How to disable report's execution requests from the browser

Hello gurus,
We are implementing several security measures in our application, some of them are related to reports execution/visualization, we need to avoid users accessing reports that they don't have privilege to see. The reports were execute by Forms via RUN_REPORT_OBJECT, destination type CACHE and destination format PDF, then we displayed the output using the jobId provided to Forms by the Reports Server. Because these jobIds are sequential numbers any person was able to change the jobId in the URL and get the output of another report. This violated the Confidentiality of information.
Now we generate all reports output to file, the file name is a random value, to avoid guessing. The problem is that even though the official way to execute a report is via the application, the report servlet is accepting request as URLs, and this violates the access controls we have implemented in the application.
Is there a way to stop the reports servlet without affecting the valid requests (from RUN_REPORT_OBJET in Forms) or is there another possible way to disable URL requests?
TIA
Victor.

If you are using Portal and SSO, you can assign privileges on Reports and Reports Servers to groups and/or users. For more info, see Chapter 10 of the "Publishing Reports to the Web" documentation: http://download.oracle.com/docs/cd/B14099_19/bi.1012/b14048/pbr_sec_arch.htm#i1006221

Similar Messages

HOW TO USE FUNCTION Deletion of Requests from the Change Log IN PRCSES CHAN

Respected all
i used Deletion of Requests from PSA from the prcess chain and found good results, now i have only one request at the psa and thus i am doing good space utililisation. but when i am using Deletion of Requests from the Change Log i am not getting any changes in the request of dso. kindly let me know how to use this 2nd function.
thanks
abhay

Hi Mahodaya,
As per SAp standards its good to delete the requestes that are no longer needed for the delta update and no longer used ffor inti from the change log table and the data is loaded already in to DSO.
Goto RSPC
Click on create New PC -> enter the PC name n long descp
Next we need to define the start process for the PC.Maintain the start variant process.save n come back.
for deletion of change log we have option in the Other BW Processes -> deletion of requestes from change log
Once u select the option we get a dialoge box here we need to create the variant for the process enter the process variant n long descp. cick ok.
Next in the maintenance screen for the deleting the request from change log table will appear.
Enter the selection patterns to which the requestes should be deleted from the change log.
In the maintenance screen, select one or more Data Store objects for which requests are to be deleted from the relevant change log tables under Data Store Object column and select theInfo Area of the corresponding Data Store Objects under Info Area
If you select the first check box exclude selction pattern, this means that del of requests from change log table will be ignored.
or
We can delete the requests which are Older than N-number of days (or) date in the above screen. For this one, enter the number of days (or) date in the filed Older than .
OR
If we want to select the requests with a certain status then we can also do in the above screen. We can select the following status indicators from the above screen.
Delete Successfully Updated Requests Only -This status will delete only requests which
are successfully updated into corresponding Data Store objects.
Delete Incorrect Requests that were not Updated - This status will delete only incorrect requests which are not successfully updated into the corresponding Data Store Objects.
Delete Activation Requests only, No Load requests- This status will delete only the activation requests (requests that begin with ODSR_... ). No load requests are deleted.

How do i send a meeting request from the ios 7 calendar?

In IOS 6 i could send meeting request to people in my contacts. now in ios7 i can only add events to my calendar. thanks in advance for any help that is given.

If you're referring to the recent U2 gift, click here.
If not, click here and follow the instructions.
(112927)

How to disable "This file was downloaded from the internet" prompts?

They're annoying. I always say "yes" and I think they cause problems sometimes when I use these files with Terminal. How do I get rid of them, if I can?

If you do that, you may lose the new XProtect malware detection feature as well. See
About file quarantine in Mac OS X v10.5 and v10.6

How do you remove an ad blocker from the browser

I can not watch shows or videos on my Mac Book. Is states I have an ad blocker installed on my browser. I need to uninstall. How do you do this?

I was referring to the option as highlighted in the following screenshot that would exclude the page from Menus.
Thanks,
Vinayak

How can I send an image directly from the browser as an attachment, not a link?

I'm wondering if there's a way-- either via some kind of add-on or a direct FF customization-- to send an image as an attachment rather than as a link? either right-clicking an image and selecting "send image" or dragging an image into a "new message" window in outlook for example merely adds a link to the image and I'd rather that the image itself was added as an attachment. this functionality is available in IE as "email picture," which is extremely useful.
thanks for any insight here.

It was not mentioned what the client is. If it is a browser, the image can be sent using hml img tag. If it is using streams, then u need to set content type to image/gif or image/jpg ( depending the image u r sending) using response obj.
response.setContentType("image/gif");
Bye...

How to delete a noncompress request from the aggregates

hello gurus
i have a request in an infocube, which is not compressed in the cube. i rolled up the request, so that the data will be moved to the aggregate. is it? then i found that the data is inconsistant. so i delete the request from the infocube manage scree, under the request tab. now my question is whether the data will be deleted from the aggregate or not?
thanks in advance
rams.

If the Request has not been compressed in teh cube or the aggregate, you should simply be able to delete the Request form the Cube and it will be automatically deleted form teh Aggregate. Since it has NOT been compressed in the aggregate, it should be a very quick process - no need to deactivate the aggregate.
If it has been compressed in the aggregate, but not the InfoCube, you should still be able to delete the Request form the InfoCube, but the BW will have to refill the aggregate. It should do this on it's own, but at differnt sopport packs, I had some problems with that always working. As others have mentioned, in this case you could always deactivate the aggregate, the delete the Request from the InfoCube.
As yo ureview this situation, you should consider how often you have/might have a problem like this. If it occurs very often, then you should have your aggregate(s) for this cube setup so they do NOT automatically compress after Rollup. Instead the Requests in the aggrgate will only be compressed when the Request in the InfoCube is compressed.

How to make report with access 2010 from SharePoint Discussion lists 2013

HI,
I want to make an access report from SharePoint Discussion lists 2013. When i open the list with access, the body of the list is in HTML format in access. Also if i reply something to one subject in the discussion, the reply is not mapped to that subject
but instead it is shown as a separate entry in the database.
Anyone can please help?
SAN
Santhiya
Santhiya

Hi Santhiya,
I have seen a similar post from you, my understanding is that you wonder that the reply is mapped to the related subject. You can take a look at Daniel's reply in the following thread:
http://social.technet.microsoft.com/Forums/en-US/dfb5bcb9-0076-412a-b34f-46aa9cfba876/how-to-make-report-with-access-2010-from-sharepoint-discussion-lists-2013?forum=sharepointgeneral
Thanks,
Wendy
Wendy Li
TechNet Community Support

How to disable App tabs (pined tabs) from being started automatically?

how to disable App tabs (pined tabs) from being started automatically?
because the option [Don't load tabs until selected] dose not work with it, and it keeps starting every time when I restart Firefox.
Please help me!

Don't bother, I reached to the solution by my self, you can do it as following:
Type "about:config" [ without quotation marks! ] in the Location Bar (address bar) and press Enter to display the list of preferences, as shown in the picture '''#1''' in Firefox 17 on Windows 7.
If you see a page with the warning message as shown in picture '''#2''', This might void your warranty!, click the button labeled "I'll be careful, I promise!", to continue (in fact, there is no warranty whatsoever, it's more a joke to ensure that users are aware of what they are about to do). uncheck the check-box there to avoid the warning in the future.
Now at the search bar in the picture '''#3''' type: ''tab'' and look for the
'''preference name:'''
browser.sessionstore.restore_pinned_tabs_on_demand
or you can '''copy''' it directly to the search bar,
'''Next,''' follow the instruction in picture '''#3''' .
Just in case if the pictures didn't appear, do ''these steps'':
'''First:''' Right click at the preference name that we searched for.
'''Next,''' click Toggle to change the value from false to true.
'''Or,''' double click on it and it will change.
'''Finally,''' restart Firefox and you will notice that they don't load automatically until you click on it.
That's it, Good luck to all. ''';-)'''
'''Note''': The bolded font preferences list is the user modified, and the un-bolded is the default setting.
'''Warning''': Modifying preferences can, in rare circumstances, break Firefox, Thunderbird or the Mozilla Suite, or can cause strange behavior. Only do so if you know what you are doing or are following trustworthy advice.
Additional INFO:
about:config is a feature of Mozilla applications which lists application settings (known as preferences) that are read from the profile files prefs.js and user.js, and from application defaults. Many of these preferences are not present in the Options or Preferences dialog. Using about:config is one of several methods of modifying preferences and adding other "hidden" ones.

How to delete 100+ released requests from the import queue?

Hello
How to delete 100+ released requests from the import queue?
One by one or there is more convinient way?
Thanks

To delete multiple non-imported transport requests, you do the following while in the import queue on STMS:
1) Highlight the status field of the import queue.
2) Sort the import queue by the status.
3) Put your cursor on the first non-imported transport, right-click, and click on Select Block.
4) Scroll down and put your cursor on the last non-imported transport, right-click and click on Select Block. This will highlight all requests from the first one selection to the last one selected.
5) Go to menu option Request > Delete.
If all of the requests in the import queue haven't been imported (no imported, including failed import, requests), you can jump to Steps 3-5.

How 2 find the "Requests from the SQL Developer Exchange Included" in 2.1.1

Hi,
I would like to explore the new features from 2.1.1
http://www.oracle.com/technology/products/database/sql_developer/files/BugsFixed_v211.html
But can not find them in:
http://apex.oracle.com/pls/otn/f?p=42626:46
Where are they explained...?
Thanks, Juergen

Thanks K,
good hint with the filtering of the status...!
I was just wondering if you can find the ID's. When you scroll to the end on: http://www.oracle.com/technology/products/database/sql_developer/files/BugsFixed_v211.html
there you find the section "Requests from the SQL Developer Exchange Included" with a lot of IDs...
8411043 : Commit confirmation
8755723 : Copy column name to clipboard (ctrl - shift- C)
8487257 : Do not use ora_rowscn (Request implemented using a preference)
but the filtering is good for me too...
Juergen

How do you remove back up data from the memory storage? my storage data states that i have over 80gb of data used for back ups and i dont know why as i use a external hard drive as a time machine .now my 250gb flash storage is nearly full

how do you remove back up data from the memory storage? my storage data states that i have over 80gb of data used for back ups and i dont know why as i use a external hard drive as a time machine .now my 250gb flash storage is nearly full.. HELP!

When Time Machine backs up a portable Mac, some of the free space will be used to make local snapshots, which are backup copies of recently deleted files. The space occupied by local snapshots is reported as available by the Finder, and should be considered as such. In the Storage display of System Information, local snapshots are shown as Backups. The snapshots are automatically deleted when they expire or when free space falls below a certain level. You ordinarily don't need to, and should not, delete local snapshots yourself. If you followed bad advice to disable local snapshots by running a shell command, you may have ended up with a lot of data in the Other category. Ask for instructions in that case.
See this support article for some simple ways to free up storage space.

I lost my I phone 4 , how to track it's imei number from the apple id that I used in that lost iPhone

I lost my I phone 4 , how to track it's imei number from the apple id that I used in that lost iPhone

The only way to locate/disable/erase any lost/stolen iPhone/iPod Touch is through Find My Phone or a similar app. However, this requires that Find My Phone be setup/activated, on your phone, before it was lost/stolen. You would then login at iCloud.com & try to locate it. This requires the phone be turned on & have an Internet connection. There is no other way to locate a lost/stolen iPhone. Apple can't/won't help you, nor will your carrier. Report the loss to the Police, your carrier & Insurance company. Change all of your passwords.
If your carrier offers Blacklisting & they Blacklist the phone, it will be unusable as a phone.
If locked with a passcode, and running iOS 7.0, then phone cannot be activated or the passcode removed without knowing your Apple iD/Password. It will be nothing but a useless paperweight.
If not running iOS 7.0, the phone can be forced into recovery mode & restored.

How to disable access to internet completely in the jnlp file

Hi All,
Can someone help me in figuring out how to disable access to internet completely in the jnlp file.
To be specific with the scenario if the client does not have the JRE installed, i would like to have it downloaded from the server where application runs instead of going to java.sun.com website which needs internet access.
How can we configure it in such a way that it does not go to internet at all.
Here is the snapshot of my jnlp file
<j2se version="1.5.0+" href="http://java.sun.com/products/autodl/j2se" initial-heap-size="128m" max-heap-size="128m"/>
I tried with the following and still unsuccessful.
<j2se version="1.5.0+" initial-heap-size="128m" max-heap-size="128m"/>
Could not find any useful information in the documentation.

see post from Mike at:
http://forum.java.sun.com/thread.jspa?threadID=704112&messageID=4082098#4082098
for how to set up your own autodownload of jre from within your internet.
/Andy

I just bought a song and my ipod shuffle will not play it.. how do i get my money back from the song??, I just bought a song and my ipod shuffle will not play it.. how do i get my money back from the song??

I just bought a song and my ipod shuffle will not play it.. how do i get my money back from the song??, I just bought a song and my ipod shuffle will not play it.. how do i get my money back from the song??

Assuming you bought the song at the iTunes Store, you can go here
http://www.apple.com/support/itunes/
and follow one of the "paths" to get what you need or to an Apple customer support employee. One path is to click Contact Support at the bottom of the list of choices, and use the Express Lane.
The iTunes app also has a way to report a problem with a purchase. Select iTunes Store in the sidebar (of the iTunes window). Toward the upper right corner, click on your Apple ID. This gets you to your Account Information screen. Find Purchase History and click See All. On that screen, you can select a specific purchase with that problem, and Report a Problem.
If you want to try to figure out WHY that song does not play on your iPod shuffle, please post back...

How to disable report's execution requests from the browser

Similar Messages

Maybe you are looking for