Please help with security issue 2

[CRuser89]

Hello everyone,

There is a web application that I run which has crystal reports and is viewed with a crystal reports viewer. When I close out of the application and browser completely, then open a new browser, go to the View menu -> explorer bar -> history, I can still pull up the viewer and see the previous report data. Is there anyway to fix this so that this information is not displayed in the history?

Thanks,
Tracy

 

[Turkbear]

Hi,Do you require a login to run the report? If not, then anyone who can find that URL can run it..







To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[CRuser89]

Hello Turkbear. Thank you for the prompt response. There is only a password required when logging into the application but no password required for the reports themselves. Are there any settings in CR that can be used to prevent this?

Thanks,
Tracy

 

[synapsevampire]

You need to provide a log out in the app.

As with this site, close the app, then paste the url in again, you've been cookied and it will bring you right back without a login.

Closing a web app does NOT sign you out.

-k

 

[Turkbear]

Hi,
With CE10, If there is no security In CE itself ( that is the 'everyone' group has 'view on demand' permission on the report) then anyone who has the URL will be able to run the report with no authentication needed.
How does the app call the report?






To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[CRuser89]

Hello Turkbear,

I'm not too famliar with the backend of the application so I wouldn't be able to tell you how it calls the report.

We're using CR 9.

Thanks,
Tracy

 

[Turkbear]

Hi,
Actually I mis-spoke about the ease of running the report without logging in..Even with the settings I stated, the URL would need to include the apsname and apsauthtype parameters to avoid a login screen..

What is the URL that ends up in your History ?
( for security, change the server address before posting it)







To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[CRuser89]

Hi Turkbear,

The URL is as follows:

http://testserver/Reports/Report_1....mptEx6=&promptEx7=111111&promptEx8=1:11:17 PM

Thanks,
Tracy

 

[Turkbear]

Hi,
Ah,I forgot this is CR not CE.

Not sure if anything can prevent anyone ( with access to the server and to this URL) form running the report..





To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[CRuser89]

Thanks for all your help, TurkBear!