Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

How to secure contents in HTML widget?

How to secure contents in HTML widget?  What is the best place to store the contents?

One of customer has realized this is not secure, everyone can access to the contents by https://RTCSERVER/xxx/xxx/xyz.png without RTC logon.

1. The file abc.htm and xyz.png are placed on [RTC server install dir]/tomcat/webapps/ROOT/xxx/xxx/.
2. Create HTML widget to link a file.
3  Put HTML source is like:
<center>
   <p class="resizeimage">
      <a _blank="" href="https://RTCSERVER/xxx/xxx/abc.htm" target="_blank">
      <img height="100%" src="https://RTCSERVER/xxx/xxx/xyz.png" width="100%">
      </a>
   </p>
</center>



0 votes

Comments

sample  

Simply my question is how to do this widget?  Where is the image file stored?


i'd like to ask the Jazz Collaborative ALM project admin HOW TO create the "CLM Maintenance Releases widget". 



2 answers

Permanent link
In this case, the security measure is provided by the web applications, such as JTS, CCM and etc. If you want the resources to be safeguarded by such a security measure, the resources have to be within the context of the web application. If the resources are located as described above, they are clearly out of the context of any web applications running on the Tomcat server, and you will need to rely on Tomcat's own security management, which is most likely different from CLM and not what you want.
To get something similar to the jazz.net widget you posted, you probably need to do something like this (images and other files are packaged together in the viewlet).
https://www.ibm.com/developerworks/rational/library/10/createdashboardviewletsinrationalteamconcert/index.html

1 vote

Comments

This is why I am asking the Jazz Collaborative ALM project admin HOW TO create the "CLM Maintenance Releases widget".


Permanent link
 I worked out by myself.

In a HTML viewlet, add the following work item's attachment link as a image.
https://jazz.net/jazz
/service/com.ibm.team.workitem.common.internal.rest.IAttachmentRestService/itemName/com.ibm.team.workitem.Attachment/199261/

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 12,019
× 84

Question asked: Aug 26 '14, 3:36 a.m.

Question was seen: 6,206 times

Last updated: Sep 01 '14, 2:59 a.m.

Confirmation Cancel Confirm