Article Details
Id: | 19971 |
Product: | finPOWER Connect |
Type: | NEW |
Version: | 4.00.01 |
Opened: | 24/01/2023 |
Closed: | 20/02/2023 |
Released: | 20/03/2023 |
Job: | J030351 |
Portals; Allow Clients to download Account and Client Documents not belonging to the signed-in Client
Web Services security prevents Clients accessing another Client's Documents or Documents for an Account that the Client is not listed on.
However, there may be situations where a Portal needs to allow this functionality.
By encrypting the Id of the Account or Client when generating an Application Shortcut, this can be achieved, e.g.:
ApplicationShortcut = finBL.CreateApplicationShortcutDocumentManagerFile("Account", "AdviceA.PDF", finBL.HtmlWidgetUtilities.EncryptId("L10012"))
ApplicationShortcut = finBL.CreateApplicationShortcutDocumentManagerFile("Client", "LetterA.PDF", finBL.HtmlWidgetUtilities.EncryptId("C10012"))
The above example allows the generated Application Shortcuts to download a document in Account L10012's Document Manager, even if the signed-in Client isn't listed on this Account. The second example allows the Client to download a different Client's Document.