My gadget needs to contact two URLs to retrieve XML content (not SOAP, just URLs that return XML). The first one is internal URL (not accessible from public) and I used {proxy:"none"} when creating network request; the second URL is public and I used {proxy:"generic"}.
The gadgets is uploaded onlto galleryd.live-int.com, During test, everything seems fine when I use IE6 on an internal PC (of course with the trusted site and cross-domain settings changed). However, when I switch to an IE7 (on Vista) internal machine, even after changing the settings, it kept giving "Access is denied" error.
I also tried adding the regedit trick found on the old forum, but it didn't help:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP_RESPECT_ZONEPOLICY]
"Iexplore.exe"=dword:00000001
Any idea what could be wrong Thanks a lot!
BTW. I had to do the first one in order to workaround some parameter passing problems, but that probably won't matter.
"Access is Deined" error on IE7, but works fine on IE6
Seiggy
Bilal Haidar - MVP
Update: In Internet Options -> Advanced -> Security, I tried uncheck the box says "Enable native XMLHTTP support", it seems work on a machine that has XP+IE7, but caused passport login issue on a Vista machine. Thought it might help to share that info.
daydreamsy2k
Thanks ToddOs, that makes sense. Unfortunately, it didn't solve the problem. I even enabled cross-domain access on both zones, but still the same :(
When I debug, it shows that error happened when requesting the internal URL (first one that that I mentioned before).
One thing that I didn't understand is the difference between IE6 and IE7 when honoring the same cross-domain settings.
Any other possible trick Thanks!
[Update: Sorry mis-spelled your name :) ]
BlackDimond
Try this: http://forums.microsoft.com/MSDN/ShowPost.aspx PostID=1022010&SiteID=1
The gadget SDK has a bit of a typo, as it tells you to add *.live.com and *.start.com (or in your case, *.live-int.com and *.start-int.com) to Trusted Sites, but then tells you to allow cross-domain calls for the Internet zone. You need to make that change in the Trusted Sites zone instead ((IE7 defaults to disabling cross-domain data access even in Trusted Sites, where IE6 allowed that by default in Trusted Sites).
Binu Jeesman
Just a shot in the dark, Turn off the automatic phishing detection in IE 7..
I