Re: Re: security ??? anyone ???

From: DaleGindlesperger@xxxxxxxxxxx
Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
Subject: Re: Re: security  ???   anyone ???
Date: Fri, 21 Mar 2003 11:41:33 -0500

On a MAPICS menu, I get "Invalid Menu Option", and on a non-MAPICS menu, I
get a "Invalid Item Number".  Maybe I'm safe?  A sizable chunk of my
internal security rests on this working (well, actually not working!) - you
guys are ruining my digestion.

                      03/21/2003 10:57
                      AM
                      Please respond to
                      MAPICS ERP System
                      Discussion

>
> From: DaleGindlesperger@xxxxxxxxxxx
> Date: 2003/03/21 Fri AM 10:46:25 EST
> To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> Subject: Re: security  ???   anyone ???
>
>
> Bob,
>
> I have a question.  I have blocked command line access (Limit
Capabilities
> = *YES), and the users only get a 4 character command line that they use
to
> enter a menu option # (for non-MAPICS users) or the 4 character MAPICS
menu
> option (for MAPICS users - we use MAPICS Menuing).  How can they type "
> *wrksplf"?  I'm concerned about this security issue.....
>
> Dale Gindlesperger
> Fleetwood Folding Trailers, Inc.
>
>
>
>

>                       <bobtenney@xxxxxxx        To:       "MAPICS ERP
System Discussion" <mapics-l@xxxxxxxxxxxx>
>                       nk.net>                   cc:

>                       Sent by:                  Subject:  Re: security
???   anyone ???
>                       mapics-l-bounces@x

>
>
>
>
> Jeff, I have two thoughts on your e-mail
>
> 1--When you block command line access, users can still get back-door
access
> by typing *wrksplf. So you are likely to have only the illusion of
> security.
> In my view this is worse than no security.
>
> 2--IFM's security lets you control access by user and function. I realize
> that IFM may be overkill in this case, but if security is "driving the
bus"
> then it is a much better way to go. Also, if someone did get access to
IFM
> files, they would retire before they got useful data.
>
> Bob Tenney
> Bob Tenney Solutions, LLC
> MAPICS - FRx - Presence - Crystal Reports
> 828-526-8976
>
> Visit www.tenneypubs.com for books about
> IFM, COM, G/L Interfaces
> Info WorkPlace, Cost Accounting, and FRx
> ----- Original Message -----
> From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> To: <mapics-l@xxxxxxxxxxxx>
> Sent: Friday, March 21, 2003 7:55 AM
> Subject: Re: security ??? anyone ???
>
>
> >
> >
> >
> >
> >
> >
> >
> > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> > Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> > To: mapics-l@xxxxxxxxxxxx
> > Subject: security
> > Date: Thu, 20 Mar 2003 16:47:12 -0500
> >
> > hey group,
> >
> >   I am working with a sm privately held co, that has decide to put the
> G/L
> > pkg on the AS400,mapics XA rel 6.0.
> >
> >   We can secure thru mapics CAS. but was looking for ideas about
securing
> > the I.T. Staff... with regular users i can eliminate the cmd line ,
> etc...
> > but the board, is asking about the I.T. staff, particulary GELMAS, and
> > TEMGEN.
> >
> > any thoughts would be appreciated.
> >
> > thanks
> >
> > Jeff Snyder,  CPIM
> > Mapics consultant
> >
> >
> >
> >
> >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
> > _______________________________________________
> > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> > To post a message email: MAPICS-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > or email: MAPICS-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/mapics-l.
> >
> >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
> > _______________________________________________
> > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> > To post a message email: MAPICS-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > or email: MAPICS-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/mapics-l.
> >
> >
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
>
>
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.