Focal Point Banner


As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.

Join the TIBCO Community
TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.

  • From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
  • Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
  • Request access to the private WebFOCUS User Group (login required) to network with fellow members.

Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.


Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [SOLVED] How to create a PROTECTED variable that user can't change?

Read-Only Read-Only Topic
Go
Search
Notify
Tools
[SOLVED] How to create a PROTECTED variable that user can't change?
 Login/Join
 
bug
Platinum Member
posted
Here is the case: once the user logon to the webfocus system, a fex will pickup his ID and compare against the database to load his access group, and store the group level into a variable. If I use &VAR, a user can easily change it by passing &VAR=xxx from the URL. Is there a way to create a variable that can only set by fex once, and never change again during the user session?

Thanks.

This message has been edited. Last edited by: Kerry,


7.66 and 7.704
System: Windows / AIX / Linux
Output: Mostly HTML, with some PDF, Excel and Lotus(!)
 
Posts: 147 | Location: Toronto (GTA) | Registered: May 25, 2005Report This Post
GinnyJakes
Expert
posted Hide Post
Bug,

Please update your user profile signature with your products, releases and platforms. It would be much easier to answer this question if we knew what your environment was.

Is this MRE or self-service? If self-service, is the reporting server running secure? Are there default credentials stored in the WebFOCUS client for the server?

Please advise.


Ginny
---------------------------------
Prod: WF 7.7.01 Dev: WF 7.6.9-11
Admin, MRE,self-service; adapters: Teradata, DB2, Oracle, SQL Server, Essbase, ESRI, FlexEnable, Google
 
Posts: 2723 | Location: Ann Arbor, MI | Registered: April 05, 2006Report This Post
bug
Platinum Member
posted Hide Post
I'm new to this client. This is what I know:

1. It is self-service, not MRE. What do you mean by "running secure"?

2. Each user has his own id and password setup in webfocus. There is no common service ID.


7.66 and 7.704
System: Windows / AIX / Linux
Output: Mostly HTML, with some PDF, Excel and Lotus(!)
 
Posts: 147 | Location: Toronto (GTA) | Registered: May 25, 2005Report This Post
<JG>
posted
There are several methods of forcing a variable to take a specific value

The best in your particular case is to use the site profile site.wfs

create a focexec eg. security.fex in baseapp that contains the code you use
to manage your variables and add the line

_site_profile=-INCLUDE SECURITY

to site.wfs, in later releases you can use the admin console but you will need to do it
manually.

This will allow you to overide and variables coming from the browser.
In later releases you can protect variable by giving them a prtected status in site.wfs
but that is not an option in 4.x

You will need to restart your application server and WebFocus
 
Report This Post
  Powered by Social Strata  

Read-Only Read-Only Topic

Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [SOLVED] How to create a PROTECTED variable that user can't change?

Copyright © 1996-2020 Information Builders