Announcement

**carlossierra** · 5 Apr 2016, 11:43

Hi Isomorphic. I have tried a lot of different things here, and still can't make it work. I ruled out a SQL DB or DataSource configuration, because I'm able to make the Upload functionality work when Spring Security is not used in the project. I also tried allowing unrestricted access to IDACall in my Spring enabled project, but that didn't work either (this makes me think that it's not a permissions related problem).

Looking at the Chrome developer console, I can see this error message just when I hit the save button:

Refused to display 'http://localhost:8082/BMSim/bmsim/sc/IDACall?isc_rpc=1&isc_v=v10.1p_2016-04-02&isc_tnum=4' in a frame because it set 'X-Frame-Options' to 'DENY'.

And then the operation times out, I get:

ISC_Core.js:1078 *14:24:57.455:TMR3:WARN:RPCManager:Operation timed outundefined - response: {operationId: "bank_load_update",clientContext: Obj,internalClientContext: Obj,context: Obj,transactionNum: 4,httpResponseCode: undef,httpResponseText: undef,xmlHttpRequest: undef,transport: "hiddenFrame",status: -100,clientOnly: undef,isStructured: true,callbackArgs: null,results: Obj,data: "Operation timed out",httpHeaders: undef,startRow: 0,endRow: 0,totalRows: 0}

Couldn't this be another case of Spring Security interfering with Smart GWT's functionality, similar to what happened here?

**carlossierra** · 7 Apr 2016, 15:08

Hi Isomorphic. I am really lost here. Can you please take a look at this? Any ideas or pointers you can provide for me to keep looking would be greatly appreciated!

**edulid** · 8 Apr 2016, 01:00

I have upload-files with MSSQL and they are working fine.

You say you tried with only the binary field (without the metadata fields) or with only the metadata fields (and no binary field). (if I understand you correctly)
I think you need both, i.e. :

Code:

 <DataSource      ID="bank_load"      serverType="sql"      tableName="bank_load" >      
<fields>        
<field name="id" hidden="true" primaryKey="true"/>    
 <field name="file" type="binary"/> 
<field name="file_filename"/>          
<field name="file_filesize"/>          
<field name="file_date_created"/>    
</fields>
</DataSource>

Edit: Isomorphic why is copy-paste not working well in the forums ?

**edulid** · 8 Apr 2016, 01:04

My binary fields are varbinary(max). Maybe this is the problem with your config?

**carlossierra** · 8 Apr 2016, 04:43

edulid, thanks a lot for posting and trying to help me. I really appreciate it!!

Unfortunataly, the problem seems to be Spring Security interfering with the file upload functionality. I can make it work when Spring Security is not being used. This is my ds.xml file right now:

Code:

<DataSource       
    ID="bank_load" 
    serverType="sql" 
    tableName="bank_load">    

    <fields>
        <field name="pk" type="sequence" hidden="true" primaryKey="true"/>   
        <field name="bankfile" type="binary"/>         
    </fields>
</DataSource>

And the bankfile field is set to varbinary(max) as you also suggest. This is working fine.

But once Spring Security is enabled, the timeouts start to happen again.

Maybe there's a particular url I need to leave unprotected in Spring?

**Isomorphic** · 8 Apr 2016, 07:08

Most likely, Spring Security is parsing the uploaded request and by the time it reaches the SmartGWT set let, the file is no longer available from the HttpServletRequest. You can verify this by temporarily substituting a basic servlet that just tries to read the uploaded file.

**carlossierra** · 8 Apr 2016, 12:08

edulid do you have the setup you mention above running on SmartGWT 6.0p? What server are you running this on? Glassfish?
Thanks

**carlossierra** · 10 Apr 2016, 15:42

Well, the problem was indeed in Spring Security's configuration. I just needed to add this to my config file (under the http element):

Code:

<headers>
    <frame-options policy="SAMEORIGIN" />
</headers>

For a deeper explanation on why this is required when using features like File Upload (that I assume are creating a frame in the upload process), see this SO question.

Thanks edulid and Isomorphic...

ps. in case anybody stumbles across this page having the same problem, here is my http config in my applicationContext.xml file:

Code:

<http auto-config="true" use-expressions="true">
    
    <!-- Security exceptions to allow proper login page resource loading -->
    <intercept-url pattern="/bmsim/sc/skins/**" access="permitAll"/>
    <intercept-url pattern="/bmsim/sc/system/**" access="permitAll"/>
    <intercept-url pattern="/resources/css/**" access="permitAll"/>
    <intercept-url pattern="/favicon.ico" access="permitAll"/>
    <intercept-url pattern="/resources/images/login_logo.png" access="permitAll"/>
    <intercept-url pattern="/login*" access="permitAll"/>
    
    <intercept-url pattern="/**" access="hasRole('ROLE_USER')" />
    <form-login 
        login-page="/login.jsp" 
        default-target-url="/BMSim.html"
        always-use-default-target="true"
        authentication-failure-url="/login.jsp?error" 
        username-parameter="username"
        password-parameter="password" />
    <logout logout-url="/logout" logout-success-url="/login.jsp?logout"  />
    <!-- disable csrf protection -->
    <csrf disabled="true"/>
    <!-- allow SmartGWT to create frames and call servlets from there -->
    <headers>
        <frame-options policy="SAMEORIGIN" />
    </headers>
</http>

Announcement

Problem with Upload File in SQL Server 2008 Back End

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment