Re: AS/400 security & Client Access

["Steve Glanstein" <mic@xxxxxxxxx>]

John:

Right on!

[soap box mode=on]

For example, some vendors require qsecofr authority
in the application, other vendors provide *PUBLIC
with *ALL authority to the files, etc.

Don't blame IBM (yes, I'm a shareholder also!) because
your vendor has nobody trained to design systems
for security!

It really is not very difficult to modify an application
to use exclude based authority and there is no excuse
for a vendor staying in the last century!

[soap box mode=off]

Take it from one who has modified vendor packages and
runs most clients at level 50...

Steve Glanstein
mic@aloha.com 


>So AS/400 security is completely _respected by_ Client Access.
>Unfortunately AS/400 security is completely
> _ignored_ by too many software
>applications, and thus the software application
>"security" is completely _ignored_ by
>Client Access (and FTP and DDM, and Query,
> and DBU, and any other data access tool
>that the application vendor didn't supply).
>jte
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---