Limiting a eB Web Application for public Use.

We are wanting to create a web application that is safe to deploy in the DMZ.  The main use will be so that predifined quicklinks will be able to access a set document class.  We have done the following to make the web application more secure in the DMZ.

  1. We have set the web config to AutoLogin in with a defined user that only has access to view the set document class.
  2. We have removed all of the eb.PlugIn references except the following
  3.         <add class="eB.PlugIn.DocumentManager.PlugIn" assembly="eB.PlugIn.DocumentManager" />
            <add class="eB.PlugIn.CoreObjects.PlugIn" assembly="eB.PlugIn.CoreObjects" />
            <add class="eB.PlugIn.Core.PlugIn" assembly="eB.PlugIn.Core" />
            <add class="eB.PlugIn.QuickLink.PlugIn" assembly="eB.PlugIn.QuickLink" />
  4. We have deleted the Login.aspx page
  5. We have deleted delete.aspx from …\PlugIns\DocumentManager\Shared

What else can we do to the web application to make it more secure?

I also had the following questions about the quicklink output.

  1. Is it possible to keep the Actions Frame from even displaying when using a quicklink or a web application?
  2. If 1 is not possible it possible to remove the action items in Red from displaying in the Actions Frame of a web application.
  3. If 2 is not possible is it possible to limit the functionality highlighted in red from being possible through permissions and security.  The one that I am having difficulty limiting is "Add Note".

Thanks for your help in advance.

 

Parents Reply
  • Hello Alex

    You can change text message of this error and title by navigating to C:\inetpub\wwwroot\YourSite\App_GlobalResources and modifying QuickLink.resx file. You need to modify values for properties ‘NotFound’ and for ‘EitherObjectLinkedTobeDelete~’. As in screenshot below, change text which is marked in red boxes.

     

    As for hyperlink, navigate to C:\inetpub\wwwroot\YourSite\Search and in text editor open QuickLink.aspx . Locate line   <p><asp:HyperLink runat="server" ID="msg" NavigateUrl="~/" Target="_top" Text="<%$ Resources:QuickLink,ClickThisLinkToReturnToeB %>" /></p> and delete it . In same place add new line:  <p><asp:HyperLink id="link1" runat="server" Text="TEST Hyperlink" NavigateUrl="http://www.bentley.com" /></p>

    Modify value of Text (TEST Hyperlink) and NavigateUrl (http://www.bentley.com) accordingly to your requirements.

    Before making any changes don't forget to create backup.

    Cheers

    Gintautas



    Answer Verified By: Carma De Villiers 

Children
No Data