Hide report parameters in URL

hallj05

<p>Hey,</p>
<p> </p>
<p>We are using the <span>Open Source </span>version of BIRT 4.2.2 and the BIRT Report Viewer.</p>
<p> </p>
<p> </p>
<p>When we go from one report to another and pass report parameters they are being added to the URL.</p>
<p> </p>
<p>something like this is added onto the url if the report parameter was 'user'</p>
<p>user=admin</p>
<p> </p>
<p>Is there a way to pass the report parameter but not show it in the url? Or a way to make it so that the URL is not editable by the user.</p>
<p> </p>
<p> </p>
<p>Since at the moment the user can change the report parameters in the URL and make it so that they can have access to reports/data that they should not be able to see.</p>
<p> </p>
<p>Thanks!</p>

kclark

<p>You can do one of two things, you can either your session variables to store the parameter values.  Then using some scripting, populate your hidden parameters with the values from your session variables.</p>
<p> </p>
<p>Or, as a quick fix you could modify the URL in the browser without reloading it using something like this (untested)</p>
<pre class="_prettyXprint _lang-">
function processAjaxData(response, urlPath){
document.getElementById("content").innerHTML = response.html;
document.title = response.pageTitle;
window.history.pushState({"html":response.html,"pageTitle":response.pageTitle},"", urlPath);
}
</pre>
<p>Or you could hide the address bar of the browser using some JS</p>