Re: RMTCMD Anomaly????

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

Robert,

Robert Brown wrote:

> AS/400 security is completely avoided by CA, with respect to object
> authority and cmd line authority.

Please!   Don't say such things.  It's not true, and it really ticks off the
AS/400 security team when this lie is spread.  :^)

Client Access (and BosaNova, and WRQ, and all the rest of the emulation 
products)
do and must respect object authority.  The problem that you likely experienced 
is
that the underlying objects were _not_ secured at an object level.  Many (most?)
AS/400 application packages grant excess authority to either *PUBLIC or to the
group profile that all application users belong to (Usually the applicaiton
vendor makes the object owner profile and the group profile one and the same).

So AS/400 security is completely _respected by_ Client Access.  Unfortunately
AS/400 security is completely _ignored_ by too many software applications, and
thus the software application "security" is completely _ignored_ by Client 
Access
(and FTP and DDM, and Query, and DBU, and any other data access tool that the
application vendor didn't supply).

jte



--
John Earl                               johnearl@400security.com
The PowerTech Group                     206-575-0711
PowerLock Network Security              www.400security.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---