Re: IOSYSCFG and ALLOBJ

["Jim Franz" <franz400@xxxxxxxxxxxx>]

You are allowing that person now to configure communication objects
(like setting up remote access, etc) which they could not do before, even 
under
*allobj.
You should also ask why this person needs *allobj?
jim franz
----- Original Message ----- 
From: <ChadB@xxxxxxxxxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Monday, January 09, 2006 9:27 AM
Subject: Re: IOSYSCFG and ALLOBJ



Since I posted the question on a Friday with little traffic, i'm going to
bump the topic again... ;)

> Quick question... if a user profile ALREADY has *ALLOBJ, how much of an
> additional risk would you consider it to be if that profile is also given
> *IOSYSCFG?


            Michael Ryan
            <michael@ryantech
            nology.com>                                                To
            Sent by:                  Midrange Systems Technical
            midrange-l-bounce         Discussion
            s@xxxxxxxxxxxx            <midrange-l@xxxxxxxxxxxx>
                                                                       cc

            01/06/2006 03:28                                      Subject
            PM                        Re: IOSYSCFG and ALLOBJ


            Please respond to
            Midrange Systems
                Technical
               Discussion
            <midrange-l@midra
                nge.com>






Little additional exposure IMO...they can already delete the operating
system.

On 1/6/06 03:09 PM, "ChadB@xxxxxxxxxxxxxxxxxxxx"
<ChadB@xxxxxxxxxxxxxxxxxxxx> wrote:

> Quick question... if a user profile ALREADY has *ALLOBJ, how much of an
> additional risk would you consider it to be if that profile is also given
> *IOSYSCFG?
_____________________________________________________________________________

> Scanned by IBM Email Security Management Services powered by MessageLabs.
For
> more information please visit http://www.ers.ibm.com
_____________________________________________________________________________


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


_____________________________________________________________________________

Scanned by IBM Email Security Management Services powered by MessageLabs.
For more information please visit http://www.ers.ibm.com
_____________________________________________________________________________


ForwardSourceID:NT0003753A

_____________________________________________________________________________
Scanned by IBM Email Security Management Services powered by MessageLabs. 
For more information please visit http://www.ers.ibm.com
_____________________________________________________________________________


--------------------------------------------------------------------------------


> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.