RE:

In this day and time, why would anyone be allowed to store anything on
their personal hard drive that is business critical? Everyone is our
organization is required to store their work on shared network drives
that are departmentally segregated. No one should ever need another
person's password if data management is handled correctly.


John Arnold
(301) 354-2939


-----Original Message-----
From: midrange-nontech-bounces@xxxxxxxxxxxx
[mailto:midrange-nontech-bounces@xxxxxxxxxxxx] On Behalf Of Al Mac Wheel
Sent: Monday, April 07, 2008 10:18 PM
To: Non-Technical Discussion about the AS400 / iSeries
Subject: Re:

There's also the burden of proof which person actually made the
programming updates.

We had an employee off sick & needed to get into her PC password.
I think there's a real serious flaw in audit trails when some other
person is in there using the name of the person the PC is normally used
by.
An IT collegue said THIS IS WHY he needs to know everyone's passwords,
and hates my practice of changing master security passwords every few
months.

There's also the issue of code that might be legal at one time in
history.
We write programs based on today reality, then reality changes, and we
nmay be oblivious to what software is affected.
Are the tax rates correctly computed & updated when the tax rates
change?

I suspect there would be a burden of proof to prove that the programmer

knew it was a crime, and that he intended to commit a crime. The paper

trail could become very important in that regard.



Gary Monnier wrote:

I would hope you are correct but, I do not know for certain. If a
programmer is directed to write code that violates the law and the
code is discovered is the programmer culpable? I suspect the courts

would say yes but again, I do not know for certain.

--
This is the Non-Technical Discussion about the AS400 / iSeries
(Midrange-NonTech) mailing list To post a message email:
Midrange-NonTech@xxxxxxxxxxxx To subscribe, unsubscribe, or change list
options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-nontech
or email: Midrange-NonTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-nontech.