RE: IFS Authority

Topic: 3 IFS Weaknesses You Must Secure-Now!
Host: Sandi Moore
Date and Time:
Wednesday, May 15, 2013 9:00 am, Pacific Daylight Time (San Francisco, GMT-07:00)
Wednesday, May 15, 2013 12:00 pm, Eastern Daylight Time (New York, GMT-04:00)
Event number: 631 543 802
Registration ID: This event does not require a registration ID
Event password: This event does not require a password.

-------------------------------------------------------
To join the online event
-------------------------------------------------------
Click here to join the online event.
Or copy and paste the following link to a browser:
https://bytware.webex.com/bytware/onstage/g.php?d=631543802&t=a&jf=1&rId=&EA=psteinmetz%40pencor.com&ET=05e14f00815faefa2be27ddafe171476&ETR=92ae862837fcf5530ff87329a01d4b28&RT=MiMxMQ==&p

To view in other time zones or languages, please click the link:
https://bytware.webex.com/bytware/onstage/g.php?d=631543802&t=a&jf=1&rId=&EA=psteinmetz%40pencor.com&ET=05e14f00815faefa2be27ddafe171476&ETR=92ae862837fcf5530ff87329a01d4b28&ORT=MiMxMQ==&p

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Wednesday, May 15, 2013 8:42 AM
To: Midrange Systems Technical Discussion
Subject: Re: IFS Authority

I strongly recommend you look at authorization lists instead. Strongly.
There is not near the system overhead as there is on supplemental groups.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: Michael Smith <msmith@xxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
Date: 05/15/2013 08:19 AM
Subject: IFS Authority
Sent by: midrange-l-bounces@xxxxxxxxxxxx



I have a directory with the following attributes:
Primary Group = IFSOWN (Data Authorities = *RWX, Object authorities =
*ALL)
*SETGID = *YES

I would like to allow several specific users to have "all" authority to
documents created in this directory.

Can I accomplish my goal by making these users have IFSOWN as a
"Supplemental groups" on their individual profiles?

Michael Smith