Skip to Main Content

Analytics Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

OBIEE GoURL security issue

User_9J0MSJul 13 2016 — edited Aug 17 2016

Hi Experts,

Please can anyone suggest me how I can encrypt the GO URL of OBIEE, so that OBIEE can decrypt the URL and provide me the dashboard page?

What am I trying to achieve :

I have a Java JSF Web Application in which I need to embed OBIEE report in <IFRAME> tag. I am able to display OBIEE reports. But when I right click and “view source” on the browser, any layman is eligible to get access to GO URL which is not encrypted. I am currently facing issue with regards to security.

Below is the GO URL for example : The highlighted data is to be encrypted in such a way that OBIEE, can decrypt the GO URL and retrieve the Dashboard page.

http://localhost:9704/analytics/saw.dll?dashboard&PortalPath=%2Fshared%2FSecurity%20POC%2F_portal%2FSecurity%20POC&Action=Navigate&NQUser=316837TFS&NQPassword=316837TFS&col1=%22Time%20Month%20Dim%22.%22Mo%20Month%20End%20Date%22&val1=09/30/2015

Your suggestion or any other better ideas on how we can hide valuable information in the GO URL would be so much appreciated.

Please advice.

Kind Regards,

Surya Bhadragiri

[ email address removed by Moderator (BluShadow) - Responses should be posted on the community ]

Comments

JeffJon
Have you tried updating the configuration setting for the amount of time that the message is displayed?
LarryR
James, I don't know if thiere is a way to promote your Info Bar message, but given that it may not be possible, would a pop-up window work better in this situation?
783124
Yes this is a good solution, or at least it would be if the message window were left on top, instead of the modal popup and the main window taking centre-stage again a split second later! Is there a way to keep this message window on top?

Another possible solution - do you know if it would be possible to add the message to the "LoadOptMethodVal" Option of the adapter, by passing in the message string? It would be great if the message could feature in the Target System Load modal popup. I suspect not, but it would be ideal, since this would then give the user the option of whether to proceed with the data load or not. I tried modifying the Description field, but this does not appear to feature in the modal popup.
1 - 3
Locked Post
New comments cannot be posted to this locked post.