Re: Application administration for security control?

The problem cited is that the settings go to the Windows registry and can be 
modified by anyone who has enough local authority - at least, that's how it 
looks to me. It is not using the iSeries registry.

-------------- Original message -------------- 
From: rob@xxxxxxxxx 

-snip-

If you really study Application Administration, I fail to see how a 
windows registry patch can get them in. You configure Application 
Administration from your PC. And it will affect that user from regardless 
which PC he logs into. 

I've personally written some exit points. There's no way a windows 
registry patch is getting past those. 

-snip-

Thanks, Rob. I am afraid I didn't make my point clear. 

The reasons why IBM doesn't recommend it as a security tool is 
"Application Administration uses the Windows registry to cache 
restrictions 
on the client PC. A skilled user who is restricted from a function by 
Application Administration could obtain access to the function by editing 
the registry. 

-snip-