Re: SAVE 21 -CHGMSGQ QSYSOPR auth.

Several of us in MIS use different sign-ons for different purposes.

A particular sign-on is used for doing backups.
That sign-on is not used for much of anything else.

We have an almost "security officer" sign on which has the right authorities 
& library list to be loading updates to our application software, but 
security will not let that "officer" actually RUN the application software.  
People who can run the software cannot update it.

In a few cases, it is the same people, but we use a different sign-on for the 
special functions & those functions cannot be used for ordinary work, because 
I do not want someone signed on with a high security clearance doing ordinary 
work, where they may get called away from their station, leaving the exposure 
signed on.

We use the high security sign on for the high security work.  Period.

When a security officer function change is made, there is communication with 
the MIS personnel to the point that we can investigate what the possible 
consequences might be, instead of being faced with surprises.

Your security officer SHOULD have done security auditing of the proposed 
change to find out what functions, such as the backup, would not be able to 
run after the change.

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---