RE: Security problems

["Dan Neal - btc group" <dneal@xxxxxxxxxx>]

I did test the setting in JBA by typing the command on the option line.  You
will have to turn off the command line in the JBA profile.  The AS/400 only
limits once you have gotten to a command line.

Dan

-----Original Message-----
From: owner-jbausers-l@midrange.com
[mailto:owner-jbausers-l@midrange.com]On Behalf Of
JonWadey@mst-ltd.co.uk
Sent: Wednesday, September 06, 2000 11:01 AM
To: JBAUSERS-L@midrange.com
Subject: Security problems




I know this isn't really JBA related but knowing you guys & gals I'm sure an
answer or two will come flooding back.

it would appear that we have a "security breach" I have a user who seems to
have
command line access even though they are not set-up to do so.  Any Clues
anyone.

By the way QSECURITY is set at 50 in the system values.
The users profile is as follows:

USER CLASS = *USER
LIMIT CAPABILITIES = *YES
SPECIAL AUTHORITY = *NONE

Thanks in anticipation


Jon


+---
| This is the JBA Software Users Mailing List!
| To submit a new message send your mail to JBAUSERS-L@midrange.com.
| To subscribe to this list send email to JBAUSERS-L-SUB@midrange.com.
| To unsubscribe from this list send email to JBAUSERS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: doug333@aol.com.
+---

+---
| This is the JBA Software Users Mailing List!
| To submit a new message send your mail to JBAUSERS-L@midrange.com.
| To subscribe to this list send email to JBAUSERS-L-SUB@midrange.com.
| To unsubscribe from this list send email to JBAUSERS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: doug333@aol.com.
+---