RE: security ??? anyone ??? -- MAPICS-L

Dale, can your users type *WS which is the same as WRKSPLF?  I haven't
checked into this hole lately but the last I heard was this is a hole.  Many
of my users work outside of MAPICS as well as inside and they know how to
use Query.  So as an attempt to put some control on things I created group
profiles and granted the authorities I wanted to these group profiles.  Then
I  attached users to the appropriate group profiles.  Security has not been
a hot button for me.  This has been my own device and may not pass the
scrutiny of others.

Les Silies
Information Systems Manager
Wainwright Industries, Inc


-----Original Message-----
From: mapics-l-bounces@xxxxxxxxxxxx
[mailto:mapics-l-bounces@xxxxxxxxxxxx]On Behalf Of
DaleGindlesperger@xxxxxxxxxxx
Sent: Friday, March 21, 2003 9:46 AM
To: MAPICS ERP System Discussion
Subject: Re: security ??? anyone ???



Bob,

I have a question.  I have blocked command line access (Limit Capabilities
= *YES), and the users only get a 4 character command line that they use to
enter a menu option # (for non-MAPICS users) or the 4 character MAPICS menu
option (for MAPICS users - we use MAPICS Menuing).  How can they type "
*wrksplf"?  I'm concerned about this security issue.....

Dale Gindlesperger
Fleetwood Folding Trailers, Inc.




                      "Bob  Tenney"
                      <bobtenney@xxxxxxx        To:       "MAPICS ERP System
Discussion" <mapics-l@xxxxxxxxxxxx>
                      nk.net>                   cc:
                      Sent by:                  Subject:  Re: security  ???
anyone ???
                      mapics-l-bounces@x
                      idrange.com


                      03/21/2003 09:31
                      AM
                      Please respond to
                      MAPICS ERP System
                      Discussion






Jeff, I have two thoughts on your e-mail

1--When you block command line access, users can still get back-door access
by typing *wrksplf. So you are likely to have only the illusion of
security.
In my view this is worse than no security.

2--IFM's security lets you control access by user and function. I realize
that IFM may be overkill in this case, but if security is "driving the bus"
then it is a much better way to go. Also, if someone did get access to IFM
files, they would retire before they got useful data.

Bob Tenney
Bob Tenney Solutions, LLC
MAPICS - FRx - Presence - Crystal Reports
828-526-8976

Visit www.tenneypubs.com for books about
IFM, COM, G/L Interfaces
Info WorkPlace, Cost Accounting, and FRx
----- Original Message -----
From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
To: <mapics-l@xxxxxxxxxxxx>
Sent: Friday, March 21, 2003 7:55 AM
Subject: Re: security ??? anyone ???


>
>
>
>
>
>
>
> From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> To: mapics-l@xxxxxxxxxxxx
> Subject: security
> Date: Thu, 20 Mar 2003 16:47:12 -0500
>
> hey group,
>
>   I am working with a sm privately held co, that has decide to put the
G/L
> pkg on the AS400,mapics XA rel 6.0.
>
>   We can secure thru mapics CAS. but was looking for ideas about securing
> the I.T. Staff... with regular users i can eliminate the cmd line ,
etc...
> but the board, is asking about the I.T. staff, particulary GELMAS, and
> TEMGEN.
>
> any thoughts would be appreciated.
>
> thanks
>
> Jeff Snyder,  CPIM
> Mapics consultant
>
>
>
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.





_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.