Re: Database server jobs and SQL tuning

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

MacWheel99@aol.com wrote:

> When we use library list, the user profile gets hit ONE time to verify that
> user has authority to the objects in the list.  If you qualify access to an
> object by what library it is in, AS/400 has to verify security authority
> every time you specify the library, irrespective of whether that was
> validated 2 microseconds ago on another line of code or even is inside the
> library list being used.  Thus, depending on how you qualify object locations
> in your code, and your use of library list, it is possible to totally wipe
> out performance, without gaining any security benefits whatsoever.

While this may have been the case long ago (actually, don't you have it
backwards), I think re-examination will find that many of the authority routines
have been beefed up tremendously with respect to performance.  With all of these
RISC boxes and their large amounts of memory, the cacheing algorithms for
security are quite good.

jte

P.S. Using the library list for object reference is a security exposure... but
that is a post for another day.



--
John Earl                               johnearl@400security.com
The PowerTech Group                     206-575-0711
PowerLock Network Security              www.400security.com
--



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---