Re: Why do software companies always want ALLOBJ

["alan shore" <SHOREA@xxxxxxxx>]

Create a user profile (for example DUMMYUSER), with NO password, but with 
ALLOBJ. 
Change the owner of the application (each and every executable where 
applicable) to DUMMYUSER.
Change each and every executable where applicable to adopt owner authority. 
This means that whatever, whenever and whereever this application is run, each 
executable run adopts the owners authority.
We have used this method in a number of places so that the user can obtain the 
data they are looking for, even though thay may not be authorized to a 
particular command or object.
NOTE - quite a lot of analysis will be needed to obtain the "where applicable" 
portion. Its well worth the effort as both our internal auditing and ALL the 
external auditors had NO problems with this procedure. 

>>> "Graziano, Marie" <mgraziano@badgermeter.com> 09/13 11:37 AM >>>
I am currently working with a software vendor that is asking for the userid
for the software to have ALLOBJ.  Now we all know that this is a very very
bad move.  However, in order to get the product up and running I had to do
it.  What are other companies doing?  And why do the software vendors not
understand what ALLOBJ is and does.  IF the user id was not used to sign in,
then I would not have a problem, but the software signs in with the userid
each day.

Marie Graziano

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com 
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---