Re: [IBMiOSS] XMLSERVICE, RPGLE & Java error -- OPENSOURCE

That really depends on how you call XMLSERVICE. Using the FastCGI
interface, you pass a username/password which it uses to connect to the
database to call the stored procedure. You can also call it directly using
any database connection. Either way, it uses the user that is logged in to
the database to call the program and then it's all down to standard
object-level user permissions.

XMLSERVICE does have a compile option for the FastCGI program to enable it
to connect with no username/password supplied, in which case it will call
the program as the user running your Apache instance (most likely
QTMHHTTP). This is not the default and AFAIK not provided by the IBM
version in QXMLSERV. I don't know about other vendor versions
(Zend/PowerRuby/etc).

----- Original message -----
From: "Slanina, John" <jslanina@xxxxxxxxxx>
Sent by: "OpenSource" <opensource-bounces@xxxxxxxxxxxx>
To: IBMi Open Source Roundtable <opensource@xxxxxxxxxxxx>
Cc:
Subject: Re: [IBMiOSS] XMLSERVICE, RPGLE & Java error
Date: Mon, Dec 10, 2018 3:55 PM

I could never understand how the security worked with XMLSERVICE. How do
you control what program and tables can be access ?

Thank
John Slanina

On 12/10/18, 3:14 PM, "OpenSource on behalf of Kelly Cookson"
<opensource-bounces@xxxxxxxxxxxx on behalf of KCookson@xxxxxxxxxxxx>
wrote:

Hi Richard,

I had not heard that IBM was thinking about deprecating and
replacing XMLSERVICE. I'll keep an eye out for any news about that.

Just out of curiosity, would the "AIX style ibmdb2 layer" you have
in mind be something that other languages running on PASE could use
(e.g., JS with Node or Python)? Or would it be specific to .NET via the
Mono port?

Thanks,

Kelly Cookson
Senior Software Engineer II
Dot Foods, Inc.
217-773-4486 ext. 12676
www.dotfoods.com<[1]http://www.dotfoods.com/>

--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: [2]https://lists.midrange.com/mailman/listinfo/opensource
or email: OpenSource-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at [3]https://archive.midrange.com/opensource.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: [4]https://amazon.midrange.com

--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: [5]https://lists.midrange.com/mailman/listinfo/opensource
or email: OpenSource-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at [6]https://archive.midrange.com/opensource.

Help support midrange.com by shopping at amazon.com with our affiliate
link: [7]https://amazon.midrange.com

References

Visible links
1. http://www.dotfoods.com/
2. https://lists.midrange.com/mailman/listinfo/opensource
3. https://archive.midrange.com/opensource
4. https://amazon.midrange.com/
5. https://lists.midrange.com/mailman/listinfo/opensource
6. https://archive.midrange.com/opensource
7. https://amazon.midrange.com/