Network and Local connection sandbox issue

[lucygeneric]

Hiya,

I am building applications for S60 in FlashLite and I wish to import/export XML from the internets but also interact with the device. The security sandbox prevents this as discussed in http://wiki.forum.nokia.com/index.ph...network_access

The fix as described is to set the SWF from 'access the network only' to 'access to the local file system and the network' using a provided tool.

This I can do no problems, using a verification process I can ascertain that my local content SWF is open to network connections. The issue is that once on the device it doesn't work. Does anybody know why?

I am testing on a 5800 EM

[sajisoft]

Hiya,

I am building applications for S60 in FlashLite and I wish to import/export XML from the internets but also interact with the device. The security sandbox prevents this as discussed in http://wiki.forum.nokia.com/index.ph...network_access

The fix as described is to set the SWF from 'access the network only' to 'access to the local file system and the network' using a provided tool.

This I can do no problems, using a verification process I can ascertain that my local content SWF is open to network connections. The issue is that once on the device it doesn't work. Does anybody know why?

I am testing on a 5800 EM

Can u please elaborate what do u mean by "doesnt work".Is ur swf file is not asking u for a net connection in device?? Is ur swf access locally ?? Please answer these questions , than may b i m able to help.. whatever, if the swf file is not asking for a internet connection than it is due to security sandbox and the tool is not wotking fine for u. U can try to place ur swf file in trusted folder in others folder to access network and local but the one u r doing right now is better. If ur swf asks u for an access point and u r not able to do sumthing after that then it is another issue which can be described depending upon ur reply .so please elaborate ur question ..

Best Regards,
SajiSoft

[lucygeneric]

SajiSoft thank you for your reply,

When I run the swf in 'Access Local Filesystem' mode the device throws two security prompts at runtime - "Allow application to access user data" and "Allow application to connect to the network"

After running the tool that allows Network Access on this swf and re-deploying to the device it no longer behaves this way, instead it only asks "Allow connection to Network" in a manner more like browsing the internet. There is no prompt for user data. The application no longer lets me send SMS messages or interact with the device. It *appears* to only be allowing Network Access (it exhibits the same behaviour)

The SWF is published as 'Access Local Files Only' and then the tool provided (link previous) is executed on the file to unlock Network Access. I can verify it has Network Access by running the SWF the local Flash Player on my computer. Prior to running the tool the application will throw a security error at runtime, after running the tool the application connects correctly. I have not thought of a way to check the reverse however.... connecting the transformed SWF to local resources

Placing the application in a trusted folder might be a workaround as long as it has no impact on provisioning the application for my users, I really need installation to be as simple as possible.

[sajisoft]

SajiSoft thank you for your reply,

When I run the swf in 'Access Local Filesystem' mode the device throws two security prompts at runtime - "Allow application to access user data" and "Allow application to connect to the network"

After running the tool that allows Network Access on this swf and re-deploying to the device it no longer behaves this way, instead it only asks "Allow connection to Network" in a manner more like browsing the internet. There is no prompt for user data. The application no longer lets me send SMS messages or interact with the device. It *appears* to only be allowing Network Access (it exhibits the same behaviour)

The SWF is published as 'Access Local Files Only' and then the tool provided (link previous) is executed on the file to unlock Network Access. I can verify it has Network Access by running the SWF the local Flash Player on my computer. Prior to running the tool the application will throw a security error at runtime, after running the tool the application connects correctly. I have not thought of a way to check the reverse however.... connecting the transformed SWF to local resources

Placing the application in a trusted folder might be a workaround as long as it has no impact on provisioning the application for my users, I really need installation to be as simple as possible.

Umm...Got ur problem upto sum extent. Actually , if u want to access local and network at the same time than LOCAL CONTENT UPDATER is NOT a Solution .As it is use to remove some NETWORK RESTRICTIONS ONLY by REMOVING LOCAL CAPABILTIES. Adobe site commented that :

If the application is simply trying to call a network asset,you can set the security zone to local-with-networking using theLocal Content Updater. Note, if you allow this interaction, you will no longer be able to call other local content such as other SWF files.

Moreover , its also quoted :

Author/Developers may be able to modify their content so that users don't need to take any action. If your content does not access any local files, it can be modified to interact with the network only. This can be done using the standalone tool provided, called the Local Content Updater or by using Macromedia Flash 8 to publish your SWF using the "Allow local file to access the network" setting.

If your content must access both the local file system and the network, the user must indicate that they trust the file. This can either be done by installing a trust file.

source : Adobe Flash Security
Thus , it is clearly explaining that accessing local file System and network cannot be achieved by Updater . I DIDNT TEST MYSELF UPDATER ALOT . SO may BE I M WRONG.
Moreover, y not u try to package ur swf file into a sis file and throw it to the trusted folder via sis installer . So , u can provide that sis file to ur users and it automatically stored under trusted folder.
Secondly , you can extend flash lite using python , symbian c++ , m-shell etc. So, u can extend ur app to do local tasks via python , symbian c++ or m-shell etc and network task via flash lite but it needs a good knowledge in one of the language. .
Hope it helps u...If u need more help , plz ask...

Best Regards,
SajiSoft

[lucygeneric]

SajiSoft you are legendary!

Thank you for taking the time to clarify this. I completely missed that part of the documentation. I will try the options you have presented and report back with my findings!

Thanks again,
Steve

[markadoherty]

Hey,

We have changed the security model for the FL3.1 Distributable Player, available for the N73 and the majority of modern S60 devices. In the new player applications packaged with the Adobe Mobile Packager are always trusted and therefore have networking and local file access.

Check it out..
http://labs.adobe.com/technologies/distributableplayer/

Mark
Adobe
www.flashmobileblog.com

[sajisoft]

Hey,

We have changed the security model for the FL3.1 Distributable Player, available for the N73 and the majority of modern S60 devices. In the new player applications packaged with the Adobe Mobile Packager are always trusted and therefore have networking and local file access.

Check it out..
http://labs.adobe.com/technologies/distributableplayer/

Mark
Adobe
www.flashmobileblog.com

Thats really a cool news.. Thanks for these updates Mark

Best Regards,
SajiSoft