RE: [Maybe spam] RE: Library Security -- MAPICS-L

The issue here is that adopted authority is working in this issue. All MAPICS 
files are authorized to AMAPICS and public is excluded.  Your command for 
processing WRKQRY is adopting authority of AMAPICS, whereby they have access to 
everything that AMAPICS does (which is ALL environments).
 
In order to give users access, you have to give the explicit security. The 
authorization lists is a good way to do this, as it is much easier to 
administer. 
 
In order to prevent the useres from seeing the others, you have to implement 
authorization lists on the files you want and then change your access to WRKQRY 
to not allow adopted authority. 
 
Create a CL program that calls WRKQRY, and CHGPGM to say "use adopted 
authority=*NO".. Try it first without autoriziaton list and see if you can 
access any files..
 
Michael

        -----Original Message----- 
        From: mapics-l-bounces@xxxxxxxxxxxx on behalf of Ann Neal 
        Sent: Mon 8/8/2005 6:06 PM 
        To: MAPICS ERP System Discussion 
        Cc: 
        Subject: [Maybe spam] RE: Library Security
        
        

        David,
        
        the authorisation lists will work.  MAPICS adopted(inherited) authority 
only
        works on the programs, not with query.  We have 7 shared environments 
and no
        one can query the other's files unless they are on the authorisation 
list.
        Check to see if your library authority is set for *use or *exclude.
        
        Ann
        
        -----Original Message-----
        From: mapics-l-bounces@xxxxxxxxxxxx
        [mailto:mapics-l-bounces@xxxxxxxxxxxx]On Behalf Of Unwin, David
        Sent: Monday, August 08, 2005 4:42 PM
        To: mapics-l@xxxxxxxxxxxx
        Subject: Library Security
        
        
        Hi there,
        
        Wonder if anyone has a solution to this:
        We are running 5 live MAPICS XA R6 environments on our AS/400, using a
        shared programme library. The environments are for sites in different
        countries and I want to limit each sites users to their own environment.
        For using MAPICS this is easy via the CAS Environment Access security
        area, but it is a problem for users who need AS/400 query. All users
        have *LMTCPB set to yes, so they have no command line access, so I have
        created a MAPICS command to basically run WRKQRY. However once the user
        is in this option they can query all AMFLIBy's of all environments. If I
        try to secure the libraries with authorisation lists, this seems to get
        overridden once they are in MAPICS, because (I think) they inherit some
        kind of AMAPICS authority once they are in an environment.
        Any ideas?
        
        Many thanks,
        
        David Unwin.
        
        
        
        _______________________________________________
        This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
        To post a message email: MAPICS-L@xxxxxxxxxxxx
        To subscribe, unsubscribe, or change list options,
        visit: http://lists.midrange.com/mailman/listinfo/mapics-l
        or email: MAPICS-L-request@xxxxxxxxxxxx
        Before posting, please take a moment to review the archives
        at http://archive.midrange.com/mapics-l.
        
        _______________________________________________
        This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
        To post a message email: MAPICS-L@xxxxxxxxxxxx
        To subscribe, unsubscribe, or change list options,
        visit: http://lists.midrange.com/mailman/listinfo/mapics-l
        or email: MAPICS-L-request@xxxxxxxxxxxx
        Before posting, please take a moment to review the archives
        at http://archive.midrange.com/mapics-l.