Re: QMAXSGNACN and QMAXSIGN

[Dan Riehl <dan.riehl@xxxxxxxxxxxxx>]

Tony,

When you say that the users have "No rights to anything else", I HAVE to 
ask the questions...

1) Did you put an Object *EXCLUDE authority on everything they are not 
supposed to get to?

2) What is in place to keep that User ID from signing on at ANY workstation?

3) Since the UserID and Password are posted on a sticky.... then everyone 
in the company, and outside the company that sees the sticky will be able 
to sign-on to your production machine using tools like FTP, ODBC, DDM, file 
transfer... etc.... and have access to all files and programs that are not 
specifically *EXCLUDE.   (I guess that's really not a question, is it?) <grin>

Tony, I hope this helps...

Dan Riehl


> I'm in the process of system testing and implementation of a little "time
> clock" type subsystem on the AS400 and as part of this, I created a simple
> userid and password for signing on a workstation in the warehouse(s).  I
> plan to just put this userid and password on a sticky on the workstation.
> This profile is only allowed a little 3 option menu and has no rights to
> anything else, so I think it's "safe".