This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DEVELOPERS FORUM - Secure way to display vault files

Ronan - Tuesday, February 1, 2011 10:16 AM:

Hello,
 
I developed some customizations including vault files visualization. Following this forum post I simply embed a html <img> tag into my form:
"<img src='serverName/.../vaultserver.aspx + thisDb + "&amp;fileID=" + thisId + "&amp;fileName=" + thisFilename + "' />"
 
However, as mentioned in this other forum post, it only works when adding <enforce_user_credentials>0</enforce_user_credentials> to VaultServerConfig.xml , which is unsecure. Without this parameter I am returned the following error message: "The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.".
 
In order to avoid this hack to display my image, I tried digging into the “File” Form, which doesn’t need the above mentioned setting, by using top.aras.getResource("", "imports_core.loading_file") , as well as a “Load Viewer” JS method. However, my attempts to use them have been unsuccessful till now (How do these methods interact? How do I specifiy the file to view?).
 
Could anyone help me using these methods? (or any other way to properly embed a vaulted file into a form without compromising authentication)

Thanks,


Ronan - Wednesday, February 2, 2011 1:21 PM:

Aras Support acknowledged the issue, they are working on a fix for 9.3