Web Forms and Security

I am trying to automate the web form create filter task (in Hyperion planning). As I understand it there is no command line tool like Essbase does with Import.cmd command to load security filters. It is to taxing on the system to go to create a filter and click on the 100 user’s checkboxes at one time. Yes, I know I can group the users to make things easier, but having individual users and groups is the way they do business in this case.
I have done a few webpages in the past, and I was wondering if I could just read the source of the create filter form and get the ID’s of the users and submit it to the /serverlet/HSPxxxxx through an automated script. But, then I wondered how force the security of the submitting user to the serverlet to a known admin username and password.
Please help.
Thanks
Ed

Thanks for advice.
Let me clarify what happened.
v. 9.3.1
1) I added two groups to write access to a dimension from the Hyperion Planning Web Front End (Workspace).
2) From the web front end went ahead and refreshed the security filters to reflect the changes into Essbase.
I can only do step 2 five users at a time to avoid the server to crash. Is there any way to automate the refresh of the security filters in Essbase.
I have been told you want to use the Planning Web Front end and to push those changes to the Essbase Cube.
Please advise.
Thanks

Similar Messages

Help with Business Catalyst Web forms and Adobe Muse.

I created a websform to log into a secure zone using business catalyst. I pasted the webform's html into Adobe Muse. After publishing my site. The websform I created in business catalyst is deleted, but I can see all of the forms that I created using Muse in the webform section. Is there a fix for this problem? Thanks
This is the page with the forms. http://www.highestgoodclothing.com/login.html

There is a workaround. It takes a little more work, but it is definitely worth it and will solve your problem. I subscribed and learned from tutorials on the www(.)trainsimple(.)com. They have a video series called "Muse CC Business Catalyst Integration" which was very helpful. The issue that everyone on here is referring to is covered in the 3 videos labelled, "Email Sign Up Checkbox", "Moving Muse Webforms to Business Catalyst" and "Email Marketing".
Essentially, what you want to do is create a form in Business Catalyst, turn that form into a module, assign a tag to that module, then put the tag into Muse using Object > Insert HTML. This will solve Muse deleting the web forms everytime.

Create a Recovering/Changing Password web form and send email notification

Hi all
I am looking for a web page or application that will allow an user to change his/her database password. I am thinking about those web forms where end users enter the current password and the new password, hit submit and the new password gets activated. Then the web form send an email notification
The database is an Oracle 10G database.
Is there any template similar to this one http://www.asp.net/learn/security/tutorial-13-vb.aspx for an Oracle database?
thanks
J

Write a stored procedure that uses native dynamic SQL and just pass in the new password.

Other web browsers and security issues?

Since even an Apple KB article recognizes the need for an additional browser and because of Safari's limitations and problems, I'm going to try switching to another browser (most likely OmniWeb and am looking at Firefox, Shira and Opera also though perhaps not as a primary browser) but I'm wondering about their ability to keep on top of any security issues for Mac? (and how do you keep up with security updates?)
Though perhaps unfounded, at least with Safari, I feel that Apple has a vested interest in keeping on top of security issues (for Safari and Java) and I can readily find out about security updates via software updater.

Most of the other Mac browsers have their adherents. They are all good browsers (I have 7 browsers installed to test various web sites and for change-of-pace usage). They all have their strengths and they all have their weaknesses. Only iCab and OmniWeb are still shareware, the rest are now or always have been free (Opera just recently stopped charging for its browser).
I have settled on Firefox as my alternate browser and I use it maybe just a tad more than Safari, but I do switch back and forth between them. The Mozilla foundation is good at getting security updates out when needed. Firefox has a button on the toolbar to check for updates. One nice thing about Firefox is that you can install free extensions which enhance the features available. I have one to supplement tab features, one to control iTunes from Firefox's status bar, one to help me format messages in discussion forums, and one to block ads.
I prefer OmniWeb for doing intensive research because of the way it handles tabs in its sidebar, showing me which ones I've looked at and which ones I haven't, and giving me great flexibility in rearranging tabs, which are viewable as thumbnails or text names (I have had up to a hundred or so tabs open in OmniWeb.
Shiira is good and its fast. I have not checked for updates for a while, but the last time I updated there was still a problem with Shiira kicking you out of logged-in sites when you moved from page to page with in web site. This may have been fixed by now - they were aware of the problem back then.
Camino is a native OS X cousin of Firefox and is also fast, but is not updated as often.
I would stay away from Mozilla or Netscape unless you need all the additional modules they have and which take up hard disk space. Firefox and Camino represent the browser module of Mozilla/Netscape. Mozilla and Netscape have modules for email, irc chat, newsgroups, and for creating and editing web pages. Netscape is a branded and slightly customized version of Mozilla and is not updated as often.
Opera is a nice browser and some use it as their main browser, but I have not seen anything that really stands out for me, but that does not mean it is not worth a look.
I would stay away from abandonware Internet Explorer.
As for checking for updates, several of them, as with many Mac programs, now have a menu item that allows you to check for updates. Most of them also announce their updates on both VersionTracker and MacUpdate.
Happy Exploring.

Page after filling in web form and Css on Web apps

Hi All.
I have two questions.
1. How do I customise the page that appears after a web form has been filled in. The page the sumarises the details filled and thanks the user for filling in the form?
2. We have created a web app to display info on a page, which it does, but it isn't pulling the CSS styling from the main template. To make it work we have been putting inline CSS in the web app code, but this isn't ideal. Is there a way to make it look for the main CSS?
Thanks
Ken

Hi Ken,
1. You can find it under Site Manager > System Pages > Web Forms Confirmation Page
2. Does the detail page/web app item use a template? Did you make sure the referencing looks something like this: <link rel="stylesheet" href="/css/styles.css" />?
Nicole - BCGurus.com

Help! When users save web forms and come back to submit they get an error message and form is lost

I have a feb form that has a 28 save limit. When users save the form and return to submitt them they get a error message that says the form has expired or has been submitted. The form is open and it was not submitted. Any thoughts.
Form deadline is tomorrow and people are getting angry when I tell them to recreate the form.

Hi;
Can you forward me any of the emails from your users with their saved link that is not working and we can look into it?
Send to [email protected]
Thanks,
Josh

Web form and database security risk

I'd like to develop an Oracle Form or APEX Form where people don't have to login to use it. Like a registration form on our website, where anyone can fill it out. Ideally, the information entered into the form would be saved to an Oracle table (could use a flat file if database security is an issue). I'm a developer and don't know a lot about the security side.
I'm thinking we would need a static IP address and an Oracle public password that doesn't expire, since the public doesn't have to login to use the form.
Is this possible and is it a database or network security risk ?

An APEX page can certainly be configured to not require authentication (that's pretty standard for the login/ registration page). There is no need for an "Oracle public password." There are accounts in the Oracle database that APEX uses but that no human needs to know the password for. If that's what you mean by "Oracle public password" then, yes, you do. But that would be the case no matter what authentication and authorization scheme you use in APEX.
A static IP address for your web server is likely a good idea. It's possible to have DNS work with dynamic IP addresses but that's probably not what you want.
Justin

Web connectivity and security in Oracle 8i

How can i make Web Connectivity with Oracle 8i database.
Junaid Tareen

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by [email protected] ():
What do you mean by data level security?
Can you give an example and explain your query?<HR></BLOCKQUOTE>
When giving him permissions to users on a table I want that the user can manipulate only certain columns and that the others are restricted for him. If it is connected by application, SQL, ODBC, etc. That it always has activates the restrictions on the data of those columns.
Ej.
I have a table with 5 columns, need to give permissions him of select to users on that table but single desire to show the users columns to him the 1,2 and 3.Las others will remain restricted for those users until it is decided to assign them.

Web Service and security....

Hi everyone,
I wanted to know if someone suceeded to call a web service via a Java standalone class using a Deployable Proxy ?
If yes, can someone gives me all the steps ?
Thanks a lot for your help.
NB : I succeeded calling a web service via Standalone Proxy. But I want to securize the call to the web service.
I noticed that I cannot use SSL with Standalone Proxy.
If I am missunderstanding something, please let me know.

Hi David,
Yes, you cannot use SSL with standalone proxy.
you can use document security for deployable proxy as i suggested you before in you earlier posts.
Follow these steps:
1. Specify document security as authentication mechanism in web service configuration file.
2. In security tab in this file, choose username+encryption for request and none for response.
2. deploy your web service.
3. Create deployable proxy for this web service.
4. ensure security options for this proxy is also set to document authentication.
5. Deploy this proxy on the server.
6. Go to visual administrator and there check whether XMLEncryption certificate is available under WebserviceSecurity view. If not then create private and public key with name XMLEncryption and XMLEncryption-cert respectively.
7. Assign this certificate to your webservice and proxy in the services, "Web services seurity".
8. write code in Standalone java class to call your pproxy.
Regards,
Bhavik

Web services and security

hi, i've successfully programmed a labview webservice and its all working fine, but im using a computer with public IP, and i can access to this webservice just typing the adress like in the webservices examples. my question is how can i create an authentication in a way that only the person with credentials can access his service? There are an easy way to have variables connected directtly connected to vi to verify the users before using the service?

Have a look at this document and post back if you still have questions after reading it:
LabVIEW Web Services Security
Adnan Zafar
Certified LabVIEW Architect
Coleman Technologies

Web client and security

Can anyone help me with this problem? I'm using ni lookout V5.1 developer and getting this error every time when i try to access web client application. I've already followed instructions from knowledge base and added this site to trusted and also reset security to low but the same problem?!? In version 6.1 I’m not getting this error but for this version I don’t have developer license.
Thanks
Attachments:
slika_lookout_forum2.jpg ‏66 KB

On this photo you can see that certificate exist. I've tried to export certificate from my server computer and import it to client but it didn't help to fix problem.
Os version is Windows XP service pack 2
IE version is 6.0 service pack 2
Any other suggestions?
Attachments:
untitled11.jpg ‏136 KB

Web.xml and security constraints

Hi,
I have several web services deployed. I only want to protect one of these web services.
If I use "/services/*" in <security-constraint> of my web.xml file, all my deployed web services are protected.
If I use "/services/aaaWebService" in <security-constraint> of my web.xml file, aaaWebService web service is NOT protected.
Please let me know what I should use for teh <url-pattern> to protect only aaaWebService.
Thanks /dan

What about "/services/aaaWebService*"?
I think whithout an asterisk service parameters don't match your pattern.
Vovencij

What a shambolic web site and security system

Don't go to the forums for a week and then discover the sign on process has changed - HAVE TO use a community sign on now - wonder what happened to the push for SSO.
OK so register for a community sign on, not a problem I'll use the userid and password I always used to logon with, work with no problem then enter the activation code etc then WHAT's THIS
Choose a screen name and give us your email address again, no problem I'll use my community logon id for a screen name and obviously my email is still the same because you just sent me an activation code, WHAT'S THIS
That email address is already assigned - OF COURSE IT IS, IT'S MINE.
Now no way to get into forums because every time you try to do it you are presented with the **bleep** screen name form
OK I have another email address I'll use that, WHAT'S THIS email address is OK but presumably there's something wrong with my screen name Guess Screen Name CANNOT BE THE SAME as logon id, doesn't tell you that though.
OK I'll make up something else just so I can get here and post this rant.
THIS IS **bleep**
I now have I believe 5 separate logons in the Verizon system. Why do I have to have a separate logon to get to the forums after happily using my verizon id for 6 months?
Interesting that the system inserts **bleep** for the word stu**d

Restart machine
Clear cache and it started working again.
Something in the cache appeared to be determining that I was a VZ wirelss customer and therefore HAD to use a community userid to access the forums - that is it would not allow me the option to select either my VZ id OR a community id.
Think it was to do with some window that comes up prior to the main VZ window when entering www.verizon.com. Window seems to ask whether you are a Wireless, residential or business customer with a sign in prompt under wireless. I think I may have signed in there and that is was screwed it up.

Single form for secure zone registration and web app submission?

Hi
Is it possible to setup a form where a user can simultaneously register for a secure zone and submit a web app entry? The knowledge base / tutorials describe a two step process (web form for secure zone registration and web app input form for web app submission), but I would like users to be able to do both with a single form
Thanks in advance for any suggestions
mls

In order to have a customer create a web app item they must be logged into the secure zone already. I've seen some instructions on how to let users submit web app items outside a secure zone but that requires creating a dummy anonymous user and logging them into the secure zone via javascript. You could use this method and once it's submitted you'll have to manually attach the web app item to the correct user in the BC Admin. That might not work for you but you can read more about that at http://forums.adobe.com/docs/DOC-1784
You can't use the above solution with the current user's username and password because those tags are only available when the user is logged into a secure zone already. If your signup form needs to be filled out first, the user isn't logged in.
Your best bet is to have the public signup form redirect the user after submission to an "Add item" form you have created. Maks sure that form is in a secure zone so when they add the item it is attached to their account.
If you don't want to redirect them to a secure zone and want it more seamless you could try to use some javascript/ajax to submit the form via javascript and after the form is submitted, use the javascript code in the above to log them in (be careful to use the https://yoursite.worldsecuresystems.com url if you are passing username and password info gathered from your form to log them in via javascript/ajax). Once they are logged in via the javascript you can use more ajax to fetch a page's HTML that resides in a secure zone. This HTML returned from the javascript can be your "add web app item" form and since they were logged in via javascript (securely, right?) this HTML should contain the right information. Insert this returned HTML into your form container that held the original signup form and they can continue to add a web app item without having to log in.
This is theory and might work but you'll have to start experimenting with it via javascript. I haven't actually tried to do this so hopefully some other community members who might have tried this can weigh in here as well.
Good luck!

Java program to automatically fill out and submit a Web form

I need to write a program to set the fields of a Web form and submit it automatically.
Can anyone help?
Thanks in advance!

heres some code I have been messing about with
import java.applet.*;
import java.awt.*;
import java.awt.event.*;
import java.io.*;
import java.security.*;
import java.net.*;
/** Author :James Charles 20/03/2004
This module handles the customer booking screen **/
public class Bookings extends Applet implements ActionListener,   // sets up the initial display screen
ItemListener
     Choice details;
     TextField name;
     TextField telephone;
     TextField email;
     TextField address;
     TextField postCode;
     Color webPage = new Color(0,128,255);
     Button btnClick;
     String nameOutput =" ",telephoneOutput=" ",emailOutput=" ",addressOutput=" ",postCodeOutput=" ";
     int jobNumber;
     int authorisationCode ;
     Font formEntry = new Font("SanSerif",Font.BOLD,15);
     Font dataDisplay = new Font("SanSerif",Font.PLAIN,16);
     boolean dataEntry = false;
     int position = 2;
     String[] detailsOutput = { "Choose a Subcontractor","Painter & Decorator","Electrician" };
     public void init(){
          readJobNumber(jobNumber); // reads the las job number from file jobNumber.dat
          Button btnClick = new Button("Submit Details");
          setBackground(webPage);
          add(new Label("                           Name"));
          name = new TextField(30);
          add(name);
          add(new Label("                           Telephone"));
          telephone = new TextField(25);
          add(telephone);
          add(new Label("House No"));
          address = new TextField(3);
          add(address);
          add(new Label("Post Code"));
          postCode = new TextField(8);
          add(postCode);
          add(new Label("E-Mail address"));
          email = new TextField(35);
          add(email);
     public void start(){
          add(new Label("                                                                       Please choice the appropriate Tradesman that you require"));
                    // choice code set up
          details = new Choice() ;
          details.addItemListener(this);
          details.add("Choose a Sub Contractor");
          details.add("Painter & Decorator");
          details.add("Electrician");
          details.select(0);
          add(details);
          btnClick = new Button("Submit Details");
          btnClick.addActionListener(this);
          add(btnClick);
          btnClick.setEnabled(false);
     public void actionPerformed(ActionEvent e) {
          System.out.println("Was in action performed event =" + e);
          dataEntry = true;
          nameOutput = name.getText();
          telephoneOutput = telephone.getText();
          emailOutput = email.getText();
          authorisationCode = (int)(java.lang.Math.random() * 100000);
          if (dataEntry == true){
               btnClick.setEnabled(false);
               repaint();
               System.out.println("In between paint and write");
               WriteBookings(nameOutput,telephoneOutput,emailOutput);
     public void itemStateChanged(ItemEvent e) {
          position = details.getSelectedIndex();
          System.out.println("Position in itemStateChanged after getSeletedIndex = " + position);
          btnClick.setEnabled(true);
          repaint();
     public void WriteBookings(String nameOutput,String telephoneOutput,String emailOutput)   {
                   writeJobNumber(jobNumber);
          try{
               DataInputStream in = new DataInputStream(new      FileInputStream("CustomerDetails.txt"));
               char singleChar;
               DataOutputStream out = new DataOutputStream(new FileOutputStream("CustomerDetailsNew.txt"));
          /**     try {
                    jobNumber =in.readInt();            // this code reads last job number and increments it
                    singleChar = in.readChar();
                    jobNumber ++;
                    out.writeInt(jobNumber);
                    out.write('\n');
                    while (true){                           // this code
                         singleChar = in.readChar();
                         out.writeChar(singleChar);
               catch (EOFException e) { }
          out.writeChars(nameOutput);
                out.writeChar('\t');
          out.writeChars(telephoneOutput);
                out.writeChar('\t');
          out.writeChars(emailOutput);
          out.writeChar('\t');
          out.writeInt(jobNumber);
          out.writeChar('\t');
          out.writeInt(authorisationCode);
          out.writeChar('\t');
          out.writeChars(detailsOutput[position]);
                out.writeChar('\n');
          out.close();
       catch (IOException e){
          System.out.println("Error: " + e);
          System.out.println("Close File"); //*********** End of read/write process, code below renames the new file to the input file
          File fileDelete = new File("CustomerDetails.txt");
          fileDelete.delete();
          try{
               DataInputStream in = new DataInputStream(new      FileInputStream("CustomerDetailsNew.txt"));
               char singleChar;
               DataOutputStream out = new DataOutputStream(new FileOutputStream("CustomerDetails.txt"));
               try {
                    while (true){
                         singleChar = in.readChar();
                         out.writeChar(singleChar);
               catch (EOFException e) { }
           catch (IOException e){
          System.out.println("Error: " + e);
     public void readJobNumber(int JobNumber) {
                   StringWriter sw = new StringWriter();
                   PrintWriter pw = new PrintWriter(sw);
          try {
               //URL ftpUrl = new URL("ftp://j-charles:[email protected]/jobNumber.dat");
                        //InputStream inFile = ftpUrl.openStream();
               URL ftpUrl = new URL("ftp://jim:evvcece@/jobNumber.dat");
                       InputStream inFile = ftpUrl.openStream();
               BufferedReader in   = new BufferedReader (new InputStreamReader (inFile));
               String line = null;
               while ((line = in.readLine()) != null) {
               System.out.println(line);         }
               in.close();
               catch (IOException e) {
                     System.out.println("Reading Job number error " + e);} // catches IO exception
     public void writeJobNumber(int JobNumber) {
          try {
               URL ftpUrl = new URL("ftp://j-charles:[email protected]/jobNumber.dat");
                       URLConnection conn = ftpUrl.openConnection();
               conn.setDoOutput(true);
                       OutputStream out = conn.getOutputStream();
               System.out.println("writing job number" + jobNumber);
                       PrintWriter writer = new PrintWriter(out);
                       System.out.println("Writing to ftp");
               writer.print(jobNumber);
               writer.print('\n');
                       writer.close();
               out.close();
               catch (IOException e) {
                     System.out.println("Job number error " + e);} // catches IO exception
     public void paint(Graphics g){
          if (dataEntry == true){
               System.out.println("Calling paint");
               g.setFont(dataDisplay);
               g.drawString("Our allocated " + detailsOutput[position] + " will contact you within 24 hrs", 10,200);
               g.drawRect(0,260,650,50);
               g.drawString("Your details are as follows:", 10,280);
               g.drawString(nameOutput, 10,300);
               g.drawString(telephoneOutput, 200,300);
               g.drawString(emailOutput, 400,300);
               g.drawString( "Job#" + jobNumber, 10,400);
               g.drawString("Authorisation Code:- " + authorisationCode, 200,400);
               g.setFont(formEntry);
               g.drawString("Please keep note of the job number and authorisation code to enable you to use the job tracker screen.",10,450);
          dataEntry = false;
}

Web Forms and Security

Similar Messages

Maybe you are looking for