Web Services "service" account

HFCDev

Hi, 

   I just completed an application that leverages CWS that requires admin access.  I am eventually going to need to get a service account for it to log in with. My question is this: Is there a way to configure an account where login is disabled through the web UI but not through CWS? The idea being is if the account ever got into the wrong hands, can we prevent someone from logging in with it?

Thanks

-Hugh Ferguson

Darrin Tisdale

Just saw this message, but thought I'd add my thoughts...

• As of 10.5, no, you cannot set up an account that prevents web access but allows for services login. There's no means to make such a designation.
•  
• IMHO the best way to accomplish your goal is to use a proxy pattern, and in this case, the implementation would be to create an intermediary service that performs the admin-level functions for the front-end app. In both cases, you simply the front-end interface and hide the implementation from the client layer, giving you flexibility for modifications, etc. moving forward. Two approaches can be used here:
  • Create an OScript custom service that you call from your client app directly. In the service, you can then create an admin-level PrgCtx. With that, the backend Oscript can perform the actions you want securely.
  • Create the intermediary service interface in .NET or Java that keeps the service account information in the mid-tier, not in the front end.