Re: Supplier Portal & Security

["Jim Franz" <franz400@xxxxxxxxxxxx>]

Just my opinions..
Allow a supplier to have multiple profiles (you don't want generic profiles 
floating around).
Don't let your sales people assign profiles - they always want to make it 
too easy.
I keep the pwds complex, long, mixed alpha and nbrs & expire every 60 days.
Expect customers to log in from diff computers.
Every profile relates to a single customer, and all the programs and queries 
select the single customer.
We do deal with customers in multi locations, and they want track of who did 
what order.
Don't be surprised to see customers online at 2am..
Less graphics = better response time.
Expect users with older browsers, multiple browsers, old versions of Adobe, 
etc. I do not program for the latest feature, no matter how much fun it is. 
I'd rather have zero or near zero support calls.
Be careful if you upload from them - expect a virus..
Jim Franz

----- Original Message ----- 
From: "Don Cavaiani" <dcavaiani@xxxxxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Monday, May 11, 2009 7:57 AM
Subject: [WEB400] Supplier Portal & Security


> We will soon work begin work on putting up a portal.  I was wondering what 
> some of the more popular methods might be to secure the site, and to only 
> allow Supplier "A" to see supplier "A" related data, and not any of other 
> supplier's data?
>
> TIA,
> Don
>
> Don F. Cavaiani
> IT Manager
> Amerequip Corp.
> 920-894-7063
>
> "It's amazing what you can accomplish if you don't care who gets the 
> credit."  Harry S. Truman
>
>
>
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.