1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
<html dir="ltr"><head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
<META HTTP-EQUIV="assetid" CONTENT="HV01109283"><META NAME="lcid" CONTENT="1033"><title>About security and deployment </title><link rel="stylesheet" type="text/css" href="office10.css"><script type="text/javascript" language="Javascript" src="ExpCollapse.js"></script><script type="text/javascript" language="JavaScript" src="inline.js"></script></head><body><p id="ExpandAllLine" class="ExpFav"><a href="#" onclick="ExpandAll()" onkeypress="ExpandAll()" class="DropDown"><img id="picHeader" border="0" src="expandtri.gif" alt="Show All"><span id="ExpandAll">Show All</span></a></p><h1>About security and deployment </h1><div class="ofvbanav"><span class="ofvbanavreuse" id="seealso" onclick="toggleList()" onkeypress="toggleList()"></span><span class="ofvbanavreuse" id="specifics" onclick="toggleList()" onkeypress="toggleList()"></span></div><p>Additional security features and deployment functionality have been added to Microsoft Office InfoPath 2003 in Service Pack 1. Support has been added to allow form templates to be moved from one location to another or sent as an attachment to an e-mail message. In addition, support has been added to the InfoPath design mode to facilitate the creation and deployment of fully trusted forms.
</p><p><h2>Security
levels</h2></p><p> Form templates can have one of three different security levels, depending on where the form is located. These security levels are as follows:
<p><a href="#" class="DropDown" onclick="Outline2()" onkeypress="Outline2()"><img border="0" src="blueup.gif" alt="Show">Restricted</a></p><div id="ExpCol" class="collapsed" border="0">The Restricted security level does not permit any communication outside of the form template. This security level is intended to prevent harmful forms from transmitting any data from your computer to a malicious attacker. When running in this security mode, the following features will not work:
<ul><li>Custom Task Pane
</li><li>Data Connections (except e-mail submit)</li><li>ActiveX Controls
</li><li>Managed Code</li><li>Roles</li><li>Workflow</li></ul>
</div></p><p><a href="#" class="DropDown" onclick="Outline2()" onkeypress="Outline2()"><img border="0" src="blueup.gif" alt="Show">Domain</a></p><div id="ExpCol" class="collapsed" border="0">The Domain security level restricts a form to a particular Internet zone. The form is allowed to communicate with other data inside its own domain but is not permitted to retrieve data from other domains. </div><p><a href="#" class="DropDown" onclick="Outline2()" onkeypress="Outline2()"><img border="0" src="blueup.gif" alt="Show">Full Trust</a></p><div id="ExpCol" class="collapsed" border="0">The Full Trust security level allows you to run a form with full trust on the computer where the form will be used. This security level can only be used when working with a signed form with a signature that matches a trusted root publisher on your computer or by installing the form and setting the <b class="bterm">requireFullTrust</b> attribute to "yes". By using this setting, you can access object model calls such as file save, and you can disable certain security prompts that appear when running at a more restrictive security level. </div><p><b>Note</b> All forms generated in the InfoPath designer have a security level associated with them. InfoPath will attempt to open forms at their associated security level. If the security level associated with the form is higher than the security level that can be granted to it, the form will not open.</p><p>Forms are granted security levels based on the location from which the form was opened. For more information, see the <b class="bterm">Trust levels</b> section.</p><h2>Trust levels</h2><p>The highest level of trust granted to a form template is determined by the "cached from" location (that is, where the form is cached from) and other verification code, as described in the following table. The attributes listed in the table (for example, HTTP, UNC, <b class="bterm">requireFullTrust</b>) are cache-based entries that are used to determine the level of trust granted to a form.</p><table><tr><td></td><th>Trust Level Granted</th><th>Trust Level Granted</th><th>Trust Level Granted</th><th>Trust Level Granted</th><th>Trust Level Granted</th></tr><tr><th>Highest Level of Trust Granted </th><th>Full Trust</th><th>Client Computer (Sandboxed)</th><th>Intranet (Sandboxed)</th><th>Internet (Sandboxed)</th><th>Restricted</th></tr><tr><th>file: LocationId=CachedFromLocation</th><td> </td><td>X</td><td> </td><td> </td><td> </td></tr><tr><th>file: LocationId<>CachedFromLocation or no LocationId (regardless of where the form came from)</th><td> </td><td> </td><td> </td><td> </td><td>X</td></tr><tr><th>CachedFromLocation: Intranet HTTP or HTTPS</th><td> </td><td> </td><td>X</td><td> </td><td> </td></tr><tr><th>CachedFromLocation: Internet HTTP or HTTPS</th><td> </td><td> </td><td> </td><td>X </td><td> </td></tr><tr><th>CachedFromLocation: UNC</th><td> </td><td> </td><td>X</td><td> </td><td> </td></tr><tr><th>Installed Template (requireFullTrust="yes")</th><td>X</td><td> </td><td> </td><td> </td><td> </td></tr><tr><th>Installed Template (requireFullTrust="no")</th><td> </td><td>X</td><td> </td><td> </td><td> </td></tr><tr><th>Template with trusted publisher certificate</th><td>X</td><td> </td><td> </td><td> </td><td> </td></tr><tr><th>Extracted Form Files</th><td> </td><td>X</td><td> </td><td> </td><td> </td></tr></table><p>All form files opened in the InfoPath editor are bound by a set of conditions that determine the security level in which the form will open and whether it will open. When an InfoPath form is opened in the editor, it will either be opened with an appropriate security level, or it will fail to load. If a form requests a higher security level than it can be granted (a form can request a specific security level using the <b class="bterm">trustLevel</b> or <b class="bterm">requireFullTrust</b> attribute), it will not be permitted to load. Otherwise, it will be loaded with the security level it requests.
If the form template is not permitted to open with the requested security level, the user will not be able to open the form and will receive the "Insufficient Security Privilege Warning" error message.
</p><p>The following table describes the conditions required for opening a form at each security level and the resultant behavior when the user attempts to open the form:
</p><table><tr><td></td><td></td><th>Form asks for:</th><th>Form asks for:</th><th>Form asks for:</th></tr><tr><td></td><th>Editor Opens/Fails</th><th>Full Trust (requireFullTrust="yes")</th><th>Domain Trust (trustLevel="Domain" or blank)</th><th>Restricted (trustLevel="Restricted")</th></tr><tr><th>Highest trust level InfoPath can grant based on evidence</th><th>Trusted (installed or trusted certificate)</th><td>Editor opens at Full Trust level</td><td>N/A</td><td>N/A</td></tr><tr><th>Highest trust level InfoPath can grant based on evidence</th><th>Domain Trust: Client Computer</th><td>Fails to open</td><td>Editor opens at Domain level</td><td>Editor opens at Restricted level</td></tr><tr><th>Highest trust level InfoPath can grant based on evidence</th><th>Domain Trust: Intranet</th><td>Fails to open</td><td>Editor opens at Domain level</td><td>Editor opens at Restricted level</td></tr><tr><th>Highest trust level InfoPath can grant based on evidence</th><th>Domain Trust: Internet</th><td>Fails to open</td><td>Editor opens at Domain level</td><td>Editor opens at Restricted level</td></tr><tr><th>Highest trust level InfoPath can grant based on evidence</th><th>Restricted</th><td>Fails to open</td><td>Fails to open</td><td>Editor opens at Restricted level</td></tr></table><p><a href="#" class="DropDown" onclick="Outline2()" onkeypress="Outline2()"><img border="0" src="blueup.gif" alt="Show">Specifying a security level</a></p><div id="ExpCol" class="collapsed" border="0">The InfoPath designer automatically selects the appropriate security level (either Restricted or Domain) based on the features you are using in the form. The security setting is always as restrictive as possible, starting at Restricted, to ensure a greater level of protection for you and your data.
Users can manually override this automated setting to select a level of security that is more appropriate for the form by doing the following:
<ul><li>Select <b class="bterm">Form Options</b> from the <b class="bterm">Tools </b>menu.</li><li>In the <b class="bterm">Form Options</b> dialog box, select the <b class="bterm">Security</b> tab.</li><li>Deselect the <b class="bterm">Automatically determine security level</b> check box.</li><li>Select the desired security level.</li></ul></div><p><h2>Mail deployment and mobile form templates</h2></p><p>Microsoft Office InfoPath 2003 Service Pack 1 allows you to send your form templates as an attachment to an e-mail message and to move them from one location to another. Mail deployment is an easy and effective way to distribute forms for interoffice use as well as to deploy forms to remote users. </p><p><a href="#" class="DropDown" onclick="Outline2()" onkeypress="Outline2()"><img border="0" src="blueup.gif" alt="Show">Understanding form identity</a></p><div id="ExpCol" class="collapsed" border="0">All forms in the InfoPath designer are created with an identity. This information helps InfoPath associate forms with form templates in the cache and to retrieve updates to forms when they are posted to a shared location. By default, InfoPath creates two identities for form templates: a Form ID and an Access Path.
<p><b class="bterm">Form ID</b></p> The Form ID is a unique identifier based on a prefix, the form name, and the form namespace. The identifier should be a unique name that can be used to correctly associate form files with the associated form template in the client computer cache.
The Form ID is specified as the <b class="bterm">name</b> attribute in the <a href="#" class="glossary" onclick="AppendPopup(this,'xdformdefinitionfilexsf')" onkeypress="AppendPopup(this,'xdformdefinitionfilexsf')">form definition file (.xsf)</a>.<p><b class="bterm">Access Path</b></p> The Access Path is a location identifier used to determine the correct location for the form template as well as a location to receive updates. When saved or published, the location to which the form template is saved or published becomes the default Access Path.
Each time a form is opened on the client computer, the form attempts to associate itself with a cached form. It will attempt to do this in the following order:
<ol><li>Look for a fully trusted form template with a matching Form ID.</li><li>Look for a form template in the cache with a matching Access Path.</li><li>Look for a form template in the cache with a matching Form ID.</li></ol><p>Once matched, the form will open with the associated form template. In cases where the match was made with an Access Path, InfoPath will use the Access Path to retrieve updates to the form template. In this way, enterprise management of forms can be simplified. In cases where the match cannot be made, the form will fail to open.
The Access Path is specified as the <b class="bterm">publishUrl</b> attribute in the <a href="#" class="glossary" onclick="AppendPopup(this,'xdformdefinitionfilexsf')" onkeypress="AppendPopup(this,'xdformdefinitionfilexsf')">form definition file (.xsf)</a>. </p><p>Just as there are two identification properties for each form template, there is a set of heuristics to specifically determine the resulting entries in the cache, based on the condition of the form template (if it has an Access Path, a Form ID, or both) and the state of the network connection. </p></div><p><a href="#" class="DropDown" onclick="Outline2()" onkeypress="Outline2()"><img border="0" src="blueup.gif" alt="Show">Designing a form to send as an attachment to an e-mail message</a></p><div id="ExpCol" class="collapsed" border="0">All forms created in the InfoPath designer can be sent to users as an attachment to an e-mail message. E-mail deployment is an easy and effective way to distribute forms for interoffice use as well as to deploy forms to remote users.
To mail a form template to other users, do the following while in design mode:<ol><li>Select <b class="ui">Send Form as Attachment</b> from the <b class="ui">File</b> menu. (You will be required to save the form template at least once before doing this.)
</li><li>Populate the <b class="ui">To:</b> line of the e-mail message.</li><li>Send the e-mail message.</li></ol></div><p><a href="#" class="DropDown" onclick="Outline2()" onkeypress="Outline2()"><img border="0" src="blueup.gif" alt="Show"> Sharing forms by e-mail message or from a common shared location</a></p><div id="ExpCol" class="collapsed" border="0">Certain scenarios must be considered when building a form that will be deployed by e-mail message. <ul><li><b class="bterm">Will your form be updated regularly?</b> If you are developing a form that must be updated regularly, the form should be published to a shared location before it is sent to other users. This will allow you to update the form by publishing newer versions to the shared location but will also allow you to immediately distribute the form template to users who may not have access to the shared location.<p>If a form is updated and then distributed by e-mail message, users will get a cache conflict message when they try to open the new form, if they have an older version stored on their computer. The user will be prompted to choose which version they want to use. Even if the updated form is the same as the one on the user's computer, the user will get a cache conflict message and be prompted to choose which copy they want to use. The best practice to use in the latter case is to share the form using a shared location instead.</p><p></p></li><li><b class="bterm">Does your form access a data connection or use other features not supported at the Restricted security level?</b> If you are developing a form that requires Domain level security, you will need to publish it to a shared location in order for users to be able to open it. Because form templates will only open in the security level they request, forms opened directly from an e-mail message will run at the Restricted level unless they can retrieve updates from a shared location. </li></ul></div><p><a href="#" class="DropDown" onclick="Outline2()" onkeypress="Outline2()"><img border="0" src="blueup.gif" alt="Show">Compatibility</a></p><div id="ExpCol" class="collapsed" border="0">Forms built with InfoPath 1.0 will run in specific compatibility modes with InfoPath Service Pack 1. All InfoPath 1.0 forms will run in a compatibility mode that closely resembles InfoPath 1.0. </div><script type="text/javascript" language="JScript" src="ofvbanl.js"></script><span id="ofVBAISpan" class="ofvbaispan"><iframe id="ofVBAIFrame" frameborder="0" marginheight="0" marginwidth="4" scrolling="auto" width="100%" src="../links/inconAboutSecurity_HV01109283_l.htm"></iframe></span><center><a href="XMLSchemaCopyright_HV01147162.htm">©2003-2004 Microsoft Corporation. All rights reserved.</a>
Permission to copy, display and distribute this document is available at: <a
href="http://r.office.microsoft.com/r/rlidAWSContentRedir?AssetID=XT010988631033&CTT=11&Origin=HV011232471033"
target="_new">http://msdn.microsoft.com/library/en-us/odcXMLRef/html/odcXMLRefLegalNotice.asp</a></center></body></html>
|
