Re: Commands for Limited Users

Gary,

I think you have hit the nail on the head. Swapping/setting the
effective user/groups can provide the same function as adoption and it
works in all cases. You can also swap in up to 16 profiles, which is
useful. The one thing that is missing is that you can't set a program to
end swapping. Your product makes this more accessible to shops that
don't have the time or don't want to develop the expertise to do this
themselves.

--David Morris

-----Original Message-----
From: security400-bounces@xxxxxxxxxxxx
[mailto:security400-bounces@xxxxxxxxxxxx] On Behalf Of Gary Monnier
Sent: Thursday, September 07, 2006 12:40 PM
To: Security Administration on the AS400 / iSeries
Subject: Re: [Security400] Commands for Limited Users

WARNING!!  VENDOR COMMENTS FOLLOW!!

Swapping from one profile to another is really no more than adopting
authority.  Within PowerTech's NetworkSecurity product is a feature
called Generic Exit Point.  It extends the "adopted authority" model by
providing authorization, profile switch/switch release and auditing
capabilities.

PowerTech's NetworkSecurity's Generic Exit Point provides customers
NetworkSecurity's full functionality within their own code.  Need to
switch to a specific profile to access and IFS object?  No problem.  Use
the Generic Exit Point.  All NetworkSecurity's functionality is at your
fingertips.

Gary Monnier