Re: iACS share options

As it stands typically, the config properties file is changeable by the user. Many or most will rely on security-by-obscurity.

Perhaps that file can be made read-only, with only the set of options you want enabled.

Of course, as new actions are made available, that properties file might need updating, in whatever way you can do that.

Just ruminating - we don't do any controls on this at this time.

Vern

On 2/18/2020 7:23 AM, Rob Berendt wrote:

Ideally you secure the data instead of trying to play whack-a-mole by attacking every new tool which comes out. See this LinkedIn article
https://www.linkedin.com/pulse/piecemeal-security-rob-berendt/

But failing an effective security policy you could always try IBM Navigator for i, Security, Application Administration, Client Applications, IBM i Access Client

Rob Berendt
-- IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive Garrett, IN 46738 Ship to: Dock 108 6928N 400E Kendallville, IN 46755 http://www.dekko.com -----Original Message----- From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Justin Taylor Sent: Monday, February 17, 2020 11:58 AM To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx> Subject: RE: iACS share options CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. For people who install iACS locally on every client, how do you control access to features (or do you simply do nothing and accept the risk)? Thanks -----Original Message----- From: Vernon Hamberg [mailto:vhamberg@xxxxxxxxxxxxxxx] Sent: Monday, February 17, 2020 9:33 AM To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx> Subject: Re: iACS share options Justin I believe the recommendation is to have each user their own AcsConfig.properties - or one for each functional group of users. Now how to make that work in your world, I don't know. Vern On 2/17/2020 8:20 AM, Justin Taylor wrote:

How would you control what features are enabled in this scenario? Presently we use the AcsConfig.properties file in the directory that's shared to the NetServer.

Thanks

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email:MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:https://lists.midrange.com/mailman/listinfo/midrange-l
or email:MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
athttps://archive.midrange.com/midrange-l.

Please contactsupport@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link:https://amazon.midrange.com
-- This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: https://lists.midrange.com/mailman/listinfo/midrange-l or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l. Please contact support@xxxxxxxxxxxx for any subscription related questions. Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com