How to switch user using v17.2.1721

[ppeeters]

Hello,

Since the ability to switch user has been removed from 17.2.1721 ('Login as another user' ), how can I switch to an administrative user if the cloud repository is configured for Windows and OpenID authentication ?
On window, it automatically authenticates using the windows user and then I'm stuck.

[PeterHeintz]

Good question!
I ask myself how an admin can work without admin rights!?!

[Modesto Vega]

Hello,

Since the ability to switch user has been removed from 17.2.1721 ('Login as another user' ), how can I switch to an administrative user if the cloud repository is configured for Windows and OpenID authentication ?
On window, it automatically authenticates using the windows user and then I'm stuck.

Hello Peter, have you tried running Sparx EA as a different user. To run as different user shift and right click on the application. How to achieve this differs depending on the version of Windows you are running and the policies applied to your laptop.

You could also try running the following command from a command line or PowerShell:

Code: [Select]

runas /user:DOMAIN\UserName "C:\Path\App.exe"

[PeterHeintz]

Hi,
no I have not tried this but it will also not work for us currently.
We have for each for each user a local admin account with password (nor know by our ADS). Funnily in the user manual of V17.2 this still reommended to have but how to login is now unclear. I will try if a EA shortcut file can be used if I have time to.
However I do not understand why this feature is removed.

[Geert Bellekens]

However I do not understand why this feature is removed.

I'm guessing it's removed because of the big security vulnerabilities scare.
Apparently, after Sparx dismissed the direct reports, the vulnerabilities where publically published.
This apparently lead to a bit of a panic at Sparx to quickly fix all security related issues.
See also the disablement of Repository.Execute(), and the new restrictions on Repository.SQLQuery (none of which was announced in the release notes)

Geert

[ppeeters]

You could also try running the following command from a command line or PowerShell:

Code: [Select]

runas /user:DOMAIN\UserName "C:\Path\App.exe"

Enterprise policies generally prohibit from having multiple accounts on the same corporate device. It just so happens that I have such an local admin account so I can test this.
It is indeed possible to be authenticated using that principal and then assigned the user to an Administrator group. By the way, the last action is only possible if you still can authenticate as an admin. I could do that using Sparx EA 17.0 which still allow to switch user.
The majority of our users do not have such a dual AD account hence cannot use that trick.

Another possibility is to disable Windows authentication for the repository while keeping OpenID. The OpenID authentication workflow still gives the opportunity to cancel it and to fall back using the user/pass authentication method.

Those workaround look like kludges. In the end, it boils down to the ability to support user roles at the repository level. Once authenticated, you should be able to select the role you want to use for a given work session.