Question
Rules cube
CA
Last activity: 29 Jul 2015 11:10 EDT
Open PDF's placed in a folder securely.
Hello,
We have PDF's stored in a seperate directory in Server. In order to open PDF below is the approach we followed.
"Using the requestor URI we are forming the URL to open the PDF. But this not secured because URL can be modified with new file and open directly from external world."
Is there any other way to open PDF's securely.
System Configuration details
PRPC 6.3 SP1
Weblogic 10.3
Any suggestions please.
Thanks in advance.
Thanks,
Madhu
Accepted Solution
Rules cube
CA
Thanks Santanu, for your reply and suggestion. i am not sure if we can directly implement provided solution using OOTB features.
Solution we have implmented
Instead of using OpenURLinNewWindow action, i used launch harness and included section which has below jsp code. this solved our problem.
This approach opens PDF in secured way through PRServelt. And PRServlet takes care of authentication.
Below is jsp code used in section.
<!DOCTYPE html>
<html>
<head>
<script type="text/javascript">
<%
ClipboardPage ContentPage = tools.findPage("PageName");
String path= ContentPage.getProperty("PropertyName").getStringValue();
%>
</script>
</head>
<body>
<embed src="<%=path%>" width="950" height="650">
</embed>
</body>
</html>
Pegasystems Inc.
IN
Hi Madhu,
You can think of making the PDF password protected . I just searched in google and found some handy documents which talks about how you can make a pdf file password protected.
If that is not possible, then you need to mask your URL in order to make sure that the file names cant be twigged by hackers. This method is called " URL obfuscation "
URL obfuscation is an encoding technique that scrambles the characters in a URL or query string as a security measure, to make the URL contents less easily interpreted by people or HTTP "sniffers" .Process Commander includes a JavaScript package SafeURL to convert obfuscated URLs to and from an XML name-value pair. For information on the functions in this package, select Help > APIs > Desktop > SafeURL from the Designer Studio menus.
Accepted Solution
Rules cube
CA
Thanks Santanu, for your reply and suggestion. i am not sure if we can directly implement provided solution using OOTB features.
Solution we have implmented
Instead of using OpenURLinNewWindow action, i used launch harness and included section which has below jsp code. this solved our problem.
This approach opens PDF in secured way through PRServelt. And PRServlet takes care of authentication.
Below is jsp code used in section.
<!DOCTYPE html>
<html>
<head>
<script type="text/javascript">
<%
ClipboardPage ContentPage = tools.findPage("PageName");
String path= ContentPage.getProperty("PropertyName").getStringValue();
%>
</script>
</head>
<body>
<embed src="<%=path%>" width="950" height="650">
</embed>
</body>
</html>