RE: Auth lists and object authority

[ISNM <smartfamily2003@xxxxxxxxx>]

  Tom said:
   
  "At PowerTech, we've put a feature called 'Memorized Transactions' into the 
exit-point solution we sell -- NetworkSecurity. This provides granularity down 
to the level of specific transactions. If the only authorized transaction for a 
user is "SELECT FLDA, FLDB FROM FILEA", then "SELECT FLDA, FLB, FLDC FROM 
FILEA" will be rejected. "
   
  So, what happens if the user submits a transaction that says "SELECT FLDB, 
FLDA FROM FILEA" (change of the select order)?  Is the default of the product 
such that it rejects if there is no explicit allow?  Or do you have to 
specifically deny it for that particular file/field combination?
   
  Best regards, 
   
  Steven W. Martinson, CISSP, CISM 
Consultant - Servique, LLC 
  Cell 281.546.9836 
www.servique.com 
4801 Woodway Drive, Suite 300E 
Houston, TX 77056 
  "Uniquely Qualified" 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com