Introducing a new Customer Center experience Learn more
We noticed that some of the web panels in SuperOffice CRM stopped working. Why does it happen and how do we fix it?
There could be several reasons why a new web panel does not work. Here are a few most common situations:
When your user does not belong to the user group that has access to the panel
When you create a new panel (e.g. GoogleMaps (1)) and you use the Grouping and Filtering (2) functionality, please make sure the users who should be able to see the panel belong to the groups (3) that have access to see it. Please check this FAQ to see how to assign a User Group to a user.
When the URL, that is configured in the web panels, is not accessible
To test if the URL defined in the web panel is accessible, please make the test described below:
When the URL, that is configured in the web panel, is using the http protocol
SuperOffice Online is accessible via the https protocol. If the application or the web site, which is defined in your web panel, is accessible via the http protocol - you will run into the situation, where the site cannot be displayed due to the "mixed content". To make sure that this is the case open "Console" in your browser and you should see the error:
Mixed Content: The Page at '[URL to site]' was loaded over HTTPS, but requested an insecure resource '[URL to site]'. This request has been blocked; the content must be served over HTTPS.
If the site also provides the service in the https format, you can change the URL in the web panel setup, in the Settings and maintenance. Then the problem should be fixed. Please read this article for more information.
When the same-origin policy is not respected
The same-origin policy is an important concept in the web application security model. Under this policy, a web browser permits scripts, contained on the first web page, to access the data on the second web page. This can happen only if both web pages have the same origin.
It is not handled by SuperOffice, but by the browser used by a SuperOffice user. It is the owner of the content who decides if others can use their content on a "cross-domain site". See the LinkedIn example discussed in this forum thread.
To test if this is the case – i.e. why the content of the web panel is not displayed – open "Console" in your browser. There you should see the error: "Refused to display '[URL to site]' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN."
The browser's security controls are another factor, that could explain why web panel content is not visible. When a site carries the "DENY' or "SAMEORIGIN" page, that either prohibits the site from being displayed in an iFrame altogether, or it requires that the iFrame displaying this URL is a member of the same domain (origin) as the site itself.
For example, if you try to display one of these sites within the SuperOffice iFrame and you encounter the SAMEORIGIN parameter, that means the site is not permitted to run in SuperOffice CRM, as the domain of SuperOffice and the domain of the host site are different.
Note!
When you created a new panel in the Panel administration site (InfoBridge) and did not refresh SuperOffice CRM
When you create a new panel in a special Panel administration site, please click on the SuperOffice URL to flush the site.
Note! In the Panel overview, you can also click the green Refresh SuperOffice button to refresh SuperOffice CRM.
More information:
Help file: GUI - Web panel