RE: hide payroll from the security officer

five years ago I would say why is this person security officer. Howevever it
seems today
the less you know the more chance you have to get the security officer
password.

Let's face it there is only one way to fully secure a payroll today.
Watch that program that dumped it contains secure information.

1.) A seperate as400 for the payroll Dept.
2.) No modems, no tcpip, standalone
3.) contained in the payroll dept. only
4.) A small IS staff devoted only to payroll
5.) And even with all that encrypt the data

-----Original Message-----
From: owner-midrange-l@midrange.com
[mailto:owner-midrange-l@midrange.com]On Behalf Of Dennis D Pearson
Sent: Tuesday, June 22, 1999 3:41 PM
To: MIDRANGE-L@midrange.com
Subject: Re: hide payroll from the security officer


Greg

Does this guy really need *ALLOBJ authority, or can he get buy
with *ALL authority to select LIBRARIES and FILES?

DDP

Bob Crothers wrote:
>
> Greg,
>
> This will work up to a point.  However, since GEORGE has *ALLOBJ
> authority, he can just remove the *EXCLUDE from his profile and then
> he will be in.
>
> Remember, *ALLOBJ is God.  If you have this, there is not much you can
> NOT do.  It is more of a question of how much do you know how to do.
>
> Bob

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---