How to enable the use of external treatments. How to remove the ban on opening external treatments

Hello everyone. Through the search, I didn't find anything like, if you do not right - you poke the nose, I will be grateful.

BP 3.0 (3.0.59.54), platform 8.3.10.2580. There is a need to run the processing "universal exchangedXML". It enters the configuration and can be opened through "" but only under the role of the administrator. But there is a need to do it under the usual user. To take off support and edit the rights really do not want. Saved it as an external, disabled checking access rights in the code, opening under the usual user through the "File" menu - everything opens normally. Of course, it is not convenient and want to connect it through "extra". OK, I add a description through the preservation procedure, connect, displacing the user interface and .. I get a bolt. The processing window does not open. Rather, opens for a split second and immediately closes. And it happens regardless of the rights of the user, including under the administrator. Can someone tell me where to dig?

Form Module Check Code:

&On server
Preservation procedure (failure, standardworking)

// Checking access rights should be located very first.
If not the velocity ("administration", metadata) then
// Calling the UST ("RU \u003d" Using processing in the interactive mode is available only to the administrator. "");
Ended;

Function code Information Schedule

# Quality processing area
Function Information Summer Processing () Export
// Let's declare the variable in which we will save and refund "outward" necessary data
Parametersregistration \u003d new structure;

// Let's declare another variable that we need below
Massive assumptions \u003d new array;

// The first parameter that we must specify is what kind of processing system should register.
// Valid Types: Additional Page, Additional Report, Filling Process, Report, Printout, Created Line
Parametersregistration. Hold ("View", "Additional Processing");

// Now we need to pass in the form of an array of names, which will be connected to our MPF
// Keep in mind that you can set a name in this form: Document. * - In this case, the processing will be connected to all documents in the system,
// which support the EPF mechanism
Massive values. Addly ("subsystems. PEMINRECTION");
Parametersregistration. Enter ("Purpose", Massive Removations);

// Now ask the name under which the PF will be registered in the directory external treatments
Paramersion Registration. Enter ("Name", " Universal exchange data ");

// Set the right to handle on using a secure mode. In more detail, you can learn in the help of the platform (the method of installing saves
Parametersregistration. Hold ("Safety", lie);

// The following two parameters play more informational role, i.e. This is what the user will see in the processing information
Parametersregistration. Hold ("version", "1.0");
Parametersregistration. Enter ("Information", "Processing for data exchange between arbitrary bases 1C);

// Create a table of commands (look more below)
Tablekomand \u003d getabitomand ();

// Add the command to the table
Add to Comand (tablekomand, "universal exchange xML data"," Manageable form "," openingform ");

// Save the command table in the processing registration parameters
Parameters deregistration. Hold ("commands", tablekomand);

// Now we refund our parameters
Refund of the parameters deregistration;
Endfunction

Function getabitomand ()

// Create an empty table of teams and columns in it
Teams \u003d new tables;

// How to look like a description of the printed form for the user
Teams. Coolclocks. Addly ("View", new descriptions ("string"));

// Name of our layout, so that they could distinguish the called command in the processing of printing
Commands. Coolclocks. Addly ("identifier", new descriptions ("string"));

// it is set to how the processing command should cause
// Possible options:
// - Openingform - In this case, the identifier must be specified in the column of the form that the system will have to open
// - Calient Sneakers - Call a client export procedure from the processing form module
// - Tissvertomethod - Call the server export procedure from the processing object module
Teams. Solonks. Add ("use", new descriptions ("string"));

// Next parameter Indicates whether it is necessary to show an alert at the start and completion of the processing. It makes no sense when opening a form
Teams. Coolclocks. Addly ("Displaying", new descriptions ("Boolevo"));

// For a printed form must contain a print stringMXL
Teams. Solonks. Addly ("Modifier", new descriptions ("string"));
Refund;
Endfunction

Procedure Add Command (Tablekomand, View, Identifier, Usage, Estimation \u003d False, Modifier \u003d "")
// Add the command to the command table for the transmitted description.
// Parameters and their values \u200b\u200bcan be viewed in the feature
Newcommand \u003d tablekomand. Addly ();
Newcommand. Representation \u003d performance;
Newcommand.Identifier \u003d identifier;
Newcommand. USE \u003d use;
Newcommand. Related Binding \u003d Displaying;
Newcommand.Modifier \u003d modifier;

Extrudresses
# Endostess

When you start the program, downloading documents under the usual user error occurs "Installed Mode. Performing operation is prohibited."

This complexity occurs because To start external processing is not right. To configure access rights, go to the base in 1C mode on behalf of Administratorand go to the section User settings and permissions / access group profiles,click To create a group.

Enter the name of the group and check the roles available to users of this role.

Interactive opening external reports and processing
Using additional reports and treatments

Click Record and close

Return to the Users menu and select an employee from the list that will work with the program Loading Documents. Click Access Rights. In the list of profiles, mark the earlier profile. Click Record.

For users to start processing, it is recommended to add downloads to the list of external processing. To do this in the menu Administration / Printed forms and processing / additional reports and processing Create a new processing. Specify the path to the "Download .epf" file and assign a name. Specify the placement of processing in the menu, from where the user can run it later, for example, select Menu Directories

By clicking on Point Fast access You specify who from users is available processing:

After setting, click Record and close. To start processing, users will sufficiently go to the database and open it from the access menu (in the example - reference books) and click Perform.

Open Menu - all functions ... And locate the Safety Profiles in the list.

It is enough to remove the flag from the option "Use security profiles".

After that, the program will start successfully.

The software opening of the external processing is carried out using the global context object of external processing, which has a type External processingmen. For each operating mode of the 1C platform (normal application and managed application mode) are used various methods Object to work with external processing.

Start external processing in normal application mode

IN by the usual application You must use the Create () object of the external processing object in which the full name of the external processing file is passed. The method returns the type object External processing, This object is open external processing. If you want to open the external processing form, then the obtained object is called the Options () method (), which will return the basic shape, and then call the Open () method for opening it.

Processing \u003d external processing. Create (full);
Processing. Forecorm (). Open ();

In external processing, the main form should always be the usual, and the optional optional, otherwise the Options will not work () in the usual application mode.

Run external processing in managed application mode

In mode managed forms The separation of the algorithm in the context of execution appears. On the client we get binary data on the full name of the external processing file. We transmit the received binary data to the server and put them in a temporary storage. Next, you need to call the connection () object of the external processing object in which the address is transmitted to the temporary storage. The method returns the name of the connected external processing. Return the name of the external processing to the client, form a string path to the processing form and using the openform method () open the external formation form.

&On server
Function to be obtained by appearances (binary)
AddurbationRexuality \u003d Position-based reserve (binary);
Returning external processing. To connect (addresseed by time);
Endfunction

& Svalette
Fullness \u003d ""; // Full name File external processing.
Puttails \u003d New bichelted (full);
Imaging \u003d reconnecting (spelling);
Openform ("external processing." + Imaging + ".Form");

Safe mode for external treatments

Methods to create () and connect () Object external processing have the incoming security parameter - a sign of connecting external processing in safe mode. If the parameter is not specified, the connection will be implemented in safe mode.
Safe operation mode is designed to protect the system from executing the "unreliable" program code on the server. Potential danger represent external processing or program code entered by the user to use in the methods to perform () and calculate ().
The following restrictions are superimposed in safe mode:

the privilege mode is canceled if it was installed;
attempts to go to the privileged mode are ignored;
prohibited operations with COM objects;
it is forbidden to download and connect external components;
prohibited access to K. file System (except temporary files);
forbidden access to the Internet.

Processing, open interactively, not performed in safe mode, so it is recommended to implement the opening mechanism of external treatments in safe mode, as well as at the level of rights to prohibit the user an interactive opening of external treatments.
To prohibit the interactive opening of treatments, in all roles assigned to the user, it is necessary to remove the right "interactive opening of external treatments" (see Figure 1).

Figure 1. Interactive opening rights of external treatments / reports

The right "Interactive Opening External Processings" does not affect the external processing facility.

Software opening of external reports, similar to external treatments, only the object of the global context should be used, which has a type Foreign trade.

Starting with new releases, 1C company: an attempt to eliminate the wave of cryptocringers, by limiting the launch of external reports and treatments for all users of a specific accounting system.

Of course, this caused a wave of misunderstanding from both users and the leadership of the IT department (programmers, administrators).

In fact, the measures taken, of course, forced, because Many users may even suspect that the files opened by them may contain a terrible threat - stopping the whole business and loss all data In open resources of the enterprise.

Yes, of course, when correct settings reserve copyPart of the data can be saved, but that if your company has data every day / hour / minute, it is impossible to restore that, or it is possible, or it will be necessary to make a lot of effort to do: Human resources, time, budget, etc.

What it means: Well, the first thing that the user faces is a banal launch of specialized forms and processes included in accounting system - i.e. The user will not even be able to run even, for example, a modified and unified organization account, or such as a report for the management distribution of DDS, well, etc.

It is clear that it does not suit, neither as an administrative composition of the organization, no end user, in the person of which there are tasks associated with such external treatments.

How to solve this question? It is clear that no modern antivirus system will not be able to fully protect the user from the danger, or the system of restrictions on access rights, but for specific specialists who were notified about the threats and conducted a libez on the launch of potentially dangerous elements, to open access will still have access .

So, what is supposed to be done:

Establish responsibility to the employee who must run such refinement, files, reports;
Conduct some educat with this employee to fully understand threats and security;
Provide this employee the ability to launch external treatments in 1C:

The first 2 points we do not affect, because This is at the conscience of administrative staff and employees of the company IT Department, but on paragraph 3 - you can use the instructions described below:

First of all, you need access to the 1C configurator: user with full rights;
We launch the configurator for the user with full rights;
In the general menu (as a rule, it is from above), we find the item "Administration" -\u003e "Users"

4. Select a variable user:

Take a tick with "protection against dangerous action" and go to the other tab and here if this userpreviously not established the role of "Interactive opening external Forms and treatments ", install a tick:

Everything. After the manipulation data, the user to which these settings applied is required to reboot to the program. After that, the ability to start from external sources He will have.

We very much hope that this article has been read by you from the very beginning and you are aware of the risks of these manipulations.

How to solve interactive opening of external reports and treatments? (1C: Accounting 8.3. Editorial 3.0)

2016-12-08T15: 52: 26 + 00: 00

If when opening an external processing or report through the File menu-\u003e Open

an error "Violation of access rights" appears:

Then options for using processing only two.

The first option is to register processing in the directory " Additional reports and processing "(about this).

But that if processing does not support such registration? And the processing is very useful and it really wants to open it.

In this case, you can go on the second option and re-enable the ability to open processings in the database through the File menu-\u003e Open.

Instructions for this below.

Go to the base configurator:

Run the menu command "Administration" -\u003e "Users":

Double-click Open your user:

Go to the "Other" tab, set the "Interactive Opening External Reports and Processings" daw and click "OK":

Now close the configurator and the database (if it was open with you).

Go again to the database and try to open the report through the "File" menu -\u003e "Open".

Now everything will turn out

There are nuances ...

The method that I described in this instruction is 100% working, but when using it, the right to the "interactive opening of external treatments" after time can again abyss.

To avoid this, set the same checkbox in 1C mode: Enterprises in the current user access profile.

When using this method, various nuances may occur (for example, if you use a built-in profile that cannot be edited), so detailed instructions For this case, I will not bring.

Yours faithfully, Vladimir Milkin (teacher and developer).