Re: Authority Collection

Hello Rob,

Am 21.05.2020 um 20:43 schrieb Rob Berendt <rob@xxxxxxxxx>:

In many IBM i shops we would be shot and our remains hung as an example to others if we told managers and auditors that all users should have all access, unfettered, to their data through whatever means they desire.

Ask yourself: Why is there desire? Most often because to make their job more easy. But that's clearly not the topic at hand.

At what point in time do you restore a file which has 1,000,000 transactions per day?

If you cannot answer that question yourself, I see a big questionmark in for a DR concept, if it exists. Same question applies to "what to do if some program was at fault and allowed a(n external) hacker to do an SQL injection to delete all rows".

I admit that I still struggle to not forget that there are huge "shops", compared to those I'm used to. A bit like others forget that my midrange-duties are mostly hobbyist based. :-)

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc