Re: Security problems

[Jeff_Klipa/Harvard@xxxxxxxxxxxxxx]

You also need to check the GROUP Profile...
For instance - mine is set to:
Group profile  . . . . . . . . .   QPGMR
Owner  . . . . . . . . . . . . .   *GRPPRF
Group authority  . . . . . . . .   *NONE
Group authority type . . . . . .   *PGP
Supplemental groups  . . . . . .   *NONE
This could have a dramatic/unexpected impact on the users ability to run
commands, etc...

Once upon a time JBA used to require that you set the users group profile
to QPGMR to overcome some ownership/authority problems on some objects when
running the software...  Then they got the bright idea to have the objects
Adopt Owner Authority...  (This was only after the user community
complained loudly about the security breach this caused)...  So QPGMR group
profile is no longer required...




JonWadey@mst-ltd.co.uk on 09/06/2000 11:01:14 AM

Please respond to JBAUSERS-L@midrange.com
                                                              
                                                              
                                                              
  To:          JBAUSERS-L@midrange.com                        
                                                              
  cc:          (bcc: Jeff Klipa/Harvard)                      
                                                              
                                                              
                                                              
  Subject      Security problems                              
  :                                                           
                                                              








I know this isn't really JBA related but knowing you guys & gals I'm sure
an
answer or two will come flooding back.
it would appear that we have a "security breach" I have a user who seems to
have
command line access even though they are not set-up to do so.  Any Clues
anyone.
By the way QSECURITY is set at 50 in the system values.
The users profile is as follows:
USER CLASS = *USER
LIMIT CAPABILITIES = *YES
SPECIAL AUTHORITY = *NONE
Thanks in anticipation

Jon

+---
| This is the JBA Software Users Mailing List!
| To submit a new message send your mail to JBAUSERS-L@midrange.com.
| To subscribe to this list send email to JBAUSERS-L-SUB@midrange.com.
| To unsubscribe from this list send email to
JBAUSERS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: doug333@aol.com.
+---



+---
| This is the JBA Software Users Mailing List!
| To submit a new message send your mail to JBAUSERS-L@midrange.com.
| To subscribe to this list send email to JBAUSERS-L-SUB@midrange.com.
| To unsubscribe from this list send email to JBAUSERS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: doug333@aol.com.
+---