RE: DB2 Users

["Steve Segerstrom" <SSegerstrom@xxxxxxxxxxxxxx>]

We are heavily modified 6.04 BPCS on the Iseries v5r2. We use client server 
(for GL); all others are green screen.

We are a bpcs shop and a while ago I locked down both FTP and ODBC for all but 
specified users - it had no effect on BPCS proper. By definition I disallow all 
access or allow all access. The IBM web site had the necessary code and 
instructions for adding a program to the exit point and the actual code for the 
program (big help since the parameter layouts are fairly intense - the code was 
a cake walk).

We don't allow BPCS users to have command line access so by definition we had 
no concerns about sql or query.

Don't know if this helped - contact me directly by email if you would like.

Steve Segerstrom
Intermatic Inc
(815) 675-7469


-----Original Message-----
From: bpcs-l-bounces@xxxxxxxxxxxx [mailto:bpcs-l-bounces@xxxxxxxxxxxx]On
Behalf Of Reinardy, James
Sent: Wednesday, June 09, 2004 3:18 PM
To: bpcs-l@xxxxxxxxxxxx
Subject: DB2 Users


Hello All,
 
We are running BPCS 6.04 on iSeries.  I am trying to understand the
relationship between iSeries users, BPCS users and DB2 file access.  The
concern is arising because of Sarbanes-Oxley.  Our auditors are
suggesting that we need to lock down file privileges against the BPCS
database, but we are a little unclear about what user BPCS uses for data
access against DB2.  Is it the individual user that is logged into BPCS,
that user with a changed profile(SSA perhaps vs. *PUBLIC), or some other
generic user?  
 
The idea here is to restrict access on a file by file basis for
AS400Query, SQL queries, ODBC connections, etc.  However, we want to be
sure if we lock things down that we don't break BPCS screens and batch
jobs.  Any suggestions on how to improve our understanding in this area
would be appreciated.
 
Regards,
 
Jim Reinardy
Director-IS
Badger Meter, Inc.
Milwaukee, WI
_______________________________________________
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.