Subscribe via RSS
Toggle Submenu
  1. Categories
  2. Recent
  3. Tags
View Replies (2)

Resolved Ribbon Bar and XML file deployment

  1. How-to
0
Votes
Undo
  1. Sanjay B
    Sanjay B
  2. PowerBuilder
  3. Wednesday, 2 June 2021 04:49 AM UTC

In the Ribbonbar Builder, it generates XML file with names of events to trigger on Clicked event. How is this XML file deployed if users could change the event names by editing the XML file to access windows that they may not have access to? They could guess window names such as w_employee, w_department, etc.

Connect to TFS server as my Source control when it...
Import txt to dw
Responses (2)
Mark Lee @Appeon
Mark Lee @Appeon Accepted Answer Pending Moderation
  1. Thursday, 3 June 2021 05:32 AM UTC
  2. PowerBuilder
  3. # 1

Hi Sanjay,

 

For your issue, you can refer to the following link for the detail.

https://docs.appeon.com/pb2019r3/pbug/ch04s04.html#d0e23714

Normally, we suggest you put this XML file into a specified location where the PowerBuilder executable application is deployed at the client end.

 

You can also refer to these links below to dynamically modify the related Ribbon bar properties via the functions like GetItemByTag function of the Ribbon bar control.

https://community.appeon.com/index.php/qna/q-a/ribbonbarcategoryitem-visible-property 

https://docs.appeon.com/pb2019r3/powerscript_reference/ch02s04s274.html

The GetItemByTag and GetItem functions can be used to get items including ApplicationButton, TabButton, Category, Panel, Group, LargeButton, SmallButton, CheckBox, and ComboBox; but cannot get RibbonMenuItem, RibbonApplicationMenu, and RibbonMenu.

 

BTW, you can also try to download this PowerBuilder-RibbonBar-Example to experience the Ribbon bar related functionalities.

This example shows you how to replace an application menu with a RibbonBar using the 2019 R3 version. For more information, check the tutorial How to Replace an Application Menu with a RibbonBar.

 

Regards,

Comment
Sanjay B
  1. Sanjay B
  2. Thursday, 3 June 2021 21:34 PM UTC
Since the XML file has Clicked event names for menu items, how can we stop others from manipulating the XML file Clicked event names from accessing unauthorized areas of the application by just modifying the XML file? I'm wondering about event names that can be guessed like employee, department, etc.
  1. Helpful
Mark Lee @Appeon
  1. Mark Lee @Appeon
  2. Friday, 4 June 2021 07:55 AM UTC
Hi Sanjay,



Have you downloaded the demo to experience it yet? In the demo, it shouldn’t have the problem you mentioned.



The ribbon item controls have no event and must be bound with user events.

https://docs.appeon.com/pb2019r3/pbug/ch04s04.html#_Important_notes

Different ribbon controls have different requirements on the number of parameters and types of the user event. For how to define the Clicked user event for ribbon controls, see Clicked in PowerScript Reference.

https://docs.appeon.com/pb2019r3/objects_and_controls/ch03s48.html



If you are afraid that the XML file could have been modified, you can load the XML string using the ImportXML function, no need to use the XML file. In this way, you don’t need to deploy the XML file, so you don’t have to worry about it being modified.

You can refer to the following link for detail.

https://docs.appeon.com/pb2019r3/powerscript_reference/ch02s04s378.html



Regards,
  1. Helpful
There are no comments made yet.
Sanjay B
Sanjay B Accepted Answer Pending Moderation
  1. Monday, 7 June 2021 02:26 AM UTC
  2. PowerBuilder
  3. # 2

I was worried about Enabled, Visible too that the user could manipulate inside the xml file to access unauthorized areas of the app but importxml seems like a safe option.

Is Ribbon bar control is integrated with PFC?

Comment
Chris Pollach @Appeon
  1. Chris Pollach @Appeon
  2. Monday, 7 June 2021 02:30 AM UTC
Hi Sanjay;

I don't believe that the PFC has any idea what a Ribbon Bar is.

Regards ... Chris
  1. Helpful
There are no comments made yet.
  • Page :
  • 1


There are no replies made for this question yet.
However, you are not allowed to reply to this question.