Re: web app security - user profile or validation list?

[Steve Richter <stephenrichter@xxxxxxxxx>]

On Wed, Aug 22, 2018 at 1:43 PM, Justin Taylor <JUSTIN@xxxxxxxxxxxxx> wrote:

> True.  He needs to have it both ways.
>
> I wonder if there's a way in your Apache config to have authentication use
> either user profile or validation list authentication?  You could probably
> get there by using different URL's.  Of course, the validation list users
> would still be anonymous for authentication and journaling.  You could do
> DIY logging to record what validation list users do, and control what they
> can access.

I would have all the validation list users linked to an IBM i user
profile.   Some are grouped to generic user profiles. Like trade show
users.  Or customers who access their orders and browse product info.  But
most users I want to login and run as their individual IBM i user profile.