It's all about the answers!

Ask a question

How to secure contents in HTML widget?


Taki Nakajo (1.1k2846) | asked Aug 26 '14, 3:36 a.m.
How to secure contents in HTML widget?  What is the best place to store the contents?

One of customer has realized this is not secure, everyone can access to the contents by https://RTCSERVER/xxx/xxx/xyz.png without RTC logon.

1. The file abc.htm and xyz.png are placed on [RTC server install dir]/tomcat/webapps/ROOT/xxx/xxx/.
2. Create HTML widget to link a file.
3  Put HTML source is like:
<center>
   <p class="resizeimage">
      <a _blank="" href="https://RTCSERVER/xxx/xxx/abc.htm" target="_blank">
      <img height="100%" src="https://RTCSERVER/xxx/xxx/xyz.png" width="100%">
      </a>
   </p>
</center>




Comments
Taki Nakajo commented Aug 26 '14, 8:34 p.m.

sample  


Taki Nakajo commented Aug 26 '14, 8:36 p.m.

Simply my question is how to do this widget?  Where is the image file stored?



Taki Nakajo commented Aug 27 '14, 7:18 a.m.

i'd like to ask the Jazz Collaborative ALM project admin HOW TO create the "CLM Maintenance Releases widget". 

2 answers



permanent link
Taki Nakajo (1.1k2846) | answered Sep 01 '14, 2:59 a.m.
 I worked out by myself.

In a HTML viewlet, add the following work item's attachment link as a image.
https://jazz.net/jazz
/service/com.ibm.team.workitem.common.internal.rest.IAttachmentRestService/itemName/com.ibm.team.workitem.Attachment/199261/


permanent link
Donald Nong (14.5k414) | answered Aug 26 '14, 11:22 p.m.
In this case, the security measure is provided by the web applications, such as JTS, CCM and etc. If you want the resources to be safeguarded by such a security measure, the resources have to be within the context of the web application. If the resources are located as described above, they are clearly out of the context of any web applications running on the Tomcat server, and you will need to rely on Tomcat's own security management, which is most likely different from CLM and not what you want.
To get something similar to the jazz.net widget you posted, you probably need to do something like this (images and other files are packaged together in the viewlet).
https://www.ibm.com/developerworks/rational/library/10/createdashboardviewletsinrationalteamconcert/index.html

Comments
Taki Nakajo commented Aug 27 '14, 7:20 a.m.

This is why I am asking the Jazz Collaborative ALM project admin HOW TO create the "CLM Maintenance Releases widget".

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.