Re: Password "Hint" Feasibility

Hi John,

I was going to ask which solution you thought best, and just saw it pop up
before I sent this. I still have the following question:

How difficult is it to lock down a single user profile to a single program?
An initial signon program, limited capability user, no message queue break
handling program, no group authority, no attention program, sign off at
program end, etc. etc. -- what would they be able to do with their *PUBLIC
authority? This is not a rhetorical question, I'd really like to know.

Regards,
Peter Dow
Dow Software Services, Inc.
909 425-0194 voice
909 425-0196 fax



----- Original Message -----
From: "John Earl" <johnearl@400security.com>
To: <MIDRANGE-L@midrange.com>
Sent: Saturday, November 11, 2000 4:05 PM
Subject: Re: Password "Hint" Feasibility


> Peter,
>
> Peter Dow wrote:
>
> > Hi Paul,
> >
> > How about a generic sign on of HINT, HINT that would call program HINT
that
> > would ask for their userid and then show the HINT text?
>
> This could be an extraordinarily bad idea.  User Profile HINT would be a
member
> of *PUBLIC, and would thus be authorized to *CHANGE anything on your box
that
> *PUBLIC has authority to.  If you're not clear whether this is a problem,
> checkout the system calue QCRTAUT and see what authority *PUBLIC has to
newly
> created objects.
>
> There are better suggestions in this thread.
>
> jte
>
>
> --
> John Earl                    johnearl@400security.com
> The PowerTech Group      --> new number --> 253-872-7788
> PowerLock Network Security   www.400security.com
> --
>
>
>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---