Re: Exit Point Question/profile switching...

["John Earl" <john.earl@xxxxxxxxxxxxxxxxxx>]

Vernon,

Changing library list also does not secure the objects in the payroll (or
any other ) library.  It simply makes it less obvious to the user that the
data is available.  A user can navigate around ht library list pretty
easily.

jte

--
John Earl
www.powertechgroup.com  john.earl@powertechgroup.com
The Powertech Group Inc. Seattle, Washington
Where the Security Experts Live!

Phone: +1-253-872-7788
Fax:      +1-253-872-7904
--
----- Original Message -----
From: "Vernon Hamberg" <vhamberg@attbi.com>
To: <midrange-l@midrange.com>
Sent: Friday, April 12, 2002 2:59 PM
Subject: Re: Exit Point Question/profile switching...


> 'Nutha thought - if you change to a single profile, you lose some tracking
> ability. Changing library list preserves history.
>
> At 12:10 AM 4/13/02 +0100, you wrote:
> >Instead of trying to switch user profiles, perhaps you could use the
> >exit point to restrict access to the appropriate libraries. This would
> >be easier I think.
> >
> >Syd Nicholson
> >
> >Hatzenbeler, Tim wrote:
> >
> >>This message is in MIME format. Since your mail reader does not
understand
> >>this format, some or all of this message may not be legible.
> >>--
> >>[ Picked text/plain from multipart/alternative ]
> >>         Is this possible and if so is there a simple CL command to do
it?
> >>I would like to add a exit point program to QIBM_QZDA_INIT to switch the
> >>userprofile to a less powerful profile (for users not found in a control
> >>table).  What command would I use?  And if so, would the profile switch
> >>exist when they make the QIBM_QZDA_SQL1 call, or would I need to switch
the
> >>profile here also?
> >>Or am I doing this all wrong?
> >>My goal is this, to create a user profile that excludes our payroll
library,
> >>and give the odbc requests this profile...
> >>Thanks, tim
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>