| Author |
Message
|
| ucbus1 |
 Posted: Tue Mar 04, 2003 8:16 am Post subject: workflow webclient(Out-of-box-client) |
 |
|
Knight
Joined: 30 Jan 2002
Posts: 560
|
I ahve a question regarding the websphere/workflow web client. Our uses can logon to workflow using out-of-box client using userid "admin" password. For that matter anybody using this can logon to workflow. But is there any way I can track their activities. I will explain why I need this. Suppose user "xyz" has logged on to webclient using 'admin" and terminated the work item. Workflow log says it is terminated by admin not by xyz. Can I by anyway track the activities of everyone who use out-of-box client.
Also, we have NT network. Is there any way I can restrict users based on the access rights, and restrict access to the webpage of out-of-box client. BTW we use websphere-iis-workflow3.3.0.2
Thanks in advance |
|
| Back to top |
|
 |
| Ratan |
| Posted: Tue Mar 04, 2003 8:30 am Post subject: |
|
|
Grand Master
Joined: 18 Jul 2002
Posts: 1245
|
I am not sure what you are trying to do. But you can have all the users defined in workflow, so they will logon to Webclient with thier assigned userIds instead of 'Admin'. Change the password of 'Admin', so you know they dont use it.
-Laze |
|
| Back to top |
|
|
| jmac |
| Posted: Tue Mar 04, 2003 8:31 am Post subject: |
|
|
Jedi Knight
Joined: 27 Jun 2001
Posts: 3081
Location: EmeriCon, LLC
|
The first thing you should do (as advised by Buildtime) is to change the password of the ADMIN user.
NO "regular" user should be logging in as ADMIN to a production Workflow system, it should be reserved for the System Administrator.
_________________
John McDonald
RETIRED |
|
| Back to top |
|
|
| ucbus1 |
| Posted: Tue Mar 04, 2003 12:23 pm Post subject: |
|
|
Knight
Joined: 30 Jan 2002
Posts: 560
|
I fully agree with the workflow admin need to administer that. However, since business point of view/administration point of view or whatever reson which is not explained to me it is now accessible. For that matter it is accessible to many.
However, I would like to keep track of things,behind the screen so that I have some record of what is happenning.
Any suggestions? |
|
| Back to top |
|
|
| yaakovd |
| Posted: Tue Mar 04, 2003 1:15 pm Post subject: |
|
|
Partisan
Joined: 20 Jan 2003
Posts: 319
Location: Israel
|
It is very strange "point of veiw" 
If I will log-in in this forum as "ucbus" (of course, I need your password), my message will be created with user "ucbus" and not "yaakovd".
You can try to take username from client computer
or ask users type user name and put it into WF container...
But why ???
_________________
Best regards.
Yaakov
SWG, IBM Commerce, Israel |
|
| Back to top |
|
|
| jmac |
| Posted: Tue Mar 04, 2003 2:03 pm Post subject: |
|
|
Jedi Knight
Joined: 27 Jun 2001
Posts: 3081
Location: EmeriCon, LLC
|
Ucbus:
I don't think you are going to be able to do what you want to do easily.
Even if you could track at logon time WHO Admin is, you still would need to carry this token around with you at all times, since at any one time you could have 5 or 10 different people logged in as ADMIN, and you'd need to be able to tell which one was which.
It is my opinion that the solution to this problem is to not let everone use ADMIN. Why do they need it in the first place? You could give the people who need it the authoritites they need via Buildtime.
GOOD LUCK
_________________
John McDonald
RETIRED |
|
| Back to top |
|
|
|
|
