RE: Programmer Authorities

[James Turnbull <jamest@xxxxxxxxxx>]

But you also have to realise the potential damage that a programmer can
cause.  You give them the authority they require to do their jobs and
nothing more.  Same as your Finance department, warehousing, etc, etc.
Just because they are programmers doesn't mean that they should get
treated any different from any other users.  The core purpose of
security is to ensure data security and integrity.  And programmers have
been known to make mistakes ...  like any other user no matter their
level of competency.  Mistakes that could cost your business.


James Turnbull

AS/Tech Consulting

        -----Original Message-----
        From:   Weatherly, Howard [SMTP:hweatherly@dlsc.dla.mil]
        Sent:   Tuesday, 16 September 1997 23:13
        To:     'Midrange-L'
        Subject:        RE: Programmer Authorities


        If you dont trust your programmers and give them some sense of
your 
        confidence
        in them,  they will soon be working for your competitors.
         ----------
        From: midrange-l-owner
        To: MIDRANGE-L
        Subject: Programmer Authorities
        Date: Tuesday, September 16, 1997 11:31AM

        Hi!

        How do other sites restrict their programming staff? Do you
allow them
        *JOBCTL or (shock horror) *ALLOBJ authority? Do they have access
to live
        programs and data or is there some form of change control?
etc...

        All comments welcome,

        Tim Shepherd
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---