Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » BIRT » Hiding the XML
Hiding the XML [message #693488] Wed, 06 July 2011 10:54 Go to next message
marc.marshall is currently offline marc.marshall
Messages: 30
Registered: June 2011
Member
Is there any way to hide the XML source from the user? Currently if I am running Birt on a server I am able to enter the path of the report example "//localhost:8080/birt-viewer/report/fleet_vendor_report.rptdesign" and it will display the XML source. The datasource and Query is displayed in the XML so this is a security risk at my company. Is there any way to hide the XML or (datasource and dataset) information from being viewed?
Re: Hiding the XML [message #693572 is a reply to message #693488] Wed, 06 July 2011 15:17 Go to previous messageGo to next message
Eclipse User
Originally posted by: Donkey Hottie

6.7.2011 17:54, forums-noreply@eclipse.org kirjoitti:
> Is there any way to hide the XML source from the user? Currently if I
> am running Birt on a server I am able to enter the path of the report
> example
> "//localhost:8080/birt-viewer/report/fleet_vendor_report.rptdesign" and
> it will display the XML source. The datasource and Query is displayed
> in the XML so this is a security risk at my company. Is there any way
> to hide the XML or (datasource and dataset) information from being viewed?

GOOD CATCH!

I find no other way currently than just protect that URL with your
Access Manager. Your company should have an Access Manager!

--

If your life was a horse, you'd have to shoot it.
Re: Hiding the XML [message #693573 is a reply to message #693488] Wed, 06 July 2011 15:24 Go to previous messageGo to next message
Eclipse User
Originally posted by: Donkey Hottie

6.7.2011 17:54, forums-noreply@eclipse.org kirjoitti:
> Is there any way to hide the XML source from the user? Currently if I
> am running Birt on a server I am able to enter the path of the report
> example
> "//localhost:8080/birt-viewer/report/fleet_vendor_report.rptdesign" and
> it will display the XML source. The datasource and Query is displayed
> in the XML so this is a security risk at my company. Is there any way
> to hide the XML or (datasource and dataset) information from being viewed?

I keep my reports in a separate WAR, say a "program", and in it's
WEB-INF/reports folder.

I pass the parameter to BIRT-viewer as
.../program/WEB-INF/report.rptdesign (I have set the security in birt
web.xml so that reports can be in any folder).

I can't get the XML with browser, it just can't find it.

--

Patch griefs with proverbs.
-- William Shakespeare, "Much Ado About Nothing"
Re: Hiding the XML [message #693928 is a reply to message #693573] Thu, 07 July 2011 09:49 Go to previous message
marc.marshall is currently offline marc.marshall
Messages: 30
Registered: June 2011
Member
Thanks for the suggestion and help.

Thanks,

Marc
Previous Topic:Chart
Next Topic:Data reduction
Goto Forum:
  


Current Time: Mon Jul 28 10:24:11 EDT 2014

Powered by FUDForum. Page generated in 0.02000 seconds