Re: Securing Spool Files

[John Earl <johnearl@xxxxxxxxxxxxxxxxxx>]

Jim,

Would a little less "learned response" suit you?  Howz this?

James W Kilgore wrote:

> Gerald,
>
> In reading John's learned response, I recalled a seminar where the
> speaker started out by stating that people generally will not accept a
> simple solution, so he hoped he could make his topic sufficiently
> complex that it would be received well.
>
> I'll give it a try:
>
> Don't spool checks. End of problem.

YUKKKKKKKKKKKKKKKKKKKK!!!    <g>

You mean if that I have to tie up my printer for the length of the payroll job? 
  The
print portion of the job that now takes 15 minutes will now take 1.5 hours 
because the
system does all its calculation between each check print.   Once the job 
starts, no
one else can use the printer until that job is done, and the payroll clerk has 
to
gaurd the printer for the next 1.5 hours?  Yuk!

What if the payroll job already runs for 5+ hours (seen it... infinium software 
in a
5000 person company)?     YUKKKKKKK!

What if the payroll job is scheduled to run after 5:00pm or overnight?  Does the
payroll clerk have to stay until it's done (can't have the operators looking at 
the
checks)?   Ewwwwww!!

What happens if there is a forms jam or an imbalance in the audit report?   You 
just
printed 150 (or 5000???) checks that you now have to void.  Ouch!


Naw, spooling is a definite improvement, use it.   Spend X hours up front
understanding OS/400 security and you won't burn (X * 4) manhours a month paying
someone to be the Payroll Printer Police.


> Too short? <g>

Way!  <g>

jte


--
John Earl                                           johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---