Re: Losing Authority to a file in Batch

[rob@xxxxxxxxx]

What if they couldn't access that program either?  They could only access 
it from a menu program that adopted authority?

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"Jim Franz" <franz400@xxxxxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
01/26/2004 02:53 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
"Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
cc

Fax to

Subject
Re: Losing Authority to a file in Batch






well.... would it be any diff if C:\>rmtcmd //gdisys call pgmxxx
and pgmxxx is compiled to *owner.
security is far more complex than blanket statements on either side of
this issue.
If you look in any Security Cert program, there is no "OS/400" mentioned.

jim
----- Original Message ----- 
From: <rob@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Monday, January 26, 2004 2:14 PM
Subject: RE: Losing Authority to a file in Batch


> Then what a bunch of morons!  I suppose they prefer that the users have
> access to the files themselves so that they can update them from any PC
> application versus being locked into the authorized programs?  Guess it
> makes the auditors feel better if the users can run the following:
>
> C:\>rmtcmd //gdisys dltf deleteme2/myfile
>
> IBM iSeries Access for Windows
> Version 5  Release 3  Level 0
> Submit Remote Command
> (C) Copyright IBM Corporation and Others 1984, 2003.  All rights 
reserved
> U.S. Government Users Restricted Rights - Use, duplication or disclosure
>   restricted by GSA ADP Schedule Contract with IBM Corp.
> Licensed Materials - Property of IBM
>
> CPC2191 - Object MYFILE in DELETEME2 type *FILE deleted.
>
> C:\>
>
> Rob Berendt
> -- 
> Group Dekko Services, LLC
> Dept 01.073
> PO Box 2000
> Dock 108
> 6928N 400E
> Kendallville, IN 46755
> http://www.dekko.com
>
>
>
>
>
> Jim Damato <jdamato@xxxxxxxxxxxxxxxxx>
> Sent by: midrange-l-bounces@xxxxxxxxxxxx
> 01/26/2004 01:53 PM
> Please respond to
> Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
>
>
> To
> "'Midrange Systems Technical Discussion'" <midrange-l@xxxxxxxxxxxx>
> cc
>
> Fax to
>
> Subject
> RE: Losing Authority to a file in Batch
>
>
>
>
>
>
> Have you ever had to expose your system to a security audit?  Programs
> compiled as USRPRF(*OWNER) are among the first things to go.
>
> -Jim
>
> James P. Damato
> Manager - Technical Administration
> Dollar General Corporation
> <mailto:jdamato@xxxxxxxxxxxxxxxxx>
>
>
>
> -----Original Message-----
> From: Malchow, Grizzly [mailto:GMalchow@xxxxxxxxxxxxxxxxxxxxx]
> Sent: Friday, January 23, 2004 12:58 PM
> To: midrange-l@xxxxxxxxxxxx
> Subject: RE: Losing Authority to a file in Batch
>
>
> Apparently my user profile has been changed. Whenever I used to compile
> programs, the user ID default was *OWNER. Now I noticed that the default
> is *USER. I recompiled with *owner and that solved my problems.
> Thanks everyone.
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.