execute function using different user

What do mean by passing UserName/Password directly?

Clients can pass a UserName/Password to the CGI using Http authentication, but I do not want to give UserName/Password to my clients, so Can I put this UserName/Password  inside CGI code so the CGI code will call some functions using this hardcoded UserName/Password ?

I agree with Black, I think you will need to set up permissions so that anyone can run the CGI code rather than it being based on a single user.

this is a preferred method as opposed to storing/hardcoding the user/password somewhere where your CGI application can read it and use it

I am looking for a function to change a user inside the code for example:

 
 Change_User('CGI_USER', 'CGIPASSWORD');
 // This code is executed under CGI_User permission
 Change_User('POOR_USER', 'POORPASSWORD');
// This code is executed under POOR_USER permission


Is it possible ?

Monir

Hi
Thanks for your answers:
I tried LogonUser it gives this error message, 'A required privilege is not held by the client', I searched MSDN

and found that "IUser_computerName" must grant  the powerful "Act as Part of Operating System" privilege but

Microsoft does not recommend this method, only low-level authentication services should require this privilege.
It is recommended that processes requiring this privilege are run using the LocalSystem account,
 which already includes this privilege. This is preferable to using a separate user account with this privilege specially
assigned.
Because running as LocalSystem makes use of this privilege unnecessary, this privilege might be

made obsolete in a future version of Windows.

So I do not want to add IUser_computerName to "Act as Part of Operating System"  permanently.

 I tried to grant "Act as Part of Operating System" for a very short of time, do  LogonUser then return to a

previous state, I wrote the following code but LogonUser return same error message  'A required privilege is not

held by the client'.

var
   buffer: DWord;
   tkp, tpko: TTokenPrivileges;
   hToken: THandle;
  logonHandle:THandle;

begin
    Win32Check(
       OpenProcessToken(GetCurrentProcess(),
      TOKEN_ADJUST_PRIVILEGES or TOKEN_QUERY,
       hToken)
    );

    Win32Check(
        LookupPrivilegeValue(
          nil,
        'SeTcbPrivilege', //Act as Part of Operating System
        tkp.Privileges[0].Luid)
    );

    tkp.PrivilegeCount := 1;
    tkp.Privileges[0].Attributes := SE_PRIVILEGE_ENABLED;
    Win32Check(
      AdjustTokenPrivileges(hToken,
     FALSE, tkp, sizeof(tkp), tpko, buffer)
    );

     Win32Check(LogonUser(PChar('YakotoYamakani'), //UserName
               nil,
               PChar('YakotoYamakaniPass'), //Password
               LOGON32_LOGON_INTERACTIVE,
               LOGON32_PROVIDER_DEFAULT,
               logonHandle)
      );

     Win32Check(
         ImpersonateLoggedOnUser(logonHandle)
      );
     
    // do the task here using 'YakotoYamakani' account
   
     Win32Check(
        RevertToSelf
      );

   CloseHandle(logonHandle);

   Win32Check(
         AdjustTokenPrivileges(hToken, FALSE,tpko, sizeOf(tpko), tkp, Buffer)
  );

   CloseHandle(hToken);

Can you help please?