OI logon security - question on method (OpenInsight Specific)
At 16 APR 1999 01:05:37PM Gene Sorbo wrote:
Hi again,
I have built custom security into my OI application. Users log on using a generic OI username, then enter a username/password defined in a custom security table.
I need the app to keep track of the custom user name entered for the duration of the OI session.
E.G.;
1) User A logs into OI application HRIS with generic username (HRIS)
2) On application entry form, User A enters specific username (USER) and password, both of which are validated against a custom security table
3) After successful login, my app's menus/forms/stored procedures need to 'know', for the duration of the session, that the User A has logged in with the custom username of 'USER'
Since all users log on as HRIS, using @USER variables is not an option.
Any suggestions on how to handle this?
TIA
Gene
At 16 APR 1999 02:08PM amcauley@sprezzatura.com onmouseover=window.status=why not click here to send me email?;return(true)", [url=http://www.sprezzatura.com" onMouseOver=window.status=Why not click here to visit our web site?';return(true)]Sprezzatura Group[/url] wrote:
As @User variables are local to a workstation session of OI why are they not useable?
Failing that set up a labelled common area and use that
Common /MyStuff/ UserName@, Priv@, Param3@etc
amcauley@sprezzatura.com
World Leaders in all things RevSoft
At 16 APR 1999 02:38PM Gene Sorbo wrote:
Andrew,
]
Since most of the users remotely access the application, they dial into one centeralized Citrix workstation (server) first, then launch the application from there (same workstation for each separate OI user session established). I assumed that because of this, only one set of @user variables would be available… ?
]
In all my years with AREV, I never setup any labelled common areas/variables - sounds like its worth checking into.
Thanks.
Gene
At 20 APR 1999 12:00PM Cameron Revelation wrote:
Gene,
@user variables, as with all globals including labelled common, are per instance of OpenEngine. So you do not need to worry about the Citrix software; it knows to start multiple OpenEngines.
One other thing you can do is store your "secure" name in the SYSLOGINS table. Each user can write to their own SYSLOGINS record (but no one elses). You cannot change the first several fields though … I think user information has to start at field 10 or 11 ….
Cameron Purdy
Revelation Software