× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



Hi Dennis,

We are on version 8.1 of BPCS and also uses Inovis Trusted Link version 
6.1. Can I  find out why you are trying to migrate from Inovis?

Regards,

Sumit Rohatgi




bpcs-l-request@xxxxxxxxxxxx
Sent by: bpcs-l-bounces+srohatgi=mother-parkers.com@xxxxxxxxxxxx
02/25/2005 01:01 PM
Please respond to bpcs-l

 
        To:     bpcs-l@xxxxxxxxxxxx
        cc: 
        Subject:        BPCS-L Digest, Vol 3, Issue 42




Send BPCS-L mailing list submissions to
                 bpcs-l@xxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
                 http://lists.midrange.com/mailman/listinfo/bpcs-l
or, via email, send a message with subject or body 'help' to
                 bpcs-l-request@xxxxxxxxxxxx

You can reach the person managing the list at
                 bpcs-l-owner@xxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific
than "Re: Contents of BPCS-L digest..."


Today's Topics:

   1. RE: Fix that SSA *Allobj Security Exposure! (DeeDee Virgei)
   2. EDI (Dennis Basiner)
   3. RE: EDI (Steve Segerstrom)
   4. RE: EDI translator (Steve Segerstrom)


----------------------------------------------------------------------

message: 1
date: Fri, 25 Feb 2005 09:46:27 -0500
from: "DeeDee Virgei" <DeeDee.Virgei@xxxxxxxxxxxxxx>
subject: RE: [BPCS-L] Fix that SSA *Allobj Security Exposure!

Hi Again,

Darryl, you just made me realize something...  If all the security 
programs are set to adopt the owner's authority and BPCSMENU is owned by 
SSA (or which ever single group profile is selected) then I should be OK 
-the step of adding 'CHGGRPA GRPJOB(SSA)' to BPCSMENU is overkill.  The 
only thing is I don't remember which program parameter takes precedence, 
'Use adopted authority' or 'User profile' (all the security programs are 
still set to *USER) or if it's collective...  Time for me to read up on 
this some more.  Actually, since Genyphyr supplied me w/ the 4.05 CD BMR 
#s,  I'm all set.  Thanks Gernyphyr!  Thanks Darryl!  Clare!  And everyone 
else!

FYI, I do agree that SSA doesn't need *ALLOBJ authority; just would like 
to also remove it from my users' group profile settings (at least those w/ 
ODBC access).

And I agree w/ Norma, this discussion is somewhat nerve racking!  Thanks 
again.

DeeDee Virgei
 

-----Original Message-----
From:            bpcs-l-bounces+deedee.virgei=nelsonstud.com@xxxxxxxxxxxx 
[mailto:bpcs-l-bounces+deedee.virgei=nelsonstud.com@xxxxxxxxxxxx]  On 
Behalf Of darryl frankel
Sent:            Thursday, February 24, 2005 5:31 PM
To:              'SSA's BPCS ERP System'
Subject:                 RE: [BPCS-L] Fix that SSA *Allobj Security 
Exposure!

Matters are different when accessing the database using tools such as ODBC
drivers.

In this instance, you may be advised to:
- Revoke all authorities and simply grant authority to a single group
profile with all rights required to run BPCS such as SSA. ALLOBJ authority
is not required at all.
Change your initial program such as BPCSMENU to adopt the owner's 
authority.
In this manner when you sign on, you will not have access to BPCS, until 
the
user has passed BPCS Security, under program control starting with the
initial program BPCSMENU.

- Create a new user profile for ODBC users to sign on with. This user 
should
then at most have READ rights only to BPCS data libraries. In some shops,
you may want to restrict the access to a few files only.

Darryl Freinkel
Assignment400.com


-----Original Message-----
From: bpcs-l-bounces+darrylfrankel=assignment400.com@xxxxxxxxxxxx
[mailto:bpcs-l-bounces+darrylfrankel=assignment400.com@xxxxxxxxxxxx] On
Behalf Of DeeDee Virgei
Sent: Thursday, February 24, 2005 3:35 PM
To: SSA's BPCS ERP System
Subject: RE: [BPCS-L] Fix that SSA *Allobj Security Exposure!

Hi,

Removing *ALLOBJ authority (or changing it to *USER) does not resolve the
issue w/ ODBC and some other PC software; if you have all your users w/ 
SSA
group profile then you are still at risk.  Keep in mind Genyphyr's 
statement
"Nor do we any longer require or recommend that the user enrolled in BPCS
should have an SSA group profile for any currently supported version of 
the
product..."   If my memory serves me correctly,  the general solution to
this problem is to perform a few steps:
1st (and most relevant)  set all BPCS program's USRPRF setting to *OWNER 
and
I believe USEADPAUT setting to *YES (can change w/ CHGPGM command). 
2nd verify all BPCS objects are owned by SSA (if not, can change w/
CHGOBJOWN command or use TAATOOL as suggested - should have shipped this
way).
3rd for all BPCS files, verify SSA authority is set to *ALL (should have
shipped this way), and *PUBLIC authority is set to either *USE or *EXCLUDE
depending on how much access you want your users to have outside of BPCS 
and
the green screen (I believe shipped w/ *CHANGE, can change w/ GRTOJBAUT
command). 

The final step is to start removing SSA Group profile from your users'
profiles...  I've really over simplified this fix.  First off, you won't 
be
able to change all the BPCS programs in the 1st step due to the attribute
settings on some security programs.  That is where OGS comes in play;
support can send you these programs w/ the *OWNER setting.  Although I'm
still not sure what releases they will do this with...  A work-around is 
to
change BPCSMENU (the BPCS startup program [CLP]), add "CHGGRPA 
GRPJOB(SSA)".
This will provide you w/ traditional green screen security where users 
have
SSA authority, but are limited due to the "Limit capabilities *YES" 
setting
in their profile.  Since this added command only changes the interactive
session authority, ODBC and other PC software should not be a threat...  A
few last points, you will have to adjust file authority (3rd step) if you
have other programs/applications that run on the iSeries or other 
platforms
updating BPCS files; !
 possibly add additional group authority.  BPCS programs (1st step) 
includes
modified and out-of-the-box programs.  File authority (3rd step) also
applies to non-BPCS files used by modified BPCS programs.  Hope this 
helps.
I've gathered this info from the archives...

DeeDee Virgei
Project Leader

Nelson Stud Welding, Inc. 

 -----Original Message-----
From:            bpcs-l-bounces+deedee.virgei=nelsonstud.com@xxxxxxxxxxxx
[mailto:bpcs-l-bounces+deedee.virgei=nelsonstud.com@xxxxxxxxxxxx]  On 
Behalf
Of Clare Holtham
Sent:            Thursday, February 24, 2005 4:36 AM
To:              SSA's BPCS ERP System
Subject:                 Re: [BPCS-L] Fix that SSA *Allobj Security 
Exposure!

But Tay,

It works as shipped. In other words, the SSA Group Profile (which is not
shipped as *Allobj, or never was) owns all the BPCS objects, and all the
BPCS users are members of that group. *Allobj is a red herring and is not
required. In Europe we (when I was with SSA) have always created a 
secondary
profile called SSALOAD which DOES have *Allobj, AND is a member of the SSA
group profile (which only needs *USER), and has owner *GRPPRF. This 
profile
can be used for installing BPCS, for installing PTFS, for creating new 
BPCS
environments, etc etc. It is because some consultants have used the SSA
group profile to do these jobs that it has been left on customer boxes 
with
*ALLOBJ.

cheers,

Clare

Clare Holtham
Director, Small Blue Ltd - Archiving for BPCS
Web: www.smallblue.co.uk
IBM Certified iSeries Systems Professional
Email: Clare.Holtham@xxxxxxxxxxxxxxx

----- Original Message ----- 
From: <tay@xxxxxxxxxxxxx>
To: "SSA's BPCS ERP System" <bpcs-l@xxxxxxxxxxxx>
Sent: Thursday, February 24, 2005 9:13 AM
Subject: Re: [BPCS-L] Fix that SSA *Allobj Security Exposure!


>
> I am using 4.5CD version BPCS, my idea are same as what SSA
suggest(Profile
> *ALLOBJ). Otherwise, you need to individual(or group) define BPCS files
> authority use right and also need to study the individual user run
programs
> related files and individual grant the authority right accordingly.
Imagine
> that if you have over hundred of users and each user have to run
> different(or same) programs(such as ORD500,ORD600, PUR500, INV500 and 
etc)
> and something the user was quit and replace new user.
> It will make you crazy !!
>
> >From :Tay
>
> -- 
> This is the SSA's BPCS ERP System (BPCS-L) mailing list
> To post a message email: BPCS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
> or email: BPCS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/bpcs-l.
>
> Delivered-To: Clare.Holtham@xxxxxxxxxxxxxx
>


-- 
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.

Delivered-To: deedee.virgei@xxxxxxxxxxxxxx



-- 
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.

Delivered-To: darrylfrankel@xxxxxxxxxxxxxxxxx


-- 
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.

Delivered-To: deedee.virgei@xxxxxxxxxxxxxx





------------------------------

message: 2
date: Fri, 25 Feb 2005 11:29:02 -0500
from: "Dennis Basiner" <dbasiner@xxxxxxxxxxxxxx>
subject: [BPCS-L] EDI

Hi,
                 I am using Inovis Trusted Link for AS400 for EDI and SSA 
Electronic
Commerce Manager for portal into BPCS 6.0.4 and 6.1.02. I am considering
changing EDI packages and have looked at True Commerce. I am running V5R2 
on
a model 810. Anyone using True Commerce or recommend another package ?
Feedback ?

Regards,
Dennis Basiner
Information Systems Manager
Cains Foods L.P.

--
Internal Virus Database is out-of-date.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: Monday, 
February
14, 2005




------------------------------

message: 3
date: Fri, 25 Feb 2005 10:36:34 -0600
from: "Steve Segerstrom" <SSegerstrom@xxxxxxxxxxxxxx>
subject: RE: [BPCS-L] EDI



-----Original Message-----
From: bpcs-l-bounces+ssegerstrom=intermatic.com@xxxxxxxxxxxx
[mailto:bpcs-l-bounces+ssegerstrom=intermatic.com@xxxxxxxxxxxx]On Behalf
Of Dennis Basiner
Sent: Friday, February 25, 2005 10:29 AM
To: bpcs-l@xxxxxxxxxxxx
Subject: [BPCS-L] EDI


Hi,
                 I am using Inovis Trusted Link for AS400 for EDI and SSA 
Electronic
Commerce Manager for portal into BPCS 6.0.4 and 6.1.02. I am considering
changing EDI packages and have looked at True Commerce. I am running V5R2 
on
a model 810. Anyone using True Commerce or recommend another package ?
Feedback ?

Regards,
Dennis Basiner
Information Systems Manager
Cains Foods L.P.

--
Internal Virus Database is out-of-date.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: Monday, 
February
14, 2005


-- 
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.

Delivered-To: SSegerstrom@xxxxxxxxxxxxxx



------------------------------

message: 4
date: Fri, 25 Feb 2005 10:51:33 -0600
from: "Steve Segerstrom" <SSegerstrom@xxxxxxxxxxxxxx>
subject: RE: [BPCS-L] EDI translator

Sorry sick at home. I will try to actually respond WITH a message.

We are at 6.0.04 heavily modified; os/version v5r3 on an I5. 

We run a good deal of our business via edi; we probably average 500 orders 
a day and can spike to a couple thousand (you know, those wonderful store 
resets and pipeline fills). We also do similar volumes in ASN's & 
Invoices.

About 3 years ago I went on the hunt for a new EDI package (v4r? at the 
time) and evaluated the "viable"  ISeries packages at that time - they 
were Sterling Commerce's package, Harbinger and Extol. 

Extol won hands down. If considered, don't get the BPCS jump start package 
it was a waste of $$$$.  Not long ago we added trailblazer to help us 
manage multiple direct connects, van connects and internet connects.

I am no longer the EDI manager but I am still "involved" (I have been 
cross training new guys for a couple years). Contact me offline if you 
would like more.

Steve Segerstrom
Intermatic Inc
(815) 675-7469

-----Original Message-----
From: bpcs-l-bounces+ssegerstrom=intermatic.com@xxxxxxxxxxxx
[mailto:bpcs-l-bounces+ssegerstrom=intermatic.com@xxxxxxxxxxxx]On Behalf
Of Dennis Basiner
Sent: Friday, February 25, 2005 10:29 AM
To: bpcs-l@xxxxxxxxxxxx
Subject: [BPCS-L] EDI


Hi,
                 I am using Inovis Trusted Link for AS400 for EDI and SSA 
Electronic
Commerce Manager for portal into BPCS 6.0.4 and 6.1.02. I am considering
changing EDI packages and have looked at True Commerce. I am running V5R2 
on
a model 810. Anyone using True Commerce or recommend another package ?
Feedback ?

Regards,
Dennis Basiner
Information Systems Manager
Cains Foods L.P.

--ds
Internal Virus Database is out-of-date.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: Monday, 
February
14, 2005


-- 
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.

Delivered-To: SSegerstrom@xxxxxxxxxxxxxx

-- 
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.

Delivered-To: SSegerstrom@xxxxxxxxxxxxxx



------------------------------

-- 
This is the SSA's BPCS ERP System (BPCS-L) digest list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.



End of BPCS-L Digest, Vol 3, Issue 42
*************************************



As an Amazon Associate we earn from qualifying purchases.

This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.