Making a form secure

I am pretty new at this and I am making some forms that need
to be secure. I was wanting to know how to go about it.

.oO(scip-a-roo)
>I am pretty new at this and I am making some forms that
need to be
>secure. I was wanting to know how to go about it.
Security can mean a lot of different things. So what you're
after
actually? Some more details, please.
Micha

Similar Messages

Making a form portlet reusable by allowing a parameter to be passed to it

I have a form that allows maintenance on records. I need to filter the records that a user can maintain, (and insert) based on a column value. I can accomplish this by setting the default value for the (hidden) column. When I query and maintain the records in the form it behaves correctly by only affecting the records for the default value. Now I want to place the form into multiple pages as a portlet.
The goal is to be able to change the default value for the portlet (reuse). I've seen many postings on how to pass things to and from forms, but nothing seems to address allowing a user to easily customize the portlet.
Any bright people out there have a creative solution to this?

I discovered the way to do this is by making the form based on a procedure and creating link to the form. When a form is based on a table or view, the link will pass field information and return records, when a form is based on a procedure there are no records to retrieve so it sets values passed as default.

How can I create a long employment form without making the form widget drag?

How can I create a long employment form without making the form widget drag?

Sorry Sachin, I mean that I created a simple form on the page from the widget and started adding fields to it. The more fields I add the slower the delay becomes in creating a new field. Even when I try to select and drag or move an item, there's a huge delay and sometimes the program feezes, loose what i've done and have ot restart.
I'm doing an enployment form that has more than 20 fields, at least, and I need to be able to build the fields in separate categories, like Education, Past Employment, etc... quickly without delay issues.
I can probably send you a snap shot of what I'm talking about if I cna post it or attach it here..?
~Andy

Forms security - "Not Available" user / group

Hi,
In form security I have a user / group with the name "Not Available". I don't know how it got there and I can't remove it (An error occurred while processing this page. Check the log for details.) I have very restricted access so I can't run tomcat in window mode to check the log.
Any tips to remove this users? (Planning 9.2)
Regards

I have found whats causing this problem. When I use the deprovisioning option in HSS on this users they become "Not Available" in the Assign Access option of the form. Why, I don't know. I thought they would be automaticaly removed. The planning database was copied from development environment to production environment while the Planning service was stopped and then started after database copy, after that do I have to make any kind of registration?

Exporting Planning forms security using exportsecurity.cmd

Is there a way to export only the planning forms security info using exportsecurity.cmd ? I am using Planning 9.3.1.2.
I can export dimension level security, group level and user level. I am not able to figure out a way to export only the form security.
Any suggestions?

If I remember correctly you can import security on forms but it doesn't seem to export it (my mind may be playing tricks and I could be wrong), from 11 I know you can definitely import and export permissions on forms.
If it is not possible you can always run a query against the planning application relational repository for example
select formname.object_name as "Formname", username.object_name as "Username/Group",
case acc.access_mode
when 1 then 'Read'
when 3 then 'Write'
when -1 then 'None'
end as "Access"
from
hsp_access_control acc, hsp_form form, hsp_object formname, hsp_object username
where acc.object_id = form.form_id
and formname.object_id = form.form_id
and acc.user_id = username.object_id
Cheers
John
http://john-goodwin.blogspot.com/

Planning: forms security suddenly disappear

For no known or suspected reason an application lost its forms security.
Anyone have a probable cause for this?

From shared services, application unregistered, then all access will be removed, it will remove access for application, not sure in your case, try to check planning logs & Shared services logs, it may help to found the cause.

Differing levels of form security

I have a certificate form that anyone should be able to open and print, but only certain people should be able to fill out (so people who receive the certificates can't go changing them and printing copies for all their friends).
Both password and certificate security seem to be all-or-nothing propositions. Am I missing something? Is there a way to designate two levels of security, one for a specific small group and one for the rest of the world?
Everyone involved here at the office has Acrobat 7 Pro, while our customers can be expected to have Reader versions 5 and up.

Well sure, that can be dealt with, but that doesn't answer my question. Surely someone around here has dealt with form security issues before?

BW BPC 10 input form security

Hi,
i would like to ask you a question about BW BPC 10 input form security.
I want to apply sequrity to input form for each BPC users.
forexample i have 4 input form in BPC system, form A, form B, form C, form D.
i want to give a access security to user1 only form A and form C or can i apply security to input form folder.
is there any way to do this issue.
Thank you.

Hi,
Once you create teams in BPC security, assign some members to that team.
Now, in your EPM addin, by default, the templates are usually stored in the COMPANY folder. While saving the templates, you will see the teams, on the left side, that you have created in BPC admin.
Save the templates in one of these teams.
Please note that you need to be part of the team in order to save the template.
Hope this helps.

Can LCM import form security?

We are on Hyperion Planning 11.1.2 and used LCM to migrate and app from UAT to Prod. We migrated all artifacts over, but the form security is not there. We see the groups when we try to add access, but the access is not on the form folders themselves as they are in UAT. Is LCM able to import the security for forms like the dimension security? Thanks in advance.

Yes. LCM can import form and form folder security. I tend to export to the file system first. That way, I can see exactly what's in the XML files, plus I have an arcihve of what got migrated.
If you export to the file system first, you should see form and form folder security in the following directory:
resource\Security\Access Permissions
In that folder there will be a Users.xml file, and also a directory for Groups. If you look in the XML, you should see security assigned for forms and folders.
Hope this helps,
- Jake

What is 'Web Form Security' in the forms module?

I'm looking thought a BC site Admin area, trying to make some mods to a form, and I noticed that there is a 'Web Form Security Module' under the E-Commerce tab, in the Web Forms builder. Anyone know what this is/does? I've searched the docs and can't find it.
Thanks,
Ben

Thank you for posting.
"Web form security" (module_ccsecurity) module is there for CSRF protection. You can read more about it here http://en.wikipedia.org/wiki/Cross-site_request_forgery
If you place that module within the form tags on the page it will render a field such as this:
<input type="text" name="s_summary" id="s_summary" class="cat_textbox" value="acade4971bb94d2b936f17bc36a35ba4" style="display:none">
Warm Regards,
Aishvarya Rastogi

Forming Secure Connection Problems

I just did a hard reset on my phone cause it was giving me so much problems, now I cant even get to the next screen to test to see if i can connect to my school's email server. I'm stuck on the Forming Secure Connection screen. The error message says "There was a problem with syncing. Can't connect to server. Please chec your network or server settings and try again". It's basically the same setting as I had before with the SSL checked (the IT guy told me I needed it checked). The detail section of the error says AirSAMStateMachine.c1913 14632". any advice would greatly be appreciated.
Post relates to: Treo 700p (Sprint)
Post relates to: Treo 700p (Sprint)

Do you have the security certificate for the server installed on your device?
Click on the following link to the kb.palm.com webpage for the article regarding the error messages.
http://www.palm.com/cgi-bin/cso_kbURL.cgi?ID=41831
Click on this link for the Palm certificate modification tool. You may want to speak with your IT guy and see if there is a certificate that needs to be installed on the Treo.
http://www.palm.com/us/support/downloads/versamail/certmodtool.html
Click on the following link for the support page for your device on the kb.palm.com webpage.
http://www.palm.com/us/support/treo/treo700psprint/
There are links on the page to the user guide, troubleshooting, how to's, downloads, etc.
Post relates to: Palm i705
Message Edited by cygnusX1 on 11-03-2008 02:14 PM

Making a PDF Form secure for emailing

I have created an enrollment form with LiveCyle. The employer will send the application to a new employee for them to fill out and they would like it emailed back to them. I tried the submit button but that doesn't work because while the information they input is received in a .xml file the electronic signature does not transfer which is required. Can I set it up encrypted so that only the information that is input is encrypted? I am VERY new to creating forms and using LiveCycle. Thank you!

The way I think you are trying it in Reader won't give you want you need. If you want to hide the data in the XML email submission (from email submit button), you need the newer capabilities in Designer 10.x to encrypt the submission. The XML contents will look like this after it is encrypted:
<?xml version="1.0" encoding="UTF-8"?>
<xfa:data xmlns:xfa="http://www.xfa.org/schema/xfa-data/1.0/"
><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="encrypteddata_2" Type="http://www.w3.org/2001/04/xmlenc#Element"
><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"
/><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"
><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"
><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"
/><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"
><X509Data
><X509Certificate
>MIICRTCCAa6gAwIBAgIKNvzDsAiaeyPYFDANBgkqhkiG9w0BAQUFADBTMREwDwYDVQQDEwhKb2hu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</X509Certificate
></X509Data
></KeyInfo
><CipherData
><CipherValue
>ADk2Kxut+M84Pi4B1ZC9znKFCz2rAfHYZNZ76fWK/eRE5QMC0NhCnQ5gFfrOLU9Wl/5FOTZMwQab
F1PjdKaVys0TjOR51HH1A6D/ZUf7baBQ1XnKRW5kQR8xePwwDaRoyBopF8+XeWA6d8yRXvyZdLJa
Hju2/gUR/M2HArKCtso=</CipherValue
></CipherData
></EncryptedKey
></KeyInfo
><CipherData
><CipherValue
>uiKSewcq2Of8cIk7hRnjFmOpTo+XxN6AZM5PyT+k2d1mUuBlbJWxCk37EFiwVHRH5n4oOQkuFFhv
+jopOPQLbthkdhiDzWHmAJhstaPcbvA=</CipherValue
></CipherData
><EncryptionProperties
><EncryptionProperty xfa:processingRule="replacementContent"
><form1
/></EncryptionProperty
></EncryptionProperties
></EncryptedData
><signatures
><Signature xmlns="http://www.w3.org/2000/09/xmldsig#" Id="datasignature_2"
><SignedInfo
><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"
/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"
/><Reference URI="#idbfea09cc-7f34-11e1-9c29-002710682eb5" Type="http://www.w3.org/2000/09/xmldsig#SignatureProperties"
><Transforms
><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"
/></Transforms
><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"
/><DigestValue
>O9E5XR6E+tkicSPa6HTZgkE9qhE=</DigestValue
></Reference
><Reference URI=""
><Transforms
><Transform Algorithm="http://www.w3.org/2002/06/xmldsig-filter2"
><XPath xmlns="http://www.w3.org/2002/06/xmldsig-filter2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Filter="intersect"
>here()/ancestor::dsig:Signature[1]/../..//. |
here()/ancestor::dsig:Signature[1]/../..//@* |
here()/ancestor::dsig:Signature[1]/../..//namespace::*</XPath
></Transform
><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"
/><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"
/></Transforms
><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"
/><DigestValue
>v9suUKmCN2M3JeTTr2y5/L6ZY64=</DigestValue
></Reference
></SignedInfo
><SignatureValue
>DYCW4mlxVOr+EmleCo56aohSGw93gtk2Wc5Rb7zlB8ukTSC9lozQM1rGLv4GykpQ+Ln+XhKCzVqv
Z7jcISv2l+1rWWpBSyhve+szoWSoY90SEtPUwnJMwxeOy6fOyGx5MWCqVj6D308Pcu2dw7r3UMqc
i6rSWUezvsPjfCBrcW8=</SignatureValue
><KeyInfo
><X509Data
><X509Certificate
>MIICRTCCAa6gAwIBAgIKNvzDsAiaeyPYFDANBgkqhkiG9w0BAQUFADBTMREwDwYDVQQDEwhKb2hu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</X509Certificate
></X509Data
></KeyInfo
><Object
><SignatureProperties Id="idbfea09cc-7f34-11e1-9c29-002710682eb5"
><SignatureProperty Target="datasignature_2"
><PROP_Sig xmlns="http://ns.adobe.com/pdf/2006" type="cabinet"
><M type="text"
>D:20120405113353-04'00'</M
><Name type="text"
>John</Name
></PROP_Sig
></SignatureProperty
></SignatureProperties
></Object
></Signature
></signatures
></xfa:data
>
In the Designer version you have (8.2), you only have the capability to sign the data or the entire form, which will not hide its values in the XML file that gets sent.

Offline form security

Hello Experts,
I am working on the following offline scenario:
User fills in the Travel Form offline and sends the same by an email to one particular email ID. From this ID, we read the form, parse the same to get the data and then call the RFC to create Travel Request in SAP. This scenario is working fine.
However, I am thinking about security concerns of the same. Since anyone who has access to the form and an SMTP Server and can send a request in someone's name and this will create a travel request in SAP for that person.
So apart from digital signatures, what are my options? How can I make this scenario secure.
Regards,
Shubham

Hi Shubham,
If you do not want to use dig signatures (either on a pdf form or a signed email) the only thing you could do is to make it harder to break your scenario. "Making it harder" means that it can be broken.
You could use visible and or invisble IDs. In case of visible IDs you could ask your users to provide it (like the employee number or a transaction approval code). The latter is a specific secret only know to the user and a lot of variants of this approach exist.
So you can decided if it is sufficient to make it reasonably hard (this depends on you, the company and/or the scenario) or you want to go with digitally signing emails/pdfs.
Regards,
Juergen

Making a form able to be saved in reader

I made a form for a friend and want him to use it as a template (invoice). But when I open it in a Acrobat Reader after creating the fields in pro it say it can only be printed not saved.
What do I do in pro to allow him to save it?
Appreciate the help. I searched for the answer before posting thinking this is a normal question

The Adobe techdoc links are an excellent, detailed source of several methods on the Enabling User Rights process, for versions 7.0.8 and later.
The newsletter I produced on the subject at hand was intended as a simple, step-by-step, illustrated guide for many clients who had issues with the process of making forms for Adobe Reader users with Acrobat Pro v. 7.0.8 and it seems to have helped many of them figure out how to use the feature better. I will be producing a new one for version 8 over the summer (unless, of course, Acrobat 9 makes an appearance by then. :-) )

PDF Form Security Settings

How can I allow both filling in form fields AND inserting/replacing pages in a secure pdf?

Password security will not allow both those actions.
Setting up security policies

Making a form secure

Similar Messages

Maybe you are looking for