Re: web app security - user profile or validation list?

I normally use a similar token method to Tim. Although I only store the
token as a cookie on the client's PC, with no other data. Then I have a
cross reference file from the token to the user.

Works well. Although I validate against a validation list using a set of
ILE subprocs I created some time ago.

Bradley V. Stone
www.bvstools.com
GreenTools for # Slack # <https://www.bvstools.com/g4slk.html>: Easy to use
interfaces for sending and receiving messages on Slack!

On Tue, Aug 21, 2018 at 11:38 AM Steve Richter <stephenrichter@xxxxxxxxx>
wrote:

not familiar with the userid parameter. ZENDPHP7 jobs run as QTMHHTTP.
When my PHP code calls db2_connect I pass empty string for the user name
and password.

$options = array('i5_naming' => DB2_I5_NAMING_ON);
if (strlen($libl) > 0)
{
$options['i5_libl'] = $libl ;
}
$conn = db2_connect("*LOCAL","","", $options);


mostly, I do not follow how if I use validation list, how best to switch to
an IBM i user profile.




On Tue, Aug 21, 2018 at 12:06 PM, Jon Paris <jon.paris@xxxxxxxxxxxxxx>
wrote:

Have you specified the UserId parameter in the server profile? Anyone
signing in using the validation list should be running under this User Id
and will have those access rights.

Does that not work for you?

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.