Re: QTEMP

["David Morris" <dmorris@xxxxxxxxxxxxx>]

Steve,

Are objects in QTEMP less secure than a similar object in another library?  I 
am curious to know why IBM would use a different security scheme for QTEMP.  I 
have always thought that to access an object you had to materialize a pointer 
to the object and authority is checked at that point.  Is there another way to 
access QTEMP objects?

David Morris

>>> "Steve Glanstein" <mic@aloha.com> 08/19 11:38 AM >>>
Hello gentlemen:

Every year this subject appears to come up w.r.t. QTEMP. QTEMP can be
accessed at all security levels if a determined hack is made of the
operating system. At level 50, more checking is done but believe me, it is
accessible. I believe the expression, "Don't go there" applies with QTEMP.
Ask yourself how important this information is...do you want to be release
dependant? I have been able to pick up data areas in other QTEMP on level
50 easily but strictly in a test environment on my own, "crash and burn"
computer.

If there is a job component that is very important, consider submission to
IBM for inclusion as a parameter in an existing or new API.

jmho

Steve Glanstein
mic@aloha.com 


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---