RE: Security level 50

I have converted numerous clients to level 50. The biggest problem relates
to the use of the "roll keys" with programs in Cobol and RPG that were
compiled prior to the latest CUM for V2R3.

The programs will fail with an MCH (don't remember the number) when the
roll key is pressed. The solution ... recompile. In some cases the client
was stuck because the source was broke.

There is another case that I had where the help desk instructed the client
to change the stste to system state ... that was unusual and can have other
ramifications.

The claims that the system would slow down have been entirely
unsubstantiated in my experience. We've timed several functions and
couldn't find a difference. The big difference that we DID find was at 40+
if the iSeries had to retranslate the programs.

I think the 40 vs. 50 discussion reminded me of the 30 vs. 40 discussion
when 40 first came out. There was a hesitancy to go to 40 until 50
appeared. I suppose if we could get a security 60 then everybody would be
willing to go to 50.

It is so funny when you talk with an auditor who "loves it." Try to get the
auditor to explain the technical diffrences between 40 and 50. It's amazing
what stories come out. You could have AUT(*ALL) for everything and *SPLCTL
for users who shouldn't be able to look at payroll reports but the auditor
will be happy because you're at 50!

steve
mic@xxxxxxxxx



"Jim Damato" <jdamato@xxxxxxxxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
12/14/2005 04:09 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
"Midrange Systems Technical Discussion" <>
cc

Fax to

Subject
Security level 50






A couple years ago our Sys Admin thought it would be fun if she brought
our system to security level 50.  I didn't give it much thought, and she
was able to do it without breaking any software, and was able to
implement it without service interruption and without a test server.

Our auditors love it.

We've got some folks (I current employee formerly from IBM, and an IBM
iSeries Domino consultant) raising their eyebrows over it.  They say
that there's probably some pretty heavy performance drag as a result of
going from security level 30 or 40 to 50.  I'm still digging through the
iSeries documentation site.

Anyone have any experiences, knowledge, or conjecture on the subject?

-Jim

James P. Damato
Manager - Systems Administration
Dollar General Corporation
<mailto:jdamato@xxxxxxxxxxxxxxxxx>