RE: AS/SET Repository Installation 6.1.0

[Rob Angermann <Rob.Angermann@xxxxxxxxxxxxxxx>]

Nathan,

Perhaps we should discuss the security policy which we have to apply, now we
work with BPCS.
Let us discuss soon.
Rob

-----Original Message-----
From: Nathan Bennett [mailto:nabennis@chello.nl]
Sent: Tuesday, January 30, 2001 9:47 PM
To: BPCS-L@midrange.com
Subject: RE: AS/SET Repository Installation 6.1.0


You do realise that having an 'extra' security based user could open your
system further to unwanted 'attention' or at the very least incur extra work
when working on system security.

There shouldn't be a reason why you require a permanently active user for
secutity procedures - that what QSECOFR is for - normally NO application
should require the use of special security on a day to day basis.

It makes more sense business wise, and also as an appeasment to your
auditors, to have in place a defined security policy for both technical and
physical activities related to your computer hardware and the associated
applications.

Many sites, BPCS and otherwise, do set up security administrators or create
programs with the required authority to perform everyday tasks which are
security critical, while disabling the 'god' profile of QSECOFR.

I would say that if you need to have an extra user to handle activities
within BPCS then maybe it's time to readdress your security plan which may
at the very least highlight why you come accross BPCS 'entaglements'.


-----Original Message-----
From: owner-bpcs-l@midrange.com [mailto:owner-bpcs-l@midrange.com]On
Behalf Of MacWheel99@aol.com
Sent: Tuesday, January 30, 2001 5:48 PM
To: BPCS-L@midrange.com
Subject: Re: AS/SET Repository Installation 6.1.0


We do not use AS/Set but I do have a comment on whether QSECOFR makes sense
.... there are times that we need dedicated with respect to BPCS operations
but do not want to lock out the master security officer, and at our version
of BPCS, all BPCS objects need to belong to the SSA user group, so we
created
a separate security officer who is inside the SSA user group, for the sole
purpose of loading BPCS objects, so as to keep master security officer out
of
BPCS entanglements.

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)
AS/400 Data Manager & Programmer for BPCS 405 CD Rel-02 mixed mode (twinax
interactive & batch) @ http://www.cen-elec.com Central Industries of
Indiana--->Quality manufacturer of wire harnesses and electrical
sub-assemblies - fax # 812-424-6838

+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---

+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---