Re: SOAP requests between domains

Martin Honnen wrote:
> 
> 
> Eugene Prokopiev wrote:
> 
> 
>> I need to allow SOAP requests from XUL to another domain as described 
>> in 
>> http://lxr.mozilla.org/mozilla/source/extensions/webservices/docs/New_Security_Model.html 
>>
>>
>> XUL page is located at http://localhost/xul/hello-soap/HelloWorld.xul
>>
>> SOAP service is located at http://localhost:8080/axis/HelloWorld.jws
>>
>> File http://localhost:8080/axis/web-scripts-access.xml looks like:
>>
>> <wsa:webScriptAccess>
>>     <wsa:allow type="soapv" from="http://localhost:8080/"/>
>> </wsa:webScriptAccess>
> 
> 
> If you want localhost to access your service on localhost:8080 then I 
> think you need to allow
>   <wsa:allow type="soapv" from="http://localhost/"/>

I tried it. But it's not work.

>> On SOAP request I get the next error message:
>>
>> A script from "http://localhost" was denied from UniversalBrowserRead 
>> privileges
> 
> 
> Is your script trying to call
> netscape.security.PrivilegeManager.enablePrivilege('UniversalBrowserRead')
> then? 

yes

> You don't need to do that, indeed you can only do that 
> successfully in local pages (file: URL) or signed pages with the normal 
> security settings.

I read that signing isn't need for controlling resource access on the 
server in this article 
http://lxr.mozilla.org/mozilla/source/extensions/webservices/docs/New_Security_Model.html