Re: web app security - user profile or validation list?

Are you not seeing my posts Steve? We do not need to switch user. The
user that is defined in the apache profile I posted has the required
authorities (is actually part of a group for that purpose I think).

As to other comments re having the server job owning everything if you run
PHP that is just not my experience. And we run PHP apps all day every
day.


Jon Paris

www.partner400.com
www.SystemiDeveloper.com

On Aug 21, 2018, at 3:21 PM, Steve Richter <stephenrichter@xxxxxxxxx>

wrote:

On Tue, Aug 21, 2018 at 2:37 PM, Nathan Andelin <nandelin@xxxxxxxxx>

wrote

Later in the process, when you want PHP to "connect" to the database

server

(i.e. QZDASOINIT or QSQSRVR Job), you have to provide different

credentials

for that. It sounds like you want to authenticate using an IBM i user
profile for that, in order to take advantage of IBM i interfaces for
specifying data object authorities.

yes, but as I understand it, to switch from validation list user to an

IBM

i user profile user, you need the password of the IBM i user.

Would help if the validation list allowed a built in link to an

associated

user profile. What if the QSYGETPH accepted a validation list user name
and password as input arguments?
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing

list

To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.