Robot/SCHEDULE Security

Steve, we have Robot Schedule & have been using it for years.

I have been the System Administrator for over 10 years.

Here is what I would recommend:

I would use the Robot Schedule application security over *PUBLIC
authority.

Figure out who needs to do what & put all of these user in groups or
authorization lists.

Associate the authorization list with the functions needed within Robot.

For example, we have people at the help desk that may need to look at
the Robot Setup, but not be able to modify it.

We have developers that may need to submit certain jobs, but we don't
want them to be able to add or modify jobs.

Keep it at the group level or authorization list level & it will help
you manage things as personnel change.

Being the administrator, I am the only one allowed to add, change or
delete jobs.

Feel free to email me if needed.

Thanks.
James Salter
Systems Programmer
American Cast Iron Pipe Co
Email: jsalter@xxxxxxxxxx


-----------------------------

message: 4
date: Tue, 29 Apr 2008 10:01:12 -0700 (PDT)
from: Steven Martinson <smart-consultant@xxxxxxxxxxxxx>
subject: Robot/SCHEDULE Security

Hello all you purveyors of iSeries "hackish amusements," with your
self-replicating RPG programs... (Sorry, I couldn't resist ;-)...

Is anyone out there using Robot/SCHEDULE application security vs. just
using the default *PUBLIC access that is used when the "Do you want to
use ROBOT security system" parameter is set to "N" on the General System
Defaults screen? If so, are you using the profile-level controls found
within the "Maintain Secured Objects" screens or are you using an
authorization list (or lists)? Are you using the "Authorized Objects"
screens to control objects referenced when users setup/manage Robot
jobs?

I am working on closing some exposures for my current client and I don't
have the luxury of a separate test system for Robot. I am curious to
know what other's experiences have been.

TIA for any input!

Best regards,

Steve

Steven W. Martinson, CISA, CISM, CISSP
Security Consultant
Cypress, Texas


Smart-Consultant@xxxxxxxxxxxxx
Mobile: 713.277.5845
Fax: 281.758.2429

******************************************
_________Confidentiality Notice_______________________
This e-mail and any files transmitted with it is
confidential and is intended solely for the use of
the individual(s) or entity(ies) to whom this e-mail
is addressed. If you are not the intended recipient
or the person responsible for delivering the e-mail
to the intended recipient, be advised that you have
received this e-mail in error, and that any use,
disclosure, dissemination, forwarding, printing,
retention or copying of this e-mail is strictly
prohibited. If you have received this e-mail in
error, please immediately return this e-mail to
the sender and delete the e-mail from your system.
Thank you.