Major Security Issue

[elyse]

Hi,

I've been beating my head against the wall all day.

I have 30 forms that I've created and published on one central (partitioned)
server. The security level for each form is set to Domain security. The
share folder, on the central server is shared/read-only and is mapped to
other test PC's.

When I try to open one of the forms(located on the central server) from a
test PC I get a message that says:

"Insufficient Security Privilegeds - Form could not be opened because it
requests Domain Security level and is only allowed Resitricted Security
Level.......Based on the information in the file, the form should be located
at ///D:\Published_Forms...In order to open with the correct security level"

I have published these forms (*.XSN files) many times to the same location
noted in the above error message. I can't find the XML files (Maybe they're
hidden). Can anyone tell me why I can't open these forms from other PC's?

Thanks in advance for your help

 

[Kalyan Reddy]

Hello,

Please check for the Security level of the form
Go to Tools|FormOptions| Click on the Security tab of the Form options
dialog box
If it is restricted,Form cannot access the content outside the form and has
difficulty opening. Change that to Domain Level So that the Form can be
accessed in the Domain (from all the machines which belong to the same domain)

I hope this helps you.

 

[elyse]

Hi Kalyan,

All of the forms are set to Domain Security. However, the users will log
into a different domain(JCO), but the drive of the central server(Domain
JCOW) will be mapped to each users PC. That way the user can click on the
drive/shared folder and select the needed form.

Is there a way to share the forms without having to do certificate
signing(Full Trust), but will allow access to the forms that will be located
on a server in a different domain (JCOW)?

Thanks again for your help

 

[Kalyan Reddy]

Hello,

One way I can think of is by sending the Reg form packages. Create an MSI of
the form and users can access this MSI and install on their machines and can
then fill out the forms. They dont have to Sign any certificates in this case.

Read the link below and also the links inside
http://www.infopathdev.com/forums/topic.asp?TOPIC_ID=2663

I hope this will help you.

 

[Kalyan Reddy]

Hello,

Read this link also
http://www.infopathdev.com/forums/topic.asp?TOPIC_ID=1299

 

[elyse]

Hi Kalyan,

I've registered my form using the regform syntax. When I open the folder
where the form is located, I see a .JS and .BAK file. I click on the .JS
file and register the form on the local/central server. When I go to a test
PC to open the form, I get a message that says:

" InfoPath Cannot Open a New Blank Form Form template:
file:///\\eoir-forms01\New_Published_Forms\Template3.xsn
The form template is trying to access files and settings on your computer.
InfoPath cannot grant access to these files and settings because the form
template is not fully trusted. "

However, when I open the form in Design mode and look at Form
Options/Security, it shows the form as being fully trusted.

Am I doing something wrong?

Thanks

 

[elyse]

Also, When I try to register the template on a test PC I get a message that
says something like:

Error occured while trying to register.....Template:.....Can't be registered
becuase the URL is not local.

Thanks for you help.