What is the best field in a user profile for storing information such as an employee's PIN number? We are going to compare this field against a file that contains HR information; disabling user profiles if the PIN has been terminated.
The answer depends on whether you consider a user's PIN to be confidential information. If it is, it shouldn't be stored in the user profile. If it's confidential, I recommend that you use a validation list object (*VLDL) to store the information. You can create a validation list through the CRTVLDL command, but you must manipulate them (input and retrieve information) using the validation list APIs. If the information is not used, then pick a field that you do not use - perhaps the accounting code or text field. Another possibility is to use the UID field. Rather than using the system generated UID, you could use the PIN as the UID (assuming that it's an all-numeric field and the PINs are unique across user profiles and again, that it is not considered confidential.)
MORE INFORMATION ON THIS TOPIC
The Best Web Links: Tips, tutorials and more.
Search400's targeted search engine: Get relevant information on security.
Ask your systems management questions--or help out your peers by answering them--in our live discussion forums.
Read this Search400 Featured Topic: Secure your iSeries
Dig Deeper on iSeries system and application security
Related Q&A from Carol Woodbury
Before changing password levels and upgrading operating systems on the AS/400, ensure the clients connecting to the NetServer do not need the old ... Continue Reading
Look in the audit journal (QAUDJRN) on the AS/400 for an authority failure message with the name of the library as the object name. Use the ... Continue Reading
On AS/400, the journal type AF subtype K, shows that a user profile lacks the special authority required by the function attempting to run. Continue Reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.