Re: Re: security ??? anyone ??? -- MAPICS-L

I suppose there is a control somewhere that lets you close this back door. I
just learned something new.

Incidentaly, if you close this back door, I hope there is someone in I/T who
is dedicated to answering "Where's my printout" questions.


Bob Tenney
Bob Tenney Solutions, LLC
MAPICS - FRx - Presence - Crystal Reports
828-526-8976

Visit www.tenneypubs.com for books about
IFM, COM, G/L Interfaces
Info WorkPlace, Cost Accounting, and FRx
----- Original Message -----
From: <DaleGindlesperger@xxxxxxxxxxx>
To: "MAPICS ERP System Discussion" <mapics-l@xxxxxxxxxxxx>
Sent: Friday, March 21, 2003 11:41 AM
Subject: Re: Re: security ??? anyone ???


>
> Paula and/or Bob,
>
> On a MAPICS menu, I get "Invalid Menu Option", and on a non-MAPICS menu, I
> get a "Invalid Item Number".  Maybe I'm safe?  A sizable chunk of my
> internal security rests on this working (well, actually not working!) -
you
> guys are ruining my digestion.
>
> Dale @ Fleetwood
>
>
>
>
>                       <pgroeber@xxxxxxxx
>                       h.net>                    To:       MAPICS ERP
System Discussion <mapics-l@xxxxxxxxxxxx>
>                       Sent by:                  cc:
>                       mapics-l-bounces@x        Subject:  Re: Re: security
???   anyone ???
>                       idrange.com
>
>
>                       03/21/2003 10:57
>                       AM
>                       Please respond to
>                       MAPICS ERP System
>                       Discussion
>
>
>
>
>
>
> Dale,
>
> Oh! I can answer that one!  *WS
>
> Paola Groeber
>
>
> >
> > From: DaleGindlesperger@xxxxxxxxxxx
> > Date: 2003/03/21 Fri AM 10:46:25 EST
> > To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> > Subject: Re: security  ???   anyone ???
> >
> >
> > Bob,
> >
> > I have a question.  I have blocked command line access (Limit
> Capabilities
> > = *YES), and the users only get a 4 character command line that they use
> to
> > enter a menu option # (for non-MAPICS users) or the 4 character MAPICS
> menu
> > option (for MAPICS users - we use MAPICS Menuing).  How can they type "
> > *wrksplf"?  I'm concerned about this security issue.....
> >
> > Dale Gindlesperger
> > Fleetwood Folding Trailers, Inc.
> >
> >
> >
> >
>
> >                       "Bob  Tenney"
>
> >                       <bobtenney@xxxxxxx        To:       "MAPICS ERP
> System Discussion" <mapics-l@xxxxxxxxxxxx>
> >                       nk.net>                   cc:
>
> >                       Sent by:                  Subject:  Re: security
> ???   anyone ???
> >                       mapics-l-bounces@x
>
> >                       idrange.com
>
> >
>
> >
>
> >                       03/21/2003 09:31
>
> >                       AM
>
> >                       Please respond to
>
> >                       MAPICS ERP System
>
> >                       Discussion
>
> >
>
> >
>
> >
> >
> >
> >
> > Jeff, I have two thoughts on your e-mail
> >
> > 1--When you block command line access, users can still get back-door
> access
> > by typing *wrksplf. So you are likely to have only the illusion of
> > security.
> > In my view this is worse than no security.
> >
> > 2--IFM's security lets you control access by user and function. I
realize
> > that IFM may be overkill in this case, but if security is "driving the
> bus"
> > then it is a much better way to go. Also, if someone did get access to
> IFM
> > files, they would retire before they got useful data.
> >
> > Bob Tenney
> > Bob Tenney Solutions, LLC
> > MAPICS - FRx - Presence - Crystal Reports
> > 828-526-8976
> >
> > Visit www.tenneypubs.com for books about
> > IFM, COM, G/L Interfaces
> > Info WorkPlace, Cost Accounting, and FRx
> > ----- Original Message -----
> > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> > To: <mapics-l@xxxxxxxxxxxx>
> > Sent: Friday, March 21, 2003 7:55 AM
> > Subject: Re: security ??? anyone ???
> >
> >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> > > Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> > > To: mapics-l@xxxxxxxxxxxx
> > > Subject: security
> > > Date: Thu, 20 Mar 2003 16:47:12 -0500
> > >
> > > hey group,
> > >
> > >   I am working with a sm privately held co, that has decide to put the
> > G/L
> > > pkg on the AS400,mapics XA rel 6.0.
> > >
> > >   We can secure thru mapics CAS. but was looking for ideas about
> securing
> > > the I.T. Staff... with regular users i can eliminate the cmd line ,
> > etc...
> > > but the board, is asking about the I.T. staff, particulary GELMAS, and
> > > TEMGEN.
> > >
> > > any thoughts would be appreciated.
> > >
> > > thanks
> > >
> > > Jeff Snyder,  CPIM
> > > Mapics consultant
> > >
> > >
> > >
> > >
> > >
> > >
> > > _________________________________________________________________
> > > The new MSN 8: smart spam protection and 2 months FREE*
> > > http://join.msn.com/?page=features/junkmail
> > >
> > > _______________________________________________
> > > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> > > To post a message email: MAPICS-L@xxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > > or email: MAPICS-L-request@xxxxxxxxxxxx
> > > Before posting, please take a moment to review the archives
> > > at http://archive.midrange.com/mapics-l.
> > >
> > >
> > >
> > > _________________________________________________________________
> > > The new MSN 8: smart spam protection and 2 months FREE*
> > > http://join.msn.com/?page=features/junkmail
> > >
> > > _______________________________________________
> > > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> > > To post a message email: MAPICS-L@xxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > > or email: MAPICS-L-request@xxxxxxxxxxxx
> > > Before posting, please take a moment to review the archives
> > > at http://archive.midrange.com/mapics-l.
> > >
> > >
> >
> > _______________________________________________
> > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> > To post a message email: MAPICS-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > or email: MAPICS-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/mapics-l.
> >
> >
> >
> >
> >
> > _______________________________________________
> > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> > To post a message email: MAPICS-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> > or email: MAPICS-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/mapics-l.
> >
> >
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
>
>
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>