RE: AS400 security WAS: Package Vendor that changes IBM command Defa ults.

Wasn't there a change in the default for creating files from the old days of
SYS38 to the 400 in the security placed on the file created?  We used to
have to grant object authority to various file (a lot of them) every time we
changed operators (and some regular users).  I'm thinking that by default
*public was excluded from the files on the 38 and on the 400 the default is
*public *change.  Now this could be bad memory or just that that's the way
the shop was set up then.
Anyone remember how that was?
 
Joe Giusto II
Patuxent Publishing Company
 <mailto:jgiusto@patuxent.com> mailto:JGiusto@patuxent.com
http://www.lifegoeson.com <http://lifegoeson.com> 


-----Original Message-----
From:   Joe Teff [SMTP:jteff19@idt.net]
Sent:   Tuesday, June 22, 1999 1:12 PM
To:     MIDRANGE-L@midrange.com
Subject:        Re: AS400 security  WAS: Package Vendor that changes IBM
command Defa ults.

><snip>

 I think a better description is that security is
enforced by what people don't know how to do. For example, a user has
ClientAccess and Access. The assumption is that the data is safe
because the users won't figure out how to configure ODBC to get to
the AS/400 data. I'm not saying that I think it's right, that is just my
observations from the trenches. I have found object security to be the
exception, not the rule even though every company that I've been in the
last 10+ years has had PC's connected via ClientAccess, WinAPPC or
Rumba.

Joe Teff


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---