MOSS 2007 中 InfoPath 表单中的数字签名是否更简单?

发布于 2025-01-08 04:54:46 字数 478 浏览 1 评论 0原文

我最近继承了一个基于 MOSS 2007 的应用程序,主要涉及 InfoPath 2007 表单,目前正在其第一个主要版本之前进行用户验收测试。

该表单允许用户使用标准 InfoPath 功能使用数字签名来签署部分。在 SharePoint 中,这涉及到一个 ActiveX 控件,该控件会弹出一个对话框,用户在该对话框中打开另一个对话框来选择证书,然后勾选接受复选框并单击“签名”

管理层认为此签名过程对于某些用户来说过于复杂理解(特别是当涉及到让人们接受新系统时)

我被要求研究如何让这变得更容易,我的第一印象是无能为力。我已经考虑过修改调用 ActiveX 的 JavaScript,但该控件实际上是一个黑匣子,除了标准 InfoPath 表单代码调用的功能之外没有任何有用的功能。

除了逆向工程和重新创建 ActiveX 控件之外,还能做些什么吗?我是否缺少某些设置(我怀疑这个)?

或者,如果有任何额外的弹药来告诉我的老板这是不可能的,我们将不胜感激。

I have recently inherited a MOSS 2007 based application primarily involving an InfoPath 2007 form, currently undergoing user acceptance testing prior to its first major release.

The form allows users to sign sections with digital signatures using the standard InfoPath functionality for this. In SharePoint this involves an ActiveX control which pops up a dialog, and within this the user opens another dialog to select a certificate, followed by ticking an acceptance checkbox and clicking "sign"

Management feels that this signing process is too complex for some users to understand (especially when it comes to getting people to accept the new system)

I've been asked to look into making this easier, and my first impression is that nothing can be done. I've looked into modifying the JavaScript that calls the ActiveX, but the control is effectively a black box with no useful functionality beyond what the standard InfoPath form code calls.

Can anything be done here other than reverse engineering and recreating the ActiveX control? Is there some setting I'm missing(I doubt this one)?

Alternatively any extra ammunition for telling my bosses this cannot be done would be appreciated.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(2

掀纱窥君容 2025-01-15 04:54:46

不幸的是,你实际上没有太多选择。正如您所发现的,数字签名功能或属性中没有“挂钩”可供操作。即使您对其进行逆向工程,情况也是如此 - 这些弹出窗口/对话框被包装在单个调用中,以避免被潜在的恶意代码操纵。

教用户它是如何工作的,这很烦人,而且一开始非常令人头疼。一件“好事”(相对而言)是所有 Microsoft 产品都共享相同的数字签名体验,即使它们不在网络上。因此,一旦您的用户习惯了该流程,当您想要开始签署 Word 文档或 Excel 时,他们无需重新学习不同的内容。

所以老板的弹药:

  • 这是不可能完成的,有原因的,篡改它会减少它
    secure
  • 这个过程很烦人,但总体来说并不难(通常是一个
    对话框和按钮,有时是两个)
  • 该过程对于所有 MS 产品都是通用的(打开 word 和
    如果需要的话请展示这一点)

额外的弹药 - 我们的一些用户认为他们可以附加他们实际签名的 jpg 并将其显示在文档上,这很巧妙。

You don't really have many options unfortunately. As you found there are no "hooks" into digital signature functionality or properties to manipulate. The same is true even if you reverse engineer it - those popups/dialogs are wrapped in a single call in order to avoid being manipulated by potentially malicious code.

It is annoying, and a huge headache at first to teach the users how it works. The one "good" thing (relatively) is that all Microsoft products share that same digital signature experience, even if they aren't on the web. So once your users get used to the process, they don't have to relearn something different when you want to start signing word documents or excel.

So ammo for the bosses:

  • It can't be done for a reason, tampering with that would make it less
    secure
  • The process is annoying but not that hard overall (usually one
    dialog and button, sometimes two)
  • The process is common to all MS products (open up word and
    demonstrate this if need be)

Extra ammo - some of our users think it is neat they can attach a jpg of their actual signature and have it show up on the document.

半夏半凉 2025-01-15 04:54:46

您出于法律目的需要数字签名吗?我在一些基于 InfoPath 的应用程序中所做的事情通常是有两个按钮,一个表示“批准”,另一个表示“拒绝”。当用户点击“批准”按钮时,规则之一是在审核历史记录框(只读文本框)中添加一个条目,以获取登录的用户名并指示他们的批准或拒绝。

虽然这不像数字签名那样具有法律约束力或在全球范围内被接受,但它是获得工作流程或流程中某人签字并要求他们成功登录工作站的好方法。

Do you need the digital signature for legal purposes? What I do in a few InfoPath based applications is I typically have two buttons, one that says Approve and another for Deny. When the user hits the Approve button, One of the rules is to add an entry into an audit history box (a read only text box) that grabs the logged in username and indicates their approval or denial.

While this isn't as legal binding or globally accepted as a digital signature it is a great way to just obtain a sign off from someone in workflow or process and requires them to be successfully sign into their workstation.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文