Re: security ??? anyone ???

[LeLeux@xxxxxxxxxxxx]

If you go to group jobs, then F5 for spool files, you get a command line, 
but from what I have tested it is pretty useless.

But, yes, more detail on the *wrksplf is in order!

BTW:  We used to have an application by Phoenix called PC&C history that 
had 'command line' in one of its
menus  and it actually worked - so there's a scary reality!  We replaced 
it with MAPICS Motran file & Browser.





DaleGindlesperger@xxxxxxxxxxx
Sent by: mapics-l-bounces@xxxxxxxxxxxx
03/21/2003 07:46 AM
Please respond to MAPICS ERP System Discussion
 
        To:     MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
        cc: 
        Subject:        Re: security  ???   anyone ???



Bob,

I have a question.  I have blocked command line access (Limit Capabilities
= *YES), and the users only get a 4 character command line that they use 
to
enter a menu option # (for non-MAPICS users) or the 4 character MAPICS 
menu
option (for MAPICS users - we use MAPICS Menuing).  How can they type "
*wrksplf"?  I'm concerned about this security issue.....

Dale Gindlesperger
Fleetwood Folding Trailers, Inc.



  
                      "Bob  Tenney"   
                      <bobtenney@xxxxxxx        To:       "MAPICS ERP 
System Discussion" <mapics-l@xxxxxxxxxxxx> 
                      nk.net>                   cc:    
                      Sent by:                  Subject:  Re: security ??? 
  anyone ??? 
                      mapics-l-bounces@x   
                      idrange.com   
  
  
                      03/21/2003 09:31   
                      AM   
                      Please respond to   
                      MAPICS ERP System   
                      Discussion   
  
  




Jeff, I have two thoughts on your e-mail

1--When you block command line access, users can still get back-door 
access
by typing *wrksplf. So you are likely to have only the illusion of
security.
In my view this is worse than no security.

2--IFM's security lets you control access by user and function. I realize
that IFM may be overkill in this case, but if security is "driving the 
bus"
then it is a much better way to go. Also, if someone did get access to IFM
files, they would retire before they got useful data.

Bob Tenney
Bob Tenney Solutions, LLC
MAPICS - FRx - Presence - Crystal Reports
828-526-8976

Visit www.tenneypubs.com for books about
IFM, COM, G/L Interfaces
Info WorkPlace, Cost Accounting, and FRx
----- Original Message -----
From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
To: <mapics-l@xxxxxxxxxxxx>
Sent: Friday, March 21, 2003 7:55 AM
Subject: Re: security ??? anyone ???


>
>
>
>
>
>
>
> From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> To: mapics-l@xxxxxxxxxxxx
> Subject: security
> Date: Thu, 20 Mar 2003 16:47:12 -0500
>
> hey group,
>
>   I am working with a sm privately held co, that has decide to put the
G/L
> pkg on the AS400,mapics XA rel 6.0.
>
>   We can secure thru mapics CAS. but was looking for ideas about 
securing
> the I.T. Staff... with regular users i can eliminate the cmd line ,
etc...
> but the board, is asking about the I.T. staff, particulary GELMAS, and
> TEMGEN.
>
> any thoughts would be appreciated.
>
> thanks
>
> Jeff Snyder,  CPIM
> Mapics consultant
>
>
>
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.





_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.