Re: Application administration for security control?

How does it work?  You go into iSeries Navigator. (Do you know how to do 
that?)  Right click on the system name and select Application 
Administration.  Now, don't be confused by the screen and think that 
checking the one option gives the users All Object.  No, it is saying, 
that users with All Object can do that.  There was a little confusion on 
the list about this earlier.  You can use this to do all sorts of things 
like:
- Not allow any user to use iSeries access to upload data to the i5.
- Whether users can ftp from or to or both with your i5.
- and lots more.

Pretty cool actually.  The makers of exit point tools, however, can 
honestly say they can give you more granularity with their products.  Like 
only allow ftp from one directory and to another directory.  This prevents 
users from ftping up music and downloading it from the same directory and 
sharing their password with the world and thus getting you into a WHOLE 
LOT OF HOT WATER.


Rob Berendt