Re: Supplier Portal & Security

Just my opinions..
Allow a supplier to have multiple profiles (you don't want generic profiles floating around).
Don't let your sales people assign profiles - they always want to make it too easy.
I keep the pwds complex, long, mixed alpha and nbrs & expire every 60 days.
Expect customers to log in from diff computers.
Every profile relates to a single customer, and all the programs and queries select the single customer.
We do deal with customers in multi locations, and they want track of who did what order.
Don't be surprised to see customers online at 2am..
Less graphics = better response time.
Expect users with older browsers, multiple browsers, old versions of Adobe, etc. I do not program for the latest feature, no matter how much fun it is. I'd rather have zero or near zero support calls.
Be careful if you upload from them - expect a virus..
Jim Franz

----- Original Message ----- From: "Don Cavaiani" <dcavaiani@xxxxxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Monday, May 11, 2009 7:57 AM
Subject: [WEB400] Supplier Portal & Security

We will soon work begin work on putting up a portal. I was wondering what some of the more popular methods might be to secure the site, and to only allow Supplier "A" to see supplier "A" related data, and not any of other supplier's data?

TIA,
Don

Don F. Cavaiani
IT Manager
Amerequip Corp.
920-894-7063

"It's amazing what you can accomplish if you don't care who gets the credit." Harry S. Truman



--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.