× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.




Bernard Green <bgreen@xxxxxxxxxx> wrote:Candy,

Your auditors are correct, but the answer is "profiles" not people.

In the environment you describe you don't have sufficient people to allocate
one job per person - few shops do. One (at least) of your programmers is
going to have to handle system administration issues.

Don't your programmer profile(s) access rights to production data. It's not
sabotage you're protecting yourself from - it's human error. If you don't
let OS/400 security protect your live data from development programming
then, one day, somebody will run a test using the wrong library list - it's
a risk to which you should not expose your company.

Set up a profile with sufficient rights to handle your system administration
and apppoint one of your techies as system administrator. Whichever of your
programmers has sufficient discipline to only use the administrator profile
signon for system administrative purposes is the one to choose - he/she
needs to be professional about this.


Regards,

Bernard Green
Momentum Utilities

Momentum Utilities are authors of Information WorkPlace (IWP) and Jacana


-----Original Message-----
From: Candy.Hein@xxxxxxxxxxxx [mailto:Candy.Hein@xxxxxxxxxxxx] 
Sent: Friday, 22 October 2004 7:39
To: mapics-l@xxxxxxxxxxxx
Subject: PROGRAMMER ACCESS TO PRODUCTION ENVIRONMENT

My boss asked me to pose this question on the MAPICS user group list. We
are a small shop with 2 full-time programmers and 2 part-time contractors.
The full time programmers are responsible for setting up MAPICS security for
users. Part of the audit comments during our Sarbanes-Oxley audit was to
eliminate all programmers access to the production environment including
security (of course they have no suggestion on who would set up security).
We would like to know how other small shops handle this situation. Do your
programmers have access to the production environment? Who is responsible
for establishing MAPICS security on your system?



Thank you,

Candy Hein



_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.
_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.



                
---------------------------------
Do you Yahoo!?
Y! Messenger - Communicate in real time. Download now.

As an Amazon Associate we earn from qualifying purchases.

This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.