× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



Thanks to all for the input, i will pass on to our technical staff, please send me any details direct if you can, Id appreciate it.

Jeff Snyder, CPIM
Mapics Consultant






From: "Greg Novak, Momentum" <gnovak@xxxxxxxxxx> Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx> To: "'MAPICS ERP System Discussion'" <mapics-l@xxxxxxxxxxxx> Subject: RE: Re: security ??? anyone ??? Date: Fri, 21 Mar 2003 12:46:41 -0600

The security that allows the AP clerk to post a batch is by the Mapics
program "adopting" the authority of the AMAPICS user id (the program
owner).  The AP clerk would normally not have authority to query the
file.

The issue with IT is that they often get assigned the AMAPICS
authorities, or have *ALLOBJ.  By restricting this on the programmers
you can prevent normal access to the files.  My question is when they
need to write a query or program over these files, what hoops do they
have to jump through to get the authority to do it?  Does that mean you
have to teach an Accounting manager how to grant authorities and give
him permission to access the command line too?

Something to think about...
-Greg

Gregory Novak
Manager North American Technical Services
Momentum Utilities Pty Ltd
(630) 985-1736
gnovak@xxxxxxxxxx
www.jacana.com


-----Original Message----- From: Jeff Snyder [mailto:jeffreygsnyder@xxxxxxxxxxx] Sent: Friday, March 21, 2003 11:08 AM To: mapics-l@xxxxxxxxxxxx Subject: Re: Re: security ??? anyone ???


Please.. and thanks !! I have been told that AS400 security may conflict with mapics security and cause a termination... is there a good way to prevent this ??? For instance we will want the A/P clerk to hit the gelmas file for posting a batch of A/P... but not be able to qry the gelmas file ?? Thanks again

Jeff






From: <pgroeber@xxxxxxxxxxxxx> Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx> To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx> Subject: Re: Re: security ??? anyone ??? Date: Fri, 21 Mar 2003 10:05:48 -0500

Jeff,

Yes you can secure the two files GELMAS and TEMGEN, but you will need to
use
AS/400 security for the IT level.  It will require a lot of maintenance
to
ensure the files are secured, but it will provide the security you are
looking for.

When your users are set up on the AS/400 do you give them *ALLOBJ
authority?
  Hopefully not.  That means they can query any file on your AS/400
without
restrictions.  My memory is failing me a little on how to set up the
security on files on the AS/400 and my notes are at home.  (Currently
working on a Unix box.)  Once you have the security required on the
files,
you will need to grant authority to the files your users need to write
queries on.  The IT developers can be given the level under *ALLOBJ with
the
exception of only a few members which would need the higher level of
security.

The only problem with providing this level of security is the
maintenance as
someone with *ALLOBJ authority has to be the one to grant authority to
the
files when users need to write queries.  But it would allow you to set
up a
formal procedure that has their supervisor approve their request for
access
to a particular file(s).  It would also keep your shop employees from
getting into areas they shouldn't etc.  It would also solve the problem
with
the board.

I can give you more explicit instructions once I get home tonight if you

need them.  My notes have the details and it would be a solution much
better
than "trusting" the employees.  With all the changes going on in the
world
companies really do need to reconsider how they have security set up on
their AS/400 files as it is very easy to copy or write a query that
could be
sold to your competitors.

Good Luck and let me know if you want those step by step instructions.

Paola Groeber
MAPICS Consultant
770-591-1497 (home after 4:30pm EST)
770-490-3297 (cell)


> > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx> > Date: 2003/03/21 Fri AM 07:55:21 EST > To: mapics-l@xxxxxxxxxxxx > Subject: Re: security ??? anyone ??? > > > > > > > > > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx> > Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx> > To: mapics-l@xxxxxxxxxxxx > Subject: security > Date: Thu, 20 Mar 2003 16:47:12 -0500 > > hey group, > > I am working with a sm privately held co, that has decide to put the G/L > pkg on the AS400,mapics XA rel 6.0. > > We can secure thru mapics CAS. but was looking for ideas about securing > the I.T. Staff... with regular users i can eliminate the cmd line , etc... > but the board, is asking about the I.T. staff, particulary GELMAS, and > TEMGEN. > > any thoughts would be appreciated. > > thanks > > Jeff Snyder, CPIM > Mapics consultant > > > > > > > _________________________________________________________________ > The new MSN 8: smart spam protection and 2 months FREE* > http://join.msn.com/?page=features/junkmail > > _______________________________________________ > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list > To post a message email: MAPICS-L@xxxxxxxxxxxx > To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/mailman/listinfo/mapics-l > or email: MAPICS-L-request@xxxxxxxxxxxx > Before posting, please take a moment to review the archives > at http://archive.midrange.com/mapics-l. > > > > _________________________________________________________________ > The new MSN 8: smart spam protection and 2 months FREE* > http://join.msn.com/?page=features/junkmail > > _______________________________________________ > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list > To post a message email: MAPICS-L@xxxxxxxxxxxx > To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/mailman/listinfo/mapics-l > or email: MAPICS-L-request@xxxxxxxxxxxx > Before posting, please take a moment to review the archives > at http://archive.midrange.com/mapics-l. > >

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list To post
a message email: MAPICS-L@xxxxxxxxxxxx To subscribe, unsubscribe, or
change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.



_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail



_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.



_________________________________________________________________
Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963



As an Amazon Associate we earn from qualifying purchases.

This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.