×

Good News Everybody!

The new search engine is LIVE!

Please report any problems to david (at) midrange.com.




Nope, my users have no command line, no query access (except for some that
are brought up in a CL that they can run that has record select =*YES), no
*WS.  I use MAPICS Menuing, so I only give specific users access to
specific options.  Almost no one gets a menu - just specific options on the
menu.  It's some minor extra work for the system operator, but worth it, in
my opinion.

However, I have no restrictions on IT associates - I figure you have to
trust someone.  As an aside, we don't run payroll for office and management
associates at my facility.

Dale @ Fleetwood



                                                                                
                                 
                      "Les Silies"                                              
                                 
                      <lsilies@xxxxxxxxxxxxxx        To:       "'MAPICS ERP 
System Discussion'"                  
                      stries.com>                     <mapics-l@xxxxxxxxxxxx>   
                                 
                      Sent by:                       cc:                        
                                 
                      mapics-l-bounces@xxxxxx        Subject:  RE: security  
???   anyone ???                    
                      ge.com                                                    
                                 
                                                                                
                                 
                                                                                
                                 
                      03/21/03 12:31 PM                                         
                                 
                      Please respond to                                         
                                 
                      MAPICS ERP System                                         
                                 
                      Discussion                                                
                                 
                                                                                
                                 
                                                                                
                                 




Dale, can your users type *WS which is the same as WRKSPLF?  I haven't
checked into this hole lately but the last I heard was this is a hole.
Many
of my users work outside of MAPICS as well as inside and they know how to
use Query.  So as an attempt to put some control on things I created group
profiles and granted the authorities I wanted to these group profiles.
Then
I  attached users to the appropriate group profiles.  Security has not been
a hot button for me.  This has been my own device and may not pass the
scrutiny of others.

Les Silies
Information Systems Manager
Wainwright Industries, Inc


-----Original Message-----
From: mapics-l-bounces@xxxxxxxxxxxx
[mailto:mapics-l-bounces@xxxxxxxxxxxx]On Behalf Of
DaleGindlesperger@xxxxxxxxxxx
Sent: Friday, March 21, 2003 9:46 AM
To: MAPICS ERP System Discussion
Subject: Re: security ??? anyone ???



Bob,

I have a question.  I have blocked command line access (Limit Capabilities
= *YES), and the users only get a 4 character command line that they use to
enter a menu option # (for non-MAPICS users) or the 4 character MAPICS menu
option (for MAPICS users - we use MAPICS Menuing).  How can they type "
*wrksplf"?  I'm concerned about this security issue.....

Dale Gindlesperger
Fleetwood Folding Trailers, Inc.




                      "Bob  Tenney"
                      <bobtenney@xxxxxxx        To:       "MAPICS ERP
System
Discussion" <mapics-l@xxxxxxxxxxxx>
                      nk.net>                   cc:
                      Sent by:                  Subject:  Re: security  ???
anyone ???
                      mapics-l-bounces@x
                      idrange.com


                      03/21/2003 09:31
                      AM
                      Please respond to
                      MAPICS ERP System
                      Discussion






Jeff, I have two thoughts on your e-mail

1--When you block command line access, users can still get back-door access
by typing *wrksplf. So you are likely to have only the illusion of
security.
In my view this is worse than no security.

2--IFM's security lets you control access by user and function. I realize
that IFM may be overkill in this case, but if security is "driving the bus"
then it is a much better way to go. Also, if someone did get access to IFM
files, they would retire before they got useful data.

Bob Tenney
Bob Tenney Solutions, LLC
MAPICS - FRx - Presence - Crystal Reports
828-526-8976

Visit www.tenneypubs.com for books about
IFM, COM, G/L Interfaces
Info WorkPlace, Cost Accounting, and FRx
----- Original Message -----
From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
To: <mapics-l@xxxxxxxxxxxx>
Sent: Friday, March 21, 2003 7:55 AM
Subject: Re: security ??? anyone ???


>
>
>
>
>
>
>
> From: "Jeff Snyder" <jeffreygsnyder@xxxxxxxxxxx>
> Reply-To: MAPICS ERP System Discussion <mapics-l@xxxxxxxxxxxx>
> To: mapics-l@xxxxxxxxxxxx
> Subject: security
> Date: Thu, 20 Mar 2003 16:47:12 -0500
>
> hey group,
>
>   I am working with a sm privately held co, that has decide to put the
G/L
> pkg on the AS400,mapics XA rel 6.0.
>
>   We can secure thru mapics CAS. but was looking for ideas about securing
> the I.T. Staff... with regular users i can eliminate the cmd line ,
etc...
> but the board, is asking about the I.T. staff, particulary GELMAS, and
> TEMGEN.
>
> any thoughts would be appreciated.
>
> thanks
>
> Jeff Snyder,  CPIM
> Mapics consultant
>
>
>
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
> _______________________________________________
> This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
> To post a message email: MAPICS-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/mapics-l
> or email: MAPICS-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mapics-l.
>
>

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.





_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.






_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.






This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2026 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.