[Security400] OpsNav security

["Sean Porterfield" <sporter@xxxxxxxxxxxx>]

Is there an easy reference anywhere about securing the AS/400 against all
these users on PCs?  I just signed on through Operations Navigator as a user
with no authority (no command line access, limit capabilities=*YES) and it
lets me into all kinds of things that I don't think it should allow.

For example, I can browse through all the hardware on the system.  It lets
me into Backup-->Policies, but won't actually let me change them (thank
goodness for small favors, I guess.)  It will display Security-->Policies
also.

I can see which servers (TCP/IP and Client Access) are running.

It shows all installed software products.

I really don't want "normal users" to have OpsNav, but you know there will
be some clever, curious users who will get it one way or another.
Naturally, I don't want to protect the AS/400 by not installing software on
a PC.  I need to protect the AS/400 with configurations on the AS/400.

Any ideas where to start?

Thanks!