What Happens When the Metadata Tamper-Check is Performed

Securing Your Integrated Excel Workbook 11-7 5. Rebuild and restart your Fusion web application. For more information about the web.xml file, see Appendix E, ADF Desktop Integration Settings in the Web Application Deployment Descriptor.

11.3.4 What Happens When the Metadata Tamper-Check is Performed

At runtime, the integrated Excel workbook regenerates the metadata hash code and provides it to the Fusion web application with the first server request. If the Fusion web application cannot get a match on this hash code, it returns an error to the integrated Excel workbook. On receiving an error from the tamper check process, the integrated Excel workbook reports this failure to the end user and closes the integration framework.

11.4 What You May Need to Know About Securing an Integrated Excel Workbook

Note the following points about securing an integrated Excel workbook with a Fusion web application: ■ Data security If you save an Excel workbook containing data downloaded from a Fusion web application to a location, such as a network directory, where other users can access the Excel workbook, the data stored in the Excel workbook is accessible to other users. ■ Security and protection in Microsoft Excel Certain security and protection features that Microsoft Excel provides do not work for workbooks or worksheets that are integrated with a Fusion web application. For example, you cannot use the worksheet protection feature for a worksheet that you integrate with a Fusion web application. You can, however, use Excel’s functionality to set a password on an integrated Excel workbook to prevent unauthorized users from opening or modifying it. For more information about Excel security features, see Excel’s documentation. ■ Integrated Excel workbooks can be configured to cache data, as described in Section 15.2, Restore Server Data Context Between Sessions. Make sure that you do not cache sensitive data in the integrated Excel workbook. ■ If the Fusion web application is running on the https protocol and you have not installed the security certificate on the client, the integrated Excel workbook gives an error on login and the connection is not established. To establish a connection, you must install the security certificate. ■ For applications running in an environment using Oracle Access Manager, the system administrator should ensure that the URL for the ADF Desktop Integration Remote servlet is configured as a protected resource for Oracle Access Manager. For more information, see the Oracle Access Manager Access System Administration Guide. ■ For applications running in an environment using WebGate, set the user-defined parameter filterOAMAuthnCookie to False. For more information, see the chapter on registering partners agents and applications remotely in the Oracle Access Manager Access System Administration Guide.