Re: SOAP requests between domains

Eugene Prokopiev wrote:


>> Is your script trying to call
>> netscape.security.PrivilegeManager.enablePrivilege('UniversalBrowserRead') 
>>
>> then? 
> 
> 
> yes
> 
>> You don't need to do that, indeed you can only do that successfully in 
>> local pages (file: URL) or signed pages with the normal security 
>> settings.
> 
> 
> I read that signing isn't need for controlling resource access on the 
> server in this article 
> http://lxr.mozilla.org/mozilla/source/extensions/webservices/docs/New_Security_Model.html 

Yes, but calling
netscape.security.PrivilegeManager.enablePrivilege('UniversalBrowserRead')
should not be done then either, the server needs to have the the file to 
specify which domains are allowed access, Mozilla checks whether the 
server has the file and allows access and then the access is allowed, no 
need (and no help) to call enablePrivilege then.

-- 

	Martin Honnen
	http://JavaScript.FAQTs.com/