Re: BPCS user profiles ---> security by obscurity

["Genyphyr Novak" <novakg@xxxxxxxx>]

Hello,

The new releases of BPCS have enhancements to the BPCS SYS600 maintenance
program which allow the automatic expiration of any BPCS user ID which is
not also a valid user ID on the AS/400 by use of a single F key. There is a
2nd feature to permanently purge these IDs from the security files, if
desired. (BMR 54119).

Thanks,

Genyphyr Novak
SSA Global
----- Original Message ----- 
From: "Milt Habeck" <mhabeck@xxxxxxxxxx>
To: "BPCS user community" <BPCS-L@xxxxxxxxxxxx>
Sent: Tuesday, December 02, 2003 10:21 PM
Subject: BPCS user profiles ---> security by obscurity



Some BPCS users don't have a margin of safety between
their user count and their concurrent license count, so a
substantial effort is needed to prepare well for the
inevitable SSA audit.

Preparation isn't easy because BPCS user profile
maintenance is clunky; abundant patience is needed to do
an A+ job defining BPCS security profiles. Quite candidly,
vanilla BPCS has never inspired the diligent level of
attention needed to do user security well.

Introducing a better idea  === >

   By Invitation Only  ...  another Bells & Whistles®
   for BPCS software product from Unbeaten Path.
   http://www.unbeatenpathintl.com/BIOnly-start/source/1.html

Due diligence for BPCS user profile definitions has always
been an excellent idea .... By Invitation Only software now
makes it achievable.

Peace to you and God bless,

Milt Habeck
Unbeaten Path International

North America toll free: (888) 874-8008
International calls:  (262) 681-3151
mhabeck@xxxxxxxxxx
www.unbeatenpathintl.com





----- Original Message ----- 
From: WASHBURNCCINC@xxxxxxx
To: bpcs-l@xxxxxxxxxxxx
Sent: Monday, September 29, 2003 8:38 AM
Subject: SSA SmartAudit being requested has anyone else got this?

Last week SSA requested a License audit. Now this is not a problem as we
have a 50 concurrent user license and we never have more than 30 users on at
a time, but we cancelled maintenance over a year ago and we dont want to
take the time to run the reports they are requesting. Has anyone else been
asked for an audit AFTER they cancelled their maintenance agreement?

Thanks  KW


_______________________________________________
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.