Re: [WDSCI-L] Re: WebFacing and User Profiles

[Duane Kehoe <dkehoe@xxxxxxxxxxxxxx>]

   Mike,

   I was working with a Jim Mickelson, he gave me the link you referred to
   below as well as another one:

   
http://www-912.ibm.com/8625680A007CA5C6/1AC66549A21402188625680B0002037E/0A87195A060967F4862565C2007D359D

   which will programmatically handle this via a test which changes the user
   profile during login, the problem for me is we audit changes to user
   profiles and this type of action destroys the audit logs.  Based on this
   we are evaluating alternate options such as the use of supplemental users
   instead.

   Thanks to everyone who helped out though.

   Mike Hockings wrote:

 Cool, who are you working with?

 The official word is in this doc :

 
http://www-1.ibm.com/support/docview.wss?rs=715&context=SSZND2&q=webfacing&uid=swg21060935

 However you can define you own inlpgm with the same name (QQFINVOKER) and
 see if that works for you.

 Mike

 Mike Hockings, P.Eng.
 WebSphere Development Tools for AS/400  -  CODE/Designer & WebFacing !
 IBM Canada Ltd. Laboratory
 hockings@xxxxxxxxxx




 Duane Kehoe <dkehoe@xxxxxxxxxxxxxx>
 Sent by: wdsci-l-bounces@xxxxxxxxxxxx
 04/20/2005 04:52 PM
 Please respond to
 Websphere Development Studio Client for iSeries


 To
 Websphere Development Studio Client for iSeries <wdsci-l@xxxxxxxxxxxx>
 cc

 Subject
 Re: [WDSCI-L] Re: Webfacing and User Profiles






    I am working with IBM on a way to do this, with limited capabilities,
 when
    I have a working model I will post it to the group, thanks for
 everyone's
    help so far.

    michael@xxxxxxxxxxxxxxxxxx wrote:

  Partial doesn't work either for webfacing.

  You can keep users in a menu, or enforce resource security.

 

  -------- Original Message --------
  Subject: Re: [WDSCI-L] Re: Webfacing and User Profiles
  From: Duane Kehoe <dkehoe@xxxxxxxxxxxxxx>
  Date: Wed, April 20, 2005 2:13 pm
  To: Websphere Development Studio Client for iSeries
  <wdsci-l@xxxxxxxxxxxx>

  This value is currently set to yes for almost all users per our auditors
     who wanted no command line access for general users.  Is there someway
     anyone knows of to remove command line access without setting the
 limit
     capabilities to *yes or *partial(it does not work either)?  Thanks in
     advance.

     Ron Harvey wrote:

   Duane,

   You have checked, like Michael suggested, that the user profiles do not
 have limuted capabilities.

                             Display User Profile - Basic
 
    User profile . . . . . . . . . . . . . . . :   RHARVEY
     ||
   ||

    Initial menu . . . . . . . . . . . . . . . :   *SIGNOFF
      Library  . . . . . . . . . . . . . . . . :
    Limit capabilities . . . . . . . . . . . . :  *NO

   Because if that is *YES it will do exactly what you're describing.

   Ron

 


 

     --

     Weyco Group -
 
         Florsheim, Brass Boot, Nunn Bush, Stacy Adams
     Duane Kehoe                       Phone # 414.908.1814
     EC / Programmer / Analyst           Fax # 414.908.1610
                               Email: dkehoe@xxxxxxxxxxxxxx
  --
  This is the Websphere Development Studio Client for iSeries  (WDSCI-L)
 mailing list
  To post a message email: WDSCI-L@xxxxxxxxxxxx
  To subscribe, unsubscribe, or change list options,
  visit: http://lists.midrange.com/mailman/listinfo/wdsci-l
  or email: WDSCI-L-request@xxxxxxxxxxxx
  Before posting, please take a moment to review the archives
  at http://archive.midrange.com/wdsci-l.
 

 

    --

    Weyco Group -
 
        Florsheim, Brass Boot, Nunn Bush, Stacy Adams
    Duane Kehoe                       Phone # 414.908.1814
    EC / Programmer / Analyst           Fax # 414.908.1610
                              Email: dkehoe@xxxxxxxxxxxxxx
  

   --

   Weyco Group -             
                             
       Florsheim, Brass Boot, Nunn Bush, Stacy Adams
   Duane Kehoe                       Phone # 414.908.1814 
   EC / Programmer / Analyst           Fax # 414.908.1610 
                             Email: dkehoe@xxxxxxxxxxxxxx