Report calling via URL is it secure?

Hi. Calling a report via URL exposes the uid/pwd. Is this a good way for secure communications?

Hi Binoy,
This is just one of the ways & is definitely not secure. There are other ways too - you could supply just the '@dbname' or 'username@dbname' in place of userid - the database authentication page will be brought up where you could provide the password. You could also make use of the keys that can be specified in ORACLE_HOME\reports\conf\cgicmd.dat. For specifying authid, you could use SSO.
Please have a look at the Publishing Reports guide on OTN for a more detailed description of all available options.
http://otn.oracle.com/products/reports/htdocs/getstart/docs/A92102_01/toc.htm.
Regards,
Oracle Reports Team.

Similar Messages

Auto Run off but report access via URL generates default

Hi,
We have BI Publisher 10.1.3.4.1. I access reports via URL from another application outside BI Publisher.
For my reports, I have Auto Run disabled. Still Accessing the link via URL seems to generate report instead of waiting for user
to enter parameters and click view.
When I view report via BI Publisher, the behaviour is ok, i.e. it won't generate until I click the View button.
Does anyone know how to make sure BI Publisher won't generate report without an explicit click of View button when invoked by URL.
Thanks
Girija

Hi Tim,
I am calling the report in _xmode=6 i.e. the parameters show and the view button shows.
We want the user to be able to input their parameters and run the report.
regards
Girija

BIP Report access via URL in OBIEE

Experts, I want to access a BIP report via URL in OBIEE. Here are the details. I already have Answers request with 'Is Prompted' filters. I have a dashboard prompt. The request works according to the values given in the prompt. Say, the user gives some filter conditions in the prompt and the result returns 10 records.Now, due to some business requirements, I want the same result set(10 records) to be opened in a new window. For that we thought of using BIP and invoking this BIP report from OBIEE. Any ideas how can we accomplish this.
thx,
parag

I mean to say that....assume your first view might be pivot report,then you create a BIP report from answers and place the view just below the pivot view in the dashboard.
Globally you give those prompts ,so that when you give values....it applies to both the views in the dashboard.
Suggest the end user instead of pop up....you can view both views at a single instance :) .......Give a meaning full name for that BIP report according to what you want to achieve
=====================================================================
EDITED:
you can use go url for your pop-up .....but you need to pass the variable values of the prompt to the go-url so you can achieve your requirement.
let the end user pass dynamically any values multiple times but the same should be passed to the go-url to get what you want.
========================================================================
EDITED
I suppose YES we need to pass all the 5 prompt values to BIP report......if user gives 3 values then it filters on those 3 values and only 3 will be passed to BIP i suppose.
Never tried this passing 3 values and next session passing 2 values.....Play around with your requirement you will achieve it.
hope all questions are answered.Mark Points.
By,
KK
Edited by: Kranthi on Jan 7, 2011 9:06 PM

Print BW report embedded via URL Iview

Hi,
We have a VC application which contains a BI report. In the VC we created a "Print" button which should print the entire contents of the VC Application. Unfortunately it seems this print is not compatible with the URL Iview since it ignores the content of the BI report.
Is this normal ? Is there a workaround available in VC to print a BI Web application via the VC ?
thanks

Please let us know if there are any updates on this. I am also facing the same issue where I have a WAD report ( html link) in the VC model along with other reports in VC. The Print screen just prints the VC part and the WAD part comes as blank.
Regards,
Nidhi

XML error when Crystal report calling Webservice with Rampart (ws-security)

Could you please advise me where I am doing wrong -
I have designed the report using CR 2008 following a SAP document instructions but getting error. -
1. Created a Class file and put it in the class folder -
public class PasswordHandler implements CallbackHandler { public void handle(Callback[] callbacks) throws IOException,UnsupportedCallbackException { for (int i = 0; i < callbacks.length; i++) { WSPasswordCallback pwcb = (WSPasswordCallback)callbacks<i>; pwcb.setPassword("clientPassword"); return; } } -
2. created wse_policy.xml with below content clientName com.rockalltech.action.reports.PasswordHandler -
3.Also modified CRConfig.xml with below data com.PasswordHandler -
Still I am getting Rampart error like below -
[2009-06-02 18:04:26,977,,FATAL,com.crystaldecisions.data.xml] org.apache.axis2.AxisFault: org.apache.rampart.Rampart at org.apache.axis2.deployment.URLBasedAxisConfigurator.getAxisConfiguration(URLBasedAxisConfigurator.java:77) at org.apache.axis2.context.ConfigurationContextFactory.createConfigurationContext(ConfigurationContextFactory.java:64) at org.apache.axis2.context.ConfigurationContextFactory.createConfigurationContextFromURIs(ConfigurationContextFactory.java:190) at com.crystaldecisions.data.xml.a.b.a(Unknown Source) at com.crystaldecisions.data.xml.a.a.a(Unknown Source) at com.crystaldecisions.data.xml.f.a(Unknown Source) at com.crystaldecisions.data.xml.f.int(Unknown Source) at com.crystaldecisions.data.xml.CRDB_XMLImpl.DbExecuteQuery(Unknown Source) at com.crystaldecisions.reports.queryengine.driverImpl.xml.XMLQueryDefinition.Execute(Unknown Source) Thomas Edited by: thomasjv on Jun 2, 2009 7:15 PM Edited by: thomasjv on Jun 3, 2009 10:45 AM Edited by: thomasjv on Jun 3, 2009 10:45 AM Edited by: thomasjv on Jun 3, 2009 10:46 AM

Hi!
Thanks for the help:
- I give all proxy details. In HTTP and HTTPS proxy tabs too.
one interesting thing:
- We publicate the same WebService with HTTP and HTTPS prefix.
- If I create a proxy for the WS with HTTP, everything is correct and works well.
- If I create a proxy for the WS with HTTPS, gives the error written the previous posts. (And can't create the logical port with SOAMANAGER)
I compare the 2 WSDL. It is the same, except the links. (HTTP and HTTPS) all others are same.
- And why it is possible in both case (HTTP, HTTPS) to create the proxy with SE80 from the WSDL URL? (And after the logical port was failed)

How to parse crystal report query prompt value via url parameters

HI All,
I am creating a employee detail report in crystal report. The recordset is huge and i have created a parameter prompts in the query and thinking to parse the prompt value via url parameters. Not sure why i still could not make it works.
for example, in my query panel i have created a prompt called "pwwid"
and this is how i parse the prompt value via open document url.
OpenDocument/opendoc/openDocument.jsp?sIDType=CUID&iDocID=AV8U6HlIq4FBl_MhcBwHqGI&lsSpwwid=12345678
I read the sap documentation, this is how it parse the prompt value via url parameter. but it is not working for me and i am getting prompt to fill in the wwid whenever i run the reports.
any idea why i am not getting this works?
Regards,
KeatAun

Could you try:
OpenDocument/opendoc/openDocument.jsp?sIDType=CUID&iDocID=AV8U6HlIq4FBl_MhcBwHqGI&lsSpspwwid=12345678
-Abhilash

Run XML Publisher Report via URL (like Oracle Reports)

Hi All,
Is it possible to run xml-publisher report via URL?
In Oracle Reports works this fine:
http://test:7777/reports/rwservlet?server=test_bihome1&report=test1.rdf&userid=test/testv@db&desformat=pdf&destype=cache
We need this for public reports without user login.
Thanks
Thomas

Thomas,
I was waiting to get home before Tim replied... He got the better of me this time :-)
You say you want to let your users run reports using XMLP just by clicking on an URL same way you do with reports and without having to login. If I got the question right and assuming that:
1.Your company is not overly concerned on who runs what reports
2.Who sees what data
3.Your XMLP installation is on your intranet and firewalled from the outside
What you can do is:
On the main page of your XMLP Enterprise installation you should see a folder called "Guest". Any report you create under this folder is run as user "guest" which means you don't have to authenticate yourself as you would normally do.
I have tested this on my home server and this is what I've done:
1.Logged in as admin or any other user you've created with admin privileges created a report under the "Guest" folder.
2.Copied the URL, on my server it is "http://samba.private.net:15101/xmlpserver/Guest/People/People.xdo"
4.Logged off as admin and pasted the URL to a new browser window
5.Hit return and Voila, my report runs without the need to login to XMLP.
Hope this helps. Let us know how you got on.
Cheers,
Joao
PS: If you want to see the report for yourself here's the URL from the outside: http://medeiros.homelinux.net:15101/xmlpserver/Guest/People/People.xdo
I'll keep the link alive for a couple of days.

Printing a report via URL

Hey,
is there any chance to get a report printout via an url call? We can get our reports via url as pdf, html, rtf and so on. In my mind there is no chance for a printout or perhaps email via url?
I tested the delivery API as second way without some good results.
thanks for help and ideas

Hi Gael,
your URL is made up of :
[ProcedureName]?[parameter1]=[value1]&[parameter2]=[value2]
creating URLs like this can have problems especially with spaces and punctuation.
the answer is a FORM
the following will create a hidden form :
FORM ACTION="[ProcedureName]" METHOD="POST" name="F1"
INPUT type="HIDDEN" name="[parameter1]" value="[value1]"
INPUT type="HIDDEN" name="[parameter2]" value="[value2]"
/FORM
you can set the values in the form using:
document.F1.[parameter1].value="abc123%%&&$$!";
document.F1.submit();
will submit the form and the PL/SQL procedure should receive the text as it was contained in the form.
the only characters that can now cause problems are :
" as it delimits the field.
' as it may cause problems in PL/SQL.
\ as it is a special character.
Regards Michael

How to call Web URL's as values of an BW InfoObject via BEx Web

Hi experts,
I want to call Web URL´s as values of an BW InfoObject via BEx Web.
Is there any option to convert the character into a direct URL link to call the Web adress directly?
Example:
no direct URL (e.g. http://help.sap.com) to call the Web address per left click...
Any ideas?
Thanks in advance and best regards,
Michael

Hi Michael,
Have you ever tried using generic module properties of analysis item. There are implementations such as com.sap.ip.bi.rig.format, maybe you can ctach up something trying that. I didn't try it myself yet though there can be solution through using modules.
Regards
Yasemin...

Call WoC View via URL with parameters

Hi,
I'm already able to call a particular WoC view via URL by passing the app.component and app.inport parameters.
Is there also any way to pass specific filter values, e.g. a customer id?
Thank You!

Hi Dennis,
yes, you can pass the parameter of the Inport as well.
An example is the Sales order QAF for 'New Sales Order' which has an inport ContactIDWriteBackIn. This inport allows passing an parameter called ID which is then mapped to the Contact ID of the UI.
The corresponding call is:
https://....?app.component=/SAP_BYD_APPLICATION_UI/crm/soc/salesorderqafeco.QA.uicomponent&rootWindow=X&redirectUrl=%2fsap%2fbyd%2fruntime&&sap-client=004&sap-language=EN&app.inport=ContactIDWriteBackIn&param.ID=1000450
I hope this helps,
Thomas

Interactive report row-level ("OR") filter via URL?

I know you can perform a column level filter on an Interactive Report via URL, but can you do a row level filter?
I want to do something like where column 1 = 'test' OR column 2 = 'test', not column 1= 'test AND column 2 = 'test'.
Thank you and apologies if I am missing something in the documentation or other forum messages.

Jeff,
Thanks again for the response and for looking into it. However, if I am not mistaken, the url in that excerpt does the same thing as the URL I posted except that you used IREQ_COLNAME instead of IR_COLNAME (which defaults to EQ I believe).
I want to see if a value is in column a OR column b, etc. The "OR" is the all important caveat.
I would settle for being able to pass a value to the IR's main search box (that searches all columns of all rows) if I cannot do a targeted row level filter on a few select columns.
If anyone knows how to do either of those things, that would be great information to have.
Thanks,

I need to use a reserved word as parameter name in proc called from URL

Let me preface this post by saying I already know this is terrible to attempt, but it's short term fix only.
Ok, so I have to create a procedure that will be called by a vendors application via a API that calls our URL to send data over. The terrible part is
that the API they have uses the parameter FROM=vendor_data A change is on the way so in the future the API won't use FROM as a paramter, so this isn't something I want to do, but it's a workaround.
So the nastiness is this..., I can create a procedure that'll compile when I enclose FROM in double quotes "FROM" as my input parameter
but if I try to call my procedure via URL (as their application will do) the procedure isn't working. I searched for someway to do an inline
replace of the FROM parameter to something else, but no luck. I'm open to all positive comments. I cannot go outside of Oracle
to do this, so I can't call a shell script and replace. Basically I need some way to use a reserved word as a parameter name, and then be able to call
that proc from a URL, or someway to change the FROM in the URL inline. Any help on this admittedly whacky situation would be appreciated much.
I tried ...\myproc?from=text
...\myproc?"from"=text
...\myproc?'from'=text
proc is simple test procedure
create or replace procedure myproc
("from" in varchar2 default 0)
is
v_from varchar2(30);
begin
v_from:="FROM";
insert into test(col1) values(v_from);
end;
**** Update
I didn't get any more replies but came to a solution that I thought I'd post. It's much better, more elegant and maybe can help others.
So instead of using FROM as the parameter name I did some research and decided I can use flexible parameters. Basically you end up having
2 input parameters for a procedure, one holds a parameter name the other holds the parameter value. They get loaded into arrays
and you access the values with regular name_array(1), value_array(1), etc. ?v=parameter&v2=value
Once I figued I could use flexible parameter it took me tons of research to find out the actual syntax. I'll post some examples for others
later, but was suprised with the lack of resources consideriing how "flexible" they are.
Thanks again for the replies. Cheers.
Edited by: Mitz on Jul 29, 2009 11:37 PM

Scott,
Thanks for the reply. I'm not familiar with the wwv_flow_epg_include_mod_local, however I know that the
myproc is available via URL. I passed the my procedure name(myproc) on to the dba a while back to make it "accessible" so, I'm assuming that he
added it to this the www_flow_epg_mod_local (assuming this has something to do with access control).
If I modify myproc procedure and remove "FROM" as the input variable, and replace with say,
IN_FROM I can then call the procedure via the URL ./myproc?in_from=test without any problems.
I'm pretty confident that it's the "FROM" that is the hurdle and not a security or setup issue. The proc is fine to call from the URL until I got the curveball that the only available parameter was FROM. How the URL should be when inputing to that parameter?
Edited by: Mitz on Jul 25, 2009 7:36 PM
Edited by: Mitz on Jul 25, 2009 9:16 PM

Automatically produce Reports output via Portal

Hi.
I'm new to Oracle Portal, so please excuse if I ask a stupid question.
We have some Oracle Report Builder reports, which we'd like to automate (automatically produce the output for the users). Is there some way of defining it in Portal so that it automatically via URL's or something runs these reports to produce the output automatically ?
If not, then I suppose we'll probably be using CRON to automate them....
Thank you.
Marcel

Hi,
All the components have something have called the batch mode which submits this job
to the job queue. This option also stores the results in the database for a period
of time which you can change. You can see if this helps.
thanks,
Sharmila

Submiting Report Request via DB Proc.

Hello,
Is there a way to submit a report request to the report server via a database procedure?
I have a situation where depending on the report name, userid, email addr, report-parameters, frequency etc. stored in a table, the database procedure SHOULD send the report request to the report server.
Any help is appreciated.
Thanks
Manish

If you are running 7.3.4 or later of the Database, you can do this.
First, set up reports for web reporting - i.e. you are able to run a report by submitting a URL (see the Reports Server configuration whitepaper on OTN and the doc. if you don't know how to do this).
Then, check out the Oracle7/Oracle8 Application Server guide - there is a db package called UTL_HTTP which will allow you to call a URL from a stored procedure - which is all that is needed to run a report from a stored procedure! Simply build the URL up and submit it. If you have Reports 6.0 patch 1 or later, you also have access to the Reports Server queue in the database, so you can programatically check the status of the job just submitted (use the JOB= parameter to uniquely identify your job).
Regards
The Oracle Reports Team http://technet.oracle.com

Accessing discoverer via url.

Accessing Discoverer via URL.
Hi,
I'm having a problem with the following....
I am trying to setup a scheduler for generating discoverer reports, without using the discoverer scheduler. I want to be able to easily print them off in a particular location.
This is fine for normal reports with simple url's but complicated url's are causing me a problem. I have created a java program which will build the url string from some set parameters using the URL class.
Parameters include Responsibility, user name, password, workbook and the workbooks parameters.
The problem is that discoverer will not allow the request asking the user to reenter his password. Even when a site check indicates that the url is exactly correct.
I have even taken the generated url and cut and pasted it into the browser without success. I don't think it is a java issue but maybe how the system is setup.
Any help would be useful!

Hi
You cannot embed the password on the java command line. This was determined to be a security breach because the password would have been in plain view. In order to make a URL work you need to be working with the full application server and be using either private or public connections, ideally with SSO enabled.
All you do is run the report as usual from within Viewer when connected as the user you want to be connected as. You can then copy the URL from the address bar at the top of your browser and paste this into a new browser. If a public connection is being used without SSO the report will execute. If SSO is enabled then SSO authentication is required. If a private connection is being used without SSO then the password will be prompted, whereas if a private connection is being used and you are using SSO then the password will be remembered by SSO and supplied for the user.
I hope this helps
Best wishes
Michael Armstrong-Smith
URL: http://learndiscoverer.com
Blog: http://learndiscoverer.blogspot.com

Report calling via URL is it secure?

Similar Messages

Maybe you are looking for