RE: Restrict ability to alter variables in debugger on production

[Steve Morrison <smorrison@xxxxxxxxxxxxx>]

>> A customer has asked whether there is an iSeries-usable debugger that can
be used
>> in such a way that a programmer cannot change the values of variables
while 
>> stepping through a program. 

Set up the programmers libraries as *TEST libraries. Allow them read only
access to the production data libraries. This will prevent them from
changing production data. The OS will enforce the security, and there is no
need for a special debugger that will not allow a programmer to change data
while stepping through the programs. 


Steve Morrison
Beacon Insurance
940-720-4672 

-----Original Message-----
From: vhamberg@xxxxxxxxxxx [mailto:vhamberg@xxxxxxxxxxx] 
Sent: Wednesday, November 10, 2004 11:09 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Restrict ability to alter variables in debugger on production

A customer has asked whether there is an iSeries-usable debugger that can be
used in such a way that a programmer cannot change the values of variables
while stepping through a program. Reason for this is SOX. They want to avoid
all the documentation and special approval required to do this.

I know, programmer's should not even be looking at production data. And they
should probably have a set of test data to do this. And trying to get around
these requirements sounds like a breach in the first place. Nonetheless,
they are asking.

Thanks
Vern
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.