dbTalk Databases Forums  

Reports Security info in url

comp.databases.oracle.tools comp.databases.oracle.tools


Discuss Reports Security info in url in the comp.databases.oracle.tools forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
papalphaus@yahoo.com
 
Posts: n/a

Default Reports Security info in url - 06-08-2007 , 10:50 AM






We are running/displaying our reports from forms with a
'web.show_document' command. This brings up Adobe with the userid/
password@instance name (expressed in hex) included in the url. When
we then tell Adobe to email this report it puts the url with the
userid@instance name in ASCII in the subject line of the email. Is
there a way we can still generate the report without the user info and
instance name being part of the url?
Product information is:
Built using:
Forms [32 Bit] Version 10.1.2.0.2 (Production)
Oracle9i Enterprise Edition Release 9.2.0.7.0 - Production
With the Partitioning option
JServer Release 9.2.0.7.0 - Production
Oracle Toolkit Version 10.1.2.0.2 (Production)
PL/SQL Version 10.1.0.4.2 (Production)
Oracle Procedure Builder V10.1.2.0.2 - Production


The actual command we are using is:
web.show_document ('/reports/rwservlet?' || l_repurl, '_blank');

Where the l_repurl variable equals= 'server=' || l_reportserver ||
'+report=' || lv_report_path ||LOWER (p_repname) || '.rep'||
'+destype=CACHE' || '+' || l_userid || '+paramform=no' ||
'+desformat=PDF';

And the l_userid variable contains the username/
password (AT) connect_string (DOT)


Reply With Quote
  #2  
Old   
Frank van Bortel
 
Posts: n/a

Default Re: Reports Security info in url - 06-08-2007 , 01:58 PM






-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

papalphaus (AT) yahoo (DOT) com wrote:
Quote:
We are running/displaying our reports from forms with a
'web.show_document' command. This brings up Adobe with the userid/
password@instance name (expressed in hex) included in the url. When
we then tell Adobe to email this report it puts the url with the
userid@instance name in ASCII in the subject line of the email. Is
there a way we can still generate the report without the user info and
instance name being part of the url?
Product information is:
Built using:
Forms [32 Bit] Version 10.1.2.0.2 (Production)
Oracle9i Enterprise Edition Release 9.2.0.7.0 - Production
With the Partitioning option
JServer Release 9.2.0.7.0 - Production
Oracle Toolkit Version 10.1.2.0.2 (Production)
PL/SQL Version 10.1.0.4.2 (Production)
Oracle Procedure Builder V10.1.2.0.2 - Production


The actual command we are using is:
web.show_document ('/reports/rwservlet?' || l_repurl, '_blank');

Where the l_repurl variable equals= 'server=' || l_reportserver ||
'+report=' || lv_report_path ||LOWER (p_repname) || '.rep'||
'+destype=CACHE' || '+' || l_userid || '+paramform=no' ||
'+desformat=PDF';

And the l_userid variable contains the username/
password (AT) connect_string (DOT)

Yes - you can hide it - see docco/Metalink - it's
been a while since I saw it, can't exactly tell where.

- --
Regards,
Frank van Bortel

Top-posting is one way to shut me up...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)

iD8DBQFGaabhLw8L4IAs830RAixsAJ9RPG8imK0zmfxEt8xvkW 46p62eBQCePMWx
MYoBF8jSEnYVahSFMwIbzRM=
=IDc/
-----END PGP SIGNATURE-----


Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.