Security and file attachments

I've got a form with some scripted buttons for attaching files.
When I set security settings on the form my buttons stop working and I get the following error:
NotAllowedError: Security settings prevent access to this property or method.
The security settings I'm trying to use are:
Restrict Editing:
Printing Allowed - high resolution,
Changes Allowed - Filling in form fields and signing...
Enable text access for screen reader...
I've tried setting security in Designer and in Acrobat but not having any luck. Is this able to be done?
The file will also be run through Reader Extensions - I've tried this as well with setting "Embedded file attachments" turned on but no luck.

It looks really good! I particularly like the last click to agree that highlights null mandatory fields - neat - JB influence. I like the colour scheme, but if it was me I would colour the buttons separately. A green tinge for positive action "attach file", "add milestone" and a red tingle for negative action "delete milestone".
Yeah, having fun with John's script objects.
I've started colouring the +/- buttons on other forms, I think it works quite well as well. Definitely want to get into using more colour for feedback. We're trying to get into using more colour in general with some of the old print forms we're converting. I kind of like using coloured backgrounds with white fields.
Also just a few points (I hope you don't mind). I would underline Program Guide and have an invisible button over it with the full url for the guide. That way people don't land on the home page an have to find it. The url is probably too long to have written out on the form. I think some tooltips would help guide the user through the form (particurarly some of the technical stuff) and this would also get rid of the object names. It is personal preference but Caroline Jarrett's book "Forms That Work" would shy away from all caps.
Good idea on the url - I'd meant to do something with that but nobody seemed to notice. They opted for supplying a guide vs tooltips and/or popup help...I'd meant to run through it and nuke the field name tooltips but didn't get time - ah well.
We just got that book but I haven't had a chance to read it yet.
Maybe the script could count the number of attachments and if the min. is not present, also throw up an alert.
Good idea - I was trying to figure out the best way to check for the file attachments, but they decided there was the possibility that people might supply some information under separate cover - same reason we didn't make the expanding tables scripted mandatory, in case they left an extra row in or something.
I wish I had another week to work on it but it's live now!

Similar Messages

BPM 11G comments and file attachments issue on human tasks

Hi all,
We have used JDeveloper 11G and SOA suite 11G + BPM (with PS1,PS2) to create and deploy a simple BPM process. The process consists of two swim-lanes ( Business Analyst and Snr Executive). The BA swim-lane has a human task which which initiates the process and the second swim-lane (SE) has a voting task. Both forms were auto generated.
------ Process steps ----
step 1. The initiator of the process( Business analyst) submits a document and adds comments on the form. (1st swim lane)
step 2. The task is received by the Snr Executive group and they need to accept or reject the document.
step 3. If any of the Snr Execs rejects the document, the process flow goes back to the Business analyst(the requester or initiator) for review.
(the voting group is able to share comments and the file attachments).
step 4. The business analyst receives a task on her list. This task list should have the comments made by the Snr Execs who rejected the document. ---This is where we are having a problem. The business Analyst, receives the task, but the document and comments are not updated. This still shows the original document and comments, she sent when initiating the process.
We have opened a SR with My Oracle support and it was suggested we apply a hot fix 9958661, which was done (see output below). Unfortunately this did not solve the problem.
Questions:
1. Is the default behavior of BPM 11G ?
2. How can we change this behavior to do what we want ?
---------------------------------------opatch update output -----------------------------------------------------------
ApplySession adding interim patch '9958661' to inventory
Verifying the update...
Inventory check OK: Patch ID 9958661 is registered in Oracle Home inventory with proper meta-data.
Files check OK: Files from Patch ID 9958661 are present in Oracle Home.
The local system has been patched and can be restarted
I any suggestions would be welcome.
Thanks
Mocheche

Ok, this is what i did:
- I have a Process Data Object called CustomComments with just 1 attribute called comments.
- I have added that object to my user screens (adf page)
- Changed its columns att to 65 and rows to 8 (i chose that layout)
- Used a tableLayout to add an icon next to this text area to allow the user to add comments:
<af:commandImageLink shortDesc="addCommentImage" id="addCommentImage" partialSubmit="true" icon="/hw_images/new_ena.png">
     <af:clientListener method="myFunction" type="click"/>
     <af:clientAttribute name="attributeName" value="attributeValue"/>
</af:commandImageLink>
I use that clientAttribute to send the logged user to the javascipt.
- I added this after the af:document on top of the page to make the customComments readonly to the user (you need to do it here because if you set it in the properties the element is not updated later), so the user has to use the button i put to add comments:
<f:facet name="metaContainer">
     <f:facet name="metaContainer">
     <af:resource type="javascript">
          function readOnly(){
               var comms = document.getElementById("it1::content");
               comms.setAttribute("readOnly","true")
     </af:resource>
</f:facet>
<af:clientListener method="readOnly" type="load"/>
- Somewhere i added the javascript the commandLink calls:
<trh:script id="myScripts">
     function addComment(evt){
          var commentArea = document.getElementById("it1::content");
var user = evt.getSource().getProperty("user");
var comm = prompt("Please enter your comment: ","");
          if (comm != null) {
               if (comm != ""){
                    if (commentArea.value !=""){commentArea.value = commentArea.value + "\n"}
                    commentArea.value = commentArea.value + "user.value" + " : " + comm;
</trh:script>
After all this, you have an object that carries the comments from one screen (UI project) to another and is updated each time.
I know it may not be the perfect solution and that it could be improved a lot, but so far it does what i need so i use it.
If there is anything i wasnt clear enough, please let me know. Hope this helps.

Viewing File Attachments in a Portfolio

Hi,
Asus Transformer TF101 running 4.0.3
Workstation: Adobe Acrobat Pro 9
Tablet: Adobe Reader X (v10.2.0 J)
So I made a portfolio on my workstation with two pdf files.
In one of the portfolio files I added a file attachment by Opening File>Comment>Attach File.
Saved file and saved portfolio.
Open in Reader X on my workstation - no problems - selecting paperclip opens attached file.
However, when I save to my tablet and open portfolio and file I see the paperclip icon but attachment doesn't open on click.
Any idea why? Do I need make portfolio in Adobe Acrobat Pro X rather than 9 to make this work.
Recent announcement for Reader X says this should work - in fact has been out since 10.1.1: "Enhancements to Portfolios list and File Attachments on iOS: You can now view non-PDF children in PDF portfolios, and PDF File attachments on the iOS Reader. These capabilities already exist on Android since Reader 10.1.1"
Any help is appreciated - Thanks,
Muns

Anyone with info on this ? I have just ran into this problem myself, hard to believe there isn't a way to fix this .

Multipart/form-data and file attachment

Hi ,
This question has probably been asked before, but if not then here it is. Any replies will be appreciated:
Q. When using "Enctype=Multipart/form-data", with file attachment alongwith other form fields, is it mandatory to attach a file ? What if user selects no file to attach?
Q. If no, then how can it be possible that a form can be submitted without attaching a file since when I try to submit a form with no file attached to it, it gives me error message saying :java.lang.NullPointerException
Q. Does it mean that I can't have a form with a blank "File" input field, if the form's Enctype is "multipart/form-data"? Since users may not select a file to attach to the form, in other words it is an optional.
I hope I was clear enough in explaining my questions.
Thanks in advance.

I am using Orielly's file attachement pacakge.
Here's what I am doing in my JSP page: It does the following:
int maxFileSize = 10 * 1024 * 1024; // 5MB max
String uploadDir = "/direct/files/upload/";
String FormResults = "";
String FileResults = "";
String fileName = "";
String fileName2 = "";
String paramName="";
String paramValue="";
File f;
int filecounter=1;
first get the form fields using following code:
MultipartRequest multi = new MultipartRequest(request, uploadDir, maxFileSize);
Enumeration params = multi.getParameterNames();
//Get the form information
while (params.hasMoreElements())
     paramName = (String) params.nextElement();
     paramValue = multi.getParameter(paramName);
     if (paramName.equals("emailconfirm"))
          emailconfirmation = paramValue;
     else if (paramName.equals("Requester"))
          Requester = paramValue;
     else if (paramName.equals("TodaysDate"))
          TodaysDate = paramValue;
     else if (paramName.equals("Extension"))
}//end while
Then it gets the file information using the following code: I have two file fields in my form so that's why I am using a filecounter to find out if user has attached two files or just one:
Enumeration files = multi.getFileNames();
while (files.hasMoreElements())
     String formName = (String) files.nextElement();
     if (filecounter == 2)
fileName2 = multi.getFilesystemName(formName);
     String fileType = multi.getContentType(formName);
          f = multi.getFile(formName);
     FileResults += "<BR>" + formName + "=" + fileName2 + ": Type= " + fileType + ":
Size= " + f.length();
     else
     {     fileName = multi.getFilesystemName(formName);
          String fileType = multi.getContentType(formName);
          f = multi.getFile(formName);
          FileResults += "<BR>" + formName + "=" + fileName + ": Type= " + fileType + ":
Size= " + f.length();
     filecounter=filecounter+1;
Then after composing the mail message I send email with the form fields and file attachments using following code:
Properties props = new Properties();
MimeBodyPart mbp1 = new MimeBodyPart();
MimeBodyPart mbp2 = new MimeBodyPart();
MimeBodyPart mbp3 = new MimeBodyPart();
URLDecoder urlDecoder = new URLDecoder();
String to1 = urlDecoder.decode(toemail);
String from1 = urlDecoder.decode(fromemail);
String cc1 = urlDecoder.decode(ccemail);
props.put( "mail.host", host );
Session session1 = Session.getDefaultInstance(props, null);
// Construct the message
Message msg = new MimeMessage( session1 );
msg.setFrom( new InternetAddress( from1 ) );
msg.setRecipients( Message.RecipientType.TO, InternetAddress.parse( to1, false ) );
msg.setRecipients( Message.RecipientType.CC, InternetAddress.parse( cc1, false ) );
msg.setSubject( subject );
msg.setHeader( "X-Mailer", "ExceptionErrorMail" );
msg.setSentDate( new Date() );
mbp1.setText(mail_message);
mbp1.setContent(mail_message, "text/html");
// Send the email message
FileDataSource fds = new FileDataSource(uploadDir + fileName);
FileDataSource fds2 = new FileDataSource(uploadDir + fileName2);
mbp2.setDataHandler(new DataHandler(fds));
mbp3.setDataHandler(new DataHandler(fds2));
mbp2.setFileName(fileName);
mbp3.setFileName(fileName2);
Multipart mp = new MimeMultipart();
mp.addBodyPart(mbp1);
mp.addBodyPart(mbp2);
mp.addBodyPart(mbp3);
msg.setContent(mp);
Transport.send( msg );
//email sent...
//delete the two files from the server..
File f2 =new File(uploadDir + fileName);
f2.delete();
File f3 =new File(uploadDir + fileName2);
f3.delete();
//End of code
So when I don't attach a file and submit my form , I get the error message that I mentioned in my previous post.
Any more ideas?

Securing file download with standard web security and ssl

Hi,
I want to put some files for download in my webapp. At the same time, I want to protect these files using standard servlet security and ssl. So I added <security-constraint> in my web.xml and configured tomcat to allow SSL connection. Now I got the files protected as I expected. When I try to access the file directly from browser, tomcat shows me the login page. However, after correct login, I.E. pops up an error saying something like "Internet Explorer cannot download XXX from XXX. The file could not be written to the cache.". The log file showed the following exception:
javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLException: java.net.SocketException: Connection reset by peer: socket write error
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1154)
     at com.sun.net.ssl.internal.ssl.AppInputStream.available(AppInputStream.java:40)
     at org.apache.tomcat.util.net.TcpConnection.shutdownInput(TcpConnection.java:90)
     at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:752)
     at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:526)
     at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
     at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
     at java.lang.Thread.run(Thread.java:595)
Caused by: javax.net.ssl.SSLException: java.net.SocketException: Connection reset by peer: socket write error
     at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:166)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1476)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1443)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1407)
     at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:64)
     at org.apache.coyote.http11.InternalOutputBuffer.realWriteBytes(InternalOutputBuffer.java:747)
     at org.apache.tomcat.util.buf.ByteChunk.flushBuffer(ByteChunk.java:403)
     at org.apache.coyote.http11.InternalOutputBuffer.endRequest(InternalOutputBuffer.java:400)
     at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:961)
     at org.apache.coyote.Response.action(Response.java:182)
     at org.apache.coyote.Response.finish(Response.java:304)
     at org.apache.catalina.connector.OutputBuffer.close(OutputBuffer.java:281)
     at org.apache.catalina.connector.Response.finishResponse(Response.java:473)
     at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
     at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:825)
     at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:738)
     ... 4 more
Caused by: java.net.SocketException: Connection reset by peer: socket write error
     at java.net.SocketOutputStream.socketWrite0(Native Method)
     at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
     at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
     at com.sun.net.ssl.internal.ssl.OutputRecord.writeBuffer(OutputRecord.java:283)
     at com.sun.net.ssl.internal.ssl.OutputRecord.write(OutputRecord.java:272)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:663)
     at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
     ... 15 more
I've tried separating concerns, for example protect files but not require SSL, and enable SSL but do not protect files. Both works respectively but not together. I also tried using a download4j's DownloadServlet. Still doesn't work.
Have any of you encouter the same situation? If so, could you enlight me what I did wrong? It maybe just a simple SSL configuration or something. Thanks in advance!
Jack

My environment setup is:
JDK 1.5.01
Tomcat 5.5.7
For downloading files, I just use plain old <a href> method. I simply right-click the link and choose "save target as...".
Thanks,
Jack

How can I disable the automatic hiding of known file attachments, and why are always about 10 internet pages where I have to download something if i use firefo

How can I disable the automatic hiding of known file attachments, and why are always about 10 internet pages where I have to download something when I use mozila firefox?
Windows Computer

1) If you are talking about the file names on the computer, there is a
setting to turn off known file types. Open your file browser. Then
just under the location bar, press '''Tools,''' then '''Folder Options.'''
A new window will open. Select '''View.''' Look for
'''Hide Extensions For Known File Types.'''
2) Never NEVER '''NEVER''' download anything unless you know what
it is. If a web site claims it needs to download something, what is it?
It could be something like the flash player, '''or a virus ! !'''
Ask questions, or go somewhere else.

Workflow API: adding and accessing file Attachments to a Human Task

Hi there,
I am using the Workflow Services Java API (11.1.1) for SOA Suite to access and manipulate human tasks. I would like to be able to access and add file attachments to existing human tasks. I am using the methods provided in the AttachmentType interface.
When adding an attachment, the problem I am running into is that an attachment does created and associated with the task, however it is empty and has no content. I have attempted both setting the input stream of the attachment, as well as the content string and in each case have had no success.
I have successfully added and accessed an attachment using the worklist application, however when trying to access the content of this attachment through code I receive an object with mostly null/0 values throughout, apart from the attachment name.
As the API's are not overly rich in documentation I may well be using them incorrectly. I would really appreciate any help/suggestions/alternatives in dealing with BPEL task attachments.
Thanks
The code I am using resembles:
List attachments = taskWithAttachments.getAttachment();
for(Object o : attachments){
AttachmentType a = (AttachmentType) o;
String content = a.getContent(); +// NULL+
InputStream str = a.getInputStream(); +// NULL+
String name = a.getName(); +// Has the attachment name+
String mime = a.getMimeType(); +// Has the mime type+
long size = a.getSize(); +// 0+
Edited by: 855489 on May 2, 2011 4:23 PM
Edited by: 855489 on May 2, 2011 8:48 PM

I am also facing the same issue, using 11.1.1.6, anyone managed to solve this?
Regards
Venkat

I can't get gold of adobe - which is annoying me. I have a file that has been uploaded to my creative cloud that i did not upload or have i ever seen before. SO it seems adobe cannot guarantee security and are uncontactable - i think i may leave

I can't get gold of adobe - which is annoying me. I have a file that has been uploaded to my creative cloud that i did not upload or have i ever seen before. SO it seems adobe cannot guarantee security and are uncontactable - i think i may leave

Since this is an open forum, not Adobe support... you need Adobe staff to help
Adobe contact information - http://helpx.adobe.com/contact.html
-Select your product and what you need help with
-Click on the blue box "Still need help? Contact us"

IPAD3/IPAD2 :PDF files/ attachments sent in an email displayed inline ( embedded within the main email) in the message text on both my Ipad2 and Ipad three, however the same email displayed the PDF File icons/ attachment on both my Iphone and a friend's

IPAD3/IPAD2 :PDF files/ attachments sent in an email displayed inline ( embedded within the main email) in the message text on both my Ipad2 and Ipad three, however the same email displayed the PDF File icons/ attachment on both my Iphone and a friend’s PC. How do i get both my IPAD devices to display the PDF icons/attachments? Bearing in mind if i open the same email over the internet the PDF Icons/attachments display OK!
Has anyone come across this? Your advice/help would be most appreciated

This happens to me all the time.
If is a one page PDF it seems as though it comes over already open and inline in the body of the email. Multiple page PDF files show as the PDF icon.
I can't find any official documentation of this - other than based on my own experience with PDF attachments in my various email accounts.
Message was edited by: Demo

.pdf and .doc Attachments are downloading as .html files

Dear Forum,
I have received both .doc and .pdf attachments in my email (charter.net).
I click to download, the files then appear on the desktop as Safari files with a example.doc.html file name or example.pdf.html
Of course neither Word or Acrobat Reader can open them without them appearing as scrolling incoherient text...
Why does this happen? I assume the files should download as their true file type such as example.doc or example.pdf
Any help would be greatly appreciated.

Hi WinchesterBunnyMama, what exactly is your problem. Is it this issue:
Some users are finding that an update changed the description of "Adobe Acrobat Document" to "Firefox HTML Document". The installer was supposed to add Firefox as an ADDITIONAL viewer for PDFs, not as the DEFAULT viewer. Sorry if you were affected by this glitch and hopefully they will figure out why some systems get changed this way.
You can try this fix suggested by a user in another thread:
# Open Adobe Reader / Acrobat*
# Edit->Preferences
# In the Categories column click 'General'
# Near the bottom of the page click the button marked 'Select Default PDF Handler'
# In the dialog, select 'Adobe Reader XI' (or Adobe Acrobat, as the case may be) and click 'Apply'
# A Windows Configuration screen will appear. Allow it to do its stuff (takes a few minutes), then restart your computer when prompted.
Does that work for you?
''*'' If you do not have Adobe Reader 11, you can install it from here: http://get.adobe.com/reader/

How to convert a file of emails and the attachments to pdf?

In adobe pro XI, how do you convert a file of emails AND their attachments to pdf?

Unfortunately, that did not work either. I am thinking this may not be possible (at least with 10.1.3.4). What I was hoping for was that I could audit the presentation catalog groups and users. I want to be able to get a list of all the users and the groups they are listed in. Again, this would be helpful so we do not need to keep an external record. If we are removing access to a user or updating the group, we want to make sure we remove them from all applicable groups (Settings>Administration>Manage Presentation Catalog Groups and Users)

Receiving pop ups to secure my files and when I log into any website i get directed to a site with a pop up regarding security. I assume I have a virus and not sure how to fix it

I am receiving pop ups to security sites to secure my files etc. I assume I have a virus but not sure how to fix it.

There is no need to download anything to solve this problem.
You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
Back up all data before making any changes.
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.

Exchange security evtx files and connection events

Does anyone know if the security .evtx files on the exchange mb database servers (2010) would store information about connections from client software (i.e. Outlook). trying to determine a way to see when a connection was made by a specific user (windows
7 PC accessing exchange via outlook 2010), and subsequently closed (i.e when they shut outlook on their PC). Have some logs from the server on the day but they are a bit overwhelming, any ideas on specific event ID's to filter the masses of data down to connections.
There are several hundred mailboxes on this DB server so its going to be a nightmare to analyze.

Hello,
Clients' connectivity logging is not maintained by Security Event Log files. To configure client connectivity you should configure:
1. For RPC connectivity: http://theucguy.net/rpc-client-access-logging-in-exchange/.
2. For OWA connections: check %SystemDrive%\inetpub\logs\LogFiles directory.
Hope it helps,
Adam
CodeTwo: Software solutions for Exchange and Office 365
If this post helps resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.

How can I safely and securely get files from my mac.

I want something like LogMeIn Pro but for free. ther is a free version it DOES support mac BUT not gettong files. I want to be able to securely get files from my mac from school or anywhere whitout paying!!
I HAVE had a look on google, no help.

Try versiontracker.com

How do I automate the creation of a client secure zone, file/folder structre and integrate a web app

I want to be able to create a folder and file structure for each accoun subscriber to my site that will allow them to edit their "web-space" on my site.
So basically when they register for an account they'll have a webpage, a folder structre, a page that will contain a web app.
I want the user to be able to specify their "account name" so for example if they want John's Page the URL would be www.MYSITE.COM/Johnspage. Would this need to be done through re-directs?
Thanks in advance

Hi there,
BC is not a platform for this sort of thing. You can not automate this process in BC and give them micro sites in this way. Which I have already covered for you.
Your best to look at other platforms.
Since you have already basically asked this here:
http://forums.adobe.com/thread/1264270
You can add and update that thread and I am closing this one to avoid confusion with other people resonding to you and to avoid double up's

Security and file attachments

Similar Messages

Maybe you are looking for