Report.save() "security restricted" even if in privileged function??

It may be that I am missing something, but even if I put the save() method of the in a privileged application-level function, I get the "Security settings prevent access to this property or method" error message. Must this be considered a bug?
In another context, the saveAs() Doc object method works properly.
I am testing in Acrobat Pro 9 on Mac.
Any useful hint is highly appreciated.
Max Wyss.

First, I thought that there is not really any connection between this statement and the problem described.
However, at a second thought, it is.
The connection is that the error message provided by Acrobat is COMPLETELY, AND TOTALLY WRONG!!!!
In both cases, the correct error message should be something like "filespec invalid"!
Besides making the "security guys" look "good", those misleading error messages are of no use. Acrobat is a development tool, and as such, error messages MUST be as precise as possible.
Max Wyss.

Similar Messages

Why does my latest version of Firefox under Windows 8.1 always report problems with security certifactes - even on mozilla,com - when my latets version on Ubunt

On my desktop, I have been using Firefox V27 on Ubuntu 12.04 for some time. It uses secure sites - such as https://mozilla.org - and accepts the Security Certificates quite happily, so I am not even aware there is any issue.
My new laptop is Windows 8,1, and I have installed Firefox- the latest version.
Whenever Firefox visits a secure site, it ALWAYS says that there is a problem with the security certificate - even at mozilla.org - and warns me away. I have to complete a security exemption.
Why is this, and how can I fix it?
Thanks in anticipation.

unfortunately the fiddler2 issuer in certificates might be a sign of unwanted software present on your pc that is intercepting secure network traffic. please go into the system control panel and uninstall programs like BrowserSafeguard, BrowserSafe, SafeGuard or other software that sounds suspicious and didn't get installed by you intentionally.
 reference: https://support.mozilla.org/en-US/questions/982532#answer-520145
afterwards, run a full scan of your system with different security tools like the [http://www.malwarebytes.org/products/malwarebytes_free free version of malwarebytes] & [http://www.bleepingcomputer.com/download/adwcleaner/ adwcleaner].
[[Troubleshoot Firefox issues caused by malware]]

Security Restrictions disappear when webi is modified

Hello,
I have the following problem with Security restrictions.
I have created a business security profile, and assign this profile to a user directly (I have tested the same assign the profile to a group and the problem occurs too).
The business security profile is defined this way:
1. At the first tap (Create query), I grant all the views of the business layer and all the objects.
2. At the second tap (Data) all objects are granted.
3. At the filter tap, I defined the row restrictions of the profile (3 conditions with and).
4. I assign the business profile to the user.
The steps to reproduce the problem are:
1. I create a webi (with an administrator user) that uses the universe that contains the business security profile
2. The user that have the business security profile restrictions assign, open the webi refresh and show only his data.
The SQL of the webi query shows the security restrictions (profile filters).
3. I modify the report (for instance, I drag a dimension on it). Save the report.
4. The user that have the business security profile restrictions, open the modified webi refresh and show all the data (as he was an administrator user).
The SQL of the webi query does not show the security restrictions (filters). The restrictions desappear of the SQL.
Please, could you help me?
Thanks
Pilar

Enable the following auditing on the server either through domain
policy or local policy:
Audit logon events - Success
Audit Object Access - Success
On the Auditing tab, add Everyone with the following audit settings.

How do I report a security problem to Firefox?

Here's the problem: 
Wednesday morning my Mac at home got infected by malware which I believe is usually called the "Google redirect virus". My Mac at home has been upgraded to OSX 10.6.7 and I believe I was using Firefox 3.6.13 (it automatically upgraded tonight). I haven't been able to find any useful information on line about this malware. 
The behavior after infection was that every time I tried to use Google my request would get redirected. If I entered www.google.com in the address bar, the URL would get changed to www.google.com/FuneralHomes/<something> and the browser would try to go there and a "Under Construction" error message or a no-such-page message would be returned. This started happening after I did a Google search and was checking various links in Firefox, but once it started in Firefox I got the same behavior in Safari even without using Safari to look at any links. And it continued to happen in Safari even after I did a "Reset Safari..." 
When I got infected I was using a non-adminstrator account and I was not asked to download anything nor was I prompted for a password. 
I searched on "Google redirect Mac virus" using my (so far) untouched work computer and found several suggestions but no solutions. Apparently this is a PC problem that's been around a few years, but there were some Mac reports from last year. So last night I checked the DNS addresses in my
Network preferences, looked at /etc/hosts, and removed the only plug-in from the Library:Internet Plug-ins of the infected account, even though it was a Picasa plug-in that predated this infection. None of those seemed to be the problem. I also scanned my disk with an up-to-date "Norton AntiVirus" which
I got from work some time ago, but it found no viruses. 
What really puzzles me is that the problem gradually went away while I was checking it last night. At first, when I entered www.google.com the browser would still show the redirected address in the prompt that comes up and it had the Legacy.com logo on the left instead of the Google one but it would actually go to the Google website (unless I'm being spoofed). Then at a later attempt, only the wrong logo persisted. Then at an even later attempt the logo got fixed and everything looked fine and appeared to behave correctly. 
Frankly, that's a little scary. It's as if a really smart trojan got
installed and was covering its tracks while it set up a man-in-the-middle attack (please advise if I'm misusing the jargon). If I'm being too paranoid, great, but I'd still like to know how such behavior could be induced on my machine just by linking to a website. Can anyone help?
''moderator- fixed the leading space formatting errors in this posting''

Thanks, the-edmeister, but the only relevant post I found was from GB Colburn on bleepingcomputer.com, wherein he reported a similar problem about a year ago. I've found a few similar threads in the last year or so (by searching "Google redirect mac virus" in Google) but they are all about the same: someone reports the problem, responders have various random suggestions, the problem seems to go away by itself (at least sometimes), and there's nothing conclusive either good or bad.
Without myself being as knowledgeable as GB Colburn, it doesn't look to me like the problem is in the DNS system or the router. It acts more like some malware in the automatic completion in the address bar of the browser or maybe in the history system, but I can't figure out how an infection in one browser could affect another browser. And I *really* can't figure out how it could be self-healing.
It's really frustrating that none of the major parties involved in this—Firefox, Google, Safari (Apple), Verizon (my internet provider)—even have a process for reporting a security issue. At least not one that I, an ordinary semi-naive user, can find.

Security restrictions on offline form

In my application, I have a form with a submit button of control type 'regular'. It can be downloaded on local hard disk filled and saved. But for the same form, I changed the control type of submit button to 'submit' and ran the application again. Now when I download the form and fill it, I cant save any of the form data. I see that the security restrictions on the form now have changed. Any idea if I can set these security restrictions so that I can still save the form data?

Marlon,
We also have similar requirement. So we logged an SR with Oracle. We got response as
=============================================================================================================================
No but there is an enhancement request
OER does not provide the ability to enforce assignment of specific asset tabs to specific users/roles.
True need to file enhancement request
Oracle® Fusion Middleware Configuration Guide for Oracle Enterprise Repository
11g Release 1 (11.1.1)
Part Number E16580-04
http://docs.oracle.com/cd/E14571_01/doc.1111/e16580/rbac.htm
10309159 - TAB LEVEL SECURITY - AUTHORISATION
Use Case
If I give a user with Tester Role and a user with Lead Developer Role
approval capability (ie. Tester Role should only approve "Testing" tab and
Lead Developer Role should only approve "Technical" tab). They should only
be able to see the other tabs but not approve anything. e.g. the Lead
developer should only approve the "Technical" tab.
================================================================================================================================

BW report authorization for restrict cost center

dear all,
i have problem on BW report authorization for restrict cost center.....when i execute the query, after selection screen, appear error message 'you cannot change zv_cctr for characteristic 0COSTCENTER during query'.
note : zv_cctr is variable restriction for costcenter, type processing = customer exit.
below the customer exit :
WHEN 'ZV_CCTR'.
    IF i_step = 2.
      DATA : gt_mstuidvscc TYPE TABLE OF ztbw_mstuidvscc,
             gs_mstuidvscc TYPE ztbw_mstuidvscc,
             wa_final2(10) TYPE c.
      SELECT * FROM ztbw_mstuidvscc INTO CORRESPONDING FIELDS OF TABLE gt_mstuidvscc
        WHERE userid = 'sy-uname'.
      LOOP AT gt_mstuidvscc INTO gs_mstuidvscc.
        wa_final2 = gs_mstuidvscc-kostl.
        l_s_range-opt = 'EQ'.
        l_s_range-high = wa_final2.
        APPEND l_s_range TO e_t_range.
      ENDLOOP.
    ENDIF.
Regards,
Tony

i defined variable as ready for input and mandatory.
regards,
Tony

How to create a crystal report using secured web service as a datasource?

Hi All Expert,
I having some challenges on how to create a report using secured web service as a datasource in crystal report designer (CR11 R3).
Secured Web Service including the certificate trusting, token authentication, header and/or body encryption. All web services running on https protocal.
Could you please suggest me on the solution?
Thank you and Best Regards,
Cherr

Please re-post if this is still an issue or purchase a case and have a dedicated support engineer work with you directly:
http://store.businessobjects.com/store/bobjamer/DisplayProductByTypePage&parentCategoryID=&categoryID=11522300?resid=-Z5tUwoHAiwAAA8@NLgAAAAS&rests=1254701640551

Security restrictions , how to read access a txt file supplied in a jar

I had written a simple application which uses file handling to display random line from a file on a swing window
but I do not know how to give my web application permission to access a file
when I set security permission to all, then error says the application cannot load because the code require unrestricted acess to system resources and is unsigned, I don't know how to get that certificate and I am only doing it for learning purposes.
when I remove security permissions then it says
access denied java.io.FilePermissions geekjoskes.txt readPlease help
I locally signed the jar file, and give my jnlp fiel all permissions, worked fine in my system but when I access same file from local lan it sho errors ,
please help, I have my txt file stored in my jar file with main class
the whole jnlp file is
<?xml version="1.0" encoding="utf-8"?>

<jnlp spec="1.0+"
 codebase="http://localhost/javasoft/webstart/"
 href="geekjokes.jnlp">
 <information>
 <title>Geek Jokes</title>
 <vendor>Vaibhav Mishra</vendor>
 <description>Geeky jokes</description>
 <homepage href="http://scjpbeginner.blogspot.com"/>
 <description kind="short">shows random jokes</description>
 <offline-allowed/>
 </information>
 <resources>
 <jar href="GeekJokes0.1.jar"/>
 <j2se version="1.6+"
 href="http://java.sun.com/products/autodl/j2se"/>
 <icon href="geekjokes.gif"/>
 <icon kind="splash" href = "geekjokes.gif"/>
 </resources>
 <security>
 <all-permissions/>
 </security>
 <offline-allowed/>
 <application-desc main-class="GeekJokes"/>
</jnlp>Edited by: 76jsr on Aug 7, 2008 3:45 PM
Edited by: 76jsr on Aug 7, 2008 3:49 PM

>
I am extremely thankful to you and finally my first little app is working thanks to you,
here is it's link
[http://profile.iiita.ac.in/IIT2006117/javasoft/webstart/geekjokes/geekjokes.jnlp|http://profile.iiita.ac.in/IIT2006117/javasoft/webstart/geekjokes/geekjokes.jnlp] >
I am glad you got it working! But that launch file is still slightly invalid.
Here is a corrected, and slightly optimized (you can leave the prefix off the href, if it is the same as the codebase), version of it.
<?xml version="1.0" encoding="utf-8"?>

<jnlp spec="1.0+"
 codebase="http://profile.iiita.ac.in/IIT2006117/javasoft/webstart/geekjokes"
 href="geekjokes.jnlp">
 <information>
 <title>GeekJokes App</title>
 <vendor>Vaibhav Mishra</vendor>
 <homepage href="http://scjpbeginner.blogspot.com"/>
 <description>Geeky Jokes</description>
 <description kind="short">Cshows random jokes</description>
 <offline-allowed/>
 </information>
 <resources>
 <j2se version="1.6+"
 href="http://java.sun.com/products/autodl/j2se"/>
 <jar href="GeekJokes0.3.jar"/>
 </resources>
 <application-desc main-class="Process"/>
</jnlp>Very 'Geeky', BTW. ;-)
Another few things I noted when I looked at it.
1) There is a stray thread going after the JOptionPane is dismissed. The VM does not end, and the console (if you have it configured to pop-up for JWS apps.) stays on-screen.
2) If all the jokes are prefixed by '* ' I would recommend removing it from every line of the source file and either re-adding it at runtime, or (preferably) not adding it at all (since it is redundant).
3) Reconfigure the app. into a loop, and offer the user a JOptionPane with "Another Joke"/"End" instead of "OK".
4) You can always remove that debugging line I inserted in the code to show the path to the Jar - it was just intended as a 'sanity check' during testing.
5) Why is it Java 1.6+? JOptionPane was introduced in Java 1.2 with the first Swing implementations, and the I/O is compatible with Java 1.1.
>
Thanks again!!!!>Thanks are best expressed (to me) in the notation of a helpful/correct answer (which you have done), and the assignation of (the remaining) dukes*. ;-)
* After all - checks the title - we have gotten entirely around those 'security restrictions' in a sandboxed application. The reason being that File objects are rarely the correct choice, for applets or JWS apps.

Remove 'Page Extraction' security restriction in PDF generated by ADS

Hello Experts,
I am currently working on a SAP CRM project where we are using Adobe Document Services (ADS) to generate some PDF documents from SAP.
I have an issue with the Page Extraction security restriction associated to PDF generated by ADS.
This cause a problem to us since we are expecting the PDF to be processed by Streamserve later on. Streamserve is then 'converting' the PDF in its proprietary format (.lxf) and is preparing a Post Script file for our printing partner.
I have understood that Streamserve cannot processed our PDF because of the Page Extraction restriction (out from ADS, value is set to Not Allowed by default).
I have seen the following posts in SDN:
Page extraction property in PDF document is set to 'not allowed'
Document Restriction Interactive Form
I am then getting concerned since it does not look as straightforward as I would have expected.
--> Can anyone confirm if there is a way to set the Page Extraction restriction as Allowed?
Via ADS configuration? Via code? Via some work in SAP (SFP, output device config...)?
In the above SDN posts, I can read things about buying a policy server, using Adobe Acrobat Pro or Reader Extensions.
Does anyone have a clear cut?
Thanks a lot.
Brice.

Hello,
I don´t know how to make this work. I would open the OSS message for this and want SAP to give a workaround or say clearly this cannot be done. Well... in one of the mentioned threads it is mentioned that SAP said this is the right behavior but there was not a word about if that can be changed.
Otto
p.s.: probably it would be better for you to send only RAW data (i mean only XML data) and make the partner work with it. If the PDF is converted to "something" by a machine, then you don´t need PDF (what is a user GUI), to send only the data should suffice, or not?

HT5312 I cant reset my security questions even though I have provided a rescue email address and it is verified

I can't reset my security questions even though I have provided a rescue email and it os verified

1) Apple ID: All about Apple ID security questions
2) See Here... ask to speak with the Account Security Team...
Apple ID: Contacting Apple for help with Apple ID account security
Or Here > Apple Support iTunes Store Contact

SQL Server 2008 reporting services reports just went blank even though I can still download excel pdf etc....

I'm quite stumped. All of my reports are suddenly blank. I see the icons for the reports, and I can even download the PDF by exporting to Excel of PDF.
Can someone help explain what may have happened to my instance and how to correct this?

Hi JMitchell1,
According to your description, your reports become blank when you access them on Report Manger. Right?
In this scenario, does the exported file also show you a blank report? Since you can access the Report Manager successfully and open report means the report server is still working. It can be running out of memory. You can open the report with Report
Builder to see if the report is damaged. Also try to restart report server and reconnect the database. If it's still not working, you may need to redeploy your reports.
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

Page Extraction security restriction

Hi Experts,
I have an issue with the Page Extraction security restriction associated to PDF generated by ADS.
This cause a problem to us since we are expecting the PDF to be processed by Streamserve later on. Streamserve is then 'converting' the PDF in its proprietary format (.lxf) and is preparing a Post Script file for our printing partner.
I have understood that Streamserve cannot process our PDF because of the Page Extraction restriction (out from ADS, value is set to Not Allowed by default).
I have seen the following posts in SDN:
http://forums.sdn.sap.com/thread.jspa?threadID=1366329
http://forums.sdn.sap.com/thread.jspa?messageID=8793858
I am then getting concerned since it does not look as straightforward as I would have expected.
--> Can anyone confirm if there is a way to set the Page Extraction restriction as Allowed?
Via ADS configuration? Via code? Via some work in SAP (SFP, output device config...)?
In the above SDN posts, I can read things about buying a policy server, using Adobe Acrobat Pro or Reader Extensions
Can you throw some light on this or am I at a wrong section to post this question. Can you suggest a approporiate place to post this thread?
Thanks
Rohit

Hello,
I don´t know how to make this work. I would open the OSS message for this and want SAP to give a workaround or say clearly this cannot be done. Well... in one of the mentioned threads it is mentioned that SAP said this is the right behavior but there was not a word about if that can be changed.
Otto
p.s.: probably it would be better for you to send only RAW data (i mean only XML data) and make the partner work with it. If the PDF is converted to "something" by a machine, then you don´t need PDF (what is a user GUI), to send only the data should suffice, or not?

Weu0092d like to get Custom reports. The base of reports is Security Audit Log

Wed like to get Custom reports. The base of reports is Security Audit Log files. This is files for SM20.
What does the file structure look like? What is field of it?
Thanks!

Hello Marina
The data written to the security audit log correspond to the DDIC structures RSLGENTR (up to release 4.6) and RSAUENTR2 (in newer releases). DDIC structures can be viewed using TA SE11 (data type).
As I can see you have already opened a thread regarding this. Please don't duplicate the threads, as this only widespreads the information.
Regards,
Désiré

Security restriction in LoginModule?

I have implemented my own LoginModule. In the module, I try to reference an
EJB.
When I call PortableRemoteObject.narrow(), I get the following error:
java.lang.ClassCastException: Cannot narrow remote object to
net.lm.uams.service.ejb.UserAccountManagementServiceRemoteHome
Is this because of some security restriction related to the LoginModule, or
do you think that the problem stems from having two copies of the same EJB
classes? If the problem is related to having two copies of the classes, how
would I go about referencing the classes from the LoginModule without having
them in that .jar file?
Note that this problem isn't at weblogic startup - I have written code to
handle this initial administrator authentication. The problem occurs later
during form-based authentication. The publicly available pages/EJBs work
fine.
using WLS 7.0 on win2000.
I'd appreciate any pointers.
thanks
Sean

Bill,
I haven't added anything at all to the classpath in my startup script. WL
just picks up my jar in WL_HOME/server/lib/mbeantypes. I've done a
System.getProperty() for the classpath at runtime, and it doesn't include my
ejb.jar.
Yesterday, I re-wrote my class to do a straight JDBC lookup to the database
for username/pwd/roles. It's not the solution I'd prefer, because it
introduces a reliance on the underlying database schema into the
LoginModule. But, I don't really have time at the moment to spend
experimenting with my original idea. Hopefully I can come back to it in the
future.
thanks again,
Sean
"William Kemp" <[email protected]> wrote in message
news:[email protected]...
Each enterprise application has it's own classloader hierarchy, whichmeans the
ejbs and webapps in an EAR file are loaded by a classloader hierarchy thatis
parented by the boot, system, and application classloaders that load theboot
classes, java core classes, and weblogic.jar classes, and any classes thatyou
put in the classpath when you start weblogic. The EAR file classes areloaded
below these, hierarchically speaking.
I am assuming that you have put your LoginModule classfile in the javaclasspath
when you start the server. Are you perhaps putting the jar file generatedby the
ejbc process in the java classpath when you start the server, too? Couldyou
post your start script? Also, remember that the start script that comeswith
weblogic prepends it's jars and what not to the existing classpath. So,that
while you may not be explicitly adding the ejb jar file to the classpathin the
start script, it may be already in the classpath in the currentenvironment and
the start script is tacking that on at the end.
Just a guess.
Bill
Sean Ryan wrote:
Thanks for the response William. I have tried what you suggested, but
the
problem is still the same.
If I do the jndi lookup without the narrow() part, I can execute methodson
the resultant object using reflection. This is a bit of a hack, and not
really a satisfactory solution.
I have written a main() method in my class, and when I execute it (fromthe
.jar), it can do the lookup and narrow without any difficulty.
As I understand it, each container has its own classloader, however myclass
is essentially executing from within weblogic. Is there a bit of a greyarea
here in relation to class loading? Because, as I said my class worksfine
when it is executing in a separate jvm.
again, I would appreciate any input you can offer.
Sean
"William Kemp" <[email protected]> wrote in message
news:[email protected]...
If this was because of a security restriction, you would see a
different
Exception. Try putting just the compiled Home and Remote interfaces inthe
classpath used by the LoginModule and not the jar file with thegenerated
and
compiled code for the stubs. You don't need them in the client becuase
you
are
coding to the inteface, not the stubs.
Bill
Sean Ryan wrote:
I have implemented my own LoginModule. In the module, I try to
reference
an
EJB.
When I call PortableRemoteObject.narrow(), I get the following
error:
>>>>
java.lang.ClassCastException: Cannot narrow remote object to
net.lm.uams.service.ejb.UserAccountManagementServiceRemoteHome
Is this because of some security restriction related to theLoginModule,
or
do you think that the problem stems from having two copies of the
same
EJB
classes? If the problem is related to having two copies of the
classes,
how
would I go about referencing the classes from the LoginModule
without
having
them in that .jar file?
Note that this problem isn't at weblogic startup - I have written
code
to
handle this initial administrator authentication. The problem occurslater
during form-based authentication. The publicly available pages/EJBs
work
fine.
using WLS 7.0 on win2000.
I'd appreciate any pointers.
thanks
Sean

How do I save annotations. Even if I close out of the document or email it to myself I don't seethem

How do I save annotations? Even if I close out of the document or email it to myself I don't see the annotations in the document I email to myself. Thanks.

Hi,
Are you editing a local document or a Acrobat.com document?
If you are using Preview to open the document that you emailed to yourself, you will not see the added annotations. This is a limitation in Preview.
If you open the same pdf in Adobe Reader app, you would see the added annotations saved in the pdf file.
Please do let us know if this helps.
Thanks,
Rishi

Report.save() "security restricted" even if in privileged function??

Similar Messages

Maybe you are looking for