Bringing Data into Flex - Crossdomain Problem

Question

Hi,

I have a big problem with my flex app, I believe it is a security issue but I am still puzzled of how I can resolve it.
Basically, I have created a widget which lets the user select an area, a start date and an end date. Then, my widget creates an URL with those parameters (Start Date, End Date, List of Features of a specific dataset selected in the area), and sends this URL (with mx:HTTPService). This URL creates a csv file which retrieves all the queried information from an Oracle BI Server. So my flex widget retrieves this csv, parse it and then creates a nice graph wich corresponds to what the user wanted to see.

The problem is that everything works fine when I launch the app locally from Flex Builder, but I get the famous "Sandbox Violation Error" in my widget instead of the graph when I access my flex app from an URL. 
This is typically a crossdomain kind of error, but even though I put the crossdomain file on the server where my flex app is located and added a "Security.loadPolicyFile()" in my index.mxml, it still doesn't work (and I verified that the crossdomain.xml was indeed accessible).

Any help would be appreciated

Reda

RedaKechouri · Answer

Problem sorted.

We've managed to put the crossdomain.xml file in the right directory on the Oracle BI Server, which was not easy to find...

RedaKechouri · Answer

Many thanks for your answer,

We've tried to put a crossdomain.xml file on the Oracle BI Server, and now I am getting these Warnings/Errors :Warning: Ignoring <site-control> tag in policy file from http://ddc3obi001:9704/analytics/crossdomain.xml.  This tag is only allowed in master policy files.

Warning: Domain ddc3obi001 does not specify a meta-policy.  Applying default meta-policy 'master-only'.  This configuration is deprecated.  See http://www.adobe.com/go/strict_policy_files to fix this problem.

Error: Ignoring policy file at http://ddc3obi001:9704/analytics/crossdomain.xml due to meta-policy 'master-only'.

The problem is that I haven't got a clue of how to implement a meta-policy files on OCJ4 containers.

I will install firebug to get more details on the errors.

DasaPaddock · Answer

The crossdoamin.xml file should be on the server you're trying to access. For example, if the url you're calling is: http://server1/foo/service.jsp, then the Flash Player is going to try and load http://server1/crossdomain.xml

What is the full error message you're getting? If you use a tool like Charles, Firebug or HttpFox, then you can see what requests are being sent from your browser and look for the crossdomain.xml requests.