WebUtil DLL files location with OAS v10.1.2.3 with Sun Java 1.5

Question

Question about the future Client (under MS Vista) which works with OAS.
With MS Vista on the client, the certified versions are:-
-Clientside: Sun Java 1.5_10 and above
-OAS: v10.1.2.3 (apparently to be released in March 2008)
See table and notes at
http://www.oracle.com/technology/products/forms/htdocs/10gr2/clientsod_forms10gr2.html
Our application uses Oracle Web Util 1.0.6.
When this first starts up the server attempts to copy three DLLs (jacob.dll JNIsharedstubs.dll d2kwut60.dll ) to a particular directory (eg c:\program files\oracle\J-Initiator 1.3.1.18\bin ).
This has been a problem for my company's infrastructure since that directory is not writeable for most end-users. We got round the problem by creating a script run just once by the end-user which placed the DLL files in position before application is first run. The application still tries so copy the files, and fails - but this does not matter.
In the MS Vista client envt we will have the Sun Java 1.5 client instead of the J-Initiator.
Is it clear into which directory those three DLL files will be placed with this new client-side setup?
Thanks.
Earlier related post: Webutils - controlling where jacob.dll and co are set on client
Message was edited by:
user451945

Answer 1

Hello Jacob,
Oracle itself can fix the WebUtil issue with downloading DLLs to an appropriate location. However, there's more to running a Forms application on Vista - some of which Sun needs to find a solution for:
If Vista's User Account Control (UAC) feature is activated - which it is by default and which provides additional security compared to XP - Internet Explorer runs in protected mode, i.e. the iexplore.exe process is started with a LOW integrity level. In Vista every securable operating system "object" is assigned an integrity level - process, files, directories etc. each have an integrity level which can have the values low, normal / user, high / administrator or system. Every process started by a normal user will be assigned normal / user integrity level on process creation and thus is able to access all the files to which the user has access rights. The exception to the rule is Internet Explorer which is started with a low integrity level so if any malware / Javascript / IE extension takes control over Internet Explorer it cannot access any files or directories outside of its low integrity level "jail" because process with a lower integrity level aren't allowed to access any objects which have a higher integrity level. This means any program - including the Java plugin and any applet whether signed or not - which runs inside the iexplore.exe process cannot communicate with any process the user started (think about WebUtil's OLE2 to communicate with Office applications) and it cannot download any files to a user-specified directory (think of WebUtil's download features or even client_textio). Furthermore any processes you start e.g. through WebUtil's client_host command will inherit IE's low process integrity level and thus will not be able to do anything meaningful either. The same goes for your own DLLs which run within iexplore.exe.
Java 1.6 Update N will change the Java plugin architecture so that the Java runtime will execute in its own process with a normal / user integrity level and communicate with Internet Explorer via IPC instead of running within the internet explorer process. If you need more information look at the early access release of Update N:
https://jdk6.dev.java.net/6uNea.html#Overview
I think it would help if you also opened an SR so Oracle support knows there are more customers waiting for a solution.
Best regard
Andreas
Message was edited by:
leidner