|
midrange.com
Nope, my users have no command line, no query access (except for some that
are brought up in a CL that they can run that has record select =*YES), no
*WS. I use MAPICS Menuing, so I only give specific users access to
specific options. Almost no one gets a menu - just specific options on the
menu. It's some minor extra work for the system operator, but worth it, in
my opinion.
However, I have no restrictions on IT associates - I figure you have to
trust someone. As an aside, we don't run payroll for office and management
associates at my facility.
Dale @ Fleetwood
"Les Silies"
<lsilies@xxxxxxxxxxxxxx To: "'MAPICS ERP
System Discussion'"
stries.com> <mapics-l@xxxxxxxxxxxx>
Sent by: cc:
mapics-l-bounces@xxxxxx Subject: RE: security
??? anyone ???
ge.com
03/21/03 12:31 PM
Please respond to
MAPICS ERP System
Discussion
Dale, can your users type *WS which is the same as WRKSPLF? I haven't
checked into this hole lately but the last I heard was this is a hole.
Many
of my users work outside of MAPICS as well as inside and they know how to
use Query. So as an attempt to put some control on things I created group
profiles and granted the authorities I wanted to these group profiles.
Then
I attached users to the appropriate group profiles. Security has not been
a hot button for me. This has been my own device and may not pass the
scrutiny of others.
Les Silies
Information Systems Manager
Wainwright Industries, Inc
-----Original Message-----
From: mapics-l-bounces@xxxxxxxxxxxx
[mailto:mapics-l-bounces@xxxxxxxxxxxx]On Behalf Of
DaleGindlesperger@xxxxxxxxxxx
Sent: Friday, March 21, 2003 9:46 AM
To: MAPICS ERP System Discussion
Subject: Re: security ??? anyone ???
Bob,
I have a question. I have blocked command line access (Limit Capabilities
= *YES), and the users only get a 4 character command line that they use to
enter a menu option # (for non-MAPICS users) or the 4 character MAPICS menu
option (for MAPICS users - we use MAPICS Menuing). How can they type "
*wrksplf"? I'm concerned about this security issue.....
Dale Gindlesperger
Fleetwood Folding Trailers, Inc.
"Bob Tenney"
<bobtenney@xxxxxxx To: "MAPICS ERP
System
Discussion" <mapics-l@xxxxxxxxxxxx>
nk.net> cc:
Sent by: Subject: Re: security ???
anyone ???
mapics-l-bounces@x
idrange.com
03/21/2003 09:31
AM
Please respond to
MAPICS ERP System
Discussion
Jeff, I have two thoughts on your e-mail
1--When you block command line access, users can still get back-door access
by typing *wrksplf. So you are likely to have only the illusion of
security.
In my view this is worse than no security.
2--IFM's security lets you control access by user and function. I realize
that IFM may be overkill in this case, but if security is "driving the bus"
then it is a much better way to go. Also, if someone did get access to IFM
files, they would retire before they got useful data.
Bob Tenney
Bob Tenney Solutions, LLC
MAPICS - FRx - Presence - Crystal Reports
828-526-8976
Visit www.tenneypubs.com for books about
IFM, COM, G/L Interfaces
Info WorkPlace, Cost Accounting, and FRx
----- Original Message -----
From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
To: <mapics-l@xxxxxxxxxxxx>
Sent: Friday, March 21, 2003 7:55 AM
Subject: Re: security ??? anyone ???
>
>
>
>
>
>
>
> From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> To: mapics-l@xxxxxxxxxxxx
> Subject: security
> Date: Thu, 20 Mar 2003 16:47:12 -0500
>
> hey group,
>
> I am working with a sm privately held co, that has decide to put the
G/L
> pkg on the AS400,mapics XA rel 6.0.
>
> We can secure thru mapics CAS. but was looking for ideas about securing
> the I.T. Staff... with regular users i can eliminate the cmd line ,
etc...
> but the board, is asking about the I.T. staff, particulary GELMAS, and
> TEMGEN.
>
> any thoughts would be appreciated.
>
> thanks
>
> Jeff Snyder, CPIM
> Mapics consultant
>
>
>
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.
_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.
_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
