Project

General

Profile

Actions

Feature #6594

open

Excel: on download, check if there is a valid sip

Added by Carsten Rose about 4 years ago. Updated over 2 years ago.

Status:
New
Priority:
Normal
Assignee:
Carsten Rose
Target version:
Start date:
31.08.2018
Due date:
% Done:

0%

Estimated time:
Discuss:
Prio Planung:

Description

Um sich vor unerlaubten Zugriff zu schuetzen, kann bei 'XLS?' output getestet werden (qfq content record, special column name), ob der Aufruf via einer SIP erfolgt ist (downloads sind immer via sip encrypted):

  • Sollte die SIP nicht existieren, bricht QFQ ab.
  • Zum debuggen wird eine Excel export Seite auch direkt aufgerufen. In dem Fall ist womoeglich keine SIP in der URL. Aber dann gibt es einen BE User > die BE existenz autorisiert den Aufruf.
  • Optional: Die Erlaubnis zum Zugriff sollte nur fuer die erste _XLS? Spalte getestet werden.
  • Option: es gibt es ein Flag auf dem QFQ, der den Check ausschaltet: downloadCheckSipExist=0
Actions #1

Updated by Carsten Rose about 4 years ago

  • Description updated (diff)
Actions #2

Updated by Carsten Rose about 4 years ago

  • Tracker changed from Support to Feature
  • Description updated (diff)
Actions #3

Updated by Carsten Rose about 4 years ago

  • Subject changed from Excel: on download, check if there is a valid cookie to Excel: on download, check if there is a valid sip
Actions #4

Updated by Carsten Rose about 4 years ago

  • Target version changed from 18.9.1 to 18.9.2
Actions #5

Updated by Carsten Rose about 4 years ago

  • Target version changed from 18.9.2 to 18.10.1
Actions #6

Updated by Carsten Rose about 4 years ago

  • Target version changed from 18.10.1 to 18.10.2
Actions #7

Updated by Carsten Rose almost 4 years ago

  • Target version changed from 18.10.2 to 18.10.3
Actions #8

Updated by Carsten Rose almost 4 years ago

  • Target version changed from 18.10.3 to 18.12.1
Actions #9

Updated by Carsten Rose almost 4 years ago

  • Target version changed from 18.12.1 to 141
Actions #10

Updated by Carsten Rose almost 3 years ago

  • Status changed from New to Some day maybe
Actions #11

Updated by Carsten Rose almost 3 years ago

  • Status changed from Some day maybe to New
Actions #12

Updated by Carsten Rose over 2 years ago

  • Target version changed from 141 to next8
Actions

Also available in: Atom PDF