dutchy0513
IS-IT--Management
Working in Crystal Reports Developer XI, with BusinessObjects XI, Release 2.
Working with a client replacing Oracle reports with Crystal Reports and have a problem passing credentials. The situation is: user places report request in Oracle application. From returned info, print request is sent via java report parameter form with session ID and credentials for ‘Reports’ user attached.
Parameters are then passed with session string using ‘Reports’ user, to access BOBJ, Infoview to run report.
Client wants to pass CurrentCEUserName to Infoview with request, and have authentication for the real versus reports user.
Basically, I proved to them that I can cut and paste the URL, use it to go to the report site, use the ‘Reports’ user to logon, and do anything I want, creating a security issue for the client – and creating my own problem!.
I have found a couple of references for formulas to set session and logon, and tried them. This one made the most sense:
Line 1: Set session("oRpt") = session("oApp").OpenReport
(“ReportPath”)
Line 2: Session("oRpt").database.tables
(1).SetLogonInfo "CurrentCEUserName",sServerName,sCurrentCEUserID,sPwd = ("")
Line 3: Session("oRpt").SQLQueryString = sSQL
session("oRpt").ReadRecords
Line 4: exit success commit;
I also tried just setting the logon, leaving out the session. Nothing works. Any ideas on what I need to do to get the logon to change when it gets to Infoview? Thanks.
Working with a client replacing Oracle reports with Crystal Reports and have a problem passing credentials. The situation is: user places report request in Oracle application. From returned info, print request is sent via java report parameter form with session ID and credentials for ‘Reports’ user attached.
Parameters are then passed with session string using ‘Reports’ user, to access BOBJ, Infoview to run report.
Client wants to pass CurrentCEUserName to Infoview with request, and have authentication for the real versus reports user.
Basically, I proved to them that I can cut and paste the URL, use it to go to the report site, use the ‘Reports’ user to logon, and do anything I want, creating a security issue for the client – and creating my own problem!.
I have found a couple of references for formulas to set session and logon, and tried them. This one made the most sense:
Line 1: Set session("oRpt") = session("oApp").OpenReport
(“ReportPath”)
Line 2: Session("oRpt").database.tables
(1).SetLogonInfo "CurrentCEUserName",sServerName,sCurrentCEUserID,sPwd = ("")
Line 3: Session("oRpt").SQLQueryString = sSQL
session("oRpt").ReadRecords
Line 4: exit success commit;
I also tried just setting the logon, leaving out the session. Nothing works. Any ideas on what I need to do to get the logon to change when it gets to Infoview? Thanks.