{"id":176,"date":"2007-10-19T17:46:10","date_gmt":"2007-10-20T00:46:10","guid":{"rendered":"http:\/\/jeffhobbs.net\/2007\/10\/19\/forcing-a-user-to-login-when-loading-a-geoworkspace-with-an-oracle-connection\/"},"modified":"2007-10-19T17:46:10","modified_gmt":"2007-10-20T00:46:10","slug":"forcing-a-user-to-login-when-loading-a-geoworkspace-with-an-oracle-connection","status":"publish","type":"post","link":"https:\/\/jeffhobbs.com\/?p=176","title":{"rendered":"Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection"},"content":{"rendered":"<p>For those have connected to an MGE connection using an Oracle database, you&#8217;ll recognize this screenshot:<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" src=\"http:\/\/jeffhobbs.com\/wp-content\/uploads\/2007\/10\/mge-login.gif\" width=\"270\" height=\"214\" \/> <\/p>\n<p>This comes up whenever you open\/close a connection or open a geoworkspace. Personally, even though the MGE connection to an Oracle database is read-only, I think this is a valuable option. On a side note, on some machines you can save the user name and password into the ODBC DNS setup and this will eliminate the need for entering a password at this dialog. This can be done my just embedding the password with the user name like this:<\/p>\n<p>user\/password<\/p>\n<p>Anyhow, I&#8217;ve always been surprised that Intergraph doesn&#8217;t force something similar for an Oracle Object Model connection&#8230;ESPECIALLY since this connection can be read\/write! For those that don&#8217;t use Oracle with GeoMedia, by default GeoMedia will save the password (hidden) in the .gws. As a result, whenever you load the .gws, GeoMedia will connect to the Oracle database with the user name and password saved in the .gws. Yes, this is convenient. However, it&#8217;s not ideal from a security standpoint. Especially if you actually use unique logins in Oracle where User A may only have read\/write to TABLE A while User B may have read-only to TABLE A. To be honest, even from a non-security standpoint, it&#8217;s still a bad idea. It&#8217;s fairly easy to make a mistake when you&#8217;re not paying attention or not expecting to be able to do something to the data. <\/p>\n<p>So, there is a workaround to force a similar type of login restriction. This can be found in the &quot;Working with GeoMedia Professional&quot; PDF in Appendix B, page B-2. However I&#8217;ll post it here as well:<\/p>\n<blockquote>\n<p align=\"left\">By default, GeoMedia stores the Oracle connection password in the GeoWorkspace. This is meant as a convenience and allows users to open existing GeoWorkspaces containing Oracle connections without having to re-enter connection passwords. However, this is a drawback to those users wanting higher levels of security. The option to turn off password persistence is in the registry:<br \/>\n\t\t\t\t      HKEY_LOCAL_MACHINE\\SOFTWARE\\GDO\\Oracle Object Read-Only\\1.0\\Store Password<br \/>\n\t\t\t\t      HKEY_LOCAL_MACHINE\\SOFTWARE\\GDO\\Oracle Object Read-Write\\1.0\\Store Password<br \/>\n\t\t\t\t      The default setting is 1, which means that connection passwords will be stored. To force the user to enter a password for each Oracle connection, change the (default) setting to 0.<br \/>\n\t\t\t        Password persistence is not an issue if you are using Windows Domain authentication for your connections. <\/p>\n<\/blockquote>\n<p align=\"left\">When you set these registry entries, you get the following dialog when you open a .gws, or close\/open the connection:<\/p>\n<p align=\"left\"><img decoding=\"async\" loading=\"lazy\" src=\"http:\/\/jeffhobbs.com\/wp-content\/uploads\/2007\/10\/force-login.gif\" width=\"278\" height=\"225\" \/>  <\/p>\n<p align=\"left\">You notice that it just sets the password to a single asterisk. Usability-wise, it&#8217;s not as easy as the MGE dialog, but it&#8217;s not bad.<\/p>\n<p align=\"left\">It&#8217;s interesting to note that you have the option to <strong>not<\/strong> save the password for the Oracle Object Model Read-Only data server, the Oracle Object Model Read-Write data server, or both. I would heavily recommend setting it for read-write. If you&#8217;re not concerned with other people having read-only access to your data, you can keep GeoMedia saving the user&#8217;s password for read-only connections. Incidentally, this is what I prefer.<\/p>\n<p align=\"left\">Now, since I&#8217;m not a big fan of editing the registry manually, I wrote a small executable using <a href=\"http:\/\/www.autoitscript.com\/autoit3\/\">AutoIt<\/a> &#8211; a FANTASTIC piece of freeware that allows you to script many different mundane Windows tasks and save the scripts off as standalone executables. I&#8217;ve uploaded my registry modification script (both source and executable). <a href=\"http:\/\/www.box.net\/shared\/ez8q0vnjfg\">You can download it from the left hand side of the screen or from here.<\/a> The script will force the login screen for read-write connections but will store read-only connections. You can modify the source quite easily (just reference my comments in the script) if you&#8217;d like to force the login screen both both read-write and also read-only. \n\t\t\t    <\/p>\n","protected":false},"excerpt":{"rendered":"<p>For those have connected to an MGE connection using an Oracle database, you&#8217;ll recognize this screenshot: This comes up whenever&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false},"categories":[3,4,11],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection - jeffhobbs.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jeffhobbs.com\/?p=176\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection - jeffhobbs.com\" \/>\n<meta property=\"og:description\" content=\"For those have connected to an MGE connection using an Oracle database, you&#8217;ll recognize this screenshot: This comes up whenever...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jeffhobbs.com\/?p=176\" \/>\n<meta property=\"og:site_name\" content=\"jeffhobbs.com\" \/>\n<meta property=\"article:published_time\" content=\"2007-10-20T00:46:10+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/jeffhobbs.com\/wp-content\/uploads\/2007\/10\/mge-login.gif\" \/>\n<meta name=\"author\" content=\"Jeff Hobbs\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Hobbs\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jeffhobbs.com\/?p=176\",\"url\":\"https:\/\/jeffhobbs.com\/?p=176\",\"name\":\"Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection - jeffhobbs.com\",\"isPartOf\":{\"@id\":\"https:\/\/jeffhobbs.com\/#website\"},\"datePublished\":\"2007-10-20T00:46:10+00:00\",\"dateModified\":\"2007-10-20T00:46:10+00:00\",\"author\":{\"@id\":\"https:\/\/jeffhobbs.com\/#\/schema\/person\/600c6cc6bd115876f071a9bfb5c934d7\"},\"breadcrumb\":{\"@id\":\"https:\/\/jeffhobbs.com\/?p=176#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jeffhobbs.com\/?p=176\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jeffhobbs.com\/?p=176#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jeffhobbs.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jeffhobbs.com\/#website\",\"url\":\"https:\/\/jeffhobbs.com\/\",\"name\":\"jeffhobbs.com\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jeffhobbs.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/jeffhobbs.com\/#\/schema\/person\/600c6cc6bd115876f071a9bfb5c934d7\",\"name\":\"Jeff Hobbs\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jeffhobbs.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bafb9a6abd79509b50a190d399dea779?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bafb9a6abd79509b50a190d399dea779?s=96&d=mm&r=g\",\"caption\":\"Jeff Hobbs\"},\"sameAs\":[\"http:\/\/jeffhobbs.com\"],\"url\":\"https:\/\/jeffhobbs.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection - jeffhobbs.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jeffhobbs.com\/?p=176","og_locale":"en_US","og_type":"article","og_title":"Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection - jeffhobbs.com","og_description":"For those have connected to an MGE connection using an Oracle database, you&#8217;ll recognize this screenshot: This comes up whenever...","og_url":"https:\/\/jeffhobbs.com\/?p=176","og_site_name":"jeffhobbs.com","article_published_time":"2007-10-20T00:46:10+00:00","og_image":[{"url":"http:\/\/jeffhobbs.com\/wp-content\/uploads\/2007\/10\/mge-login.gif"}],"author":"Jeff Hobbs","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Jeff Hobbs","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jeffhobbs.com\/?p=176","url":"https:\/\/jeffhobbs.com\/?p=176","name":"Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection - jeffhobbs.com","isPartOf":{"@id":"https:\/\/jeffhobbs.com\/#website"},"datePublished":"2007-10-20T00:46:10+00:00","dateModified":"2007-10-20T00:46:10+00:00","author":{"@id":"https:\/\/jeffhobbs.com\/#\/schema\/person\/600c6cc6bd115876f071a9bfb5c934d7"},"breadcrumb":{"@id":"https:\/\/jeffhobbs.com\/?p=176#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jeffhobbs.com\/?p=176"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jeffhobbs.com\/?p=176#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jeffhobbs.com\/"},{"@type":"ListItem","position":2,"name":"Forcing a User to Login When Loading a Geoworkspace with an Oracle Connection"}]},{"@type":"WebSite","@id":"https:\/\/jeffhobbs.com\/#website","url":"https:\/\/jeffhobbs.com\/","name":"jeffhobbs.com","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jeffhobbs.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/jeffhobbs.com\/#\/schema\/person\/600c6cc6bd115876f071a9bfb5c934d7","name":"Jeff Hobbs","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jeffhobbs.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/bafb9a6abd79509b50a190d399dea779?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bafb9a6abd79509b50a190d399dea779?s=96&d=mm&r=g","caption":"Jeff Hobbs"},"sameAs":["http:\/\/jeffhobbs.com"],"url":"https:\/\/jeffhobbs.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=\/wp\/v2\/posts\/176"}],"collection":[{"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=176"}],"version-history":[{"count":0,"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=\/wp\/v2\/posts\/176\/revisions"}],"wp:attachment":[{"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=176"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=176"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jeffhobbs.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=176"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}