General

Re: Security problem

Abhishek — Tue, 13 Jun 2006 14:21:36 GMT

Hi Liorlankri,
Check out this link.It will be help ful.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ipsdk/html/ipsdkSignedFormTemplate_HV01120501.asp

regards,
Abhishek
L&T INFOTECH

Re: Security problem

Kalyan Gaddam — Tue, 13 Jun 2006 08:55:53 GMT

Hello

You can ask them to digitally sign the form using Code signing certificates

Re: Security problem

liorlankri — Tue, 13 Jun 2006 07:54:20 GMT

O.k! I understand that I need to give form "Full Trust" security level. Is that true that I because this "Full Trust" level I will need to install the form ON EACH machin in the costumer's organization???

I want to avoid this operation. I want to put the form's template (.xsn) only on the main server.

What should I do?

Re: Security problem

Kalyan Gaddam — Mon, 12 Jun 2006 08:00:57 GMT

When you call a webservice, you are making a network call. As a result cross domain rules come into effect to prevent data being sent to an undesirable location. Template using domain security level restricts access to InfoPath webservice adapters and certain COM objects such as XMLHTTP object.

A fully trusted form can access cross domain data

For more details on this please refer the chapters Webservices and Security in the book "Developing Solutions with Microsoft Infopath" by Patrick Halstead

Security problem

liorlankri — Mon, 12 Jun 2006 07:26:35 GMT

I have for that contain Data Connection to a Web Service.

When I publish the form as it is and open it I get error of "Access denied" (to the web service).
It's work only if I give the form Full Trust Security level (operation that force me to make MSI file of the form or to sign it with certificate)

Why it's happen? can I avoid Full Trust Security???