Re: web app security - user profile or validation list?

On Tue, Aug 21, 2018 at 9:53 AM, Steve Richter <stephenrichter@xxxxxxxxx>
wrote:

Is there guidance from IBM on how to limit access to tables and programs to
specific user profiles when running PHP web code?

Steve,

You're probably aware that there are separate and different authentication
processes depending on whether one is authenticating against the web server
or the database server. It sounds like you want the HTTP server to
authenticate against an IBM i validation list.

Later in the process, when you want PHP to "connect" to the database server
(i.e. QZDASOINIT or QSQSRVR Job), you have to provide different credentials
for that. It sounds like you want to authenticate using an IBM i user
profile for that, in order to take advantage of IBM i interfaces for
specifying data object authorities.

Nathan.