Is this a bug of ADF Authorization?

Hi all
I am observing this behavior of ADF Authorization and would like to confirm whether this is an ADF authorization bug.
Taking the Fusion Order Demo (FOD) as a sample, below are the steps to observe this bug:
1. Access a protected page, for e.g.
http://127.0.0.1:7101/StoreFrontModule-StoreFrontUI-context-root/faces/myOrders
2. ADF authorization and authentication intercepts and redirects user to the login page
http://127.0.0.1:7101/StoreFrontModule-StoreFrontUI-context-root/faces/login.jspx?_adf.ctrl-state=1667297940_27
3. Now copy that state id information (_adf.ctrl-state=1667297940_27) and try to access the myOrders page again without logging in
http://127.0.0.1:7101/StoreFrontModule-StoreFrontUI-context-root/faces/myOrders?_adf.ctrl-state=1667297940_27
The page is displayed this time, no login is required. This looks very much like a security bug since myOrders.jspx is protected and unauthenticated users should not be able to see its content.
Regards
Khang

Hi Frank
I think you misunderstand the problem I tried to describe here. It is about authorization, not authentication or caching (The problem still occurs if the user never authenticated before). This could be a security bug that allows any anonymous user to access the content of a protected resource.
I found out about this problem with my own application. I just used the FOD app to describe the problem here so that everyone can reproduce it if they want to, and hopefully can redesign their applications to avoid this security issue. I tested very carefully before posting here, with different versions of jdev. Please also note that this issue no longer exists in the latest version 11.1.1.2.0
Let me use the below scenario to make my point clearer.
1. Assume user A just came to know about FOD application, and access it for the first time. User A does not have any user account in FOD.
2. User A tries to access a protected resource in FOD.
3. User A can see the content of that protected resource (using the steps mentioned before)

Similar Messages

Problem with 2 View Objects based on One Entity -Probably a Bug in ADF BC

Hi
I am using JDeveloper 10.1.3(SU5) and adf faces and ADF BC and to explain my problem I use HR schema.
First, I created 2 view objects based on countries table named as TestView1 and TestView2. I set TestView1 query where clause to region_id=1 and TestView2 query where clause to region_id!=1 in the view object editor and then I created 2 separated form on these 2 view objects by dragging and dropping from data control palette.
Now when I insert a record in the form based on TestView1 with region_id set to 1 and commit the record and go to the next form I can see the record in the second form which is completely wrong since it is against the where clause statement of the second form.
I am really confused and the situation is very wired and it seems to me something like bug in adf bc.Am I right.Is there any work around or solution for solving this problem.
Any help would be highly appreciated.
Best Regards,
Navid

Dear Frank,
Thank you very much for your quick response.
Reading your helpful comments now I have some questions:
1- I have commited the record in the database so shouldn't the query of view objects be re-queried?
2- We try to use ClearVOCaches (entity_name,false) in afterCommit of the base entity object but unfortunately it does not work correctly. after that,We got root app module and used findViewObject method to find all the view of that entity (we have found them by using name not automaticlly) and called executeQuery of all views. From my point of view it has 2 big disadvantages. First suppose that this entity is an important entity and 4 or 5 viow objects are based on it. Now, For inserting one record we should re-execute 4 or 5 view which I think makes some performance issues. Besides, If during the development one programmer add a new view object based on this entity and don't add the executeQuery in the afterCommit for this view, again we have the same problem. Isn't there at least a way that automatically refresh all related view objects however the performance issue still exists.
3- You mentioned that this issue is handled in the developer guide. Could you kindly give me a refrence which developer guide you mean and which section I should read to overcome this problem.(I have ADF Developer's Guide for Forms/4GL Developer's Guide , however I search for clearVOCaches and surprisingly nothing was found!!!)
4- Could you please give me some hints that from your point of view what is the best method to solve this problem with minimum performance effect.
Any comment would be of some great help.
Thanks in advance,
Navid

Bug in ADF installer 10.1.3.2?

I am running IAS 10.1.3.0 and since I am developing in Jdev 10.1.3.2 and I was getting the following error:
java.lang.NoSuchMethodError: oracle.adf.share.perf.StateTracker.isActive()Z
when deploying and running my application so I figured I needed ADF runtime installer 10.1.3.2, but after the install I get the following error in my OC4J log when I try to start it:
07/02/24 20:50:01 Start process
07/02/24 20:50:04 Error initializing server: Shared library "apache.commons.logging" could not be found.
07/02/24 20:50:04 Fatal error: server exiting
I have two entries in my server.xml, one in the the apache.webservices part and one in the oracle.ifs.client part. When I try to locate the commons-logging.jar (which i think has the package) its in the following places:
/u02/app/oracle/product/ias10103/j2ee/home/applications/PRB/prb/WEB-INF/lib/commons-logging.jar
/u02/app/oracle/product/ias10103/webservices/lib/commons-logging.jar
I tried adding the jar explicitly to the server.xml but no luck there. Who can give me a clue?

Hi,
this is bug 5884357. The bug is under screening and so far the possible work around mentioned is
1) Use OC4J version 10.1.3.1 or higher.
or
2) Remove the shared library <import-shared-library
name="apache.commons.logging"/>
The impact of the second action may be that certain element with runtime dependencies on apache.commons.logging may fail.
Frank

Bug in ADF(10.1.3.2.0) with checkboxes in a table in a pop-up

So I've found a bug in ADF. The bug manifests when I have a dialog window pop-up with a table with many rows(13 or more). Each row has a checkbox in it. If I change the state of 12 or fewer of the checkboxes and click ok, the returnListener will fire. If I change 13 or more checkboxes, the return listener does not fire.
I'll try to create a test case/demo for this. Has anyone else encountered this?

Hi,
I haven't seen this problem, but I normally use a JSF HTML boolean checkbox for ADF editable tables.
<h:selectBooleanCheckbox value="#{row.Enabled}"/>I found that the <af:selectBooleanCheckbox> readonly attribute did not evaluate its EL so I stuck with the JSF component since. You could try this component as a workaround.
Brenden

Pages 5.5.1: When opening a document created with Pages '09 (Version 4.0) with Pages 5.5.1 the page header and the page footer are deleted. How can this be prevented? Or is this a bug in Pages 5.5.1?

Pages 5.5.1: When opening a document created with Pages '09 (Version 4.0) with Pages 5.5.1 the page header and the page footer are deleted. How can this be prevented? Or is this a bug in Pages 5.5.1?

Same problem here (no graphics in header or footer) and the problem has been reported months ago. It is another bug/feature lost when Apple moves from 09 to the iCloud-compatible versions. Complain to Apple, you may have better chance than me and they may finally listen to their users....

Is this a bug in OWB 11.2 - importing table metadata for character columns

The Oracle® Warehouse Builder Data Modeling, ETL, and Data Quality Guide provides an overview of the data types supported.
http://docs.oracle.com/cd/E11882_01/owb.112/e10935/orcl_data_objx.htm
It says that for VARCHAR2 data type it saws (http://docs.oracle.com/cd/E11882_01/owb.112/e10935/orcl_data_objx.htm#CHDFIADI )
"Stores variable-length character data. How the data is represented internally depends on the database character set. The VARCHAR2 data type takes a required parameter that specifies a maximum size up to 4,000 characters"
That means , I guess, it says that when I import a table, any columns of type VARCHAR2(10) in the database should have its length show as characters in OWB, so a column of type Varchar2(10) in the Oracle database, should be shown as Varchar2(10) when imported into OWB table metadata via the OWB import function.
However, if I have a database that set-up as a single-byte and import a table using the OWB import function a column that has a size of e.g. 10 in the database, is imported as OWB table metadata and the size is 10. Correct, I am happy.
However, if the database is modified to support multi-byte characters, ALTUF16 encoding with the semantics set to "CHAR", then when I import the same table into OWB, OWB reports the size as 40, I guess its 40 bytes as in 10 characters @ 4 bytes per character.
Is this a bug in OWB, as the datatype in the Oracle DB is varchar2(10), should OWB after importing a table not also report the column as VARCHAR2(10) ? Currently, is shows the column as varchar2(40).

I noticed that myself in our project.
Our varchars2 are defined as VARCHAR2(xxx CHAR) - OWB puts the size*4
In fact if you have special characters like umlauts (ü,ä,ö,...) it will use 4 bytes per character.
You can try it yourself. Define a Varchar2(1 CHAR) and manually change the size of the Column in your mapping inside OWB (in filters, joins or your target table).
Then shoot an umlaut through the mapping and will end up with a "too small" error.
Dont mind the size*4 issue - we totally ignored it and run without error since 4 years now.

Iphone 6 tells me that "Item not available" in my country UK, when i click on the itunes store icon for the app to open the music, movies or tv shows section of the app. is this a bug?

I am based in the UK and have just got a new iphone 6, everything works well except when i try to turn on the itunes store app - i can do a search and buy music etc that way, within the app, however, if i go to Music, Movies or the TV shows section within the Store app, i get a message come up saying "Item Not Available" - This item you've requested is not currently available in the UK Store, but it is available in the US store. Tap Change Store to view this item". I therefore cannot browse the music, movies or tv shows sections at all, nothing shows up except that message. All my previous itunes purchases have downloaded ok, and i can access them. My apple ID works fine and restrictions on the iphone are turned OFF. The App Store app works normally. Connection etc is all fine and I can access itunes in the normal way on my ipad and laptop, so this is just an iphone problem. Any ideas? is this a bug? I cant find anyone else with exactly the same problem. By the way, the same message comes up when i click on the red Music icon, on the iphone (situated next to the Safari icon) and then go to the "Store" via that app. my playlists are in tact, but as soon as i click that Store button, I am told that the Item is unavailable - not that i have chosen any Item lol, I just want to access the store in the normal way. Thank you in advance for any suggestions you can give

It is working now. I no longer get the message about the item not being available in the US and I can access the store.

Open Cursor Issue because of file browse Item - Is this a Bug in APEX 3.2

Hi All,
I am using file browse Item to upload file into the database at two places in my application, but it seems whenever I am submitting those two pages, with file path or without file path, its opening an cursor which remains open after that, because of this open cursor count in the application is getting exceeding every time.
For testing this I have made an dummy page containing just file browse item and submit button, and still it is increasing the open cursor count.
Is this a bug in Apex file browse item or there is some other way to handle this.
Please kindly help me in the above issue as this is affecting the production application.
Thanks & Regards
Sanjay
Edited by: user11204334 on Dec 5, 2010 9:57 PM
Edited by: user11204334 on Dec 5, 2010 9:58 PM

Hi,
One observation, Apex is switching the Session ID after one got killed ? I was working on Apex page with browse Item to test open cursor count,
after killing the SID (227) on which the open cursor count was getting increase, it APEX automatically switches to new SID(149) for that session.
Now the problem is even if I have two SID's and one hits the maximum open cursor count, It is not switching to other SID instead the whole application becomes unavailable.
STATNAME SID VALUE USER
opened cursors current 20 14 APEX_PUBLIC_USER
opened cursors current 149 74 APEX_PUBLIC_USER
opened cursors current 194 71 APEX_PUBLIC_USER
opened cursors current 211 5 APEX_PUBLIC_USER
opened cursors current 227 325 APEX_PUBLIC_USER Killed
opened cursors current 244 15 APEX_PUBLIC_USER
opened cursors current 20 14 APEX_PUBLIC_USER
opened cursors current 149 76 APEX_PUBLIC_USER
opened cursors current 194 71 APEX_PUBLIC_USER
opened cursors current 211 5 APEX_PUBLIC_USER
opened cursors current 244 15 APEX_PUBLIC_USER
Please kindly help in this.
Thanks in Advance
Thanks & Regards
Sanjay
Edited by: user11204334 on Dec 8, 2010 1:02 AM

Is this a bug with BoEdge3.1?

Can anyone help me on the issue which my customer is facing for BoEdge3.1
Concerning Error Message: You do not have enough Named User Licenses to make this user a named user. You have 55 Named User Licenses. (FWB 00013)
This is the error message she was receiving when trying to change an
existing user from Concurrent to Named under the Connection Type on the
Properties panel.
The current workaround was to delete the existing Concurrent user, then re-add the same user as Named.
She have been going through this process of deleting existing users, and then
re-adding them as Named and it was working okay. Then, it stopped
working and she started getting the same FWB 00013 error message again.
She was not able to create any Named users now. Basically, the workaround
worked for a while - then stopped working.
She currently has a total of 88 users. 21 of them are named. 67 of them
are Concurrent. She is licensed for 55 Named.
Once again, the system thinks she has 55 users marked as Named. But
there are only 21 marked as Named.
She did notice that as she was going through all of her existing list of
users, in alphabetical order, she was opening the Properties tab and
checking the Named/Concurrent status - as she got to the 55th user in the
list that is when she started getting the error message again.
Is this a bug with BoEdge3.1?
And I got an ADAPT01194692.
I am not sure that Is the ADAPT related to this issue.
Please help me its very critical.

Hi Salena,
If you are an SAP Employee, request you to post this question at
https://cw.sdn.sap.com/community/bobjtc
Cheers,
Subhodeep

JDev 9.0.3, Business comp wizard, is this a bug?

Howdy,
Found something that perhaps is a bug, hoping you guys have fixed for the real release.
1) Create a database connection, but don't fill in username/password. Don't check deploy password.
2) Create new workspace and project.
3) create new business component package in the project. On step 2, point Connection name to username/password-less connection. Alert says prompt will ask for credentials. No matter what I put in, with valid username/password entries, a Connect Error pops saying invalid arguments in call. Exception: oracle.jdeveloper.cm.CMException.
Is this a bug? We're using dynamic credentials in our app with data sources, so username/password is left off.
Thanks,
Joe Tseng
Technical Management Consultant
TUSC
[email protected]

Joe,
I've filed Bug#2561459 to track this problem.

Cannot see my picture stream on iPad with IOS 8.1.3. Pics from iPad are uploaded and visible on picture stream on iPhone 4, IOS 7. Is this a bug?

I cannot see my picture stream on iPad with IOS 8.1.3. The pictures from iPad are uploaded and visible on picture stream on iPhone 4, IOS 7. Is this a bug with IOS 8.1.3?

Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
iOS: Troubleshooting Messages
iOS: Troubleshooting FaceTime
- Sign out and then sign back into Messages and FT. Note you will lose all messages presently on the iPod
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: Back up and restore your iOS device with iCloud or iTunes
- Restore to factory settings/new iOS device.

Emulator on OSX don't support capturing audio, is this a BUG?? SDK 3.0

Hello all,
well i'm trying to capture audio with the emulator on OSX. When i test the System Properties for capturing audio i always get FALSE.
I tried the same application on Windows XP with the SDK 3.0 and it works, i'm getting True and can capture the audio with my microphone.
Now i want to know if this is only a Bug and could be fixed or is the support for capturing audio on Mac OSX not implemented yet?
Thanks
Greetings

What kind of problem about the display image in signature?
How do you add the image into the message body when you send the message?
Does it show correct through Web-based access?
Outlook 2007 doesn't support some of Style Element, you may reference the link as below:
http://www.campaignmonitor.com/css/
Thanks.
Tony Chen
TechNet Community Support
Thanks for your reply, I know that some Style Elements won't be supported in Outlook, but this is not the reason.
Please refer to my post previously, I post it but get no response.
http://social.technet.microsoft.com/Forums/office/en-US/481170b1-f23f-4d46-9914-823326491846/is-this-a-bug-of-outlook-2007-about-images-displaying-in-signature?forum=outlook

When I press right click - Open in a new Tab on a bookmark on Firefox 4.0 nothing happens. Is this a bug? Is there a solution?

When I press right click -> Open in a new Tab on a bookmark on the "Display your bookmarks" icon that is located on the upper right corner of Firefox 4.0 nothing happens. It only works if I press right click -> Open in a new Tab on bookmarks under the menu that is located on the upper left corner. Is this a bug? Is there a solution?

No its working fine.
Start Firefox in Safe Mode : How to start in safe mode
If it doesn't work
Create new Profile: Profiles

Is this a bug of Outlook 2007 about images displaying in signature?

I've done many tests and researched on website or MS KB. But still got no solution.
My issue is:
I make a signature with images linking from website which can be easily accessed.
I setup this signature in Outlook 2007, when I compose a new mail, and choose the signature I set. It won't show the images with a high percentage rate, meanwhile, I try to get into "Signature"-"Signature...",
Outlook2007 gets stuck, then you can not close Outlook or open Internet Explorer unless you kill the process of OUTLOOK.exe.
1. Test are done under a clean XP system and Office 2007 standard fresh installed. Also there are some other staffs who help me test the signature that report the same issue on Office 2007.
2. Images are rendered in 96dpi. They are all in very small size stored on website, can be easily accessed without network connctivity problem.
3. The signature is made by simple HTML language not by Outlook signature setup wizard. but in this case, you can ignore which method I use to create the signature. The images in signature can be displayed well in Outlook 2003 &
2010. Also I have tried insert images using "link to file" in Outlook signature setup wizard, got same issue.
4. Don't suggest me to store the images locally. These images should be updated after a period. You can not ask the company staffs to update these images manually by themselves. and even if the images are stored locally, the images won't be shown
in Outlook 2007 with a high percentage rate.
5. I've tried setup signature with or without an account profile, got same issue.
6. I 've tried without an accout profile, just copy the signature file to Outlook signature folder, unplug the network cable, and "new mail" then load the signature, of course, the images won't be shown because network connection doesn't exist,
and then when I try to get into "Signature"-"Signature...", the Outlook interface also gets stuck. So I think Outlook 2007 may have some problem on detecting the network connectivity.
7. It is not possible to upgrate the version of Office. Since Office 2007 isn't out of date and is powerful enough for us, no one want to pay more money just to avoid this issue.
I don't know why I cannot upload a screenshot for troubleshooting. If needed. I can send a mail with screenshot attached.
So far to now, I still get no solution, I think this is a bug of Outlook 2007, because the same signature, there is no problem on Outlook 2003 & 2010. Hope someone of MS staff can see this article and report to technical support center.
I would appriciate anyone's kindly help but please consider that you understand what I am talking about. I don't want to waste time for each of us.
thanks in advanced.

What kind of problem about the display image in signature?
How do you add the image into the message body when you send the message?
Does it show correct through Web-based access?
Outlook 2007 doesn't support some of Style Element, you may reference the link as below:
http://www.campaignmonitor.com/css/
Thanks.
Tony Chen
TechNet Community Support
Thanks for your reply, I know that some Style Elements won't be supported in Outlook, but this is not the reason.
Please refer to my post previously, I post it but get no response.
http://social.technet.microsoft.com/Forums/office/en-US/481170b1-f23f-4d46-9914-823326491846/is-this-a-bug-of-outlook-2007-about-images-displaying-in-signature?forum=outlook

Is this a bug in JVM?

Hello all.
Whenever I try to make JNI calls to Ms Word in multiclient environment on server, the JVM closes with the following message.
Another exception has been detected while we were handling last error.
Dumping information about last error:
ERROR REPORT FILE = (N/A)
PC = 0x19BFC46D
SIGNAL = -1073741819
FUNCTION NAME = (N/A)
OFFSET = 0xFFFFFFFF
I am using JRE1.4.0 .
The heap size of JVM I have set is 256 MB.
Is this a bug in JVM?
Please guide me in this problem if possible because it is urgent for me.
Thanks in advance.

Hallo,
if I understand your problem correctly, you are trying to call MS Word on your server from Java code in your server. This is not to be recommended!
I have seen references to this problem elsewhere in the Sun forums but cannot at the moment find them. There is also something in MSDN. As far as I remember, the story goes like this:
1. Word is a program for client PCs.
2. Word expects to have a GUI available for it to display messages and so on.
3. Although you can control Word over OLE, 1 and 2 above still apply.
4. If you still want to use Word in your server, then on your own head be it.

Is this a bug of ADF Authorization?

Similar Messages

Maybe you are looking for