EGL Development User Group

EGL Development User Group

EGL Development User Group

The EGL Development User Group is dedicated to sharing news, knowledge, and insights regarding the EGL language and Business Developer product. Consisting of IBMers, HCL, and users, this community collaborates to advance the EGL ecosystem.

 View Only
  • 1.  IBM i Swapping Profiles

    Posted 05/10/16 02:01 PM

    Has anyone been successful getting the QSYGETPH & QWTSETP APIs working in a service to swap user profiles on the IBM i?

    We are implementing database field encryption and I need to be able to elevate the authority during certain SQL statements to return unmasked data.

     

    Rick

    RickGentner


  • 2.  Re: IBM i Swapping Profiles

    Posted 05/17/16 09:13 AM

    Hi Rick,

    I did a google search and found numerous hits, such as:

    http://www.ibm.com/support/knowledgecenter/ssw_i5_54/apis/QSYGETPH.htm

    http://www.ibm.com/support/knowledgecenter/ssw_i5_54/apiref/apiexushand.htm?lang=en

     

    If that doesn't give you what you need, you could try opening a PMR against the iSeries DB2 group and ask about this.

    Jeff.Douglas


  • 3.  Re: IBM i Swapping Profiles

    Posted 05/19/16 08:06 AM

    I spoke with IBM JAVA support. 

    You can't call the APIs directly because that runs in a different job on the server which is not the same one that database requests are processed in.

    You have to either call a stored procedure or create a new connection with the user profile that has elevated authority.

    I chose stored procedure because I did not want to have to code a password into the service.

     

    RickGentner


  • 4.  Re: IBM i Swapping Profiles

    Posted 05/21/16 09:57 AM

    That's good information. 

    Thanks Rick for clarifying this.

    Jeff.Douglas