RE: PROGRAMMER ACCESS TO PRODUCTION ENVIRONMENT

[Bernard Green <bgreen@xxxxxxxxxx>]

Candy,

Your auditors are correct, but the answer is "profiles" not people.

In the environment you describe you don't have sufficient people to allocate
one job per person - few shops do.  One (at least) of your programmers is
going to have to handle system administration issues.

Don't your programmer profile(s) access rights to production data. It's not
sabotage you're protecting yourself from - it's human error.  If you don't
let OS/400 security protect your live data from development programming
then, one day, somebody will run a test using the wrong library list - it's
a risk to which you should not expose your company.

Set up a profile with sufficient rights to handle your system administration
and apppoint one of your techies as system administrator.  Whichever of your
programmers has sufficient discipline to only use the administrator profile
signon for system administrative purposes is the one to choose - he/she
needs to be professional about this.


Regards,

Bernard Green
Momentum Utilities

Momentum Utilities are authors of Information WorkPlace (IWP) and Jacana


-----Original Message-----
From: Candy.Hein@xxxxxxxxxxxx [mailto:Candy.Hein@xxxxxxxxxxxx] 
Sent: Friday, 22 October 2004 7:39
To: mapics-l@xxxxxxxxxxxx
Subject: PROGRAMMER ACCESS TO PRODUCTION ENVIRONMENT

My boss asked me to pose this question on the MAPICS user group list.   We
are a small shop with 2 full-time programmers and 2 part-time contractors.
The full time programmers are responsible for setting up MAPICS security for
users.   Part of the audit comments during our Sarbanes-Oxley audit  was to
eliminate all programmers access to the production environment including
security (of course they have no suggestion on who would set up security).
We would like to know how other small shops handle this situation.  Do your
programmers have access to the production environment?  Who is responsible
for establishing MAPICS security on your system?

 

Thank you,

Candy Hein

 

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.