Security, and Including Labor on Assemblies....

[David R. <dr...@su...>]

Gentlemen (and ladies...)

Two brief questions:
1. One of my last concerns before my all-out switch to sql-ledger is about 
security... my concern is that since password protection on each page 
consists only of having a valid username attached on the end of the url, a 
terminated employee can still access the system as long as he/she still knows 
the name of anyone who works here.

All they have to do us add:
 http://URL?path=bin/mozilla&action=xxx&login=StillEmployedUserName

So my questions is this (yes it takes me a while to get to the point!):
Is it possible to use some form of a SESSION ID instead, such that after a 
successful login the path becomdes URL?session=XNCBXNBC&action=xxx

This way the sessions can expire at some interval (hourly, daily, etc) and 
the slightly more crafty user is defeated.

2. I have a question about how to include LABOR in an ASSEMBLY. Here is what 
I did - and hopefully someone has a better way/workaround.

I have a service item that is called LABOR and its measured in minutes. I 
would like to include it on the Bill of Materials, because for each assembly 
it is a fixed average time. This way, the computed price for the assembly is 
accurate, reflecting materials and labor for an assembly.

Here's the glitch... since a SERVICE is not a PART it does not have an 
INVENTORY ACCOUNT. You can attach the service to a BOM, but when you try to 
invoice the assembly, you cannot post the invoice because the post query 
fails (due to the lack of the inventory account)

One possible workaround, would be to make TIME a PART, but then at the end of 
the week there is an inventory shortage of MINUTES and adjusting that all the 
time could become a nightmare.

Any ideas on either topic appreciated.
Thanks,
Dave Ratte
dr...@su...