Re: Re: security ??? anyone ??? -- MAPICS-L

Jeff, If GL security is that critical, why not put the GL application in a
separate, extremely secure environment. Then turn-off the the GL interfaces
in the main environment and transfer the interface files that AP, AR, etc.
create to the GL application in the "Fort Knox" environment.

Bob Tenney
Bob Tenney Solutions, LLC
MAPICS - FRx - Presence - Crystal Reports
828-526-8976

Visit www.tenneypubs.com for books about
IFM, COM, G/L Interfaces
Info WorkPlace, Cost Accounting, and FRx
----- Original Message -----
From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
To: <mapics-l@xxxxxxxxxxxx>
Sent: Friday, March 21, 2003 12:08 PM
Subject: Re: Re: security ??? anyone ???


> Please.. and thanks !!  I have been told that AS400 security may conflict
> with mapics security and cause a termination... is there a good way to
> prevent this ???  For instance we will want the A/P clerk to hit the
gelmas
> file for posting a batch of A/P... but not be able to qry the gelmas file
??
> Thanks again
>
> Jeff
>
>
>
>
>
>
> From: <pgroeber@xxxxxxxxxxxxx>
> Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> Subject: Re: Re: security  ???   anyone ???
> Date: Fri, 21 Mar 2003 10:05:48 -0500
>
> Jeff,
>
> Yes you can secure the two files GELMAS and TEMGEN, but you will need to
use
> AS/400 security for the IT level.  It will require a lot of maintenance to
> ensure the files are secured, but it will provide the security you are
> looking for.
>
> When your users are set up on the AS/400 do you give them *ALLOBJ
authority?
>   Hopefully not.  That means they can query any file on your AS/400
without
> restrictions.  My memory is failing me a little on how to set up the
> security on files on the AS/400 and my notes are at home.  (Currently
> working on a Unix box.)  Once you have the security required on the files,
> you will need to grant authority to the files your users need to write
> queries on.  The IT developers can be given the level under *ALLOBJ with
the
> exception of only a few members which would need the higher level of
> security.
>
> The only problem with providing this level of security is the maintenance
as
> someone with *ALLOBJ authority has to be the one to grant authority to the
> files when users need to write queries.  But it would allow you to set up
a
> formal procedure that has their supervisor approve their request for
access
> to a particular file(s).  It would also keep your shop employees from
> getting into areas they shouldn't etc.  It would also solve the problem
with
> the board.
>
> I can give you more explicit instructions once I get home tonight if you
> need them.  My notes have the details and it would be a solution much
better
> than "trusting" the employees.  With all the changes going on in the world
> companies really do need to reconsider how they have security set up on
> their AS/400 files as it is very easy to copy or write a query that could
be
> sold to your competitors.
>
> Good Luck and let me know if you want those step by step instructions.
>
> Paola Groeber
> MAPICS Consultant
> 770-591-1497 (home after 4:30pm EST)
> 770-490-3297 (cell)
>
>
>  >
>  > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
>  > Date: 2003/03/21 Fri AM 07:55:21 EST
>  > To: mapics-l@xxxxxxxxxxxx
>  > Subject: Re: security  ???   anyone ???
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  > From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
>  > Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
>  > To: mapics-l@xxxxxxxxxxxx
>  > Subject: security
>  > Date: Thu, 20 Mar 2003 16:47:12 -0500
>  >
>  > hey group,
>  >
>  >   I am working with a sm privately held co, that has decide to put the
> G/L
>  > pkg on the AS400,mapics XA rel 6.0.
>  >
>  >   We can secure thru mapics CAS. but was looking for ideas about
securing
>  > the I.T. Staff... with regular users i can eliminate the cmd line ,
> etc...
>  > but the board, is asking about the I.T. staff, particulary GELMAS, and
>  > TEMGEN.
>  >
>  > any thoughts would be appreciated.
>  >
>  > thanks
>  >
>  > Jeff Snyder,  CPIM
>  > Mapics consultant
>  >
>  >
>  >
>  >
>  >
>  >
>  > _________________________________________________________________
>  > The new MSN 8: smart spam protection and 2 months FREE*
>  > http://join.msn.com/?page=features/junkmail
>  >
>  > _______________________________________________
>  > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
>  > To post a message email: MAPICS-L@xxxxxxxxxxxx
>  > To subscribe, unsubscribe, or change list options,
>  > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
>  > or email: MAPICS-L-request@xxxxxxxxxxxx
>  > Before posting, please take a moment to review the archives
>  > at http://archive.midrange.com/mapics-l.
>  >
>  >
>  >
>  > _________________________________________________________________
>  > The new MSN 8: smart spam protection and 2 months FREE*
>  > http://join.msn.com/?page=features/junkmail
>  >
>  > _______________________________________________
>  > This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
>  > To post a message email: MAPICS-L@xxxxxxxxxxxx
>  > To subscribe, unsubscribe, or change list options,
>  > visit: http://lists.midrange.com/mailman/listinfo/mapics-l
>  > or email: MAPICS-L-request@xxxxxxxxxxxx
>  > Before posting, please take a moment to review the archives
>  > at http://archive.midrange.com/mapics-l.
>  >
>  >
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
>
> _________________________________________________________________
> STOP MORE SPAM with the new MSN 8 and get 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>