Hi Stefan,
Basically, the sap note 1930493 tells to not install Java 1.7.0_45.
SAP Note 1930493
Symptom
A security warning popup appears when launching the WebIntelligence Java Report Panel after installing Java Runtime Environment 7 update 45.
The message states "Allow access to the following application from this web site?" and "This web site is requesting access and control of the Java application shown above. Allow access only if you trust the web site and know that the application is intended to run on this site"
Environment
- SAP BusinessObjects Business Intelligence 4.0/4.1
- Business Objects Enterprise XI 3.1
Reproducing the Issue
- On the machine launching the Java Report Panel or Rich Internet Application, install the 32-bit Java Runtime Environment version 7 update 45.
- Log into InfoView/BI Launchpad and create a new report or edit an existing report to launch the JRP. The pop up may appear when the applet is opened.
If the popup does not appear when launching the JRP/RIA, then close the panel and the pop up will appear at that point. Support has not determined any pattern on when it launches at startup or shut down.
Resolution
This issue has been escalated and tracked under the following:
- BI 4.0/4.1: ADAPT01709981
- XI 3.1: ADAPT01709990
This article will be updated as we get more information on this issue.
This issue is targeted for the following releases:
BI4.0
- Patch 6.10
- Patch 8.1
- Patch 7.5
- Support Pack 09
BI4.1
- Patch 2.1
- Patch 1.4
- Support Pack 03
XI 3.1
- Fixpack 6.4
- Fixpack 7.1
Available Workarounds:
- Do not install Java 1.7.0_45, or revert to an earlier version
- Simply by-pass this issue by clicking the "Allow" button to dismiss the pop-up, however the same window will re-appear the next time the applet is launched.
- Disable new security feature included with Java 1.7.0_45:
Java 1.7.0_45 includes a new Java Control Panel which is accessible only via the windows start menu clicking on "Configure Java". This new control panel with provide a new security tab with a slider and a checkbox for security settings. By deselecting "Enable Java content in the browser" this warning will no longer appear.
**Note: Java in my browser no longer works (example: Java.com test page http://www.java.com/en/download/installed.jsp )
**Note: Setting this to Medium has no affect, and there is no option for LOW
**Note: For customers running SSL, the only workaround available is to click "Allow" and the warning dialog. By unselecting this security box, the WebIntelligence Java Report Panel will no longer function under SSL.
Best Regards,
Cátia C. Silva
- SAP Managed Tags:
I had this issue again with a new Java update: version 7 update 51. There is a new capability in the Java Control Panel to Edit Site List. After adding my BO sites, it resolved the issue:
- SAP Managed Tags:
I was able to use /*. You might be able to do /BOE/* if you're concerned with the top level clearance of /*. I've also seen it working with no slash after the port. Simply http://server:port ... that's it.
- SAP Managed Tags:
