iSeries Object Authority vs. Menu Security
5 pts.
0
Q:
iSeries Object Authority vs. Menu Security
Hello,
I am new to iSeries and OS/400. Here is my question:
Let's say in a level 30 security environment, user access is controlled through a menu, which does not alow them to access any sensitive objects. But a number of sensitive objects have been assigned *ALL authority for *PUBLIC. Can these users somehow still have access to those sensitive objects because of the *ALL for *PUBLIC authority assigned to them, or would that be impossible due to their menu access?
ASKED: May 8 2008  6:25 PM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
0
23625 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button

Hi,

That would depend on your menus and whether the user has access to a command line or not. If your menus don't use the objects and your users don't have access to a command line then your users cannot get access to them.

Regards,

Martin Gilbert.
Last Answered: May 9 2008  8:44 AM GMT by Gilly400   23625 pts.
0
0
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Jtaylor   10 pts.  |   Jun 17 2008  6:12PM GMT

If you are running TCP/IP, you also need to think about iSeries Access data transfer, ODBC and FTP.

 

TomLiotta   8025 pts.  |   Nov 3 2009  10:36PM GMT

…and Remote Command/Distributed Program Call, and REXEC, and JDBC(OleDB/.Net/?), and ssh, and…?

Tom

 

Teandy   3250 pts.  |   Nov 4 2009  4:42PM GMT

We use both. There is always some one in every organization that knows just enough about SQL or AS/400 Query to be dangerous.

 
0