Re: security ??? anyone ???

[DaleGindlesperger@xxxxxxxxxxx]

Bob,

I have a question.  I have blocked command line access (Limit Capabilities
= *YES), and the users only get a 4 character command line that they use to
enter a menu option # (for non-MAPICS users) or the 4 character MAPICS menu
option (for MAPICS users - we use MAPICS Menuing).  How can they type "
*wrksplf"?  I'm concerned about this security issue.....

Dale Gindlesperger
Fleetwood Folding Trailers, Inc.



                                                                                
                                                        
                      "Bob  Tenney"                                             
                                                        
                      <bobtenney@xxxxxxx        To:       "MAPICS ERP System 
Discussion" <mapics-l@xxxxxxxxxxxx>                        
                      nk.net>                   cc:                             
                                                        
                      Sent by:                  Subject:  Re: security  ???   
anyone ???                                                
                      mapics-l-bounces@x                                        
                                                        
                      idrange.com                                               
                                                        
                                                                                
                                                        
                                                                                
                                                        
                      03/21/2003 09:31                                          
                                                        
                      AM                                                        
                                                        
                      Please respond to                                         
                                                        
                      MAPICS ERP System                                         
                                                        
                      Discussion                                                
                                                        
                                                                                
                                                        
                                                                                
                                                        




Jeff, I have two thoughts on your e-mail

1--When you block command line access, users can still get back-door access
by typing *wrksplf. So you are likely to have only the illusion of
security.
In my view this is worse than no security.

2--IFM's security lets you control access by user and function. I realize
that IFM may be overkill in this case, but if security is "driving the bus"
then it is a much better way to go. Also, if someone did get access to IFM
files, they would retire before they got useful data.

Bob Tenney
Bob Tenney Solutions, LLC
MAPICS - FRx - Presence - Crystal Reports
828-526-8976

Visit www.tenneypubs.com for books about
IFM, COM, G/L Interfaces
Info WorkPlace, Cost Accounting, and FRx
----- Original Message -----
From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
To: <mapics-l@xxxxxxxxxxxx>
Sent: Friday, March 21, 2003 7:55 AM
Subject: Re: security ??? anyone ???


>
>
>
>
>
>
>
> From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> To: mapics-l@xxxxxxxxxxxx
> Subject: security
> Date: Thu, 20 Mar 2003 16:47:12 -0500
>
> hey group,
>
>   I am working with a sm privately held co, that has decide to put the
G/L
> pkg on the AS400,mapics XA rel 6.0.
>
>   We can secure thru mapics CAS. but was looking for ideas about securing
> the I.T. Staff... with regular users i can eliminate the cmd line ,
etc...
> but the board, is asking about the I.T. staff, particulary GELMAS, and
> TEMGEN.
>
> any thoughts would be appreciated.
>
> thanks
>
> Jeff Snyder,  CPIM
> Mapics consultant
>
>
>
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.