Re: BPCS Security

> Subj:  BPCS Security
>  From:        mkamara@krupsusa.com
>  
>  Does anyone  have a guide line for setting BPCS Security profiles?

- is your company doing this for the first time or did someone else do this & 
now you have received the responsibility to manage it?

Your hardware platform & BPCS version may be relevant 
- here is what we do on BPCS 405 CD mixed mode on OS/400

1. Info about the new person - do they need command line authority, are their 
needs very similar to some pre-existing employee?  The easiest approach is to 
setup new person exactly like some other person, then make some adjustments.

2. IBM profile into BPCS group using WRKUSRPRF by OS/400 Security 
Administrator, often copying similar user profile, then adjusting the copy.

I sometimes output PRTUSRPRF F4 to review how we have things setup, 
especially when cleaning out the stuff on former employees, to make sure I 
did not overlook anything.

3. SYS600 off main SYS menu, using a sign-on that is an SSA Security Officer.

We have several queries to help manage this, but what I find easiest is to 
screen print how we have setup a similar employee, then think about what are 
the differences in duties between these 2 people.

4. User Menu authorization - there is an SYS job that does this - we have 
authorized a bunch of power users to be manipulating the User Menus, for 
example adding new queries.  I have a couple of queries to help manage this 
area.

one is a list by program that is on the menus, showing which menus they are 
on & the alpha title used --- the other is a list by user-id showing which 
menus they are authorized to access, and in what sequence the menus show up 
on their menu of menus.

We are constantly adjusting our BPCS security rules as new people arrive, 
their responsibilities grow, we add new programs & queries.  There needs to 
be care in naming conventions of additions so that they logically fit into 
whatever BPCS security guidelines you are using.

Al Macintyre
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---