Re: Why do software companies always want ALLOBJ

[John Hall <jhall@xxxxxxxxxxx>]

Years back I started working at a company will a VAX/VMS system with two
CAD/CAM workstations.  When I looked at the security I found that all of
the users had BYPASS authority.  BYPASS authority on VMS was designed
only to be used to correct system problems and it was recommended that
no one - not even the Security Administrator use this authority on a
regular basis.  It would simply BYPASS every check of security and even
file write protection.  Nice setup eh?

Fortunately VMS had very good security audit trails so once I removed
bypass I was able to trace out each security failure on the system and
allow access to the proper files.  The vendor of that system was simply
lazy because I was able to do it in about a day without changing any of
their programs.

John Hall
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---