HTTPS -> HTTP can't open radWindow "Access Denied"

[RedHat]

Here is my situation.

I have a page HTTP Lets call it "Products"
I have a page HTTPS Let call it "Purchase"
I have a page (which can be HTTP or HTTPS) lets call it "Terms"

The products http page calls a Modal dialog "Purchase" and on this purchase dialog I have a "View Terms" link.
the "Terms" dialog shows up Inside the bounds of the "Purchase" dialog.

I am trying to get the "Terms" page to show up outside the bounds of the "Puchase" dialog since it is much larger.

My problem is that I am getting an access denied trying to call javascript on the parent, "Products" Page.

"Purchase" radWindow
function ShowTerms() {
      GetRadWindow().BrowserWindow.ShowTerms();
     }

"Products" Main Page
   function ShowTerms() {
    var oManager = GetRadWindowManager();
    var oWnd = oManager.open('/Terms.aspx', 'dlgTerms');
   }

Of course being that Purchase is SSL and Products is not Im getting an Access Denied.

basically i need to the Terms dialog to show up outside of the "Purchase" dialog bounds, without having to call a function on the parent window (because of the HTTP/HTTPS restrictions.)

anyone have a workaround for my dilema?

Oh, and I have other restrictions I need to take into account, so making everything https or http is not an option as it stands.

[Georgi Tunev]

Hi Gaston,

The behavior that you experience is expected - if one of the pages is using HTTP and the other - HTTPS, you cannot access objects in one page from the other. Please note that this issue is not related to the RadWindow control - you will experience the same behavior if you are using a standard IFRAME instead.
There is no other workaround in such scenario than to have both pages using the same protocol, otherwise it would be a major security hole.


Regards,
Georgi Tunev
the Telerik team