I am interfacing to an established system
and cannot change the security model.

It works like this:
1) Login as specific user with rights to public objects only
2) Run a report
3) Report does key exchange to prove its authenticity to the db
4) Database yields key to upgraded security role
5) Report uses key to switch to the new role
6) Report accesses secured objects
7) Report switches back to role with public access only
8) Repeat from step 2 or proceed to step 8
8) Logout now or when session expires or is invalidated

The access rights granted are based on a combination of the
logged-in user and the specific report being run.

To interface with this system I wrote some working java code to
do the key exchange with the db and change the security role.

How can I integrate this with the reports I wrote in xsp/esql and xsl?

Tim

>>> [EMAIL PROTECTED] 09/27/02 08:34AM >>>
>Timothy Larson wrote:
>>Each session needs to be logged into the database with a
>>different username and password.
>
>Do you think it's a good idea?
>
>>How can I do this using a database pool?
>
>There is no way unless you know SQL command to do it. The hole purpose 
>of a pool is to "connect once", and avoid a lot of costly connects in a run.
>
>Vadim



---------------------------------------------------------------------
Please check that your question  has not already been answered in the
FAQ before posting.     <http://xml.apache.org/cocoon/faq/index.html>

To unsubscribe, e-mail:     <[EMAIL PROTECTED]>
For additional commands, e-mail:   <[EMAIL PROTECTED]>

Reply via email to