Re: BPCS Security (was AS/SET Repository Installation 6.1.0)

["Genyphyr Novak" <novakg@xxxxxxxx>]

Hi,

The BMR is a recompile of programs which are non-observable, in order to
allow the environment to be set up to run under the adopted authority of the
owner of the programs. Compile options for User Profile are changed to
*OWNER. The BMR by itself will do nothing to secure your environment. Other
changes are required to make the environment secured.

The degree of the database lockdown depends upon how you decide to implement
the security once you have updated several things (outlined in the document)
in the environment. It is allowing the use of standard AS/400 object
security, so you have many options.

The README for the BMR outlines the choices, and AS/400 documentation
provides further details. You can prevent *PUBLIC from doing anything,
including reading - or you can let *PUBLIC read data files (via SQL or query
for example).

If *PUBLIC is EXCLUDE and can not even read the files, then you can decide
to make certain groups of people authorized to read files by their need to
access them for outside queries reports etc. using AS/400 Group security.
The choices are many and what you decide to do will depend upon the needs
and set up at your company and how sensitive you view the BPCS data to be.

I suggest that you read the documentation for the BMR, and then if you have
further questions, post them. If they aren't covered in the document, we can
update it so that the answers are there for others as well.

Thanks

Genyphyr Novak
SSA GT

----- Original Message -----
From: "Gordon S. Royle" <groyle@cott.com>
To: <BPCS-L@midrange.com>
Sent: Wednesday, January 31, 2001 3:00 PM
Subject: Re: BPCS Security (was AS/SET Repository Installation 6.1.0)


> Genyphyr
>
> Does this BMR only protrect against update or does it cover read as well?
We
> have (or are contemplating) SQL queries and PC based reporting tools which
> access BPCS data. Will this BMR stop them from working?
>
> Gord Royle
> Cott Corporation


+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---