Re: RMTCMD Anomaly????

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

Robert,

Robert Brown wrote:

> I don't know about RMTCMD, but I had a similar problem with file downloads.
> As long as file download was active in client access, anyone regardless of
> AS/400 security could download any file from the AS/400.

This is not totally true.  Anyone who has at least *USE authority to a file can
download load any file.  If you look at most AS/400 application packages you'll
see that in fact _everyone_ has at least *USE authority to every file (either
through their group profile or through *PUBLIC).  .

This is not happening "regardless of AS/400 security".  It's happening
"regardless of application menu security" that most software packages rely on.
AS/400 security is not broken or at fault in this instance.

The problem you outlined in your post is widespread and pervasive.  It's also a
big part of why we're in business.

jte


--
John Earl                               johnearl@400security.com
The PowerTech Group                     206-575-0711
PowerLock Network Security              www.400security.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---