RE: [Maybe spam] RE: Library Security

Michael,

Thanks for this, works well in the test I have just performed!

David. 

-----Original Message-----
From: mapics-l-bounces@xxxxxxxxxxxx
[mailto:mapics-l-bounces@xxxxxxxxxxxx] On Behalf Of Michael Franchino
Sent: 09 August 2005 03:31
To: MAPICS ERP System Discussion; MAPICS ERP System Discussion
Subject: RE: [Maybe spam] RE: Library Security

The issue here is that adopted authority is working in this issue. All
MAPICS files are authorized to AMAPICS and public is excluded.  Your
command for processing WRKQRY is adopting authority of AMAPICS, whereby
they have access to everything that AMAPICS does (which is ALL
environments).
 
In order to give users access, you have to give the explicit security.
The authorization lists is a good way to do this, as it is much easier
to administer. 
 
In order to prevent the useres from seeing the others, you have to
implement authorization lists on the files you want and then change your
access to WRKQRY to not allow adopted authority. 
 
Create a CL program that calls WRKQRY, and CHGPGM to say "use adopted
authority=*NO".. Try it first without autoriziaton list and see if you
can access any files..
 
Michael

        -----Original Message----- 
        From: mapics-l-bounces@xxxxxxxxxxxx on behalf of Ann Neal 
        Sent: Mon 8/8/2005 6:06 PM 
        To: MAPICS ERP System Discussion 
        Cc: 
        Subject: [Maybe spam] RE: Library Security
        
        

        David,
        
        the authorisation lists will work.  MAPICS adopted(inherited)
authority only
        works on the programs, not with query.  We have 7 shared
environments and no
        one can query the other's files unless they are on the
authorisation list.
        Check to see if your library authority is set for *use or
*exclude.
        
        Ann
        
        -----Original Message-----
        From: mapics-l-bounces@xxxxxxxxxxxx
        [mailto:mapics-l-bounces@xxxxxxxxxxxx]On Behalf Of Unwin, David
        Sent: Monday, August 08, 2005 4:42 PM
        To: mapics-l@xxxxxxxxxxxx
        Subject: Library Security
        
        
        Hi there,
        
        Wonder if anyone has a solution to this:
        We are running 5 live MAPICS XA R6 environments on our AS/400,
using a
        shared programme library. The environments are for sites in
different
        countries and I want to limit each sites users to their own
environment.
        For using MAPICS this is easy via the CAS Environment Access
security
        area, but it is a problem for users who need AS/400 query. All
users
        have *LMTCPB set to yes, so they have no command line access, so
I have
        created a MAPICS command to basically run WRKQRY. However once
the user
        is in this option they can query all AMFLIBy's of all
environments. If I
        try to secure the libraries with authorisation lists, this seems
to get
        overridden once they are in MAPICS, because (I think) they
inherit some
        kind of AMAPICS authority once they are in an environment.
        Any ideas?
        
        Many thanks,
        
        David Unwin.
        
        
        
        _______________________________________________
        This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
        To post a message email: MAPICS-L@xxxxxxxxxxxx
        To subscribe, unsubscribe, or change list options,
        visit: http://lists.midrange.com/mailman/listinfo/mapics-l
        or email: MAPICS-L-request@xxxxxxxxxxxx
        Before posting, please take a moment to review the archives
        at http://archive.midrange.com/mapics-l.
        
        _______________________________________________
        This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
        To post a message email: MAPICS-L@xxxxxxxxxxxx
        To subscribe, unsubscribe, or change list options,
        visit: http://lists.midrange.com/mailman/listinfo/mapics-l
        or email: MAPICS-L-request@xxxxxxxxxxxx
        Before posting, please take a moment to review the archives
        at http://archive.midrange.com/mapics-l.
        
        


_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list To post
a message email: MAPICS-L@xxxxxxxxxxxx To subscribe, unsubscribe, or
change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/mapics-l.