حداقل امنیت مورد نیاز برای فرم های InfoPath

I needed to meet a security requirement for an InfoPath form today. In this business situation, a relatively small number of individuals are allowed to create a new InfoPath form and a much wider audience are allowed to edit it. (این است جدید استخدام در شبانه روزی مورد استفاده توسط منابع انسانی است که راه اندازی یک گردش کار).

برای رسیدن به این هدف, ایجاد دو سطح اجازه جدید ("create and update" and "update only"), broke inheritance for the form library and assigned permissions to a "create, به روز رسانی" user and a separate "update only" کاربر. The mechanics all worked, but it turned out to be a little more involving than I expected. (اگر شما احساس می کنید کمی لرزان مجوز شیرپوینت, چک کردن این پست وبلاگ). The required security configuration for the permission level was not the obvious set of granular permissions. To create an update-only permission level for an InfoPath form, من زیر:

  1. ایجاد یک سطح اجازه جدید.
  2. پاک کردن دور همه گزینه ها.
  3. Selected only the following from "List permissions":
    • ویرایش آیتم ها
    • نمایش آیتم ها
    • مشاهده صفحات کاربرد

انتخاب این گزینه به کاربر اجازه می دهد برای به روز رسانی یک فرم, اما آن را ایجاد کنید.

The trick was to enable the "View Application Pages". There isn’t any verbage on the permission level that indicates that’s required for update-only InfoPath forms, اما معلوم آن است.

Create-and-Update was even stranger. I followed the same steps, 1 از طریق 3 بالاتر. I had to specifically add a "Site Permission" انتخاب: "Use client integration features". دوباره, شرح وجود دارد باعث نمی شود آن را به نظر می رسد مانند آن را باید به فرم InfoPath است لازم باشد, اما وجود دارد آن است.

</پایان>

که “میانجی” احساس; مشاهدات در شیرپوینت مشاور

متاسفانه, phase one of my last project has come to a close and the client has opted to move ahead by themselves on phase two. We did our job too well, as usual 🙂 I’m now between projects, یک زمان خاص برای مشاوران کارکنان مثل خودم (as opposed to independents who must normally live in perpetual fear of in-between time 🙂 ). We staff consultants fill this time in various ways: Working with sales folk to write proposals; filling in for someone or backing up a person on this or that odd job; studying; وبلاگ نویسی :). It’s hard to plan more than a few days in advance. At times like this, while I have a bit of time on my hands, I like to reflect.

I’m almost always sad to leave a client’s campus for the last time. We consultants form a peculiar kind of relationship with our clients, unlike your typical co-worker relationship. There’s the money angle — everyone knows the consultant’s rate is double/triple or even more than the client staff. You’re a known temporary person. As a consultant, you’re a permanent outsider with a more or less known departure date. هنوز, you eat lunch with the client, take them out to dinner and/or for drinks, buy cookies for the team, go on coffee runs, give/receive holiday cards — all the kinds of things that co-workers do. On one hand, you’re the adult in the room. You’re an expert in the technology which puts you in a superior position. از طرف دیگر, you’re a baby. On day zero, consultants don’t know the names, the places or the client’s lingo. Most times, consultants never learn it all.

When things go well, you become very well integrated with the client’s project team. They treat you like a co-worker in one sense, and confidant in another. Since we don’t have a manager-style reporting relationship with the client, the project team often feels a little free to air their dirty laundry. They let their barriers down and can put the consultant into an awkward position, never realizing they are doing it.

Consultants often don’t get to implement phase two and that never gets easy for me. I think this is especially hard with SharePoint. Phase one of of your typical SharePoint project covers setup/configuration, governance, taxonomy, basic content types, غیره. and in many respects, amounts to a lengthy, extremely detailed discovery. That’s how I view my last project. We did all the basic stuff as well as execute some nice mini-POC’s by extending CQWP, implementing BDC connections to PeopleSoft, introduced a fairly complex workflow with SharePoint Designer, touched on basic KPI’s and more. A proper phase two would extend all of that with extensive, almost pervasive BDC, really nice workflow, fine tuned and better search, records center, excel services and probably most important, reaching out to other business units. اما, it’s not to be for me, and that’s sad.

Based on this recent experience, I think it’s fair to say that a proper enterprise SharePoint implementation is a one year process. It could probably legitimately run two years before reaching a point of diminishing returns. Details matter, البته.

That’s the consultant’s life and all of these little complaints are even worse in a SharePoint engagement. As I’ve written before, SharePoint’s horizontal nature brings you into contact with a wide array of people and business units. When you’re working with so many people, you can see so many ways that SharePoint can help the company become more efficient, save time, do things better… but you don’t always get to do them.

I often look back to my first job out of college, before starting a consulting career 1995. We did get to do a phase two and even a phase three. Those were nice times. On the downside, اما, that means that that would mean a lot of routine stuff too. Managing site security. Tweaking content types. Creating views and changing views. Dealing with IE security settings. Restoring lost documents. Blech! 🙂

Despite my melancholy mood, I can’t imagine a place I’d rather be (except at a warm beach with a goodly supply of spirits).

I can’t wait to get started implemented the next enterprise SharePoint project.

(Apropos of nothing, I wrote most of this blog entry on an NJ Transit bus. I don’t think I made any friends, but one CAN blog on the bus 🙂 )

</پایان>

یکشنبه های خنده دار: “نه آنها که بد”

برگشت نزدیک 1999, من صرف بسیاری از هفته در سانتا باربارا, CA, کار برای یک مشتری, leaving my poor wife back here in New Jersey alone. I dearly love my wife. I love her just as much today as I did when she foolishly married me 1,000 years or so ago. جایی در امتداد خط, I coined a phrase, "special fear", as in "Samantha has special fears." She as a special fear of "bugs", which to her are not flies or ladybugs, but rather microbes. She’s afraid of this or that virus or unusual bacteria afflicting our son, or me, but never really herself. (She is also specially afraid of vampires, miniature evil dolls (especially clowns) and submarine accidents; she has out-grown her special fear of people dressed in Santa Claus outfits).

یک روز, my co-worker and I decided to drive up into the nearby mountains near Ohai. At one point, we got out of the car to take in the scene. When we got back into the car, I noticed that a tick was on my shoulder. I flicked out the window and that was it.

That night, I told her about our drive and mentioned the tick. The conversation went something like this:

S: "Oooo! Those are bad. They carry diseases."

P: "Well, I flicked it out the window."

S: "They are really bad though. They can get under your skin and suck blood and transfer bugs. You better check your hair and make sure there aren’t any in your head!"

P: In a loud voice: "My God! CAN THEY TAKE OVER YOUR MIND???"

S: Literally reassuring me: "No, they’re not THAT bad."

</پایان>

برچسب ها:

دسترسی سریع و آسان: فرم InfoPath به طور خودکار باز از شیرپوینت طراح ایمیل

تکمیلی: Madjur Ahuja از این لینک از یک بحث گروه خبری: http://msdn2.microsoft.com/en-us/library/ms772417.aspx. It’s pretty definitive.

=

We often want to embed hyperlinks to InfoPath forms in emails sent from SharePoint Designer workflows. When users receive these emails, آنها می توانند بر روی لینک ایمیل کلیک کنید و به طور مستقیم به فرم InfoPath.

این هیولا URL ساخت و ساز کار می کند برای من:

HTTP://server/sites/departments/Technical Services/InformationTechnology/HelpDesk/_layouts/FormServer.aspx?XmlLocation=/sites/departments/Technical Services/InformationTechnology/HelpDesk/REC REM RED Forms/REC2007-12-18T11_33_48.XML&Source=http://server.corp.domain.com/sites/departments/Technical%20Services/InformationTechnology/HelpDesk/REC%20REM%20RED%20Forms/Forms/AllItems.aspx&DefaultItemOpen = 1

به جای متن قرمز ضخیم با نام از فرم, همانطور که در تصویر زیر نشان داده شده است:

تصویر

توجه داشته باشید که بسیاری از مسیر hard-coded بودن در این آدرس وجود دارد, as well as a URL-encoded component. If this is too hard to translate to your specific situation, try turning on alerts for the form library. Post a form and when you get the email, مشاهده منبع از ارسال ایمیل و شما همه چیز شما نیاز دارید که شامل خواهید دید.

Astute readers may notice that the above email body also shows a link that directly accesses the task via a filtered view. I plan to explain that in greater detail in a future post.

</پایان>

فکر کردن در مورد محصولات تجاری

I put up a SharePoint Designer extensions project up at CodePlex earlier this year and even though it’s really quite limited in scope, من تخمین می زنند که از آن شده است دانلود 40 به 60 (احتمالا حتی 100) companies in just about two months. That indicates to me that there’s a market for that solution and if I were to successfully commercialize it, that could translate into a goodly amount of beer 🙂

My background is actually much more in product development and I know what is required to bring a top-notch product, as opposed to a CodePlex hobby project, to market. In my past life, I was responsible for product R&D for all software products. The difference between then and now is that I’m a consultant now working for an (excellent) consulting firm (Conchango). سابقا, I had an entire company behind me and in front of me, selling and supporting the products we brought to market. امروز, I’d be alone.

I have several product ideas in mind, but I think the easiest would be to create a commercial version of the above-mentioned CodePlex project that uses that as a starting point and extends it further. My fuzzy off-the-cuff thinking is to charge something like $100 for an unlimited developer license and $500 per production web front end. I think I would also give away the source code.

If you have thoughts or experiences that you’re willing to share, please leave a comment or email me directly. I’d like to hear opinions like:

  • Is it all worthwhile?
  • Practical suggestions for marketing, collecting money, distributing.
  • Pricing.
  • پشتیبانی.
  • Any other comment you’d like to leave.

It’s "easy" to come up with product ideas and to implement them, though many dozens of hours of work are required. The other stuff is not as easy for me.

</پایان>

برچسب ها:

یکشنبه صبح با مزه: “عیسی مسیح باید بمیرد”

ما برای اولین بار از ما خریداری نمایید (و تنها) "luxury" car back when hurricane Floyd nailed the east coast of the U.S. We got a LOT of rain here in New Jersey and چند روز گذشت before life returned to normal. Just before Floyd struck, ما یک پیشنهاد برای ولوو استفاده می شود ساخته شده است 850 GL و بعد از فلوید با فرار, سوار آن خانه.

It was our first car with a CD player. Like most new car owners, ما رفت و یک سی دی کمی دیوانه, revived our dormant CD collection and went on long drives just to listen to CD’s in the car. Like all fads, this passed for us and we ended listening to the same CD over and over again. In our case, آن بود عیسی مسیح سوپراستار.

یکی از (بسیاری) قطعات درخشان در اپرا که سنگ انواع مذهبی استقرار خوانده شده, رهبری قیافا, the "High Priest". They sing their way into deciding how to handle the "Jesus problem" and Caiaphas directs them to the conclusion that "Jesus must die". The refrain on the song is "Just must die, باید بمیرد, باید بمیرد, this Jesus must die". You hear that refrain a lot in that piece.

در آن زمان, my son was about three years old. You can probably see where this is going.

I came home from work one day and my son is in the living room playing with toys and humming to himself. I’m taking off my jacket, به دنبال از طریق پست الکترونیکی و به راه رفتن در درب معمول چیزهای من و من ناگهان متوجه که او فقط گفت:, واقعا نمی آواز: "Jesus must die, باید بمیرد, must die." I was mortified. I could just see him doing that while on one of his baby play dates at a friend’s house — احتمالا تاریخ بازی گذشته با آن دوست کودک.

We pulled that CD out of the Volvo after that 🙂

</پایان>

گوگل قبول فضاهای زنده من وبلاگ را به برنامه AdSense را

تکمیلی: همانطور که از 03/09, I have found no way to integrate my live spaces account with Google Adsense. Microsoft’s system here seems to prevent all of the technical mechanisms that Google provides would-be adsense hosters. I tend to believe this is mainly a side effect of the security they’ve built into live spaces, not a direct effort to disable Adsense.

This is not a SharePoint post, but might be of interest to bloggers generally.

Someone commented on their Windows Live Spaces blog that Google affirmatively denied their application to participate in AdSense. She theorized that Google denied her because Windows Live Spaces hosts her blog. اما, I was recently accepted into the program for my live spaces blog, so the policy has either changed or Google denied her for some other reason.

البته, I don’t see any obvious way to integrate Google AdSense into my live space, اما این یک شروع است 🙂

</پایان>

برچسب ها: ,

پیاده سازی کارشناسی ارشد / روابط جزئیات با استفاده از لیست های سفارشی

کاربران انجمن به کرات به عنوان پرسش مثل این:

> سلام,
>
> لطفا به من بگویید اگر هر گونه امکانات وجود دارد برای ایجاد یک لیست سفارشی با
> نوع استاد و جزئیات (مانند فاکتورها) با استفاده از InfoPath و.
>

شیرپوینت فراهم می کند برخی از ویژگی های جعبه که پشتیبانی از انواع نیازهای کسب و کار مانند آن.

به طور کلی, one links two lists together using a lookup column. List A contains the invoice header information and list B contains invoice details.

استفاده از لیست های اضافی را به حفظ شماره مشتری, تعداد محصول, غیره.

استفاده از پرس و جو بخشی از محتوای وب (در خزه تنها) and/or a data view web part to create merged views of the lists. SQL Server Reporting Services (SRS) به سمت گزارش از آن نیز موجود است.

اما, there are some important limitations that will make it difficult to use pure out-of-the-box features for anything that is even moderately complex. These include:

  • حجم در مقابل لیست مربوط به مراجعه به. "smartness" of the lookup column type. A lookup column type presents itself on the UI differently depending on whether you’ve enabled multi-select or not. In either case, the out-of-the-box control shows all available items from the source list. If the source list has 1,000 اقلام, that’s going to be a problem. The lookup control does not page through those items. در عوض, it pulls all of them into the control. That makes for a very awkward user interface both in terms of data entry and performance.
  • Lookups "pull back" one column of information. You can never pull back more than one column of information from the source list. مثلا, you cannot select a customer "12345" and display the number as well as the customer’s name and address at the same time. The lookup only shows the customer number and nothing else. This makes for an awkward and difficult user interface.
  • No intra-form communication. من در این مورد اینجا نوشته شده است. You can’t implement cascading drop-downs, مشروط فعال / غیر فعال کردن زمینه های, غیره.
  • No cascading deletes or built-in referential integrity. SharePoint treats custom lists as independent entities and does not allow you to link them to each other in a traditional ERD sense. مثلا, شیرپوینت به شما اجازه می دهد تا برای ایجاد لیست های سفارشی, "customer" and "invoice header". You can create an invoice header that links back to a customer in the customer list. سپس, you can delete the customer from the list. خارج از کادر, there is no way to prevent this. To solve this kind of problem, شما به طور معمول، با استفاده از گرداننده رویداد.

این ممکن است به نظر می رسد در معرض باد سرد, but I would still use SharePoint as a starting point for building this kind of functionality. Though there are gaps between what you need in a solution, شیرپوینت ما را قادر می سازد برای پر کردن این شکاف با استفاده از ابزارهایی از قبیل:

  • گرداننده رویداد. Use them to enforce referential integrity.
  • ستون های سفارشی: Create custom column types and use them in lieu of the default lookup column. Add paging, بافر و ویژگی های AJAX را به آنها پاسخگو.
  • BDC. This MOSS-only feature enables us to query other SharePoint lists with a superior user interface to the usual lookup column. BDC can also reach out to a back end server application. Use BDC to avoid replication. Rather than replicating customer information from a back end ERP system, use BDC instead. BDC features provide a nice user interface to pull that information directly from the ERP system where it belongs and avoids the hassle of maintaining a replication solution.

    BDC یکی از ویژگی های خزه (در WSS در دسترس نیست) and is challenging to configure.

  • ASP.NET فرم وب: ایجاد کامل شامل فرم AJAX فعال است که با استفاده از مدل شی شیرپوینت و / یا خدمات وب را به لیست شیرپوینت اهرم در حالی که فراهم آوردن رابط کاربر بسیار پاسخگو.

آخرین گزینه ممکن است احساس شما با شروع از ابتدا, اما در نظر گرفتن این واقعیت است که پلت فرم شیرپوینت تو شروع می شود با ویژگی های زیر کلید:

  • مدل امنیتی با نگهداری.
  • سیستم منو با نگهداری.
  • "Master table" (i.e. لیست های سفارشی) با امنیت, ساخته شده در تعمیر و نگهداری و حسابرسی.
  • جستجو.
  • برگشت ابزارهای یکپارچه سازی پایان دادن به (BDC).

اگر شما با یک پروژه خالی جدید در Visual Studio شروع, شما باید بسیاری از زیرساخت ها و لوله کشی برای ساخت قبل از اینکه شما نزدیک به آنچه شیرپوینت ارائه می دهد.

I do believe that Microsoft intends to extend SharePoint in this direction of application development. It seems like a natural extension to the existing SharePoint base. Microsoft’s CRM application provides a great deal of extensibility of the types needed to support header/detail application development. Although those features are in CRM, the technology is obviously available to the SharePoint development team and I expect that it will make its way into the SharePoint product by end of 2008. If anyone has an knowledge or insight into this, لطفا ترک یک نظر.

</پایان>

نکته سریع: محتوا قسمت وب سایت پرس و جو, مراجعه مقدار ستون و XSL

I have a column name in a content type named "Real Estate Location".

That column is of type "lookup".

من تغییر کرده اند <CommonViewFields> و ItemStyle.xsl برای نشان دادن ستون.

ساده <XSL:ارزش را انتخاب کنید =…> دوباره ارزش داخلی که شامل داده های جایگاه ترتیبی, مانند:

1;#میامی

برای به دست آوردن ارزش انسان دوستانه, استفاده از XSL زیر رشته پس از, به عنوان نشان داده شده است:

<XSL:value-of select="substring-after(_AT_ Real_x005F_x0020_Estate_x005F_x0020_Location به,'#')"></XSL:ارزش>

Use this technique whenever you are working with lookup values in XSL transforms and need to get the human-friendly value.

<پایان پیام />

برچسب ها: , ,

شیرپوینت کاراگاه دسامبر صادر & زنده

بسیاری از شما این می دانم که در حال حاضر, but the December edition of جاسوس شیرپوینت is live.

هر مقاله ارزش خواندن در نظر من است.

I want to give a little extra bump to my colleague’s article (ناتالیا Voskrensenskya). She provides a screen-shot extravaganza while describing how she used custom lists, گردش کار, شیرپوینت طراح, data views and other elements to implement a self-service training feature in MOSS. She describes techniques that can be applied in many different business scenarios. Check out her blog while you’re at it.

Don’t forget to check out مقاله من as well 🙂 I wrote about using MOSS to help an HR department manage open positions.

</پایان>