Discussions
Categories
- 196.7K All Categories
- 2.2K Data
- 235 Big Data Appliance
- 1.9K Data Science
- 449.8K Databases
- 221.5K General Database Discussions
- 3.8K Java and JavaScript in the Database
- 31 Multilingual Engine
- 549 MySQL Community Space
- 477 NoSQL Database
- 7.9K Oracle Database Express Edition (XE)
- 3K ORDS, SODA & JSON in the Database
- 532 SQLcl
- 4K SQL Developer Data Modeler
- 186.8K SQL & PL/SQL
- 21.3K SQL Developer
- 295.4K Development
- 17 Developer Projects
- 138 Programming Languages
- 292.1K Development Tools
- 104 DevOps
- 3.1K QA/Testing
- 645.9K Java
- 28 Java Learning Subscription
- 37K Database Connectivity
- 153 Java Community Process
- 105 Java 25
- 22.1K Java APIs
- 138.1K Java Development Tools
- 165.3K Java EE (Java Enterprise Edition)
- 17 Java Essentials
- 158 Java 8 Questions
- 85.9K Java Programming
- 79 Java Puzzle Ball
- 65.1K New To Java
- 1.7K Training / Learning / Certification
- 13.8K Java HotSpot Virtual Machine
- 94.2K Java SE
- 13.8K Java Security
- 203 Java User Groups
- 24 JavaScript - Nashorn
- Programs
- 394 LiveLabs
- 37 Workshops
- 10.2K Software
- 6.7K Berkeley DB Family
- 3.5K JHeadstart
- 5.6K Other Languages
- 2.3K Chinese
- 170 Deutsche Oracle Community
- 1.1K Español
- 1.9K Japanese
- 230 Portuguese
How can I make a report viewable only once?
Currently on database 11g. Report server info says version 12.2.1.3.0 .
I noted a problem years ago that a person could view a report without logging in. At the time, we were mandated to allow a user only one session. Attempts to view a report would generate the error that the user exceeded the number of allowable sessions. Evidently, the form counted as one session and trying to display a report counted as a second session. This issue was mitigated by using a service account to display reports. The service account was not limited to 1 session. The service account username and password were on the report line within the cgicmd.dat file. So while this allowed the users to view reports, it has a side effect. Anybody could view a cached report. I could copy the url line for the report, which was along the lines of http://servername:1234/reports/rwservlet/getjobid1 (or something like that. . My syntax is probably off a bit, but you get the idea). Since the username/password was stored in the cgicmd.dat file, anybody on the network could view a cached report.
Things have changed... we are migrating to database 12c and I believe we are also migrating to forms and report 12c. The company hired contractors to convert our forms and reports and they said they fixed that issue with anybody being able to view the cached reports. However, when I test, I can still view it. The contractors are gone (insert shocked faced). The method of accessing the reports has also changed. Now the url is accessing a pdf file, http://servername:1234/forms/output/report123.pdf which I can still copy, save, and view later when I'm not logged in.
I've tried to search online using various search criteria and I'm not coming up with anything pertinent. Since I cannot fix the session/service account part of the equation, I was hoping there was a way to display a report but NOT save it to the cache. So the user could view the report one time and once they close the tab in the browser, the report is gone forever. Is this possible?
Darren
Answers
-
Try with expiration parameter:
EXPIRATION to define how long report output can exist in cache before it is deleted.
Regards
