Timothy Larson wrote: >I am interfacing to an established system >and cannot change the security model. > >It works like this: >1) Login as specific user with rights to public objects only >2) Run a report >3) Report does key exchange to prove its authenticity to the db >4) Database yields key to upgraded security role >5) Report uses key to switch to the new role >6) Report accesses secured objects >7) Report switches back to role with public access only >8) Repeat from step 2 or proceed to step 8 >8) Logout now or when session expires or is invalidated > >The access rights granted are based on a combination of the >logged-in user and the specific report being run. > >To interface with this system I wrote some working java code to >do the key exchange with the db and change the security role. > >How can I integrate this with the reports I wrote in xsp/esql and xsl? >
There were an ability to create connection for one request in ESQL. You can try to use it. Vadim >Tim > > > >>>>[EMAIL PROTECTED] 09/27/02 08:34AM >>> >>>> >>>> >>Timothy Larson wrote: >> >> >>>Each session needs to be logged into the database with a >>>different username and password. >>> >>> >>Do you think it's a good idea? >> >> >> >>>How can I do this using a database pool? >>> >>> >>There is no way unless you know SQL command to do it. The hole purpose >>of a pool is to "connect once", and avoid a lot of costly connects in a run. >> >>Vadim >> >> --------------------------------------------------------------------- Please check that your question has not already been answered in the FAQ before posting. <http://xml.apache.org/cocoon/faq/index.html> To unsubscribe, e-mail: <[EMAIL PROTECTED]> For additional commands, e-mail: <[EMAIL PROTECTED]>
