|
From: David R. <dr...@su...> - 2001-11-14 15:14:48
|
Gentlemen (and ladies...) Two brief questions: 1. One of my last concerns before my all-out switch to sql-ledger is about security... my concern is that since password protection on each page consists only of having a valid username attached on the end of the url, a terminated employee can still access the system as long as he/she still knows the name of anyone who works here. All they have to do us add: http://URL?path=bin/mozilla&action=xxx&login=StillEmployedUserName So my questions is this (yes it takes me a while to get to the point!): Is it possible to use some form of a SESSION ID instead, such that after a successful login the path becomdes URL?session=XNCBXNBC&action=xxx This way the sessions can expire at some interval (hourly, daily, etc) and the slightly more crafty user is defeated. 2. I have a question about how to include LABOR in an ASSEMBLY. Here is what I did - and hopefully someone has a better way/workaround. I have a service item that is called LABOR and its measured in minutes. I would like to include it on the Bill of Materials, because for each assembly it is a fixed average time. This way, the computed price for the assembly is accurate, reflecting materials and labor for an assembly. Here's the glitch... since a SERVICE is not a PART it does not have an INVENTORY ACCOUNT. You can attach the service to a BOM, but when you try to invoice the assembly, you cannot post the invoice because the post query fails (due to the lack of the inventory account) One possible workaround, would be to make TIME a PART, but then at the end of the week there is an inventory shortage of MINUTES and adjusting that all the time could become a nightmare. Any ideas on either topic appreciated. Thanks, Dave Ratte dr...@su... |