Latest Contributions by FredSpataro

Hi All, Here's the setup: ArcGIS Server and Portal 10.7 Server is federated and designated as Hosting server Enterprise SiteA with permission for GroupA SiteA has PageA with permission for GroupA SiteA PageA has a stock webmap layout item configured to use WebmapA WebmapA is saved in Portal with permissions for GroupA WebmapA has a LayerA from MapServiceA with permissions for GroupA When I log into portal with UserA, I can navigate to, open and view WebmapA and LayerA When I log into SiteA with UserA, I can access the site, navigate to PageA, WebMapA loads but LayerA does NOT Network trace shows "Token Required" on REST endpoint for LayerA When I log into SiteA with the portal admin account, webmap and layer display fine. Seems like the whole point of having a webmap and services with permissions. Any ideas why it's not correctly applying the token or auth cookie? Thanks Fred ... View more

Hi All,  We have a database, services, ops-dashboard setup that collects and displays data from locations all across the US.  The widgets in the ops-dashboard are tied to a date-based filter using the "TODAY" setting.  The problem is the query that gets generated is TODAY for the browser not TODAY for the location being collected.   Even if we convert the database time values to UTC, the queries still miss data on the ends.  Ideally the "TODAY" setting would create a value that is agnostic to time-zone.   We have too many locations to publish services for each location with the specific time-zone defined and that wouldn't be a very scale-able solution as locations change.   Is there a way to disable the time-zone conversion details in the widget?  Is there any way to specify I want "TODAY" in a specific time-zone without attaching it to the service definition? We could create this without 'much trouble' in a custom dashboard but our requirements are to use "out-of-the-box" functionality and apps only.  It doesn't seem like that requirement and the functional requirements will mesh? Thanks Fred ... View more

Hi All,  I'm building out a bunch of Enterprise Site pages that have an embedded Ops-Dashboards.  When we access the site page, we are prompted to login to the site (expected and good) and then login again to the dashboard - not excepted and not good.  And even when the site page opens again in a new tab, the site has a cached login and opens the page without the login prompt but still prompts for the login on the dashboard. This seems like a bad workflow and users are definitely not going to like it.  Is there a bug?  Is there specific way to embedded secure content into the site page so it doesn't require two logins?   Setup: Version 10.7 Separate portal/server and web-adapter machines Site and dashboard are on the same portal: Dashboard: https://myserver/portal/apps/opsdashboard/index.html#/1234 Site page: https://myserver/portal/apps/sites/#/mypage Chrome/Edge/Firefox all display the same behavior.  Invalid 'X-Frame-Options' header encountered when loading ... 'ALLOW-FROM https://server' is not a recognized directive. The header will be ignored. Seems similar to this: https://community.esri.com/thread/87825 and could be that there's a new header requirement: https://stackoverflow.com/questions/30731290/how-to-set-x-frame-options-allow-from-in-nginx-correctly thanks Fred ... View more

Hi All,  I'm security testing a 10.7 Enterprise deployment and came across a situation that I thought was supposed to be blocked. I thought that if the "referrer" value was set in the generateToken request, that the token would be rejected if the client request's referrer value didn't match.  Am I miss understanding what that value is used for?  Example: * Go to: https://<myserver>/portal/sharing/rest/generateToken    - enter username and password    - select Webapp URL     - enter random web site value    - click GenerateToken button    - copy Generated Token value on response * Open a browser an incognito/in-private browser tab * Browser to any secured rest services page: ie  https://<myserver>/hosted/rest/services/MyGPTools/GPServer/Tool1    - Verifiy that service is secured and redirected to portal login page * Append token to url: ie https://<myserver>/hosted/rest/services/MyGPTools/GPServer/Tool1?token={paste from response}    - the default browser request does not have a referrer header value so I'm expecting the request to be blocked and redirected back to the login page. But in this test, the REST info display fine and dandy.  ???  Maybe I'm simply misunderstanding what this value is used for...  Thanks  ... View more

Hi All,  Really simple script attached to a toolbox tool: has a wrapper class to convert logging to arcpy.AddMessage.  no input or output parameters has a main function that adds a single message to the window imports arcpy and logging only runs successfully the first time  fails every time after that until the arcmap/arccatalog app is restarted ArcGIS Desktop 10.6.1 Zip file attached with script and toolbox. Here's the script: import arcpy import logging class AddMessageHandler(logging.Handler): def emit(self, record): log_entry = self.format(record) arcpy.AddMessage(log_entry) def main(): logging.debug("----this is a test----") if __name__ == '__main__': logging.basicConfig(level=logging.DEBUG) root_logger = logging.getLogger() root_logger.addHandler(AddMessageHandler()) main()‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍ First run success:  Subsequent runs fail: ... View more

Hi All, Sort of new to Survey123 so I might be missing something simple or doing something beyond the capabilities...Here's what I've got: Created a polygon feature class and table (the survey columns) in ArcCatalog along with a Simple, 1-Many relationship class between the feature (polygon 1) and table (many) using the GlobalId as the linking column.  This setup is then published to our online org account as a host feature layer.  I don't have any issues editing data in either the file geodatabase with ArcMap locally or the hosted feature layer via JavaScript API or map viewer.   Created a Survey123 with Connect (3.4.29b) using the feature service as the template.  Used xls to modify the columns, submission url and form id to the correct values.  Saved and loaded the xls. Published the survey.  Everything seems fine there.  When I run the survey from the web site form (not the device app - haven't tried that yet), all good until the submit.  Submit fails with error: - Operation rolled back. Operation rolled back. Incorrect geometry type. Which seems odd since I shouldn't be submitting any geometry to the table.   Watching the network tab in chrome shows the applyedits operation to the hosted feature layer.  Sure enough, it's adding a feature to the polygon layer with an (0,0) point.  The feature json to the table is correct.  I can copy and paste it to the REST pages and get a successful insert.  So I'm not sure why the survey is trying to submit a record to the polygon layer.  I don't have geopoint column in the XLS but it does have one listed in the "schema" tab of the Connect app.  I can't find a way to delete it there.   Is there some other setting to tell the survey to skip any geometry edits?  Is the explicit relationship class causing some sort of problem? Thanks for the help. ... View more