Changing the URL runtime of an ADF secure page bypasses security

Hi All,
I created an application in ADF-BC-JSF (Jdeveloper 10.1.3.3) and introduced ADF security in it as discussed in Frank's Blog
http://www.oracle.com/technology/products/jdev/howtos/1013/adfsecurity/adfsecurity_10132.html.
I have defined 2 roles, Role A and B. Now if Role A user (User1) logs authentically in the application, and then changes the URL in the browser to some other page of the application, the application loads him the respective page but not for the same User1. It loads the page for some other user (first record in the database) in the same Role A. Now as the User1 is authenticated and authorised under Role A, he can do anything to this user's information.
I dont have any idea why is it so nor I am able to come up with any workaround. Any links or help will be really appreciated.
Thanks,
Neeraj
Edited by: Neeraj sehgal on Sep 1, 2008 8:54 AM

Hi,
I dont know if you meant this but I checked USE_APPLICATION_VIEW_CACHE and it was set to true. I also checked the SRDemo application(user lpopp) and tried accessing some different page at runtime in the URL. It too went on the wrong page for some other user (dfaviet) and then I created one SR for that user. Here, unlike my application, It did not create the SR and the page got refreshed with proper user first. I couldn't figure out why my application is allowing to create the Record.
However, I would like to mandate the user to navigate through the pages only through application. If he changes anything in the URL, he must be redirected to the Login/Error page.
Please guide me how should I approach.
Thanks,
Neeraj

Similar Messages

How to change the URL of a URL-iView over Code ?

Hi all,
i am getting started with the Portal-Application-Developement and want to change the URL of an URL-iView on runtime with java-code.
i have read the context and can get the Property url with this statement.
endContext.getProfile().getProperty("url")
But if i change this property, nothing is done.
endContext.getProfile().setProperty("url", "http://www.yahoo.com");
Where is my fault.
Thanks for help.
Regards Jürgen

Hi,
the context is of Type IPortalComponentContext.
I cant find no method getParameter() at the context or the profile.
The methods to read the properties of the URL-iView are
context.getProfile().getProperty("url")
context.getProfile().getAttributeValue("url")
But if i want to set (change) this attribute, nothing is done.
Regards Jürgen

HOWTO: Changing the URL and reloading the dataset

Sometimes, you will need to change the url of your dataset
and reload the dataset. This is quite easy to do with changing a
variable and calling a method. Below is the code you would use. I
use it to page through a set of data which only comes back in 10
row increments and we do not know the recordcount of. (Yippee,
Oracle E1). Anyway, here's the code....
<script type="text/javascript" language="javascript">
rowCount = 0;
dsPeople = new
Spry.Data.XMLDataSet("/spry/?event=peopleSearch&srchRowStart="
+ rowCount,"/orders/row", { useCache: false });
function changeRowCount()
rowCount = rowCount+10;
var spryURL = "/spry/?event=peopleSearch&srchRowStart="
+ rowCount;
dsPeople.url = spryURL;
dsPeople.loadData();
</script>
<div spry:region="dsPeople">
<div spry:state="loading"><img
src="/assets/images/ajax-loader.gif"/></div>
<div spry:state="error">Error Loading
Data...</div>
<div spry:state="ready">
<div spry:repeat="dsPeople">
<span spry:content="{dsPeople::NAME}"></span>
</div>
<a href="javascript:changeRowCount()"><span
spry:content="Next 10 Records"></span></b>
</div>
</div>

Enabling SSL for Central Administration is a good idea. Making it so it is only accessible using an IP address doesn't make it any more secure. This is security through obscurity and anyone dedicated enough to attacking Central Administration will find the
site whether it's an IP address or named.
For what it's worth an attacker is going to try scanning IP ranges long before they try looking at DNS. And, because of the way SharePoint works if the site is accessible by its IP address and not a specific hostname, anyone who knows the IP address and
the SSL port (443) can connect. If you have a hostname it won't be immediately accessible.
Some other thoughts: When you rely just on the IP address, what happens if you want to move Central Administration to another server in the farm, or you want to provide load balancing and have multiple servers hosting Central Administration? What happens
when the server running Central Administration dies so you create a new Central Administration site on a server with a different IP address? How will you communicate this URL change to all of your administrators?
Jason Warren
@jaspnwarren
jasonwarren.ca
habaneroconsulting.com/Insights
Sorry,
I wasn't clear in my OP. The IP would be tied to a DN. So you would go https://abc123.com and it would ask for authentication. That URL would be tied to a separate IP on the network card of that server. The IP address association
is done through IIS.

How to change the URL

Hi All,
I have created a web dynpro application and now I need to change the URL of this application to some basic message type URL for eg:
let's say our URL is "http://testdoc/post?mssg" and I now want to change this to as "OPEN DOCUMENT" and when user clicks on ""OPEN DOCUMENT" it will still direct to the original destination that is our original URL.
Thanks,
Rajat

I used the following syntax:
<A href="http://forums.sdn.sap.com/">display SDN</A
>
Edited by: rajatg on Oct 6, 2010 4:43 AM

Is it possible to change the URL of an iTunes Podcast page itself (NOT the Feed URL)?

My company has an usual question:
While keeping all the individual podcasts the same, and the subject matter of the whole podcast series the same, my company would like to change the URL that Apple iTunes has assigned us. Is this possible, and how can it be done?
Again, I am talking about the URL that Apple iTunes has assigned us. The one that begins:
http://itunes.apple.com/us/podcast/career-...
We are having a small change in marketing emphasis. So my company wants to change one of the dashed English words in the URL, after:
http://itunes.apple.com/us/podcast/
These English words were based on the original title of our podcast. The original title of our podcast has changed slightly, with no problem. Now my company just wants to change the URL assigned to us by Apple.
Let me emphasize: There is no purpose of misdirection, evasion, or deceit here -- not in the slightest. My company is simply taking a different marketing angle. Our category is staying the same. The podcasts themselves are staying the same. My company would just like to update the URL assigned to us by Apple to reflect our new podcast series name.
ALSO:
We are a category-leading, very popular podcast. If we do change our iTunes podcast URL, we do not at all want to jeopardize our leading status in our podcast subject category. We want all our download stats to move with us over to the new URL. This is extremely important to us.
AND FURTHER:
If we do change our iTunes podcast URL, we want all our listeners to automatically find us at the new URL. We don't want any of them to lose their subscription because we changed our URL.
So in summary:
1. CAN we change our podcast URL (the one assigned to us by iTunes)?
2. Can we change the URL, but still keep our category-leading position and stats, exaclty as they are now? That is, will our old download stats move with us to the new URL, so we can retain our category-leading position?
3. Will podcast listeners going to the old URL automatically be forwarded to the new URL? Might any of our current listeners become unsubscribed as a result of the URL change?
I know this is an unusual, complicated, and multi-part question. I am looking for definitive, authoritative answers to all these questions.
Thank you very much for your help!!
David

You can omit the title altogether in the URL (together with the succeeding slash, of course). For example, my own podcast URL in the Store is
https://itunes.apple.com/gb/podcast/the-sound-of-78s/id166389425?mt=2
but this works perfectly well:
https://itunes.apple.com/podcast/id166389425
Indeed you can even put your own title:
https://itunes.apple.com/podcast/any_old_title/id166389425
So it's as simple as that!

Is it possible to change the URL of an application?

Hi All,
I was working with the oracle apex and created few applications almost a year back, due to my higher studies there is a gap with the tool..and finally I am in.
Am planning to create an application which will be similar like a personal website.My doubt here is ..whether it's possible to change the URL by keeping a simple one which includes my name also
instead of having this big..
http://apex.oracle.com/pls/apex/f?p=10221:1:116416608594529
I can understand that the whole URL describes the appln no,page no and session ID but its my doubt possible or not..If possible then how to proceed?
Thanks
with Regards,
Ramya.

My doubt here is ..whether it's possible to change the URL by keeping a simple one which includes my name also
instead of having this big..
http://apex.oracle.com/pls/apex/f?p=10221:1:116416608594529
I can understand that the whole URL describes the appln no,page no and session ID but its my doubt possible or not..If possible then how to proceed?
If you are just looking for a nice and short URL to start your application, why not just use a URL shortener service like goo.gl ?
Just put in your long URL and it will create a nice and short URL for you... for example, the above URL is now http://goo.gl/FijYxn
- Morten
http://ora-00001.blogspot.com

Is it possible to change the URL of the browser corresponding to changes in the timeline?

Hello,
I'm trying to create a whole website in Edge. Is it possible to change the browser URL for different sections of the animation. For example me.com/part1 leads to 2.0 seconds in the animation. And for example when you type me.com/part2 the browser would go to 4th second of the animation. And vice versa, when the animation reaches the 4th second the browser URL would change to me.com/part2. It would be really great if that were possible. Any ideas on how to accomplish it?
Thanks!

Hi there, Joel's example seems to be exactly what you're trying to do. All you need to do is replace his functions with your functions.
There are two main parts to his example: 1) reacting to a URL change directly in the URL bar, 2) reacting to a button click, and setting the URL
Regarding Item 1: this line (this adds a listener for when the URL hash is changed, and calls the 'sym.animate' function in his example). Note that he is linking the value after the # with the symbol names 'panel1', etc. This line enables the functionality for you to be able to directly change the URL to: testStep95.html#panel2, and the site will change pages.
$(window).on("hashchange", function(){sym.animate(location.hash.replace("#",""), sym.onStage)});
Regarding Item 2: he's setting the page title (based on the active panel symbol) and URL hash, in the 'sym.animate' function. He calls the 'sym.animate' function on click of btn1, btn2, btn3:
document.title = panelIn;
window.location.hash = panelIn;
Props to Joel for his slick example!

When creating a custom SearchPlugin, is it possible to add more code such as uppercase conversion of the SearchText and IF statements that change the URL depending on what is typed?

When creating a custom SearchPlugin, is it possible to add more code such as uppercase conversion of the searchTerms and IF statements that change the URL depending on the searchTerms? Every time I try to add something firefox doesn't want to add it as a search plugin. I need to create a more powerful search tool for personal use.

I've found some external software applications that will do it, so that leads me to believe its not possible within ID CC.

How to change the url of "Add New Item" of a particular list in SharePoint 2013???

Hi Guys,
How to change the url of "Add New Item" of a particular list in SharePoint 2013???
I need to redirect it into the page where I have created my Visual web part.
Please suggest
Warm Regards,
Tony Joy

Hi,
There are multiple ways to change the form url like javascript, SharePoint designer, custom code, editing default form to have custom web part etc, Please follow the url below that describe diffent methods and steps
http://social.msdn.microsoft.com/Forums/sharepoint/en-US/ec2769a0-683c-4023-8804-b596e4f92a3a/change-default-forms-on-custom-list?forum=sharepointcustomizationlegacy
Hope it helps!!!
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. Thanks, Ajeet

Is it possible to change the URL of displaytag's sortable function?

Basically, I've got a jsp page with the displaytag code on it such as:
<display:table name="result">
<display:column sortable="true" property="title" />
<display:column sortable="true" property="author" />
<display:column sortable="true" property="status" />
<display:column sortable="true" property="location" />
<display:column property="image" />
</display:table>
The way it loads the data is that in a servlet, a line of code creates the arraylist called "result", and passes that through the HTTP header onto the jsp. The jsp gets it and displaytag handles it. However, whenever I click one of the sortable headings, none of the data is found because the jsp currently needs to have the arraylist sent to it from a servlet. Clicking a sort link doesn't go through a servlet, just adds some arguments.
Is there a way to change the sortable URL to go back through a servlet and then add the sorting code (which is something usually like ?d-49653-s=0&d-49653-o=2&d-49653-p=1)?
Thanks
Ed

Hi there, Joel's example seems to be exactly what you're trying to do. All you need to do is replace his functions with your functions.
There are two main parts to his example: 1) reacting to a URL change directly in the URL bar, 2) reacting to a button click, and setting the URL
Regarding Item 1: this line (this adds a listener for when the URL hash is changed, and calls the 'sym.animate' function in his example). Note that he is linking the value after the # with the symbol names 'panel1', etc. This line enables the functionality for you to be able to directly change the URL to: testStep95.html#panel2, and the site will change pages.
$(window).on("hashchange", function(){sym.animate(location.hash.replace("#",""), sym.onStage)});
Regarding Item 2: he's setting the page title (based on the active panel symbol) and URL hash, in the 'sym.animate' function. He calls the 'sym.animate' function on click of btn1, btn2, btn3:
document.title = panelIn;
window.location.hash = panelIn;
Props to Joel for his slick example!

Firefox changes the url of my RSS feed. How do I fix this?

It changes the URL from http://www.vict-consultancy.co.uk/rss_feed.rss to feed://www.vict-consultancy.co.uk. The result is the xml code is shown as text on the web page http://www.vict-consultancy.co.uk/rss_feed.rss
The RSS feed seems to be working properly in other browsers (IE, Safari, Opera), it's only Firefox that is doing this.

This is only a problem if you open the feed link directly in the location bar.
If a feed is added via a link tag in the page code then it should work as you can via the above posted code.<br />
Firefox 13 doesn't have the "subscribe to this page" icon on the Navigation Toolbar by default, so you would have to add it yourself to easily discover live feeds.
<pre><nowiki><link rel="alternate" type="application/rss+xml" href="http://www.vict-consultancy.co.uk/rss_feed.rss" />
</nowiki></pre>

Changing the URL address in browser toolbar

I develop websites and interactive content to be used on screen for film and tv. I usually don't upload sites to a server and just preview them locally on laptops and desktops by obviously opening the .home or .index page in whatever browser is installed.
My question is, is there anyway to change the URL that is displayed in the toolbar to another address ?
Generally the toolbar in the browser will display a path where the files are saved i.e. file:///Users/Documents/WEB%20DESIGN/ABRD/home.html - but I would like to display for example www.mysite.com
Most of the time I just hide the tool / address bar in Safari or Firefox, but it would be good to be able to show a real looking address other than a file path.
Hoping there is some way to achieve this in the html code that will work locally ? I've read about URL masking but that needs the sites to be uploaded to a server for it to work?
Thanks, any help is greatly appreciated.

Depending on the local server you are using you could set up a virtual host:
This is a basic example using a Windows host with an Apache server:
http://www.elxis.org/guides/developers-guides/local-apache-and-virtual-hosts.html

I have firefox 7.0 and i go to about:config and change the URL default from bing to google but when i close firefox an open it back up it changes back to bing why is this?

I have firefox 7.0 and i go to about:config and change the URL default from bing to google but when i close firefox an open it back up it changes back to bing why is this? I stand by google 100% and if ur gonna make it where i can't use google as the URL's seach engine then i will uninstall it.

The default of the pref network.http.max-connections has been increased from 30 to 256 in Firefox 6+ versions.
Try to decrease the value of the pref <b>network.http.max-connections</b> from 256 to 30 as used in Firefox 3 versions.
*https://support.mozilla.com/kb/Firefox+never+finishes+loading+certain+websites
Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.com/kb/Safe+Mode

Can you change the URL of a meeting in Connect 7.5?

Hi,
I have a user that wants to change the URL of a meeting from https://umconnect.umn.edu/MPA2013 to
umconnect.umn.edu/DWSS13.
How can I do that?
Thank you
Alina

And in case you want to retain the contents of the meeting (including pods info and preferences), you can move the meeting (https://umconnect.umn.edu/MPA2013) to My Templates folder and then create a new meeting using that meeting as a template that will have same content but different URL.
Thanks
Sameer Puri

HT201363 I want to change the email address used as rescue email for my security questions. But I can't remember the answers to the security questions and I dont have access to the rescue email anymore. Please help.

I want to change the email address used as rescue email for my security questions. But I can't remember the answers to the security questions and I dont have access to the rescue email anymore. Please help.

-If you established a rescue email address, there will be a link on the "Passwords & Security" page of id.apple.com. Clicking the link will send the reset to your rescue email address (NOTE: This is not the same address as your Apple ID email)
-If there is no link on the page, then you didn't establish a rescue email address. Contact AppleCare at 800.694.7466 (If you are in the US), and ask for account security. You will need to answer some questions to verify your identity, AND you will need access to a computer to generate a temporary support pin.
-If you are not in the US, click http://support.apple.com/kb/HT5699 - Apple ID: Contacting Apple for help with Apple ID account security
HTH

Changing the URL runtime of an ADF secure page bypasses security

Similar Messages

Maybe you are looking for