After upgrading JRE to Java 7U51, the Infoview Web Intelligence (WEBI) Java Client gives an Application Error: SecurityException: Missing required permissions manifest attribute in main jar: http://CABI:8080/AnalyticalReporting/webiApplet/ThinCadenza.jar

Document ID : KB000019085
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

Introduction

Java 7 update 51 includes two security changes designed to enhance authentication and authorization for Rich Internet Applications (Applets and Web Start).

This update mandates all RIAs that run inside a web browser need to be signed from a trusted authority and also need to set "Permissions" attribute within the manifest. As a result, all the WEBI reports throw a security warning in the form of dialog box.

Applicability

  • We are not dealing with the Java version of CABI server in all platforms

  • This problem will occur at client machine from which end user is accessing Infoview with Java 7u51 or above installed

  • This is not applicable for other CABI releases like CABI 3.2, 3.3 etc. because these releases do not support Java7 on the client side officially

Steps to reproduce

  • Login into Infoview

  • Go to Document List

  • Select any folder

  • Click New menu and then select Web Intelligence Document

  • Select any universe from which you want to create WEBI report

  • Below warning message will appear (only for the first time)

    Figure 1

If you click on Run or Cancel button, the below message will appear. For the first time it will directly display the below message without displaying the above warning message.

Figure 2

Click on Error. Click for details link to see the error

Figure 3

Click Details to see the error details

Figure 4

Solution:

On the CABI server follow the below steps

  • Login to CABI server machine as administrator

  • Download the CABI_3.3_SP1_LAFix6.0.19_Windows.zip file from ftp://ftp.ca.com/CAproducts/CABI/CABI-3.x/LAFixes and extract it to a folder

  • Stop the Tomcat7 server via the Central Configuration Manager (CCM)

  • Go to <INSTALL_DIR>\Tomcat7\webapps\AnalyticalReporting\webiApplet (e.g. C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat7\webapps\AnalyticalReporting\webiApplet)

  • Backup the following files

    • ThinCadenza.jar

    • ThinCadenza.jar.pack.gz

    • One or more ThinCadenza_XX.jar, where XX represents the language code (i.e. ThinCadenza_en.jar for English)

  • Replace the same set of files from the extracted folder along with RCThinCadenza.jar

  • Go to <INSTALL_DIR>\Tomcat7\work (e.g. C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat7\work) and remove the Catalina folder

  • Restart the Tomcat7 server via the CCM

At the client (end user) machine follow the below steps

  • Clear the JRE cache by following the below procedure

    • Go to Control Panel and open Java control panel

      Figure 5

    • In General tab click Settings button under Temporary Internet Files section

      Figure 6

    • Click Delete Files... button, it will display the below message box

      Figure 7

    • Click OK button 3 times in 3 windows to complete the JRE cache cleanup

  • Clear the IE browser cache

  • Delete Temporary Internet Files for IE browser

  • Close the IE browser

Note: If there is a need to run the WDEPLOY command on the CABI server in future, the steps performed on the CABI server will need to be redone.