RE: Block Users

["Porterfield, Sean" <SPorterfield@xxxxxxxxxxxxxxxxxxxxxxx>]

With the caveat that (at least at some point) IBM said not to use this feature for security purposes.  Allegedly the PC checks the user's access and caches it in the registry.  I guess it's possible to hack the values to bypass the prohibition, though I've never bothered to try (or even look for the values).  I do know that when we've granted users access to things, they had to sign out of Windows and back in for it to allow them.
--
Sean Porterfield


-----Original Message-----
From: Rob Berendt
Sent: Friday, May 13, 2011 07:33
To: Midrange Systems Technical Discussion
Subject: Re: Block Users

One time setting from one location.


Rob Berendt
--



From:   Chamara Withanachchi
To:     Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date:   05/13/2011 01:11 AM
Subject:        Re: Block Users
Sent by:        midrange-l-bounces@xxxxxxxxxxxx



Rob,

We already have Exit points and command line restrictions in place but
still
we want to remove some options from client access.

The method u mentioned in here to remove options in iNav, do I have to do
it
all the computers ot is it a onetime setting from one location.

Chamara



On Thu, May 12, 2011 at 5:12 PM, <rob@xxxxxxxxx> wrote:

> There are capabilities within System i Navigator (formerly known as
> Operations Navigator) to block certain users from certain parts of it.
> Fire it up.  Right click on the system and select Application
> Administration.  For each option there are two columns.  One is "Default
> Access".  This means "do you want the general public to be able to use
> this option?".  The other is "All object access".  Do NOT freak out.
This
> does not give you all object access to that option.  This asks you "do
you
> want people who have all *ALLOBJ to be able to use this option?".  You
can
> also customize each option.

This email is confidential, intended only for the named recipient(s) above and may contain information that is privileged.  If you have received this message in error or are not the named recipient(s), please notify the sender immediately and delete this email message from your computer as any and all unauthorized distribution or use of this message is strictly prohibited.  Thank you.