I. Overview
1. Version
Designer | JAR | fine_conf_entity visual configuration plugin | Function changes |
---|---|---|---|
10.0 | 2020-02-28 | V1.0 | - |
10.0.15 | - | V1.2 | Added support for modifying related parameters |
10.0.16 | - | V1.4 | Added support for Custom Parameter Configuration |
10.0.17 | - | V1.5 | Added support for Plugin missing error to log parameter configuration |
10.0.18 | - | V1.6 | Added support for LDAP authentication"parameter configuration |
10.0.19 | - | V1.7 | Added support for Plugin Auto Updateparameter configuration |
10.0.19 | 2021-10-14 | V1.8 | Added support for Plugin Package Integrity Check parameter configuration |
2. Function introduction
Some of the platform configuration information is recorded in the fine_conf_entity table of FineDB and can only be changed by modifying the table fields.
Users can use the "fine_conf_entity Visual Configuration" plugin to securely modify related configurations.
Note: Do not use methods other than this plugin to modify the FineDB file, it may cause irreparable bugs, you need to bear the consequences.
II. Example
1. Install the plugin
Click to download the plugin: fr-plugin-decision-config-visual-1.4.zip
Designer plugin installation method reference: Designer Plugin Management
Server installation plugin method reference: Server plugin management
2. System tools
After the plugin is successfully installed, the super administrator logs in to the decision-making platform and clicks "Manage > System Tools". As shown below:
Note: Since the modification of FineDB is very important and has a great impact, it only supports the operation of the super tube, and does not support the operation of the sub-administrator.
3. Parameter configuration
The configuration methods are as follows:
Select parameter configuration: The fine_conf_entity parameter is listed in the system parameter name drop-down list box. You can directly select the parameter and set the value.
Custom parameter configuration: You can enter the fine_conf_entity parameter key and automatically display the parameter value. You can modify and save the parameter value.
The parameters supported by the two configuration modes are the same. The following table describes the parameters and values in fine_conf_entity that can be modified.
V1.0 and later plugins support:
Parameter name | Description | Parameter value |
---|---|---|
BackupConfig.customKeyLength | Back up conf table and customize id length | Parameter value must be positive integers The default value is 1500 |
BackupConfig.customValueLength | Back up conf table and customize value length | Parameter value must be positive integers The default value is 65536 |
CacheConfig.maxMemSize | Upper limit of shared dataset cache space | The parameter value must be a non-negative integer The default value is 4194304 |
ClusterTimeMonitorConfig.permitCount | Minimum number of successful times in multiple error analysis in a cluster time error detection task | Parameter value must be positive integers The default value is 1 |
ClusterTimeMonitorConfig.permitError | In a single time error detection task of the cluster, the allowed time error value, in ms | The parameter value must be a positive integer The default value is 10000 |
ClusterTimeMonitorConfig.sumCount | The total number of error analysis attempts in a single cluster time error detection task | Parameter value must be positive integers The default value is 3 |
CustomConfig.absPositionOfFloat | Whether dangling elements are displayed in absolute positions (not affected by cell expansion) | The value must be a Boolean. The default value is false false: Not displayed in absolute position (not affected by cell expansion) true: Display in absolute position (affected by cell expansion) |
CustomConfig.columnMatchRuleForWidgetValue | Whether data fields are case sensitive | Parameter values are as follows, default is case_ignore case_ignore: case insensitive case_sensitive: case sensitive |
CustomConfig.dataTransType | Define the form of transfer of front-end template data in the submission and validation requests | Parameter values are as follows. The default value is xml xml: Transmitted in xml string format json: Data is transmitted in json string format |
CustomConfig.excelAdjustHeight | Excel exports row height coefficients | The parameter value must be non-negative single-precision floating point The default value is 20.1 |
CustomConfig.excelAdjustWidth | Excel exports column width coefficients | The parameter value must be non-negative single-precision floating point The default value is 34.742 |
CustomConfig.exportFullImg4Excel | Whether to export the complete image in Excel | The value must be a Boolean. The default value is false false: The complete image is not exported during Excel export true: Export the complete image in Excel |
CustomConfig.printWidget | Export/print widgets(currently printing check boxes and check box group controls is supported) | The value must be a Boolean. The default value is false false: Do not export or print widgets true: Exports or prints the widgets |
CustomConfig.screenScaleEnabled | Control designer scaling | The parameter value must be Boolean and the default value is true false: Turn off designer scaling true: Turn on designer scaling |
CustomConfig.wordAdjustHeight | Word exports values used to adjust row height to prevent blank pages at certain critical content heights | The parameter value must be a non-negative integer The default value is 2 |
FSConfig.authorizeAttr.postAuthority | A switch that assigns authority by position | The value must be a Boolean. The default value is false false: Disable permission assignment by position true: Enable permission assignment by position |
FSConfig.loginConfig.forceRedirectAfterLogin | Forcibly jump to: http://ip:port/webroot/decision/ | The value must be a Boolean. The default value is false false: No forcible login true: Forcibly jump after login |
FileServerMonitorConfig.messageInterval | Frequency of ftp abnormal message notification (unit: h) | The parameter value must be a positive integer The default value is 1 |
FineFocusPointConfig.allowRecordFitInfo | Whether record adaptive burying point is allowed | The parameter value must be Boolean and the default value is true false: Record adaptive burying point is not allowed true: Allows adaptive burying points |
GcConfig.gcThreshold | Template version control storage optimization threshold, expressed in number of files | The parameter value must be a non-negative integer The default value is 300 |
IntelliLogConfig.expired | Template cache expiration time | The parameter value must be a long integer The default value is 18000 |
IntelliReleaseConfig.defaultCellCount | Default cardinality for the number of cells to be killed | The parameter value must be a long integer The default value is 1000000 |
IntelliReleaseConfig.highInterruptAgainRate | High load releases sessions that exceed (default number of cells * this ratio) the second time | The parameter value must be a non-negative floating-point double precision type The default value is 0.6 |
IntelliReleaseConfig.highInterruptRate | High load releases sessions that exceed (default number of cells * this ratio) for the first time | The parameter value must be a non-negative floating-point double precision type The default value is 0.8 |
IntelliReleaseConfig.highKillRate | High load The proportion of sessions released for the first time exceeds this value, and the second session is not triggered | The parameter value must be a non-negative floating-point double precision type The default value is 0.1 |
IntelliReleaseConfig.interruptRate | Default ratio of the number of cells to be killed | The parameter value must be a non-negative floating-point double precision type The default value is 0.3 |
IntelliReleaseConfig.jvmSupport | Whether the current version of the JDK supports intelligent release | The parameter value must be Boolean and the default value is true false: The current JDK does not support intelligent release true: The current JDK supports intelligent release |
IntelliReleaseConfig.releaseSessionInteval | Release trigger time interval | Parameter values must be positive integers The default value is 20 |
IntelliReleaseConfig.terribleInterruptAgainRate | Ultra high load releases sessions that exceed (default number of cells * this ratio) the second time | The parameter value must be a non-negative floating-point double precision type The default is 0.4 |
IntelliReleaseConfig.terribleInterruptRate | Release sessions that exceed (default number of cells * this ratio) for the first time under ultra high load | The parameter value must be a non-negative floating-point double precision type The default is 0.6 |
IntelliReleaseConfig.terribleKillRate | Overload The ratio of sessions released for the first time exceeds this value, and the second session is not triggered | The parameter value must be a non-negative floating-point double precision type The default is 0.2 |
IntelliReleaseConfig.waitInLineRate | Each session has this probability of queuing at high load | The parameter value must be a non-negative floating-point double precision type The default is 0.9 |
JarConsistenceConfig.messageInterval | Jar inconsistent exception message notification frequency, unit h | The parameter value must be a positive integer The default value is 6 |
LoadConfig.majorExtremeTerribleThreshold | After majorgc, if the ratio of the size of the object in the old age to the size of the object in the old age exceeds this value, it is considered as the limit load | The parameter value must be a non-negative floating-point double precision type The default is 0.95 |
LoadConfig.majorHighThreshold | After majorgc, the ratio of the old age object size to the old age size exceeds this value is considered high load | The parameter value must be a non-negative floating-point double precision type The default is 0.7 |
LoadConfig.majorTerribleThreshold | After majorgc, the residual age object size ratio to age size exceeds this value is considered super high load | The parameter value must be a non-negative floating-point double precision type The default is 0.85 |
LoadConfig.minorHighThreshold | After Minorgc, the ratio of the speed of objects promoted to the old age to the eden region exceeds this value is considered as high load | The parameter value must be a non-negative floating-point double precision type The default is 0.04 |
LoadConfig.minorMidThreshold | After Minorgc, the ratio of the rate to the eden region of objects promoted to the old age greater than this value is considered as medium load | The parameter value must be a non-negative floating-point double precision type The default is 0.02 |
LoadConfig.minorTerribleThreshold | After Minorgc, the ratio of the speed of objects promoted to the old age to eden region is greater than this value | The parameter value must be a non-negative floating-point double precision type The default is 0.06 |
MobileConfig.appMsgProxy | App message agency | The parameter value is a non-empty string The default value is __EMPTY__ The proxy server address is in the following format: http://ip:port/mobile/push/message/send |
MobileConfig.disableEncryptPassword | Controls whether the mobile login password is encrypted | The value must be a Boolean. The default value is false false: The mobile login password is not encrypted true: encrypts the mobile login password |
MobileConfig.persistedAttach | Whether to persist the scheduled image when starting the server | Parameter values must be a Boolean. The default value is false for the first startup and true for the next startup false: Persist the scheduled image when starting the server true: The scheduled image is not persisted when the server is started |
MobileConfig.productPlan | Whether to join the developer program | The parameter value must be Boolean and the default value is true false: Do not join the developer plan true: Join the developer program |
MobileConfig.templateFetchTimeout | Template timeout | The parameter value must be an integer The default value is -1 If the field value is less than or equal to 0, the request timeout is not limited If the field value is greater than 0, the value takes effect at the specified time |
ParseCheckConfig.allowDrawing | Whether to allow the HTML to be graphed when an HTML parsing error occurs (unsupported tags and attributes are encountered in each export scenario) | The parameter value must be Boolean and the default value is true false: The HTML is not allowed to be drawn as a graph when an ERROR is reported during HTML parsing true: Allows HTML to be graphed if an error is reported during HTML parsing |
QuartzConfig.maxConnections | Maximum number of connections for timing scheduling modules (supported after August 16, 2019) | Parameter value must be positive integers The default value is 50 |
QuartzConfig.threadCount | Maximum number of threads for timing module (supported after August 16, 2019) | Parameter value must be positive integers The default value is 100 |
RedisClusterConfig.maxConnection | Redis cluster maximum number of connection pool instances | Parameter value must be positive integers The default value is 200 |
RedisClusterMonitorConfig.messageInterval | Redis node exception notification frequency (unit: h) | The parameter value must be a positive integer The default value is 6 |
RedisConfig.database | Redis specifies the database | The parameter value must be an integer The default value is 0 |
RedisConfig.expireStateRemoveInterval | Interval for deleting expired keys from the status server, expressed in ms | Parameter value must be positive integers The default value is 300000 |
RedisConfig.maxConnection | Maximum number of Redis connection pool instances | Parameter value must be positive integers The default value is 200 |
RemoteDesignConfig.avoidTempAuthValid | Remote design supports digital signature preview | The parameter value must be Boolean and the default value is true false: Remote design does not support digital signature preview true: Remote design supports digital signature preview |
ScheduleSettingConfig.taskTimeout | If the scheduled task exceeds the time limit, it takes 5 minutes by default | The parameter value must be a positive integer The default value is 300000 |
ScheduleSettingConfig.timeoutRemind | Whether to enable monitoring log timeout notification for scheduled scheduling tasks | The value must be a Boolean. The default value is false false: Monitoring log timeout notification is not enabled for scheduled scheduling tasks true: Enables the monitoring log timeout notification function for scheduled scheduling tasks |
SecurityConfig.frontSeed | Used to provide a secret key for front-end encryption | The parameter value is a 16-bit uppercase and lowercase letter It starts as a random 16-bit string of upper and lower case letters that can be modified |
ServerConfig.cookiePath | The cookie path Note: Configure this parameter during project deployment. Otherwise, the browser stores multiple cookies, and each user needs to manually clear the cookies to log in successfully | The parameter value must be a non-empty string The initial value is / |
ServerConfig.tokenFromCookie FSConfig.loginConfig.tokenFromCookie | After this function is enabled, the token can be obtained from cookies in the background, which resolves the failure of background SSO and cross-domain SSO in httponly mode | The value must be a Boolean. The default value is false false: The token cannot be obtained from the cookie during background verification true: The token can be obtained from the cookie during background verification |
ServerPreferenceConfig.useOptimizedUPM | Configures whether to enable new plugin management | The value must be a Boolean. The default value is false false: do not enable new plugin management true: Enables new plugin management |
SystemConfig.hideVersion | Whether to hide the system info version information | The value must be a Boolean. The default value is false false: Do not hide the version information in system info true: Hides the version information in system info |
SystemConfig.serverInit | Whether the platform initialization is complete | Parameter values are as follows. The default value is success success: Platform initialization is complete fail: Platform initialization is not complete |
TemplateAuthConfig.digitalAuthAvailable | Whether the "Digital Signature Authentication" function is available under "Template Authentication" | Reports in 10.0.14 and later versions support this parameter The parameter values are as follows. The default value is true false: The administrator cannot use the template authentication-digital signature function true: The administrator can use the template authentication-digital signature function |
WebSecurityConfig.cacheControlExpiresHeader | The browser caches values that disable header expires | Parameter values are as follows. The default value is 0 0: indicates a past date, that is, the resource has expired <http-date> : The response expires after the specified date</http-date> |
WebSecurityConfig.cacheControlHeader | Browser caching disables header cache-control values | Parameter values are as follows. The default value is no-cache no-cache: Forces the cache to submit the request to the original server for validation before publishing the cache copy (negotiated cache validation) max-age =<seconds> : Sets the maximum period during which the cache is stored, after which the cache is considered expired (in seconds)</seconds> |
WebSecurityConfig.cacheControlPragmaHeader | Browser caching disables header pragma values | Parameter value is no-cache |
WebSecurityConfig.contentSecurityPolicyHeader | header content-security-policy specifies the value of the csp content security policy | The default value is object-src 'self'. 1) object-src 'self' : Limits the source addresses of <object>, <embed>, and <applet> tags And only matches with the current source (not its subdomains) are allowed 2) object - src uri Limits the source addresses of <object>, <embed>, and <applet> tags Only the URL specified in the preceding label can be loaded 3) the default - src https: Disable insecure inline/dynamic execution and only allow these resources to be loaded over https (images, fonts, scripts, etc.) </applet></object> </applet></object> |
WebSecurityConfig.contentTypeOptionsHeader | Content sniffing attack defense header x-content-type-options specifies the value | Parameter value is nosniff |
WebSecurityConfig.fileInspectorType | After security management file verification is enabled, use this configuration file to upload the verification type | Parameter values are as follows. The default value is 1 0: comprehensive. The suffix is not in the whitelist. Otherwise, the header is checked 1: indicates a whitelist. Only those whose suffixes are in the whitelist and whose headers match are allowed 2: blacklist. The suffixes are not in the blacklist |
WebSecurityConfig.frameOptionsHeader | Click the value of header x-frame-options for hijacking attack defense | Parameter values are as follows. The default value is SAMEORIGIN DENY: The browser denies the current page from loading any frame page SAMEORIGIN: the IP address of the frame page must be the SAMEORIGIN domain name ALLOW-FROM origin: indicates the address of the page that allows frame loading |
WebSecurityConfig.hstsHeader | The value of hsts header strict-transport-security | The parameter values are as follows. The default value is max-age=31536000. includeSubDomains 1) max - age = < expire - time > : Set HTTPS to be used for all requests under this domain name within XXX seconds after the browser receives the request 2) max - age = < expire - time >; includeSubDomains: Set HTTPS to be used for all requests under this domain name within XXX seconds after the browser receives the request. This rule also applies to all subdomains of the site 3) max - age = < expire - time >; preload: Set HTTPS to be used for all requests under this domain name within XXX seconds after the browser receives the request. Preload HSTS |
WebSecurityConfig.loginValidateStrict | This parameter is used to restrict the cross-domain login interface and cas background login interface. If true is configured, the two interfaces cannot be used | The value must be a Boolean. The default value is false false: the cross-domain login interface and cas background login interface are not restricted true: indicates that the cross-domain login interface and cas background login interface are restricted |
WebSecurityConfig.xssProtectionHeader | xss attack defense header x-xss-protection specifies the value of xss attack defense | The default value is 1; mode=block 0: disables XSS filtering 1: Enable XSS filtering. If cross-site scripting attacks are detected, the browser will clear the page and delete unsafe parts 1; mode =block: XSS filtering is enabled. If an attack is detected, the browser will not clear the page, but prevent the page from loading 1; report = < reporting - uri >: Enable XSS filtering If a cross-site scripting attack is detected, the browser clears the page and sends a violation report using CSP reporting-uri functionality |
WebSocketConfig.port | websocket server listens on the port | Parameter values are array of ports ["port1","port2"] All ports belong to the range (1024,65535) Default value is ["38888","39888"] |
WebSocketConfig.trustStore | Directory where the trust certificate file is stored | The parameter value is a non-empty string. Use absolute paths as much as possible The default value is __EMPTY__ |
WebSocketConfig.trustStoreFormat | Type of the trust certificate | The value is JKS or PKCS12 If it is a pfx certificate, change it to PKCS12 The default value is JKS |
WebSocketConfig.trustStorePassword | The application key used for the trust certificate | The parameter value is a non-empty string. Use absolute paths as much as possible The default value is __EMPTY__ |
Added support for V1.2 and later plugins:
Parameter name | Description | Parameter value |
---|---|---|
ClusterRedirectConfig.enableSessionIDGenerationStrategy | Whether to enable the sessionID generation policy in the cluster | The value must be a Boolean. The default value is false false: disable the sessionID generation policy in the cluster true: the end of the sessionID of the cluster will concatenate the nodeID of the cluster |
FineClusterConfig.params.ipStackType | Cluster communication mode | The default value is ipv4. You can configure ipv6 |
FineClusterConfig.params.encrypt | Cluster communication encryption switch. The default value is false | The value must be a Boolean. The default value is false false: The cluster communication is not encrypted true: The cluster communication is encrypted |
Html5Config.isJoinProductPlan | HTML5 allows you to turn off the developer plan, and users can manually turn off whether to join the product improvement plan to further protect user privacy | The parameter value must be Boolean and the default value is true false: Close the developer plan true: Enable the developer plan |
LanguageConfig.locale | Platform global language settings | The default value is zh_CN zh_CN: Simplified Chinese zh_TW: Traditional Chinese en_US: English ja_JP: Japanese ko_KR: Korean |
MarketConfig.cloudOperationMaintenanceId | Reset the cloud O&M application ID | The default value is the ID of your cloud O&M application |
MobileConfig.emptyDirVisible | Control whether to display empty directory on mobile terminal (APP, HTML5) | The value must be a Boolean. The default value is false true: Displays an empty directory false: Do not display empty directories |
ServerPreferenceConfig.errorTemplate | FR template error page, can refer to fanruan official help document, custom template error page | The value is a link to a custom error page The default is __EMPTY__ |
WebSocketConfig.hostName | Websocket listens for IP settings | The value is the built-in NIC or external IP address of the server The default is 0.0.0.0 |
WebSocketConfig.webSocketTokenInHeader | socket communication token transfer mode | The value must be a Boolean. The default value is false true: The token is transferred from the request header false: The token is transferred from the URL |
WorkflowAuthorityConfig.compatible | Multiple levels of independent links are reported. When you log in to the system for the first time, a pop-up dialog box is displayed, asking you whether to synchronize the permission configuration from the directory permission This parameter controls whether a prompt is displayed | The value must be a Boolean. The default value is false true: No pop-up is displayed false: popping up |
Added support for V1.5 and above plugins:
Parameter name | Description | Parameter value |
---|---|---|
TemplateIOErrorContextConfig.showTemplateMissingPlugin | Whether the function of recording errors in the log when the plugin is missing is enabled, for details, please refer to: Template Missing Plugin Prompt Chapter III | The parameter value needs to be boolean, the default is false false: not enabled true: enable |
Added support for V1.6 and above plugins:
Parameter name | Description | Parameter value |
---|---|---|
FSConfig.loginConfig.fWords | Custom configuration LDAP authentication username login search field | The parameter value format is: ["value1", "value2"] The parameter value is not allowed to be empty, and the parameter length is not allowed to be 0 The default value of the parameter is ["sAMAccountName","cn","userPrincipalName","uid","displayName","name","sn"] |
Added support for V1.7 and above plugins:
Parameter name | Description | Parameter value |
---|---|---|
UpdateConfig.launchSwitchMap.plugins | Whether the automatic update of the plugin is turned on | If you want to disable the automatic update of the plugin after the project is started, please change the parameter value to false, otherwise no need to change |
CronUpdateConfig.typeMap.plugins | Whether the regular update of the plugin's automatic update is enabled | If you need to close the external network update plugin at 11:00 every night after the project starts, please change the parameter value to false, otherwise no need to change |
DelayUpdateConfig.delaySwitchMap.plugins | Whether the delayed update of plugin automatic update is enabled | If you want to disable the automatic update of the plugin that is delayed for a period of time after the project is started, please modify the parameter value to false, otherwise there is no need to change |
Added support for V1.9 and above plugins:
Parameter name | Description | Parameter value |
---|---|---|
PluginFileValidateConfig.fileValidateOpen | Whether the plugin package integrity check is enabled | The parameter value must be boolean, the default is false false: Plugin package integrity check is disabled true: Plugin package integrity check is enabled |
4. Restart the server
After modifying the configuration according to the parameter rules, click Save. A dialog box is displayed indicating that "The parameters you modified will take effect after the restart. Please restart the server."
The configuration takes effect after the report server is restarted.
Note: If the parameters are not configured according to the parameter rules in section II.3., the parameter value verification fails, and a prompt box is displayed indicating that the configuration item fails to be verified and the configuration item fails to be saved.