Web Applications with CA 2E and WebsydianExpress

(1)

Web Applications with CA 2E and WebsydianExpress Develop and Deploy

Develop and Deploy

Søren Madsen Anne-Marie Arnvig

(2)

Websydian A/S

y

• Founded in 1985

• Headquarters in Copenhagen, Denmark

• Using CA 2E since 1989Using CA 2E since 1989

• Using CA Plex since 1994

• 100% dedicated to model based development working • 100% dedicated to model-based development – working

smarter not harder

• More than 200 customers in 35 countries worldwide

• First version of Websydian was released 1998

(3)

Websydian A/S

y

CA d W b di A/S t t i t i

• CA and Websydian A/S are strategic partners in

delivering complete solutions since 2000. The goal is to handle the challenges of quick and reliable g q

development of robust and secure Web, Wireless and Web Service Applications.

• Websydian target the Java, Windows and IBM System i (the former AS400) platforms( ) p

(4)

Slide 3

OHH1 Websydian now has more than 200 customers in more than 30 countries and still growing Punktum efter 2001

(5)

Agenda

g

• Websydian focus

• A flatter, smaller and faster world • What are you up against

• 2E and web – what you need

• A closer look at security and usabilityy y • Making ”faster” concrete

• Websydian benefits out-of-the-boxWebsydian benefits out of the box

(6)

Websydian focus: work smarter

• We have been involved with CA 2E from the start • We know the needs of 2E developers

• We build WebsydianExpress based on experience andWe build WebsydianExpress based on experience and feedback

(7)

A flatter, smaller and faster world

• Web casts, remote connections, e-conferences, , • Non-stop change is the new normal

(8)

What are you up against?

y

p g

• What does it take to transform your 2E applications intoy pp web applications if you start from scratch?

• What do you need to learn?

• What options do you need to consider, evaluate and choose between?

• What do you need to develop yourselves? • What do you need to develop yourselves?

(9)

2E and web – what you need

• URL

W b it d i

• Web site design • Menus • Login User interface • Login • Security • User management • Administration • 2E system functionality

(10)

A closer look at two issues

• Securityy

(11)

Security

y

Web applications: Access is Back-ends: You control Web applications: Access is

difficult to control Back-ends: You control

(12)

Usability

Everyone everywhere is a potential user of your system

your system

and

of

your

competitors!

Make it easy for them to come to you

come to you.

Make it easy for yourself to invite them.

(13)

Must haves

Security

U t t b

• User management system - web • Login and roles

• Session control • Session control

Usability (Customers)

• Understandable menus, work flow and activators Usability (for you)

Usability (for you)

(14)

Making ”faster” concrete

g

• How long will it take to before you can focus on the g y

functionality of your web site if you don’t use Websydian to web front your 2E application ? 1000 hours? 2000 hours? or more?

or more?

• How long will take if you use WebsydianExpress? 50How long will take if you use WebsydianExpress? 50 hours? 20 hours? or less?

(15)

Websydian benefits out-of-the-box

y

What you get out-of-the-box is an entire infrastructure and a ready site which means that:

• You don’t have to use time collecting and evaluating information about how to go about creating a web solution before starting – we have done it for you

• You can reuse the application you already have

• You can focus on the business functionality right after installation • You don’t have to use time setting up security measures it’s • You don t have to use time setting up security measures – it s

already done

• Genric features: menu, login, user management, language support • Web based user administration

(16)

You get

Usability:

Web site out of the box • Web site out of the box • Installation Service

• Administration module • Message log

• User management

C t Fi ld ( d )

• Custom Fields (you can grow your needs) • Page Modeler – generates HTML code

• Language support for multiple language sitesLanguage support for multiple language sites

(17)

You get

Security: Security:

• Session control

• User management systemUser management system • Login facility

(18)

(19)

OWASP

OWASP (Open Web Application Security Project) – Non-profit organization

– Community for sharing information about web application security

application security The OWASP Top Ten

– The 10 most critical web application security flaws – How to avoid the security flaws

(20)

OWASP 2006 Top Ten

1. Un-validated Parameters 2 Broken Access Control 2. Broken Access Control

3. Broken Account and Session Management 4. Cross-Site Scripting Flawsp g

5. Buffer Overflows

6. Command Injection Flaws 7. Error Handling Problems

8. Insecure Storage - Insecure Use of Cryptography

9 A li i D i l f S i

9. Application Denial of Service

10. Insecure Configuration Management- Server mis-configuration

(21)

OWASP 2006 Top Ten and Websydian

 Un-validated Parameters

 Broken Access Control

 Broken Account and Session Management

 Cross-Site Scripting Flawsp g

 Buffer Overflows

 Command Injection Flaws

 Error Handling Problems

 Insecure storage - Insecure Use of Cryptography

 A li ti D i l f S i !

 Application Denial of Service !

• Insecure Configuration Management- Server mis-configuration

(22)

Role based Security Model

• Role e.g. SalesRep, Accountant, Customer

• Role-based security obtained through a combination of two security methods:

• Security by Declaration

– Access privileges declared by roleccess p eges dec a ed by o e rse access the se access e

declarations to obtain Programmatic security

– If <user> in <role> then…

(23)

(24)

(25)

(26)

(27)

(28)

WebsydianExpress for CA 2E

(29)

Biography

og ap y

• Søren Madsen

• Soft Design A/S • Chief Consultant

– Worked with CA 2E since 1990 – CA Plex since 1996

• Speaker at:Speaker at:

– CA WORLD and Plex/2E user conferences since 2004 – COMMON US since 2007

(30)

• Søren Madsen

• Softdesign since 1990

• Senior Consultant, Project manager

• Synon 8 years 2e – 2e • PLEX 8-9 years KT – KT – Obsydian – Cool:Plex J i Pl – Jasmin:Plex – Advantage:Plex – AllFusion:Plex

(31)

Developing for Websydian Express

e e op g o

ebsyd a

p ess

AllFusion 2E iSeries, ILE RPG iSeries AllFusion Plex iSeries, Windows You choose! You choose!

(32)

Similarities between 2E and Web

S

a t es bet ee

a d

eb

2E Websydian/2E Display Record Display Horse EXCEXTFUN RPG DDS RPG HTML

(33)

Similarities between 2E and Web

Scr/rpt design = Page modeler

(34)

(35)

Run-time Page Generation

RPG

The “RPG Program” Loads the DDS via the definition as an externally described file. Assigns the variables and writes to e ss g s t e a ab es a d tes to

(36)

Run-time Page Generation

u t

e

age Ge e at o

RPG

The “RPG Program” reads the HTML file as an external file. Assigns the variables and writes to the browser

(37)

Run-time Page Generation

u t

e

age Ge e at o

Substitution at run-time of fields in Details region

• Values of Details-fields set by “SetOutput function” • Result is generated HTML Page

(38)

(39)

(40)

(41)

(42)

(43)

Application flow

pp cat o

o

- GetInput(field name) p ( )

– (Get values from input fields, one call per field)

- Execute business logic

– (E.g. database update etc.)

- SetOutput(field name, field value)

(S f )

– (Set output values, one call per field)

- SetParm(Eventid, field name, field value) (Set hidden values one call per field) – (Set hidden values, one call per field)

(44)

Show horse Functions

(45)

Show horse Functions

(46)

Show horse Functions

(47)

Show horse Functions

(48)

Show horse Functions

(49)

Show horse Functions

(50)

Show horse Functions

(51)

Show horse Functions

(52)

Show horse Functions

(53)

Show horse Functions

(54)

Show horse Functions

(55)

Show horse Functions

(56)

Show horse Functions

(57)

Show horse Functions

(58)

Show horse Functions

(59)

Show horse Functions

(60)

(61)

Show horse Functions

(62)

Show horse Functions

(63)

Show horse Functions

(64)

Show horse Functions

(65)

Show horse Functions

(66)

Show horse Functions

(67)

Show horse Functions

(68)

Show horse Functions

(69)

(70)

(71)

What now ?

at o

The 2E model you can download contains all the AD code to view position create update and delete data in the Horse view, position, create, update and delete data in the Horse entity.

And you can build any web functionality using your own 2E entities and functions.

This can be tried out for free !

More information at:

_{www websydian com}

More information at:

_{www.websydian.com}

(72)

WebsydianExpress summary

ebsyd a

p ess su

a y

• WebsydianExpress saves you hours of work • WebsydianExpress saves you hours of work • Provides web site out-of-the-box

• Internet profiles handled by Websydian Express

• Batch processing (reduces number of interactive users) • Handles user management

• Provides session management out of the box • Provides session management out-of-the-box

• Provides the necessary APIs for developing web using 2E • Easy installationy

• Provides a tool for modeling the web pages

(73)