How to secure P98OWSEC

How do you secure P98OWSEC to allow users to change their own passwords but nobody else's? A previous administrator secured all the W98OWSEC* forms ... are forms valid objects to secure in P00950?

We are running Xe, SP20, on an AS/400.

Yes, that´s the way to do it. Secure all forms from *PUBLIC except the User Password Revision form.

Gerd

This seemed to work OK. I defined application security (Run=Y/Install=Y) for form W98OWSECD ONLY to P00950 for a test group. Note that in P00950 there is application security for Object=*ALL with Run=N/Install=N and no record for P98OWSEC.

With this definition, a user could successfully change their password when desired.

However, if the user chooses to change their password because it has expired (or if they get the warning that it is about to expire and they choose to change it), form W98OWSECD is displayed, the users enters the password change information, and then ... an message is displayed "Failed to load enviroment ..." and the login fails. The JDE.LOG shows:

1512/1716 Wed Apr 21 17:31:21 2004 newmda.cpp1081
The registry entries for jdeocx.ocx were removed successfully.

1512/1716 Wed Apr 21 17:31:21 2004 newmda.cpp1019
The registry entries for jdeocx.ocx were created successfully.

1512/1716 Wed Apr 21 17:31:21 2004 jdb_ctl.c2673
Starting OneWorld

1512/1716 Wed Apr 21 17:31:24 2004 jdeksec.c868
SEC0000003 - Security Server returned eSecInvalidPassword for user PWTESTID for eSecValidate

1512/1716 Wed Apr 21 17:31:24 2004 jdb_ctl.c3139
JDB1100018 - Failed to get past Security check

1512/1716 Wed Apr 21 17:31:27 2004 msc_signon.cpp199
Environment load failed from SignOn

1512/1716 Wed Apr 21 17:32:06 2004 jdeksec.c868
SEC0000003 - Security Server returned eSecInvalidPassword for user PWTESTID for eSecValidate

Note that at this point the password has been changed. The user can restart OneWorld and log in with the new password.

Any ideas?


Robert Lilley
CNC Administration
Springs Industries, Inc.
803-396-1384
[email protected]