This page is accessing information that is not under its control. This poses a security risk. Do you want to continute?

Question

Hello Everyone

I am using the following solution to enable/disable ribbon buttons.

http://dynamicscrm2011.wordpress.com/2011/05/19/ribbon-customization-part-11enabledisable-ribbon-button-based-on-security-role/

I get "This page is accessing information that is not under its control. This poses a security risk. Do you want to continute?" message.

Is there a way to avoid it? I am using CRM 2011.

Thanks

Answer 1

Hi WPF_Dev,

This is most likely because you are accessing CRM using a different Url to that configured in the MSCRM_Config database - so the getServerUrl function returns a different url to that in the address bar - this causes IE to give this security warning.

To resolve, you must either access CRM using the url returned by getServerurl or you need to change the Url in the MSCRM_Config database.

hth,

Scott

---

Scott Durow
Read my blog: www.develop1.net/public
If this post answers your question, please click "Mark As Answer" on the post and "Mark as Helpful"

Answer 2

Hi Scott

Thanks for the reply.

I am using getServerUrl.

var serverUrl = Xrm.Page.context.getServerUrl();

Any suggestions?

Thanks

Answer 3

Hi,

do an alert(serverUrl) and see what it returns, and compare that to the url in your browser

Scott

---

Scott Durow
Read my blog: www.develop1.net/public
If this post answers your question, please click "Mark As Answer" on the post and "Mark as Helpful"

Answer 4

How did you get on with this?

---

Scott Durow
Read my blog: www.develop1.net/public
If this post answers your question, please click "Mark As Answer" on the post and "Mark as Helpful"

Answer 5

Hi Scott

Thanks for your replies.

I was able to resolve it using the following. It did indeed had the different name is the database.

http://technet.microsoft.com/en-us/library/dd979317.aspx

Thanks

Answer 6

I had the same problem on my dev box.

The domain in the database was correct, but then I realised I was using localhost in the browser instead of the FQDN!

This was because I didn't know the full URL so I opened the site from IIS. A point to watch out for...

Answer 7

Hi MadZebra - thanks for the tip.

Rather than using getServerUrl directly, it's worth changing the way that you get the server url to look at the browser url using Daniel's code at http://danielcai.blogspot.co.uk/2012/02/get-right-server-url-in-your-crm-client.html

(and for silverlight http://danielcai.blogspot.co.uk/2012/02/get-right-server-url-silverlight.html)

This avoids the cross domain issue most of the time.

hth,

Scott

---

Scott Durow
Read my blog: www.develop1.net/public     Follow Me on Twitter
If this post answers your question, please click "Mark As Answer" on the post and "Mark as Helpful"