DB2 Users

["Reinardy, James" <jreinardy@xxxxxxxxxxxxxxx>]

Hello All,
 
We are running BPCS 6.04 on iSeries.  I am trying to understand the
relationship between iSeries users, BPCS users and DB2 file access.  The
concern is arising because of Sarbanes-Oxley.  Our auditors are
suggesting that we need to lock down file privileges against the BPCS
database, but we are a little unclear about what user BPCS uses for data
access against DB2.  Is it the individual user that is logged into BPCS,
that user with a changed profile(SSA perhaps vs. *PUBLIC), or some other
generic user?  
 
The idea here is to restrict access on a file by file basis for
AS400Query, SQL queries, ODBC connections, etc.  However, we want to be
sure if we lock things down that we don't break BPCS screens and batch
jobs.  Any suggestions on how to improve our understanding in this area
would be appreciated.
 
Regards,
 
Jim Reinardy
Director-IS
Badger Meter, Inc.
Milwaukee, WI