Data Access Worldwide Knowledge Base
Article Text
QUESTION:
I do not like that the user can see which webservice functions are available. I do not want the user testing the functions as it exposes information to the web that I do not want.
ANSWER:
If you enter the Webservice URL (like http://daw.examples.order11_1/TestService.wso) the content of the WSO file is processed and a service page is generated with all the available webservice function calls. To avoid this page being generated, you can modify your WSO file from:
[WebService]
Application=DAW.Examples.Order11_1
Object=oTestService
ServicePageGenerator=DefaultWebServiceHomePage.xslt
TestPageGenerator=DefaultWebServiceMethodPage.xslt
WSDLGenerator=DefaultWebServiceDescription.xslt
SoapBodyStyle=document
to:
[WebService]
Application=DAW.Examples.Order11_1
Object=oTestService
ServicePageGenerator=DisabledWebServiceHomePage.xslt
TestPageGenerator=DefaultWebServiceMethodPage.xslt
WSDLGenerator=DefaultWebServiceDescription.xslt
SoapBodyStyle=document
If you also want to hide the other pages you change the other entries to use the disabled version of the XSLT script.
[WebService]
Application=DAW.Examples.Order11_1
Object=oTestService
ServicePageGenerator=DisabledWebServiceHomePage.xslt
TestPageGenerator=DisabledWebServiceMethodPage.xslt
WSDLGenerator=DisabledWebServiceDescription.xslt
SoapBodyStyle=document
Contributed By:
Vincent Oorsprong
Company: Data Access Worldwide
email: vincent.oorsprong@dataaccess.eu
Web Site: http://www.dataaccess.eu
Email this Article
Email this Article to a Colleague
Send Feedback on this Article to Data Access Worldwide
Copyright ©2010 Data Access Corporation. All rights reserved.
| The information provided in the Data Access Technical Knowledge Base is provided "as is" without warranty of any kind. Data Access Corporation disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Data Access Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Data Access Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. |