Re: web app security - user profile or validation list?

Are you not seeing my posts Steve? We do not need to switch user. The user that is defined in the apache profile I posted has the required authorities (is actually part of a group for that purpose I think).

As to other comments re having the server job owning everything if you run PHP that is just not my experience. And we run PHP apps all day every day.


Jon Paris

www.partner400.com
www.SystemiDeveloper.com

On Aug 21, 2018, at 3:21 PM, Steve Richter <stephenrichter@xxxxxxxxx> wrote:

On Tue, Aug 21, 2018 at 2:37 PM, Nathan Andelin <nandelin@xxxxxxxxx> wrote

Later in the process, when you want PHP to "connect" to the database server

(i.e. QZDASOINIT or QSQSRVR Job), you have to provide different credentials
for that. It sounds like you want to authenticate using an IBM i user
profile for that, in order to take advantage of IBM i interfaces for
specifying data object authorities.

yes, but as I understand it, to switch from validation list user to an IBM
i user profile user, you need the password of the IBM i user.

Would help if the validation list allowed a built in link to an associated
user profile. What if the QSYGETPH accepted a validation list user name
and password as input arguments?
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.