In the Ribbonbar Builder, it generates XML file with names of events to trigger on Clicked event. How is this XML file deployed if users could change the event names by editing the XML file to access windows that they may not have access to? They could guess window names such as w_employee, w_department, etc.
-
Sanjay B
- PowerBuilder
- Wednesday, 2 June 2021 04:49 AM UTC
Comment
- Sanjay B
- Thursday, 3 June 2021 21:34 PM UTC
Since the XML file has Clicked event names for menu items, how can we stop others from manipulating the XML file Clicked event names from accessing unauthorized areas of the application by just modifying the XML file? I'm wondering about event names that can be guessed like employee, department, etc.
- Mark Lee @Appeon
- Friday, 4 June 2021 07:55 AM UTC
Hi Sanjay,
Have you downloaded the demo to experience it yet? In the demo, it shouldn’t have the problem you mentioned.
The ribbon item controls have no event and must be bound with user events.
https://docs.appeon.com/pb2019r3/pbug/ch04s04.html#_Important_notes
Different ribbon controls have different requirements on the number of parameters and types of the user event. For how to define the Clicked user event for ribbon controls, see Clicked in PowerScript Reference.
https://docs.appeon.com/pb2019r3/objects_and_controls/ch03s48.html
If you are afraid that the XML file could have been modified, you can load the XML string using the ImportXML function, no need to use the XML file. In this way, you don’t need to deploy the XML file, so you don’t have to worry about it being modified.
You can refer to the following link for detail.
https://docs.appeon.com/pb2019r3/powerscript_reference/ch02s04s378.html
Regards,
Have you downloaded the demo to experience it yet? In the demo, it shouldn’t have the problem you mentioned.
The ribbon item controls have no event and must be bound with user events.
https://docs.appeon.com/pb2019r3/pbug/ch04s04.html#_Important_notes
Different ribbon controls have different requirements on the number of parameters and types of the user event. For how to define the Clicked user event for ribbon controls, see Clicked in PowerScript Reference.
https://docs.appeon.com/pb2019r3/objects_and_controls/ch03s48.html
If you are afraid that the XML file could have been modified, you can load the XML string using the ImportXML function, no need to use the XML file. In this way, you don’t need to deploy the XML file, so you don’t have to worry about it being modified.
You can refer to the following link for detail.
https://docs.appeon.com/pb2019r3/powerscript_reference/ch02s04s378.html
Regards,
There are no comments made yet.
- Page :
- 1
There are no replies made for this question yet.
However, you are not allowed to reply to this question.
However, you are not allowed to reply to this question.
I don't believe that the PFC has any idea what a Ribbon Bar is.
Regards ... Chris