RE: Security

One thing to be cautious about....

if your users are AMAPICS in their profile, and run
ODBC to the AS/400, they can 'own' darn near
any file with excel/access/query.  Most users aren't
that savy, but they often surprise you!


                                                                                
               
                    "Shaw, David"                                               
               
                    <dshaw@spartan.co        To:     "'MAPICS-L@midrange.com'"  
               
                    m>                       <MAPICS-L@midrange.com>            
               
                    Sent by:                 cc:                                
               
                    owner-mapics-l@mi        Subject:     RE: Security          
               
                    drange.com                                                  
               
                                                                                
               
                                                                                
               
                    08/08/2000 05:56                                            
               
                    AM                                                          
               
                    Please respond to                                           
               
                    MAPICS-L                                                    
               
                                                                                
               
                                                                                
               


Chris,

The "best" way is what works for you, and may change as your business
changes.  What works for me is:

- programs adopt AMAPICS authority
- AMAPICS has *ALL authority to all files
- query/download access to files controlled by authorization lists assigned
to files (most files' aut lists specify *PUBLIC *READ - this would be
different if non-employees could possibly access machine, i.e. Internet
connection)
- users belong to group profiles, primarily to control access to
user-created queries (queries "owned by" department, not individual)
- personal menus (we actually figured out how to use personal menu support
to enable executing MAPICS options from a third-party menu system, Softmenu
from SoftLanding Systems - much easier to manage than MAPICS personal
menus/group jobs)

Dave Shaw
MAPICS-L Moderator
Spartan International, Inc.
Spartanburg, SC

-----Original Message-----
From: Chris Neely [mailto:cneely@conagrapoultry.com]

What is the best way to set up security?
- have public exclude on files, amapics all
-have programs adopt authority of owner amapics
-Do you use group profiles?
-Do you use standard or personal menus?
+---
| This is the MAPICS Mailing List!
| To submit a new message, send your mail to MAPICS-L@midrange.com.
| To subscribe to this list send email to MAPICS-L-SUB@midrange.com.
| To unsubscribe from this list send email to MAPICS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
dshaw@spartan.com
+---




+---
| This is the MAPICS Mailing List!
| To submit a new message, send your mail to MAPICS-L@midrange.com.
| To subscribe to this list send email to MAPICS-L-SUB@midrange.com.
| To unsubscribe from this list send email to MAPICS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dshaw@spartan.com
+---