Secure ADF URL parameter

Hi All,
I have exposed a URL  - http://<IP><Port>/WC/faces/main?userid=1234 - to be called from an EBS application with a parameter value "userid".
While the connectivity and integration works as expected, I have noticed that the URL parameter (1234 in this example) is visible in the browser and can be accessed directly by calling from the browser window itself.
Is there a way to secure the URL parameter such that the user is directed back to EBS login page when trying to access the URL directly in the browser window?
I am using Jdeveloper version 11.1.1.7.
Best Regards,
Ankit Gupta

Hi Frank,
Thank you for sharing the information.
The prime objective on passing the userid in URL is to display the user logged in EBS, with user-specific information in the ADF page.
So when the url is called from EBS, the invoke action is triggered before the page load to refresh the underlying View Object using the userid passed, and display information on databound tables.
Considering the above use case, is there a better approach of achieving the same?
Best Regards,
Ankit Gupta

Similar Messages

  • ADF Faces + ADF BC : how to pass an url parameter to a backend business ser

    Hi,
    I'm using latest JDev studio version SU 3.
    My project is using ADF Faces with BC4J in the service layer.
    I have a backend application module which exposes a method taking a String parameter as an input (ex: void setUsername(String username))
    I need to have a jspx page which reads a parameter passed in the url (http://localhost/faces/registerUser.jspx?username=john) and send it to the backend service method when a submit is raised on a clicked button.
    It's pretty simple when using inputtext for example but not obvious if I want to use urm param instead of inputtext.
    How do I do this ?
    Thanks

    Hi,
    Thanks a lot for your answers.
    The link http://www.it-eye.nl/weblog/2006/06/12/passing-a-url-parameter-to-model-using-adf/ is no more reachable.
    The following EL expression work for displaying the parameter inside an outputText component :
    #{facesContext.externalContext.requestParameterMap[’yourParameter&#8242;]}
    The parameter is not sent to the business service when the button is clicked.
    Thanks,
    Seb.

  • ExecuteWithParams and URL parameter

    I am implementing a two pages scenario where the first page allows the user to select the Department ID from a menu, which gets passed to the second page via URL. The second page allows the user to refine the search on the employees within the selected department.
    I have created a View Object for the Employees table with bind parameter for the Department ID, and Following the guidance of an earlier post:
    ExecuteWithParams with URL parameter doesn't work
    managed to get the passed in Department ID URL to be used in the intial search.
    The problem is that this value is not retained on subsequent searches. Can someone help me on this?
    Please excuse if the question is trivial. I am new to JDeveloper. By the way, I am using ADF BC with JDeveloper 10.1.3

    Assuming that you are using JSF then instead of passing the parameter in the URL try passing it with the processScope scope.
    See: here

  • Put my URL parameter in a JavaBean attribut

    Put an URL parameter in a JavaBean attribut
    I am new in JHeadstart and ADF/UIX Technologie
    I need to put an URL parameter in a JavaBean before to show the view
    My URL :
    http://IPadress:8989/IBA2-ViewController-context-root/StartAppModule.do?login=TOM
    My struts-config.xml :
    <action path="/StartAppModule" forward="/StartIusIbaMesApplis.do"/>
    <action path="/IusIbaMesApplisTable" input="/WEB-INF/page/IusIbaMesApplisTable.uix" type="oracle.jheadstart.controller.strutsadf.action.JhsDataAction" className="oracle.jheadstart.controller.strutsadf.action.JhsDataActionMapping" parameter="/WEB-INF/page/IusIbaMesApplisTable.uix" name="DataForm">
    <set-property property="modelReference" value="IusIbaMesApplisUIModel"/>
    <set-property property="breadcrumbParamExpressions" value="${bindings.IusIbaMesApplisAppwebNom}"/>
    <set-property property="bindParams" value="IusIbaMesApplisIterator=${data.Bean1testUIModel.userlogin}"/>
    </action>
    In a JSP or a Servlet that will probably be
    //get param login
    String myparm = request.getParameter("login");
    //find my JavaBean
    DCBindingContainer bc = (DCBindingContainer) request.getAttribute( "bindings");
    JUCtrlAttrsBinding ctrlBindinglogin =(JUCtrlAttrsBinding)bc.findCtrlBinding("data.Bean1testUIModel.userlogin ");
    //put the value in my JavaBean attribut
    ctrlBindinglogin.setAttribute("userlogin ", myparm);
    How to put this whith ADF/UIX technologie after the JavaBean was created and before to show the view ?
    Is it the better choice to do that ?
    Could you help me please ?

    Hi,
    Yes, I think Dispatch_input() has to be put in Do_request event.
    There is another alternative to using Get_form_fields method. In Do_Handle_Data event you can read the table form_fields and get the value of the input on the page.
    read table form_fields into <workarea> with key name = '<url inputfield name>'.
    get the value.
    Hope this helps.
    Thanks,
    Rashmi.

  • Put an URL parameter in a JavaBean attribut

    Hello
    I am new in JHeadstart and ADF/UIX
    I need to get my URL parameter in an UIX view.
    I want to put the value in a JavaBean before to show the view
    My URL :
    http://10.1.100.195:8989/IBA2-ViewController-context-root/StartAppModule.do?login=TOM
    In a JSP or a Servlet my code will probably be
    String myparm = request.getParameter("login");
    DCBindingContainer bc = (DCBindingContainer) request.getAttribute( "bindings");
    JUCtrlAttrsBinding ctrlBindinglogin =(JUCtrlAttrsBinding)bc.findCtrlBinding("data.Bean1testUIModel.userlogin ");
    ctrlBindinglogin.setAttribute("userlogin ", myparm);
    How to put this in an UIX Form before to show the view ?
    Is it the better choice to do that ?
    Could you help me please ?

    Why can't I find anything in the java docs about the JSObject class and a listing of its methods?
    Message was edited by:
    7stud
    Ah, it's a proprietary Netscape extension to Java. It looks like trying to compile an Applet that uses the JSObject is a bit of a nightmare. You have to locate the jar file containing the netscape.javascript.JSObject class on your computer somewhere in your browser's folders.
    Also, my book says that if the web page author does not put "mayscript" in the applet tag, then the Java applet code won't be able to talk to javascript and cause it to change the page in the browser.
    Also, the user could have javascript disabled.

  • How to deploy a secured ADF 11g application to WebLogic 10.3 server?

    Hi,
    I have just enabled security in our ADF 11g application, as descripbed in [chapter 29|http://download.oracle.com/docs/cd/E12839_01/web.1111/b31974/adding_security.htm#insertedID0] of the Fusion Developer's Guide. It works fine in the embedded WebLogic server of JDeveloper.
    Now I'm trying to deploy to our WebLogic 10.3 server, which runs in production mode. I'm running into all sorts of problems. The WebLogic console seems to have hundreds of security related pages, I don't know which one I should use, let alone how to use it. The Fusion Developer's Guide doesn't cover deployment to a production server:
    >
    When the target server is configured for production mode, you typically handle the migration task outside of JDeveloper using tools like Oracle Enterprise Manager. For details about using tools outside of JDeveloper to migrate the policy store to the domain-level in a production environment, see the [Oracle Fusion Middleware Security Guide|http://download.oracle.com/docs/cd/E12839_01/core.1111/e10043/toc.htm].
    >
    However, this guide is of very little help to me. I found [chapter 7|http://download.oracle.com/docs/cd/E12839_01/core.1111/e10043/addlsecfea.htm#insertedID0], which says "The recommended tool is Fusion Middleware Control." I have no idea what "Fusion Middleware Control" is, where to get it and how to use it.
    Long story short: I'm totally lost. I'm looking for a step by step guide on how to deploy a secured ADF 11g application to a WegLogic 10.3 server that is running in production mode. Any help is highly appreciated.

    Ok, I found a [very helpful blog post |http://andrejusb.blogspot.com/2009/01/practical-adf-security-deployment-on.html] by [Andrejus Baranovski|http://www.blogger.com/profile/04468230464412457426]. I wish Oracle's documentation was as clear as this...
    The blog post refers to an article by Steve Muench, called [Simplified ADF 11g Application Credential and Policy Migration to Standalone WebLogic Servers|http://www.oracle.com/technology/products/jdev/tips/muench/credmig111100/index.html]. This article presents an Ant script that migrates policies from JDeveloper to WebLogic, using some PFM. (See the last definition here.)
    The problem is that Steve Muench's script assumes that JDeveloper and the standalone WebLogic are on the same machine. However, in a typical environment, such as the one I'm working in currently, this is not the case. In our case the developer stations are Windows machines, while our WebLogic server runs on a HP-UX machine. So the question is: how to perform this migration between two machines with different operating systems?
    Regards,
    Bart Kummel

  • How to change the fields in a JSF form based on a URL parameter

    I am trying to build a generic JSF form of parameters which I want to dynamically change (i.e.
    change which field is visible, what the label text should be, etc) based on a URL parameter.
    I can set the fields using logic in the backing bean as an action on a command button pressed.
    But how do I do it based on the URL parameter ? I can retrieve the URL parameter but I
    don't know where to put (or hook) the Java code to do this initialization prior to
    the page being rendered for the first time.
    The fields in the JSF is being configured dynamically using a database table.
    BTW I am using Jdeveloper 10.1.3.5
    Thanks
    CK

    Thanks. I decided to set a Session bean to store the value of the URL parameter (if it is set)
    and then to use the session bean to initialize the attributes of the fields on the JSF Page.
    There also seems to be some caching of the inputText fields (i.e. it reverts back to the first
    initialized value) even though I tried to change it using the URL parameter in the requestScope
    backing bean. So, setting the values into the Session bean and retrieving it back from there
    seems to be more reliable.

  • How can I pass URL parameter value to text field?

    Dear Masters,
    I have a text field. I want it to have a value based on the URL parameter, for example:
    http://myapplication.net:7777/pls/apex/f?p=102:1:::::P1_RTNUM:9448,P1_EMAILADD:email.add.here
    I want the value of the text field = P1_EMAILADD after the form was loaded. Also, please have it read-only.
    Thanks a lot.
    Edited by: user6368519 on Sep 16, 2009 11:39 PM

    Thanks Saad,
    Can I email you(I would need your email) for any concerns or just create a new thread for you to look?
    This is ok now. I'm sorry but I just marked this one as an "answered" one last time.
    Thanks for all the help again I appreciate it. ;)
    Thanks,
    Aaron
    [email protected]

  • How can I pass empty value in URL Parameter

    Hi,
    I am passing different URL parameters to one page, to filter
    the recordset on that page. How can I pass an empty value in the
    URL parameter so that the recordset in unfiltered?
    The URL parameter is based on one field of the database:
    ContentType. So, the link would be to
    default.asp?ContentType=Event
    and then all records that have the ContentType field in the
    DB as Event are displayed. Is it possible to use this system to
    pass an empty parameter so that all records are displayed?
    Thanks
    Ian

    ?ContentType=All
    <% if (ContentType == "All")
    Build recordset w/o filtering
    ASP is rusty, but those are the basics.
    "iandobie" <[email protected]> wrote in
    message
    news:e8im80$q7m$[email protected]..
    > Hi,
    > I am passing different URL parameters to one page, to
    filter the recordset
    > on
    > that page. How can I pass an empty value in the URL
    parameter so that the
    > recordset in unfiltered?
    > The URL parameter is based on one field of the database:
    ContentType. So,
    > the
    > link would be to
    > default.asp?ContentType=Event
    > and then all records that have the ContentType field in
    the DB as Event
    > are
    > displayed. Is it possible to use this system to pass an
    empty parameter so
    > that
    > all records are displayed?
    > Thanks
    > Ian
    >

  • How can I add a url parameter to choose the right database row to delete using php in Dreamweaver CC

    Hi all,
    I have just upgraded to Adobe Creative Cloup.  Though I find it very good there was one flaw and that was the omision of the database section.  I got this sorted but now I find that once I have set up the connection to the database and want to eithger delete or update records there is no 'url parameter' button to do so.  Can someone advise we how to get round this.
    Seasons Greatings from
    David J

    The link will look similar to
    myPage.php?ID=myVariable

  • How to catch URL parameter from Portal URL in Web Dynpro iView

    Hi All,
    I have a web dynpro application running as a portal iView successfully. Now the client wants to make it internationalized with 7 languages. Currently they access the portal - and via role assignment they get to the portal tab with the wd iView. Now they want to send a parameter for the language key with the portal URL. So when they are typing in http://myportal.mydomain.com now they want to type in http://myportal.mydomain.com?sap-locale=de or so. My question is how can I catch this parameter in the WD application when it is running inside a portal iView? Is it at all possible?
    I have written a very small application which is trying to catch a URL parameter named PARAM. The code I have written is the default one as below:
    String paramValue = WDWebContextAdapter.getWebContextAdapter().getRequestParameter("PARAM");
    When I run the application standalone and add the PARAM=something in last of the URL I can catch it. But when I create an iView and while previewing it I add the same PARAM value it is coming as null all the time. Same when I add this iView to a role and show it via role assignment in protal. Please help to let me know how to achieve this. I think if I can read the parameter value from Portal URL in the WD iView - then I can set it as the default locale of the application and then show language specific file to achieve internationalization.
    Your urgent help will be highly appreciated.
    Warm Regards,
    Shubho

    Hi Shubhadip
    Even if you get the parameters, how do you internationalize your application? Are you not following the standard way as described in the following link. In this case you never need to capture any such parameter. This is done by the WD runtime automatically .
    <a href="http://help.sap.com/saphelp_erp2005/helpdata/en/f4/d95664da179b4db731e21c2e470b72/frameset.htm">Internationalization of WD projects</a>
    You can retrieve application parameters specified at the creation of iview by "adding parameters(with the same name as in iview application parameters) to the default plug of the Component Interface View of the WD application". "onDefaultPlug" method of the interface view controller you get these values as parameters, which you can save in the context node of component controller for later use.This is guaranteed to work.
    But again this is not what you want exactly. You want the user to specify the value at runtime. If you have just 7 languages, you can create 7 set of iviews with different application parameter value indicating language key, and assign to 7 different set of roles, each representing one set of users with common language.
    I hope you find a solution.
    Regards
    kk

  • How to pass mysql query id through url parameter to a detail page

    Hi there,
    I am a newbie to JSP and I am trying to pass a url parameter to a detail page so that it will query a mysql data query to show the details of that query. How can I write the query on the details page so that it will display the query results on the page. eg select * From data Where = "passed_url parameter_ value". Please i need urgent help on this please.

    <Acknowledged>
    which should be strongly cautioned against even for "newbies".
    </Acknowledged>
    Right, but the code you posted will "work" in a very harmful wayNot always, I used normal Statements last year and I had no problems.
    Even with pretty capible code brakers trying to cause $h!t with my application.
    Just check for invalid datatypes, and for SQL Injections remove stuff like ' or replace with `
    But yes PStat... are the better way.

  • URL parameter to a detail page

    Hello,
    I a m having trouble with my url parameter which is not fetching the correct record. The code works -  and returns a word title and description; but it returns only the top record no matter which link is used. Please help.
    1. I have a master page with three url links which are sent to the detail page:
    <p><a href="sprydetail.html?word=integrity">integrity</a></p> 
    <p><a href="sprydetail.html?word=voice">voice</a></p>
    <p><a href="sprydetail.html?word=argument">argument</a></p>
    The sprydetail.html page looks like this:
    <script src="SpryAssets/xpath.js" type="text/javascript"></script>
    <script src="SpryAssets/SpryData.js" type="text/javascript"></script>
    <script src="SpryAssets/SpryURLUtils.js" type="text/javascript"></script>
    <script type="text/javascript">
    <!--
    var ds1 = new Spry.Data.XMLDataSet("myxml.xml", "tagwords/tagword/word");
    var ds2 = new Spry.Data.XMLDataSet("myxml.xml", "tagwords/tagword/description");
    //-->
    </script>
    </head>
    <body>
    <div spry:region="ds1">
      <h1>{word}</h1>
    </div>
    <div spry:region="ds2">
      <p>{description}</p>
    </div>
    </body>
    My xml file looks like this:
    <tagwords>
    <tagword>
    <word>Integrity</word>
    <description><![CDATA["in·teg·ri·ty [in-teg-ri-tee] Show IPA noun 1. adherence to moral and ethical principles; soundness of moral character; honesty. 2. the state of being whole, entire, or undiminished: to preserve the integrity of the empire. 3. a sound, unimpaired, or perfect condition: the integrity of a ship's hull."]]></description>
    </tagword>
    <tagword>
    <word>Voice</word>
    <description><![CDATA["voyss [voyss] Show IPA noun"]]></description>
    </tagword>
    <tagword>
    <word>Argument</word>
    <description><![CDATA["arg-u-ment[arg-u-ment] Show IPA noun"]]></description>
    </tagword>
    </tagwords>

    1. I have a master page with three url links which are sent to the detail page:
    <p><a href="sprydetail.html?word=integrity">integrity</a></p> 
    <p><a href="sprydetail.html?word=voice">voice</a></p>
    <p><a href="sprydetail.html?word=argument">argument</a></p>
    Please remember that the URL variables are case sensitive, ie if the variable that you are looking for is Integrity then the variable cannot be integrity.
    The sprydetail.html page looks like this:
    <script src="SpryAssets/xpath.js" type="text/javascript"></script>
    <script src="SpryAssets/SpryData.js" type="text/javascript"></script>
    <script src="SpryAssets/SpryURLUtils.js" type="text/javascript"></script>
    <script type="text/javascript">
    <!--
    var ds1 = new Spry.Data.XMLDataSet("myxml.xml", "tagwords/tagword/word");
    var ds2 = new Spry.Data.XMLDataSet("myxml.xml", "tagwords/tagword/description");
    //-->
    </script>
    </head>
    <body>
    <div spry:region="ds1">
      <h1>{word}</h1>
    </div>
    <div spry:region="ds2">
      <p>{description}</p>
    </div>
    </body>
    Change the above to
    <!DOCTYPE html>
    <html>
    <head>
    <meta charset="utf-8">
    <title>Untitled Document</title>
    </head>
    <body>
    <div spry:region="ds1">
      <h1>{word}</h1>
    </div>
    <div spry:detailregion="ds1">
      <p>{description}</p>
    </div>
    <script src="SpryAssets/SpryData.js"></script>
    <script src="SpryAssets/xpath.js"></script>
    <script src="SpryAssets/SpryURLUtils.js"></script>
    <script>
    var params = Spry.Utils.getLocationParamsAsObject();
    var ds1 = new Spry.Data.XMLDataSet("myxml.xml", "tagwords/tagword[word ='"+params.word+"']");
    </script>
    </body>
    </html>
    First of all I prefer having the JS at the bottom of the document, not absolutely required. Next I have gone for one dataset showing a region and a detailregion. I have also extracted the URL variable placing this into params, the individual value params.word has been used in the xPath definition.
    Gramps

  • How to get value of URL parameter

    Hi,
    If an ABAP Web Dynpro URL looks like this: http://<server>:<port>/sap/bc/webdynpro/sap/zny_test1?sap-client=100&sap-language=EN, how to get value of the URL parameter “sap-client” at runtime in the application?
    Thanks,
    Nancy

    The framework currently strips all the framework specific params.
    Perhaps the will be made available in a future release.  Thomas, any comments ?
    However, I dont understand the requriement to know the sap-client URL value.
    If your code is running, a user has successfully connected to system a therefore he has a session open and this session is associated with exactly 1 client at any point in time.
    See SYSTEM VARAIBLE   SY-MANDT.
    this represents the client in which the users session is running and negates the need to see
    sap-client URL value.
    regards
    Phil.

  • HTTP Sender - how to read URL Parameter USER id into Mapping

    Hi,
    My scenario is HTTP - XI - ABAP Proxy.
    I wanted to capture USER id of the person who posted(HTTP) into XI(Mapping). How to read/evaluate the value of sap-user from querystring of URL ?
    http://HOST:8008/sap/xi/adapter_plain?namespace=http%3A//abc.com/sales_oa&interface=MI_sales_OA&service=DEV_D&party=&agency=&scheme=&QOS=EO&<b>sap-user=SM9999</b>&sap-password=xxxxx&sap-client=001&sap-language=EN
    please help.

    Mallik,
    Try  URL Parameters in HTTP sender communication channel.
    In the sender communication channel set Adapter Specific Message Attributes. Click on Apply URL Parameters. In Parameter1 put sap-user (U can query any URL parameter by giving its name as in the HTTP URL).
    Now in SXMB_MONI, in inbound payload SOAP Header, under Dynamic configuration u can see the value of the user. Query the same in Mapping using Dynamic Configuration using keyName as UrlParamOne.
    Regards,
    Sudharshan N A
    Message was edited by:
            Sudharshan Aravamudan

Maybe you are looking for