SYMPTOM:
When using database login as the standard login method for Strategy Web 9.x, users are able to enter incorrect user names and passwords, and they are still presented with the list of all projects that use database login. Only when a user clicks on a project are they denied access.
CAUSE:
This is working as designed, due to the nature of database login. Since the credentials need to be passed to a database for verification Strategy does not verify them. Because the database login is defined on the project level, a user must first select a project, so the server knows what database to pass the credentials to. This is why the credentials entered before the project listing are treated as guest authentication, and why all the projects are listed: Strategy Web stores the credentials until a user clicks on a project., the credentials are passed to the database for authentication, and then they succeed or fail. A request has been logged to change this behavior.
ACTION:
Contact Strategy Technical Support for an update on this issue.
