2.9. About security level
Biz / Browser V and later and Biz / Browser AI introduced the concept of security level.
In the past, Biz / Browser used to display warnings when accessing local resources and suppress calls to external applications in order to ensure security.
However, in an environment where security is ensured, such as operation on an intranet, there are cases where warnings are unnecessary or it may be permitted to limit the linkage of external applications.
By setting the security level, it is possible to control the warning display, enable the use of functions that are normally prohibited by security, and vice versa.
How to specify the security level
The security level is specified in 5 levels from level 0 (low) to level 2 (medium, equivalent to the conventional Biz / Browser) to level 4 (high).
If no security level is specified, it will be set to level 2.
There are two ways to specify the security level.
- Specify in the connection license certificate
With Biz / Browser V or later and Biz / Browser AI, you can manage the security level with a connection license.
The security level is stated on the connection license certificate, and five types of certificates from level 0 to level 4 are issued when the license is issued.
Select the security level certificate you want to use in the application and place it on the Web server in the same way as the connection license certificate that was previously placed on the Web server.
If you register a connection license certificate in Biz / Browser, the security level stated in the certificate will be applied when connecting to the Web server. - Specified in the registry
You can also set the security level by setting a value in the registry of each client.
HKEY_LOCAL_MACHINE \ SOFTWARE \ AXISSOFT \ BizBrowser \ 5.0 \ profiles \ 5.0.0 \ SecurityLevel Set the DWORD value name level to level 0-4.
(In 64bitOS, it is HKEY_LOCAL_MACHINE \ SOFTWARE \ WOW6432Node \ AXISSOFT \ BizBrowser \ 5.0 \ profiles \ 5.0.0 \ SecurityLevel key.)
AI does not support specifying in the registry
Priority for specifying security level
The security level is set with the following priorities.
If multiple license certificates are installed in Biz / Browser, they will be set to the lowest security level. Also, setting the security level in the registry takes precedence over the license certificate.
List of function availability by security level
The following features are affected by security level
| Subject | Function | Security Level | ||||
| 0 | 1 | 2 | 3 | 4 | ||
| FileSystem.Mount method | Security warning dialog on mount | Not displayed | Displayed at first. After 2 times, it will be suppressed. | Always displayed | ||
| Runtime.Exec, Runtime.ShellOpen, Runtime.ShellEdit, Runtime.ShellLink, Runtime.ShellPrint, link method | Execution of executable files (exe, bat, etc.) and .lnk files (shortcut files) | Run without confirmation | Displays warning | Not executable | ||
| Displaying a security warning dialog when opening an external file | Not displayed | Displayed at first. After 2 times, it will be suppressed. | Always displayed | |||
| ExternalObject class (.NET integration), ExtVal class (.NET integration), ExternalObject class (Java integration), ExtVal class (Java integration) | Creating external objects with the .NET Framework or Dalvik VM | Yes | No | |||
| Intent class | Issuing intents for other Android apps | Yes | No | |||