RE: Authority annoyances, continued...

That is a good idea.  However there are so many utilities out there for 400
shops that data security is a better idea.  But lookie at me calling the
kettle black.  We had a payroll clerk who decided to augment her pay.
Seems that there were so many bugs that the use of UPDDTA became rather
common.  She got quite proficient with it.  Since I am writing this, you
know that she was caught.  Also, the CEO blew the analyst who made the use
of UPDDTA common so much grief that he never recovered.  He moved on.  Sad
loss of a highly motivated and very productive employee.

Rob Berendt

ÝÝÝÝÝÝÝÝÝÝÝÚ smart person learns from their mistakes,
but a wise person learns from OTHER peoples mistakes.



                    "Jim Langston"
                    <jlangston@celsinc.c       To:     
<security400@midrange.com>
                    om>                        cc:
                    Sent by:                   Subject:     RE: [Security400] 
Authority annoyances, continued...
                    security400-admin@mi
                    drange.com


                    08/21/2001 03:52 PM
                    Please respond to
                    security400






I had changed UPDDTA to PUBLIC *EXCLUDE.  It's just way too dangerous.
There was one user for one small file that he maintained that he had to
occasionally do an UPDDTA on, and I changed the authority to the command to
allow him *USE authority.

Regards,

Jim Langston
Programmer/Analyst
Cels Enterprises, Inc.

-----Original Message-----
From: security400-admin@midrange.com
[mailto:security400-admin@midrange.com]On Behalf Of Anton Gombkötö
Sent: Tuesday, August 21, 2001 10:17 AM
To: security400@midrange.com
Subject: RE: [Security400] Authority annoyances, continued...

<SNIP>

But i think almost impossible to implement in a company where users are
used to changing (they call it "correcting") data on the fly.... :-)

<SNIP

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/security400
or email: Security400-request@midrange.com