Re: Re: security ??? anyone ???

Dale,

Oh! I can answer that one!  *WS

Paola Groeber


> 
> From: DaleGindlesperger@xxxxxxxxxxx
> Date: 2003/03/21 Fri AM 10:46:25 EST
> To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> Subject: Re: security  ???   anyone ???
> 
> 
> Bob,
> 
> I have a question.  I have blocked command line access (Limit Capabilities
> = *YES), and the users only get a 4 character command line that they use to
> enter a menu option # (for non-MAPICS users) or the 4 character MAPICS menu
> option (for MAPICS users - we use MAPICS Menuing).  How can they type "
> *wrksplf"?  I'm concerned about this security issue.....
> 
> Dale Gindlesperger
> Fleetwood Folding Trailers, Inc.
> 
> 
> 
>                                                                               
>                                                           
>                       "Bob  Tenney"                                           
>                                                           
>                       <bobtenney@xxxxxxx        To:       "MAPICS ERP System 
> Discussion" <mapics-l@xxxxxxxxxxxx>                        
>                       nk.net>                   cc:                           
>                                                           
>                       Sent by:                  Subject:  Re: security  ???   
> anyone ???                                                
>                       mapics-l-bounces@x                                      
>                                                           
>                       idrange.com                                             
>                                                           
>                                                                               
>                                                           
>                                                                               
>                                                           
>                       03/21/2003 09:31                                        
>                                                           
>                       AM                                                      
>                                                           
>                       Please respond to                                       
>                                                           
>                       MAPICS ERP System                                       
>                                                           
>                       Discussion                                              
>                                                           
>                                                                               
>                                                           
>                                                                               
>                                                           
> 
> 
> 
> 
> Jeff, I have two thoughts on your e-mail
> 
> 1--When you block command line access, users can still get back-door access
> by typing *wrksplf. So you are likely to have only the illusion of
> security.
> In my view this is worse than no security.
> 
> 2--IFM's security lets you control access by user and function. I realize
> that IFM may be overkill in this case, but if security is "driving the bus"
> then it is a much better way to go. Also, if someone did get access to IFM
> files, they would retire before they got useful data.
> 
> Bob Tenney
> Bob Tenney Solutions, LLC
> MAPICS - FRx - Presence - Crystal Reports
> 828-526-8976
> 
> Visit www.tenneypubs.com for books about
> IFM, COM, G/L Interfaces
> Info WorkPlace, Cost Accounting, and FRx
> ----- Original Message -----
> From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> To: <mapics-l@xxxxxxxxxxxx>
> Sent: Friday, March 21, 2003 7:55 AM
> Subject: Re: security ??? anyone ???
> 
> 
> >
> >
> >
> >
> >
> >
> >
> > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> > Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> > To: mapics-l@xxxxxxxxxxxx
> > Subject: security
> > Date: Thu, 20 Mar 2003 16:47:12 -0500
> >
> > hey group,
> >
> >   I am working with a sm privately held co, that has decide to put the
> G/L
> > pkg on the AS400,mapics XA rel 6.0.
> >
> >   We can secure thru mapics CAS. but was looking for ideas about securing
> > the I.T. Staff... with regular users i can eliminate the cmd line ,
> etc...
> > but the board, is asking about the I.T. staff, particulary GELMAS, and
> > TEMGEN.
> >
> > any thoughts would be appreciated.
> >
> > thanks
> >
> > Jeff Snyder,  CPIM
> > Mapics consultant
> >
> >
> >
> >
> >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
> > _______________________________________________
> > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> > To post a message email: MAPICS-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > or email: MAPICS-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/mapics-l.
> >
> >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
> > _______________________________________________
> > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> > To post a message email: MAPICS-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > or email: MAPICS-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/mapics-l.
> >
> >
> 
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
> 
> 
> 
> 
> 
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
> 
>