RE: Research Project- If you wanted to Hack an AS/400 theoretically, what would you do? (NFM)

In that case you should have a developer ID and an administrator ID.
Possibly a 'power user' ID as well for app access.  The developer &
power user IDs should not have admin privs.  The admin ID should only be
used when necessary.  The accounts should have different passwords. 

With the admin ID being sparingly used, the odds of an 'oops' are
greatly reduced.

-----Original Message-----
From: Jeff Crosby [mailto:jlcrosby@xxxxxxxxxxxxxxxx] 
Sent: Wednesday, January 28, 2004 11:02 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Research Project- If you wanted to Hack an AS/400
theoretically,what would you do? (NFM)

> >How do you plan for a lunatic programmer who wipes out records either
> inadvertantly or maliciously?
> 
> Developers should not have access to production data.  
> Ideally, they wouldn't even have access to production systems.  

I always smile when I read this.  For 29+ years I have worked in a
1-person shop.  Always wondered how many others in my situation.

And yes, I do know that a shop with dozens or hundreds of developers is
a whole different animal.

--
Jeff Crosby
Dilgard Frozen Foods, Inc.
P.O. Box 13369
Ft. Wayne, IN 46868-3369
260-422-7531

The opinions expressed are my own and not necessarily the opinion of my
company.  Unless I say so.