Re: [Security400] Allowing Someone to Create User Profiles...

[rob@xxxxxxxxx]

And you could get a little fancy with this program.

Suppose it was an RPG program.  And you had it call the QCAPCMD api.  Then 
it could prompt the command, let the user fill it in, run the command, and 
even return the command string to you in one fell swoop.  Then you could 
log that command string somewhere.  Upon your return you would evaluate 
that log.

Of course if you're a real stickler for security, you could do a more 
thorough job with security journalling.  Auditors like journalling versus 
transaction files.  With journalling if someone tries to erase a journal 
entry you can sure tell.  With a transaction file, any DB utility...   And 
once you've fired a payroll clerk for making a profit with UPDDTA you get 
a tinge more serious.

Rob Berendt
-- 
"They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety." 
Benjamin Franklin