SYS21 - RE: SYS21 - RE: SYS21 - Re: SYS21 -  /INP question

The problem with your scenario, Garry, is that usually management outside of
MIS has no clue as to what computer security is, and who should have access
to what.

The accounting department just knows that they want access to accounting,
and no one else.  The Purchasing department knows they want access to PO's,
and no one else, etc...

It comes down to MIS to resolve conflicts as to who gets access to what.
Okay, give accounting access to accounting, but these data entry people
don't need chart of accounts, etc...  Also, the President of the Company
wants access to accounting, so give it to him.  Oh, and accounting needs
read access to POs, but not create access, etc...

The users don't know, or care.  They just want to be able to do their job.
I've tried asking outside IS management before some of these issue and they
blow them off.  It doesn't directly effect their job, so they don't care.

Of course you could totally open up your system and allow everyone access to
everything, but the first time a PO got deleted who do you think they would
come looking for, the head of the Purchasing Department, or your behind?

Regards,

Jim Langston

-----Original Message-----
From: Garry Clarke [mailto:gclarke@DIMPCO.IE]

Personally I think the MIS manager is taking on too much control.

I don't believe it's an IT function to decide who accesses which option.
We are here to serve the users, not dictate to them.

Garry Clarke
IT Manager
Dimpco Limited