Re: WHO is connecting via QRWTSRVR jobs and editing data?

[Buck Calabro <kc2hiz@xxxxxxxxx>]

On 6/12/2013 3:05 PM, Eric Lehti wrote:
> Or stated more accurately . . . 
> When user BOB or TED or CAROL or ALICE edits IBM i records via our web
> portal, can I easily prove who the user is?
>
> Our portal application, written in PHP, is hosted on a Windows server,
> and runs Apache.
>
> The portal connects to our IBM i with QRWTSRVR jobs active in QUSRWRK
> subsystem, and runs under user profile APACHE which I created
> specifically for connections from that web server.
> Is there a simple configuration so that:
> 1.  when user BOB logs into our web portal, he runs a QRWTSRVR job under
> profile BOB

-snip-

> That functionality would enable all data edits to be audited under each
> user's profile (BOB, TED, CAROL, ALICE) instead of the connection
> profile APACHE.

How does Bob authenticate to the portal?  This is important, because if
the portal calls a service on the IBM side of the house to authenticate,
you could pass a token back and forth which you could then use to do a
profile swap on additional server requests.
  --buck