ZK Jasper report viewer prints incorrect file

Description

The jasper report viewer ZkJRViewer renders a PDF file to disk, and then displays in the control. This temporary file is created using the pattern "yyyyMMddHHmmss". Therefore, if 2 users print the same report, in different clients, at exactly the same second, then the user who printed the first report, is presented with the report from the second client.

I have initially set the priority as major, because it is a security risk, and problem is hard to diagnose.

Environment

None

Attachments

1

Activity

Neil G April 23, 2015 at 11:13 AM

Sounds good. Thanks Carlos.

Carlos Ruiz April 22, 2015 at 6:50 PM

Thanks , followed better your advice, just added #AD_Session_ID

Neil G October 17, 2014 at 7:50 AM

Also a suggestion to add a warning in the sysconfig description regarding uniqueness and concurrency.

Neil G October 16, 2014 at 7:48 AM

Sounds good - although it would also need to cater for the same user logged into multiple sessions.

  • "FileUtil.getTempMailName.suffix" where we can fill something like "@#AD_User_ID@" --> Also include the session ID, or maybe just the session ID on its own.

Otherwise, use a stream for previewing, and save to disk when the email button is pressed, using the sysconfig settings mentioned above.

Carlos Ruiz October 15, 2014 at 7:29 PM

Just adding an idea, what if we add a couple of sysconfig keys:

  • "FileUtil.getTempMailName.suffix" where we can fill something like "@#AD_User_ID@"

  • "FileUtil.getTempMailName.dateformat" where we can fill something like "yyyyMMddHHmmss"

Fixed

Details

Assignee

Reporter

Components

Affects versions

Priority

Created October 14, 2014 at 12:30 PM
Updated June 1, 2015 at 3:50 PM
Resolved April 22, 2015 at 6:50 PM