RE: Re: security ??? anyone ???

["Greg Novak, Momentum" <gnovak@xxxxxxxxxx>]

The *WS "actions" and other commands for the Mapics command line are
managed via Menu Maintenance in Cross App.  There are security options
to enable/disable access to these in Security Maintenance.
-Greg

Gregory Novak
Manager North American Technical Services
Momentum Utilities Pty Ltd
(630) 985-1736
gnovak@xxxxxxxxxx
www.jacana.com


-----Original Message-----
From: DaleGindlesperger@xxxxxxxxxxx
[mailto:DaleGindlesperger@xxxxxxxxxxx] 
Sent: Friday, March 21, 2003 10:42 AM
To: MAPICS ERP System Discussion
Subject: Re: Re: security ??? anyone ???



Paula and/or Bob,

On a MAPICS menu, I get "Invalid Menu Option", and on a non-MAPICS menu,
I get a "Invalid Item Number".  Maybe I'm safe?  A sizable chunk of my
internal security rests on this working (well, actually not working!) -
you guys are ruining my digestion.

Dale @ Fleetwood



 

                      <pgroeber@xxxxxxxx

                      h.net>                    To:       MAPICS ERP
System Discussion <mapics-l@xxxxxxxxxxxx>                          
                      Sent by:                  cc:

                      mapics-l-bounces@x        Subject:  Re: Re:
security  ???   anyone ???                                            
                      idrange.com

 

 

                      03/21/2003 10:57

                      AM

                      Please respond to

                      MAPICS ERP System

                      Discussion

 

 





Dale,

Oh! I can answer that one!  *WS

Paola Groeber


>
> From: DaleGindlesperger@xxxxxxxxxxx
> Date: 2003/03/21 Fri AM 10:46:25 EST
> To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> Subject: Re: security  ???   anyone ???
>
>
> Bob,
>
> I have a question.  I have blocked command line access (Limit
Capabilities
> = *YES), and the users only get a 4 character command line that they 
> use
to
> enter a menu option # (for non-MAPICS users) or the 4 character MAPICS
menu
> option (for MAPICS users - we use MAPICS Menuing).  How can they type 
> " *wrksplf"?  I'm concerned about this security issue.....
>
> Dale Gindlesperger
> Fleetwood Folding Trailers, Inc.
>
>
>
>

>                       "Bob  Tenney"

>                       <bobtenney@xxxxxxx        To:       "MAPICS ERP
System Discussion" <mapics-l@xxxxxxxxxxxx>
>                       nk.net>                   cc:

>                       Sent by:                  Subject:  Re: security
???   anyone ???
>                       mapics-l-bounces@x

>                       idrange.com

>

>

>                       03/21/2003 09:31

>                       AM

>                       Please respond to

>                       MAPICS ERP System

>                       Discussion

>

>

>
>
>
>
> Jeff, I have two thoughts on your e-mail
>
> 1--When you block command line access, users can still get back-door
access
> by typing *wrksplf. So you are likely to have only the illusion of 
> security. In my view this is worse than no security.
>
> 2--IFM's security lets you control access by user and function. I 
> realize that IFM may be overkill in this case, but if security is 
> "driving the
bus"
> then it is a much better way to go. Also, if someone did get access to
IFM
> files, they would retire before they got useful data.
>
> Bob Tenney
> Bob Tenney Solutions, LLC
> MAPICS - FRx - Presence - Crystal Reports
> 828-526-8976
>
> Visit www.tenneypubs.com for books about
> IFM, COM, G/L Interfaces
> Info WorkPlace, Cost Accounting, and FRx
> ----- Original Message -----
> From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> To: <mapics-l@xxxxxxxxxxxx>
> Sent: Friday, March 21, 2003 7:55 AM
> Subject: Re: security ??? anyone ???
>
>
> >
> >
> >
> >
> >
> >
> >
> > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> > Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> > To: mapics-l@xxxxxxxxxxxx
> > Subject: security
> > Date: Thu, 20 Mar 2003 16:47:12 -0500
> >
> > hey group,
> >
> >   I am working with a sm privately held co, that has decide to put 
> > the
> G/L
> > pkg on the AS400,mapics XA rel 6.0.
> >
> >   We can secure thru mapics CAS. but was looking for ideas about
securing
> > the I.T. Staff... with regular users i can eliminate the cmd line ,
> etc...
> > but the board, is asking about the I.T. staff, particulary GELMAS, 
> > and TEMGEN.
> >
> > any thoughts would be appreciated.
> >
> > thanks
> >
> > Jeff Snyder,  CPIM
> > Mapics consultant
> >
> >
> >
> >
> >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE* 
> > http://join.msn.com/?page=features/junkmail
> >
> > _______________________________________________
> > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list To 
> > post a message email: MAPICS-L@xxxxxxxxxxxx To subscribe, 
> > unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > or email: MAPICS-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives at 
> > http://archive.midrange.com/mapics-l.
> >
> >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE* 
> > http://join.msn.com/?page=features/junkmail
> >
> > _______________________________________________
> > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list To 
> > post a message email: MAPICS-L@xxxxxxxxxxxx To subscribe, 
> > unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > or email: MAPICS-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives at 
> > http://archive.midrange.com/mapics-l.
> >
> >
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list To 
> post a message email: MAPICS-L@xxxxxxxxxxxx To subscribe, unsubscribe,

> or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives at 
> http://archive.midrange.com/mapics-l.
>
>
>
>
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list To 
> post a message email: MAPICS-L@xxxxxxxxxxxx To subscribe, unsubscribe,

> or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives at 
> http://archive.midrange.com/mapics-l.
>
>

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list To post
a message email: MAPICS-L@xxxxxxxxxxxx To subscribe, unsubscribe, or
change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.