUTPUT.PUT_LINE ('Student ID: Execute.');
manage_students.find_test;
manage_students.find_test_called;
END;
-----------------------------------------------------------------------------------------------

Hi,
Welcome to the forum!
You'll find that there are a lot of people willing to help you.
Are you willing to help them? Whenever you have a problem, post enough for people to re-create the problem themselves. That includes CREATE TABLE and INSERT statements for all the tables you use.
Error messages are very helpful. Post the complete error message you're getting, including line number. (It looks like your EXCEPTION sections aren't doing much, except hiding the real errors. That's a bad programming practice, but probably not causing your present problem - just a future one.)
Never post unformatted code. Indent the code to show the extent of each procedure, and the blocks within each one.
When posting formatted text on this site, type these 6 characters:
\(all small letters, inside curly brackets) before and after each section of formatted test, to preserve the spacing.
For example, the procedure find_test_called would be a lot easier to read like this:PROCEDURE find_test_called
IS
BEGIN
     BEGIN
          V_max := Manage_students.GET_LASTMT;
          DBMS_OUTPUT.PUT_LINE ('MAX_NUMBER :' || V_max);
     EXCEPTION
          WHEN OTHERS
          THEN
               DBMS_OUTPUT.PUT_LINE ('Error in finding student_id: ');
               RETURN      NULL;
     END;
     COMMIT;
EXCEPTION
     WHEN OTHERS
     THEN
          DBMS_OUTPUT.PUT_LINE ('Error in finding student_id: ');
END find_test_called;
It's much easier to tell from the code above that you're trying to return NULL from a procedure. Only functions can return anything (counting NULL); procedures can have RETURN statements, but that single word"RETURN;" is the entire statement.

Program blocked in oci function

Hello,
When I read data from the database, everything works well. But when my program run some time, it blocked in oci function and can't work.
Here is a stack from my code:
GNU gdb 6.6
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i586-suse-linux"...
Using host libthread_db library "/lib/libthread_db.so.1".
Attaching to program: /usr/local/fountain/shinedb/bin/dbsyndata, process 5609
Reading symbols from /usr/local/fountain/shinedb/lib/libmdbcore.so...done.
Loaded symbols for /usr/local/fountain/shinedb/lib/libmdbcore.so
Reading symbols from /usr/local/fountain/shinedb/lib/libdbapi.so...done.
Loaded symbols for /usr/local/fountain/shinedb/lib/libdbapi.so
Reading symbols from /usr/local/fountain/shinedb/lib/libhdb.so...done.
Loaded symbols for /usr/local/fountain/shinedb/lib/libhdb.so
Reading symbols from /usr/lib/libstdc++.so.6...done.
Loaded symbols for /usr/lib/libstdc++.so.6
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /usr/local/fountain/shinedb/lib/libpub.so...done.
Loaded symbols for /usr/local/fountain/shinedb/lib/libpub.so
Reading symbols from /lib/libpthread.so.0...done.
[Thread debugging using libthread_db enabled]
[New Thread -1232918864 (LWP 5609)]
Loaded symbols for /lib/libpthread.so.0
Reading symbols from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1...done.
Loaded symbols for /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
Reading symbols from /usr/local/fountain/shinedb/lib/libnvlist.so...done.
Loaded symbols for /usr/local/fountain/shinedb/lib/libnvlist.so
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libnnz10.so...done.
Loaded symbols for /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libnnz10.so
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /usr/local/lib/libutils.so...done.
Loaded symbols for /usr/local/lib/libutils.so
0xffffe410 in __kernel_vsyscall ()
(gdb) where
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d8aa63 in __read_nocancel () from /lib/libc.so.6
#2 0xb7430db3 in snttread ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#3 0xb742e38a in nttrd ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#4 0xb731fccc in nsprecv ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#5 0xb7322f97 in nsrdr ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#6 0xb73059e3 in nsdo ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#7 0xb7302c83 in nsbrecv ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#8 0xb7335b43 in nioqrc ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#9 0xb7448d27 in ttcdrv ()
---Type <return> to continue, or q <return> to quit---
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#10 0xb733cea5 in nioqwa ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#11 0xb71a12bb in upirtrc ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#12 0xb7116f5a in kpurcsc ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#13 0xb70cc59f in kpuexecv8 ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#14 0xb70ce92e in kpuexec ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
#15 0xb71a5e26 in OCIStmtExecute ()
from /usr/local/fountain/oracle/oracle/product/10.2.0/client_1/lib/libclntsh.so.10.1
Thanks.

hi Nikeda,
I replaced the sizeof(double) to DBL_DIG/FLT_DIG constant, now the program doesn't crashes but the conversion is not happening properly.
The result of any number after conversion is "0".
Any suggestions, Thanks in advance .. below is the code snippet u asked for ..
class ABC
double qty ;
ott structure
struct abc_ott
OCINumber qty ;
// pro*c code
EXEC SQL BEGIN DECLARE SECTION ;
abc_ott * abc_ott_inst ;
EXEC SQL END DECLARE SECTION ;
EXEC SQL ALLOCATE :abc_ott_inst ;
ABC * abc = new ABC ;
abc->qty = 100.0 ;
OCINumberFromReal(ociError, &abc->qty, (uword)sizeof(double), &abc_ott_inst->qty ) ;
// call with DBL_DIG
OCINumberFromReal(ociError, &abc->qty, DBL_DIG, &abc_ott_inst->qty ) ;
Edited by: user3894537 on May 20, 2010 8:25 AM
Edited by: user3894537 on May 20, 2010 8:38 AM

Hi guru's what are the function modules are used in ALV

hi guru's what are the function modules are used in ALV

Hi vasu,
There are some function modules which will enable to produce the reports without much effort.
All the definitions of internal tables, structures and constants are declared in a type-pool called SLIS.
1. SIMPLE REPORT.
The important function modules are
a. Reuse_alv_list_display
b. Reuse_alv_fieldcatalog_merge
c. Reuse_alv_events_get
d. Reuse_alv_commentary_write
e. Reuse_alv_grid_display
A. REUSE_ALV_LIST_DISPLAY : This is the function module which prints the data.
The important parameters are :
I. Export :
i. I_callback_program : report id
ii. I_callback_pf_status_set : routine where a user can set his own pf status or change the functionality of the existing pf status
iii. I_callback_user_command : routine where the function codes are handled
iv. I_structure name : name of the dictionary table
v. Is_layout : structure to set the layout of the report
vi. It_fieldcat : internal table with the list of all fields and their attributes which are to be printed (this table can be populated automatically by the function module REUSE_ALV_FIELDCATALOG_MERGE
vii. It_events : internal table with a list of all possible events of ALV and their corresponding form names.
II. Tables :
i. t_outtab : internal table with the data to be output
B. REUSE_ALV_FIELDCATALOG_MERGE : This function module is used to populate a fieldcatalog which is essential to display the data in ALV. If the output data is from a single dictionary table and all the columns are selected, then we need not exclusively create the field catalog. Its enough to mention the table name as a parameter(I_structure name) in the REUSE_ALV_LIST_DISPLAY. But in other cases we need to create it.
The Important Parameters are :
I. Export :
i. I_program_name : report id
ii. I_internal_tabname : the internal output table
iii. I_inclname : include or the report name where all the dynamic forms are handled.
II Changing
ct_fieldcat : an internal table with the type SLIS_T_FIELDCAT_ALV which is
declared in the type pool SLIS.
C. REUSE_ALV_EVENTS_GET : Returns table of possible events for a list type
Parameters :
I. Import :
Et_Events : The event table is returned with all possible CALLBACK events
for the specified list type (column 'NAME'). For events to be processed by Callback, their 'FORM' field must be filled. If the field is initialized, the event is ignored. The entry can be read from the event table, the field 'FORM' filled and the entry modified using constants from the type pool SALV.
II. Export :
I_List_type :
0 = simple list REUSE_ALV_LIST_DISPLAY
1 = hierarchcal-sequential list REUSE_ALV_HIERSEQ_LIST_DISPLAY
2 = simple block list REUSE_ALV_BLOCK_LIST_APPEND
3 = hierarchical-sequential block list
REUSE_ALV_BLOCK_LIST_HS_APPEND
D. REUSE_ALV_COMMENTARY_WRITE : This is used in the Top-of-page event to print the headings and other comments for the list.
Parameters :
I. it_list_commentary : internal table with the headings of the type slis_t_listheader.
This internal table has three fields :
Typ : H header, S selection , A - action
Key : only when typ is S.
Info : the text to be printed
E. REUSE_ALV_GRID_DISPLAY : A new function in 4.6 version, to display the results in grid rather than as a preview.
Parameters : same as reuse_alv_list_display
This is an example for simple list.
2. BLOCK REPORT
This is used to have multiple lists continuously.
The important functions used in this report are:
A. REUSE_ALV_BLOCK_LIST_INIT
B. REUSE_ALV_BLOCK_LIST_APPEND
C. REUSE_ALV_BLOCK_LIST_HS_APPEND
D. REUSE_ALV_BLOCK_LIST_DISPLAY
A. REUSE_ALV_BLOCK_LIST_INIT
Parameters:
I. I_CALLBACK_PROGRAM
II. I_CALLBACK_PF_STATUS_SET
III. I_CALLBACK_USER_COMMAND
This function module is used to set the default gui status etc.
B. REUSE_ALV_BLOCK_LIST_APPEND
Parameters :
Export :
I. is_layout : layout settings for block
II. it_fieldcat : field catalog
III. i_tabname : internal table name with output data
IV. it_events : internal table with all possible events
Tables :
i. t_outtab : internal table with output data.
This function module adds the data to the block.
Repeat this function for all the different blocks to be displayed one after the other.
C. REUSE_ALV_BLOCK_LIST_HS_APPEND
This function module is used for hierarchical sequential blocks.
D. REUSE_ALV_BLOCK_LIST_DISPLAY
Parameters : All the parameters are optional.
This function module display the list with data appended by the above function.
Here the functions REUSE_ALV_FIELDCATALOG_MERGE, REUSE_ALV_EVENTS_GET, REUSE_ALV_COMMENTARY_WRITE can be used.
3. Hierarchical reports :
Hierarchical sequential list output.
The function module is
A. REUSE_ALV_HIERSEQ_LIST_DISPLAY
Parameters:
I. Export:
i. I_CALLBACK_PROGRAM
ii. I_CALLBACK_PF_STATUS_SET
iii. I_CALLBACK_USER_COMMAND
iv. IS_LAYOUT
v. IT_FIELDCAT
vi. IT_EVENTS
vii. i_tabname_header : Name of the internal table in the program containing the
output data of the highest hierarchy level.
viii. i_tabname_item : Name of the internal table in the program containing the
output data of the lowest hierarchy level.
ix. is_keyinfo : This structure contains the header and item table field
names which link the two tables (shared key).
II. Tables
i. t_outtab_header : Header table with data to be output
ii. t_outtab_item : Name of the internal table in the program containing the
output data of the lowest hierarchy level.
slis_t_fieldcat_alv : This internal table contains the field attributes. This internal table can be populated automatically by using REUSE_ALV_FIELDCATALOG_MERGE.
Important Attributes :
A. col_pos : position of the column
B. fieldname : internal fieldname
C. tabname : internal table name
D. ref_fieldname : fieldname (dictionary)
E. ref_tabname : table (dictionary)
F. key(1) : column with key-color
G. icon(1) : icon
H. symbol(1) : symbol
I. checkbox(1) : checkbox
J. just(1) : (R)ight (L)eft (C)ent.
K. do_sum(1) : sum up
L. no_out(1) : (O)blig.(X)no out
M. outputlen : output length
N. seltext_l : long key word
O. seltext_m : middle key word
P. seltext_s : short key word
Q. reptext_ddic : heading (ddic)
R. ddictxt(1) : (S)hort (M)iddle (L)ong
S. datatype : datatype
T. hotspot(1) : hotspot
some theory regarding alv:
This table tells ALV which events are processed by the caller by CALLBACK.
The table of possible events per list type can be initialized using the module REUSE_ALV_EVENTS_GET.
You can display the names of the constants in the type pools SLIS which represent the individual events using the individual test function in the function module
REUSE_ALV_EVENT_NAMES_GET. Only events with a form routine name are processed.
The table structure contains the fields:
IT_EVENTS-NAME
Name of the Callback event.
Possible Callback events:
Action
USER_COMMAND USING R_UCOMM LIKE SY-UCOMM RS_SELFIELD TYPE SLIS_SELFIELD
Process actions on the list
As this is a frequently-used Callback event, the form routine can also be passed directly in the interface in the IMPORTING parameter I_CALLBACK_USER_COMMAND.
PF_STATUS_SET USING RT_EXTAB TYPE SLIS_T_EXTAB
If a user list status is to be set, it must be done in the form routine assigned to this event. The ALV function codes, which must not be active, are in the Parameter RT_EXTAB. This table must be passed with the SET PF-STATUS command (with inactive user function codes as well, if necessary).
The STANDARD status of the function group SALV should be used as a template for a user-specific status.
As this is a frequently-used Callback event, its form routine can also be passed directly in the interface in the IMPORTING parameter I_CALLBACK_PF_STATUS_SET.
ITEM_DATA_EXPAND USING RS_SELFIELD TYPE SLIS_SELFIELD RFLG_ALL TYPE C
Only relevant for hierarchical-sequential lists using the layout parameter IS_LAYOUT-EXPAND_FIELDNAME of the structure IS_LAYOUT.
Exit for passing item entries (ITEM table) for a header record which was expanded interactively by the user.
RS_SELFIELD-TABINDEX contains the header table index for which the item entries are to be put in the global item output table (T_OUTTAB_SLAVE). The Callback is only called if ALV has no items for a header which is to be expanded.
RFLG_ALL is passed with 'X' if the user shows all items. The application must ensure that entries are not repeated in the item table. RS_SELFIELD is initial in this case.
CALLER_EXIT USING RS_DATA Is called at the beginning of the function module to make special settings. It is not usually used.
List processing events
IMPORTANT: The application Callback routine must not manipulate the internal output table and/or its header record. This restriction applies to all Callbacks which are called in the list output and run under the 'List processing events'.
TOP_OF_LIST no USING parameter. Information output at the start of the list
END_OF_LIST no USING parameter. Information output at the end of the list
TOP_OF_PAGE no USING parameter
Equivalent to the list processing TOP-OF-PAGE event
END_OF_PAGE no USING parameter. Not available for hierarchical-sequential lists.
Information output at the end of a page. This is only called for printing.
TOP_OF_COVERPAGE no USING parameter
The selection information and list status are output together (if they exist) on a separate page by default. See also the documentation of the parameters:
IS_PRINT-NO_COVERPAGE
IS_PRINT-NO_PRINT_SELINFOS
IS_PRINT-NO_PRINT_LISTINFOS
IS_LAYOUT-GET_SELINFOS
The user can format the header area of the 'cover page' himself or herself by specifying a Callback routine for this event.
END_OF_COVERPAGE no USING parameter
Analogously to TOP_OF_COVERPAGE the user can add other information to the information output by ALV (selection information, list status) at this event.
FOREIGN_TOP_OF_PAGE no USING parameter
The Top-of-page event is always processed in ALV and is only passed to the caller via the Callback mechanism. This is still the case if the caller, e.g. by a user action, processes a branch list which was not formatted by ALV (e.g. a popup with additional information about the list record selected and displayed by ALV).
In this case, top-of-page cannot be formatted by ALV analogously to the basic list, it must be handled completely by the caller. The event top-of-page still occurs in ALV. When ALV notices a top-of-page which was not caused by an ALV output, the form routine in FOREIGN_TOP_OF_PAGE is called.
FOREIGN_END_OF_PAGE no USING parameter
The event end-of-page is always processed in ALV and only passed to the caller via callback. This is still the case, e.g. when the caller processes a details list which was not formatted by ALV (e.g. a popup with further information about selected list records which were displayed by ALV).
In this case, end-of-page cannot be formatted by ALV analogously to the basic list, it must be handled completely by the caller. The event end-of-page still occurs in ALV. When ALV notices an end-of-page that was not caused by an ALV output, the form routine in FOREIGN_END_OF_PAGE is called.
BEFORE_LINE_OUTPUT USING RS_LINEINFO TYPE SLIS_LINEINFO
Output information before each output line. Should only be used in justified cases because it costs a lot of performance.
AFTER_LINE_OUTPUT USING RS_LINEINFO TYPE SLIS_LINEINFO
Output information after each output line. Should only be used in justified cases because it costs a lot of performance.
Internal use only
LIST_MODIFY USING R_TABNAME TYPE SLIS_TABNAME
R_INDEX LIKE SY-TABIX
R_INDEX_ITEM LIKE SY-TABIX
R_INDEX_SUM LIKE SY-TABIX
IT_EVENTS-FORM
Name of the form routine which should be called in the calling program at the event.
Field_catalog:
Field catalog with field descriptions
2.7.1. Description
Field catalog containing descriptions of the list output fields (usually a subset of the internal output table fields). A field catalog is required for every ALV list output.
The field catalog for the output table is built-up in the caller's coding. The build-up can be completely or partially automated by calling the REUSE_ALV_FIELDCATALOG_MERGE module
See also the documentation of the function module REUSE_ALV_FIELDCATALOG_MERGE.
The minimal field catalog is documented under 'default'. The caller can use the other optional parameters to assign output attributes to a field which differ from the default.
A field catalog need not be built-up and passed explicitly only under the following conditions:
The internal table to be output has the same structure as a Data Dictionary structure which is referred to in the internal table declaration using LIKE or INCLUDE STRUCTURE.
all fields in this structure are to be output
the structure name is passed to ALV in the parameter I_STRUCTURE_NAME.
See also the documentation of the IMPORTING paramter I_STRUCTURE_NAME.
Positioning
row_pos (row position)
value set: 0, 1 - 3
Only relevant if the list output is to be multi-line (two or three lines) by default.
A multi-line list can also be defined by the user interactively if the default list is one-line.
The parameter specifies the relative output line of the column in a multi-line list.
col_pos (column position)
value set: 0, 1 - 60
only relevant when the default relative column positions differ from the field catalog field sequence. The parameter specifies the relative column position of the field in the list output. The column order can be changed interactively by the user. If this parameter is initial for all field catalog entries, columns appear in the field catalog field sequence.
Identification
fieldname (field name)
value set: internal output table field name (required parameter)
Name of the internal output table field which is described by this field catalog entry
tabname (internal output table)
value set: SPACE, internal output table name
This parameter is used in 'manual' field catalog build-up only for hierarchical-sequential lists.
Name of the internal output table which contains the field FIELDCAT-FIELDNAME.
Data Dictionary reference
ref_fieldname (reference field name)
value set: SPACE, Data Dictionary field name
Name of the Data Dictionary field referred to.
This parameter is only used when the internal output table field described by the current field catalog entry has a reference to the Data Dictionary (not a program field), and the field name in the internal output table is different from the name of the field in the Data Dictionary. If the field names are identical, naming the Data Dictionary structure or table in the FIELDCAT-REF_TABNAME parameter is sufficient.
ref_tabname (reference table/structure field name)
value set: SPACE, name of a Data Dictionary structure or table
Structure or table name of the referred Data Dictionary field.
This parameter is only used when the internal output table field described by the current field catalog entry has a Data Dictionary reference (not a program field).
Reference to fields with currency/measurement unit
Each internal output table sum or quantity field whose decimal places are to be formatted appropriately for the unit in the list must follow the convention:
the field is of data type QUAN or CURR (internal type P) (the field must really have this physical data type. Overwriting the physical data type with the parameter FIELDCAT-DATATYPE has no effect)
There is a field in the internal output table which contains the associated unit.
There is also an entry in the field catalog for the unit field.
(If the unit is not to appear as a column in the list, and cannot be interactively displayed as a column, e.g. because it is always unambiguous and is therefore explicitly output by the caller in the list header, the field catalog units field entry can take the parameter FIELDCAT-TECH = 'X'.
The association of a value field to a unit affects the output as follows:
appropriate decimal places display for the unit
an initialized field with a link to a non-initial unit is output as '0' for the unit (if FIELDCAT-NO_ZERO is initial). When this field is summed, this unit affects whether the units are homogeneous.
an initialized field with a link to an initial unit is output as SPACE. When this field is summed, the unit SPACE does not affect the homogeneity of the units.
When non-initial fields with an initial unit are summed, the unit SPACE is considered to be a unit.
Link to currency unit
cfieldname (currency unit field name)
value set: SPACE, output table field name
Only relevant for amount columns with associated unit.
Name of the internal output table field containing the currency unit associated with the amount field FIELDCAT-FIELDNAME. The field in FIELDCAT-CFIELDNAME must have its own field catalog entry.
ctabname (internal currency unit field output table)
value set: SPACE, output table field name
only relevant for hierarchical-sequential lists
Name of the internal output table containing the FIELDCAT-CFIELDNAME field.
Link to measurement unit
qfieldname (measurement unit field name)
value set: SPACE, output table field name
only relevant for quantity columns with unit link.
Name of the internal output table field containing the measurement unit associated with the quantity field FIELDCAT-FIELDNAME.
The field in FIELDCAT-QFIELDNAME must have its own field catalog entry.
qtabname (internal measurement unit field output table)
value set: SPACE, output table field name
only relevant for hierarchical-sequential lists
Name of the internal output table containing the FIELDCAT-QFIELDNAME field.
Column output options
outputlen (column width)
value set: 0 (initial), n
For fields with a Data Dictionary link this parameter can be left initial.
For fields without a Data Dictionary link (program field) the parameter must be given the value of the desired field list output length (column width).
initial = column width is the output length of the referred Data Dictionary field (domain).
n = column width is n characters
key (key column)
value set: SPACE, 'X' 'X' = kex field (key field output in color)
Key fields can not be interactively hidden. Parameter FIELDCAT-NO_OUT must be left initial.
For exceptions see the documentation of the FIELDCAT-KEY_SEL parameter.
key_sel (hideable key column)
value set: SPACE, 'X'
only relevant when FIELDCAT-KEY = 'X'
Key field which can be hidden interactively.
The key column sequence cannot be changed interactively by the user.
The output is controlled by the FIELDCAT-NO_OUT parameter analogously to non-key fields.
no_out (field in field list)
value set: SPACE, 'X' 'X' = field is not displayed in the current list.
The user can interactively choose the field for output from the field list.
The user can display the contents of these fields at line level using the 'Detail' function.
See also the 'Detail screen' documentation of the parameter IS_LAYOUT.
tech (technical field)
value set: SPACE, 'X' 'X' = technical field
Field cannot be output in the list and cannot be displayed interactively.
Field can only be used in the field catalog (not in IT_SORT, ...).
emphasize (highlight columns in color)
value set: SPACE, 'X' or 'Cxyz' (x:'1'-'9'; y,z: '0'=off '1'=on)
'X' = column is colored with the default column highlight color.
'Cxyz' = column is colored with a coded color:
C: Color (coding must begin with C)
x: color number
y: bold
z: inverse
hotspot (column as hotspot)
value set: SPACE, 'X'
'X' = column cells are output as hotspots
fix_column (fix column)
value set: SPACE, 'X'
Not relevant for block lists (output of several lists consecutively)
'X' = column fixed (does not scroll horizontally)
All columns to be fixed must have this flag, starting from the left. If a column without this flag is output, only the columns to the left of this column are fixed. The user can change the column fixing interactively. See also the documentation of the Layout parameter
IS_LAYOUT-NO_KEYFIX of the IMPORTING paramter IS_LAYOUT.
do_sum (sum over column)
value set: SPACE, 'X' 'X' = a sum is to be calculated over this internal output table field.
This function can also be called by the user interactively.
no_sum (sums forbidden)
value set: SPACE, 'X' 'X' = no sum can be calculated over this field, although the data type of the field would allow summing.
input (column ready for input)
Function not available
Format column contents
icon
value set: SPACE, 'X' 'X' = column contents to be output as an icon.
The caller must consider the printability of icons.
symbol
value set: SPACE, 'X' 'X' = column contents are to be output as a symbol.
The internal output table column must be a valid symbol character.
The caller must consider the printability of symbols.
Symbols can usually be printed, but may not always be output correctly, depending on the printer configuration.
just (justification)
value set: SPACE, 'R', 'L', 'C'
Only relevant for fields of data type CHAR or NUMC
' ' = default justification for this data type
'R' = right-justified output
'L' = left-justified output
'C' = centered output
The justification of the column header always follows the justification of the columns. Independent justification of the column neader is not possible.
lzero (leading zeros)
value set: SPACE, 'X'
Only relevant for fields of data type NUMC
ALV outputs NUMC fields right-justified without leading zeros by default.
'X' = output with leading zeros
Note: If a NUMC field is output left-justified or centered by FIELDCAT-JUST, leading zeros are output. If the output of leading zeros is suppressed by a Data Dictionary reference ALPHA conversion exit, the output is always left-justified.
no_sign (no +/- sign) Only relevant for value fields
value set: SPACE, 'X' 'X' = value output without +/ sign
no_zero (suppress zeros) Only relevant for value fields
value set: SPACE, 'X' 'X' = suppress zeros
edit_mask (field formatting)
value set: SPACE, template
template = see documentation of WRITE formatting option USING EDIT MASK template
The output conversion conv can be made by template = '== conv'.
Texts
The following text parameters should be specified for program fields without a Data Dictionary reference. The texts are taken from the Data Dictionary for fields with a Data Dictionary reference. If this is not desired, the text parameters can also be specified. The Data Dictionary texts are then ignored. If the user changes the column width interactively, the column header text with the appropriate length is always used. The interactive function 'Optimize column width' takes account of both the field contents and the column headers: if all field contents are shorter than the shortest column header, the column width depends on the column header.
The 'long field label' is also used in display variant definition, sort, etc. popups.
seltext_l (long field label)
seltext_m (medium field label)
seltext_s (short field label)
reptext_ddic (header)
analogous to the Data element maintenance 'Header'
The specified text is not necessarily output in the list, an optimum among all texts is sought.
ddictxt (specify text)
value set: SPACE, 'L', 'M', 'S'
You can specify with values 'L', 'M', and 'S', the keyword that should always be used as column header. If the column width changes, no attempt is made in this case to find an appropriate header for the new output width.
Parameters for program fields without Data Dictionary reference
see also 'Text' parameters
datatype (data type)
value set: SPACE, Data Dictionary data type (CHAR, NUMC,...)
Only relevant for fields without Data Dictionary reference
Program field data type
ddic_outputlen (external output length)
value set: 0 (initial), n
Only relevant for fields without Data Dictionary reference whose output is nevertheless to be modified by a conversion exit.
Prerequisites:
FIELDCAT-EDIT_MASK = '==conv'
see also the documentation of the parameter FIELDCAT-EDIT_MASK
FIELDCAT-INTLEN = n
see also the documentation of the parameter FIELDCAT-INTLEN
n = external format field output length
The column width FIELDCAT-OUTPUTLEN need not be the same as the external format output length (FIELDCAT-DDIC_OUTPUTLEN).
intlen (internal output length)
value set: 0 (initial), n
Only relevant for fields without Data Dictionary reference whose output is nevertheless to be modified by a conversion exit.
Prerequisites:
FIELDCAT-EDIT_MASK = '==conv'
see also the documentation of the parameter FIELDCAT-EDIT_MASK
FIELDCAT-DDIC_OUTPUTLEN = n
see also the documentation of the parameter FIELDCAT-DDIC_OUTPUTLEN
n = internal format field output length
rollname (data element)
value set: SPACE, Data Dictionary data element name
F1 help can be provided for a program field without a Data Dictionary reference, or F1 help which differs from the Data Dictionary help can be provided for a field with a Data Dictionary reference, using this parameter.
When F1 help is called for this field, the documentation of the specified data element is displayed.
If the FIELDCAT-ROLLNAME is initial for fields with a Data Dictionary reference, the documentation of the data element of the referred Data Dictionary field is output.
Others
sp_group (field group key)
value set: SPACE, CHAR(1)
Field group key.
Keys are assigned to group names in the IT_SPECIAL_GROUPS parameter (see also the documentation of the parameter IT_SPECIAL_GROUPS).
When such an assignment is made in the field catalog and in IT_SPECIAL_GROUPS, the fields are grouped correspondingly in the display variant popup.
reprep (Report/Report interface selection criterion)
value set: SPACE, 'X'
Prerequisites:
The system contains the Report/Report interface (function group RSTI, table TRSTI)
Parameter LAYOUT-REPREP = 'X'
(see also the documentation of the parameter LAYOUT-REPREP of the IMPORTING parameter IS_LAYOUT )
'X' = When the Report/Report interface is called, the value of this field is passed in the selected interface start record as a selection criterion.
2.7.2. Default
The following entries are usually sufficient for internal table fields with a reference to a field defined in the Data Dictionary :
fieldname
ref_tabname
Notes:
ALV gets the remaining information from the Data Dictionary.
If no relative column position (COL_POS) is specified, the fields are output in the list in the order in which they were added to the field catalog.
REF_FIELDNAME need only be specifid when the name of the internal table field differs from the name of the referred Data Dictionary field.
Information which is explicitly entered in the field catalog is not overwritten by information from the Data Dictionary.
Priority rule:
Entries in the field catalog have priority over differing entries in the Data Dictionary.
The following entries are usually sufficient for internal table fields without a reference to the Data Dictionary (program fields):
fieldname
outputlen
datatype
seltext_s
seltext_m
seltext_l
Notes:
F1 help can be provided for program fields by assigning a data element to the parameter ROLLNAME.
If the parameters SELTEXT_S, SELTEXT_M, SELTEXT_L, and REPTEXT_DDIC contain appropriate field labels, the program field column headers are also adjusted appropriately when the column width changes
sites :
http://www.sapdevelopment.co.uk/reporting/alv/alv_variousfcat.htm
<b>plese reward if useful </b>
Message was edited by:
sunil kairam

Overriding sub-report queries in CF8 with function calls

There is not enough information in the documentation about
overriding sub-report queries using functions. I can not figure out
how the function call is to be passed.
Here is the page and quote from the livedocs:
http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=Tags_r-s_07.html
"Note: You cannot specify a subreport query that depends on
arguments from the master report. Instead, you can define a CFML
function or CFC method that returns the subreport query given the
arguments from the master report. ColdFusion calls this code when
it executes the subreport."
If I send over just the function call as a string it throws
an error that it must be a query. If I evaluate it with # then it
appears to make the call once before creating the report and uses
the same query for the sub-report for every single master report
record.
My example report is simple. Retrieve a query of contacts
records. The contact records have a state field which is the
parameter for the sub-report. The sub-report performs a query and
presents related information.
I am trying to optimize this by pre-processing the queries
for each state into memory, then pass a function that is to be used
to get the correct sub-report query from memory.
I have tried all variations that I can think of with no
success. If I try to pass variables to the function that exist in
the report, such as query and param, errors are thrown. I can only
access variables already created earlier in my code which makes me
think that the function is being evaluated once in the cfqueryparam
tag. I can not find a way to delay evaluation so that it is
evaluated for each call to the sub-report instead.

I'm following the instructions laid out in the livedocs for
advanced queries with CFML :
http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=reportBuilder_17.html
However the Report Builder won't save the CFML I enter.
Everytime I go back to the Advanced query there are just blank
query tags. Most of the time it doesn't even show that any changes
were made to the report at all. The little asterisks does not
appear next to the report name tab which indicates if there are
unsaved changes. At some point I got it to save some code but it
had a mistake and I couldn't get it to save the corrected code.
This is very frustrating. I'm putting in a bug report for at
least the saving of CFML in the advanced query section.

The Cluster Service function call 'ClusterResourceControl' failed with error code '1008(An attempt was made to reference a token that does not exist.)' while verifying the file path. Verify that your failover cluster is configured properly.

I am experiencing this error with one of our cluster environment. Can anyone help me in this issue.
The Cluster Service function call 'ClusterResourceControl' failed with error code '1008(An attempt was made to reference a token that does not exist.)' while verifying the file path. Verify that your failover cluster is configured properly.
Thanks,
Venu S.
Venugopal S ----------------------------------------------------------- Please click the Mark as Answer button if a post solves your problem!

Hi Venu S,
Based on my research, you might encounter a known issue, please try the hotfix in this KB:
http://support.microsoft.com/kb/928385
Meanwhile since there is less information about this issue, before further investigation, please provide us the following information:
The version of Windows Server you are using
The result of SELECT @@VERSION
The scenario when you get this error
If anything is unclear, please let me know.
Regards,
Tom Li

Java.lang.VerifyError - Incompatible object argument for function call

Hi all,
I'm developing a JSP application (powered by Tomcat 4.0.1 in JDK 1.3, in Eclipse 3.3). Among other stuff I have 3 classes interacting with an Oracle database, covering 3 use cases - renaming, adding and deleting an database object. The renaming class simply updates the database with a String variable it receives from the request object, whereas the other two classes perform some calculations with the request data and update the database accordingly.
When the adding or deleting classes are executed, by performing the appropriate actions through the web application, Tomcat throws the following:
java.lang.VerifyError: (class: action/GliederungNewAction, method: insertNewNode signature: (Loracle/jdbc/driver/OracleConnection;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;I)V) Incompatible object argument for function call
     at java.lang.Class.forName0(Native Method)
     at java.lang.Class.forName(Class.java:120)
     at action.ActionMapping.perform(ActionMapping.java:53)
     at ControllerServlet.doResponse(ControllerServlet.java:92)
     at ControllerServlet.doPost(ControllerServlet.java:50)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
...The renaming works fine though. I have checked mailing lists and forums as well as contacted the company's java support but everything I have tried out so far, from exchanging the xerces.jar files found in JDOM and Tomcat to rebuidling the project didn't help.
I just can't explain to myself why this error occurs and I don't see how some additional Java code in the other 2 classes could cause it?
I realize that the Tomcat and JDK versions I'm using are totally out of date, but that's company's current standard and I can't really change that.
Here's the source code. I moved parts of the business logic from Java to Oracle recently but I left the SQL statements that the Oracle stored procedures are executing if it helps someone.
package action;
import java.sql.CallableStatement;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.StringTokenizer;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import oracle.jdbc.driver.OracleConnection;
* This class enables the creation and insertion of a new catalogue node. A new node
* is always inserted as the last child of the selected parent node.
public class GliederungNewAction implements Action {
     public String perform(ActionMapping mapping, HttpServletRequest request,
               HttpServletResponse response) {
          // fetch the necessary parameters from the JSP site
          // the parent attribute is the selected attribute!
          String parent_attribute = request.getParameter("attr");
          String catalogue = request.getParameter("catalogue");
          int parent_sequenceNr = Integer.parseInt(request.getParameter("sort_sequence"));
          // connect to database
          HttpSession session = request.getSession();
          db.SessionConnection sessConn = (db.SessionConnection) session.getAttribute("connection");
          if (sessConn != null) {
               try {
                    sessConn.setAutoCommit(false);
                    OracleConnection connection = (OracleConnection)sessConn.getConnection();
                    int lastPosition = getLastNodePosition( getLastChildAttribute(connection, catalogue, parent_attribute) );
                    String newNodeAttribute = createNewNodeAttribute(parent_attribute, lastPosition);
                    // calculate the sequence number
                    int precedingSequenceNumber = getPrecedingSequenceNumber(connection, catalogue, parent_attribute);
                    if ( precedingSequenceNumber == -1 ) {
                         precedingSequenceNumber = parent_sequenceNr;
                    int sortSequence = precedingSequenceNumber + 1;
                    setSequenceNumbers(connection, catalogue, sortSequence);
                    // insert the new node into DB
                    insertNewNode(connection, catalogue, newNodeAttribute, parent_attribute, "Neuer Punkt", sortSequence);
                    connection.commit();
               } catch(SQLException ex) {
                    ex.printStackTrace();
          return mapping.getForward();
      * Creates, fills and executes a prepared statement to insert a new entry into the specified table, representing
      * a new node in the catalogue.
     private void insertNewNode(OracleConnection connection, String catalogue, String attribute, String parent_attribute, String description, int sortSequence) {
          try {
               String callAddNode = "{ call fasi_lob.pack_gliederung.addNode(:1, :2, :3, :4, :5) }";
               CallableStatement cst;
               cst = connection.prepareCall(callAddNode);
               cst.setString(1, catalogue);
               cst.setString(2, attribute);
               cst.setString(3, parent_attribute);
               cst.setString(4, description);
               cst.setInt(5, sortSequence);
               cst.execute();
               cst.close();
          } catch (SQLException e1) {
               // TODO Auto-generated catch block
               e1.printStackTrace();
//          String insertNewNode = "INSERT INTO vstd_media_cat_attributes " +
//                    "(catalogue, attribute, parent_attr, description, sort_sequence) VALUES(:1, :2, :3, :4, :5)";
//          PreparedStatement insertStmt;
//          try {
//               insertStmt = connection.prepareStatement(insertNewNode);
//               insertStmt.setString(1, catalogue);
//               insertStmt.setString(2, attribute);
//               insertStmt.setString(3, parent_attribute);
//               insertStmt.setString(4, description);
//               insertStmt.setInt(5, sortSequence);
//               insertStmt.execute();
//               insertStmt.close();
//          } catch (SQLException e) {
//               e.printStackTrace();
      * This method returns the attribute value of the last child of the parent under which
      * we want to insert a new node. The result set is sorted in descending order and only the
      * first result (that is, the last child under this parent) is fetched.
      * If the parent node has no children, "parent_attr.0" is returned.
      * @param connection
      * @param catalogue
      * @param parent_attribute
      * @return attribute of the last child under this parent, or "parent_attr.0" if parent has no children
     private String getLastChildAttribute(OracleConnection connection, String catalogue, String parent_attribute) {
          String queryLastChild = "SELECT attribute FROM vstd_media_cat_attributes " +
                                        "WHERE catalogue=:1 AND parent_attr=:2 ORDER BY sort_sequence DESC";
          String lastChildAttribute;
          PreparedStatement ps;
          try {
               ps = connection.prepareStatement(queryLastChild);
               ps.setString(1, catalogue);
               ps.setString(2, parent_attribute);
               ResultSet rs = ps.executeQuery();
               /* If a result is returned, the selected parent already has children.
                * If not set the lastChildAttribute to parent_attr.0
               if (rs.next()) {
                    lastChildAttribute = rs.getString("attribute");
               } else {
                    lastChildAttribute = parent_attribute.concat(".0");
               rs.close();
               return lastChildAttribute;
          } catch (SQLException e) {
               e.printStackTrace();
               return null;
      * This helper method determines the position of the last node in the attribute.
      * i.e for 3.5.2 it returns 2, for 2.1 it returns 1 etc.
      * @param attribute
      * @return position of last node in this attribute
     private int getLastNodePosition(String attribute) {
          StringTokenizer tokenizer = new StringTokenizer(attribute, ".");
          String lastNodePosition = "0";
          while( tokenizer.hasMoreTokens() ) {
               lastNodePosition = tokenizer.nextToken();
          return Integer.parseInt(lastNodePosition);
      * This method calculates the attribute of a node being inserted
      * by incrementing the last child position by 1 and attaching the
      * incremented position to the parent.
      * @param parent_attr
      * @param lastPosition
      * @return attribute of the new node
     private String createNewNodeAttribute(String parent_attr, int lastPosition) {
          String newPosition = new Integer(lastPosition + 1).toString();
          return parent_attr.concat("." + newPosition);
      * This method checks if the required sequence number for a new node is already in use and
      * handles the sequence numbers accordingly.
      * If the sequence number for a new node is NOT IN USE, the method doesn't do anything.
      * If the sequence number for a new node is IN USE, the method searches for the next free
      * sequence number by incrementing the number by one and repeating the query until no result
      * is found. Then all the sequence numbers between the required number (including, >= relation)
      * and the nearest found free number (not including, < relation) are incremented by 1, as to
      * make space for the new node.
      * @param connection
      * @param catalogue
      * @param newNodeSequenceNumber required sequence number for the new node
     private void setSequenceNumbers(OracleConnection connection, String catalogue, int newNodeSequenceNumber) {
          // 1. check if the new sequence number exists - if no do nothing
          // if yes - increment by one and see if exists
          //           repeat until free sequence number exists
          // when found increment all sequence numbers freeSeqNr > seqNr >= newSeqNr
          String query = "SELECT sort_sequence FROM vstd_media_cat_attributes " +
                    "WHERE catalogue=:1 AND sort_sequence=:2";
          PreparedStatement ps;
          try {
               ps = connection.prepareStatement(query);
               ps.setString(1, catalogue);
               ps.setInt(2, newNodeSequenceNumber);
               ResultSet rs = ps.executeQuery();
               // if no result, the required sequence number is free - nothing to do
               if( rs.next() ) {
                    int freeSequenceNumber = newNodeSequenceNumber;
                    do {
                         ps.setString(1, catalogue);
                         ps.setInt(2, freeSequenceNumber++);
                         rs = ps.executeQuery();
                    } while( rs.next() );
                    // increment sequence numbers - call stored procedure
                    String callUpdateSeqeunceNrs = "{ call fasi_lob.pack_gliederung.updateSeqNumbers(:1, :2, :3) }";
                    CallableStatement cst = connection.prepareCall(callUpdateSeqeunceNrs);
                    cst.setString(1, catalogue);
                    cst.setInt(2, newNodeSequenceNumber);
                    cst.setInt(3, freeSequenceNumber);
                    cst.execute();
                    cst.close();
//                    String query2 = "UPDATE vstd_media_cat_attributes " +
//                                      "SET sort_sequence = (sort_sequence + 1 ) " +
//                                      "WHERE catalogue=:1 sort_sequnce >=:2 AND sort_sequence <:3";
//                    PreparedStatement ps2;
//                    ps2 = connection.prepareStatement(query2);
//                    ps2.setString(1, catalogue);
//                    ps2.setInt(2, newNodeSequenceNumber);
//                    ps2.setInt(3, freeSequenceNumber);
//                    ps.executeUpdate();
//                    ps.close();
               } // end of if block
               rs.close();
          } catch (SQLException e) {
               e.printStackTrace();
      * This method finds the last sequence number preceding the sequence number of a node
      * that is going to be inserted. The preceding sequence number is required to calculate
      * the sequence number of the new node.
      * We perform a hierarchical query starting from the parent node: if a result is returned,
      * we assign the parent's farthest descendant's node sequence number; if no result
      * is returned, we assign the parent's sequence number.
      * @param connection
      * @param catalogue
      * @param parent_attr parent attribute of the new node
      * @return
     private int getPrecedingSequenceNumber(OracleConnection connection, String catalogue, String parent_attr) {
          int sequenceNumber = 0;
          String query = "SELECT sort_sequence FROM vstd_media_cat_attributes " +
                            "WHERE catalogue=:1 " +
                            "CONNECT BY PRIOR attribute = parent_attr START WITH parent_attr=:2 " +
                            "ORDER BY sort_sequence DESC";
          try {
               PreparedStatement ps = connection.prepareStatement(query);
               ps.setString(1, catalogue);
               ps.setString(2, parent_attr);
               ResultSet rs = ps.executeQuery();
               if ( rs.next() ) {
                    sequenceNumber = rs.getInt("sort_sequence");
               } else {
                    // TODO: ggf fetch from request!
                    sequenceNumber = -1;
               rs.close();
               ps.close();
          } catch (SQLException e) {
               e.printStackTrace();
          return sequenceNumber;
}

After further googling I figured out what was causing the problem: in eclipse I was referring to external libraries located in eclipse/plugins directory, whereas Tomcat was referring to the same libraries (possibly older versions) in it's common/lib directory.

Are OCI Function calls secure enough?

Similar Messages

Maybe you are looking for