Re: Why do software companies always want ALLOBJ

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

If there is a legitimate reason for the Software vendor to use *ALLOBJ they 
ought
to be able to site the reason (Example:  *ALLOBJ is required to read the
QAUDJRN).  If they can't site the specific reason, I'd bet they are just 
clueless
about security and that you could strip the special authority from the product
profile.

jte

"Graziano, Marie" wrote:

> I am currently working with a software vendor that is asking for the userid
> for the software to have ALLOBJ.  Now we all know that this is a very very
> bad move.  However, in order to get the product up and running I had to do
> it.  What are other companies doing?  And why do the software vendors not
> understand what ALLOBJ is and does.  IF the user id was not used to sign in,
> then I would not have a problem, but the software signs in with the userid
> each day.
>
> Marie Graziano
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---

--
John Earl                    johnearl@400security.com
The PowerTech Group      --> new number --> 253-872-7788
PowerLock Network Security   www.400security.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---