Re: programmers using qsecofr or qsecaadm to run programs?

thanks for the info.
I think it is one of those deals where "its always been done that way",
probably setup by someone who isnt even here now.

gary

<jsev99@xxxxxxxxxxx> wrote in message
news:1140556134.159491.277280@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

gary wrote:
I found that several of our programmers are logging in as qsecadm or
qsecofr
or an account with those rights to run certain programs like EDI and
month
end backups.

wouldnt these be instances were they should use adoptive authority?

For backups, I can not see any reason for requiring these profiles.
They should be using an ID with *SAVSYS authority which I would have
thought would be sufficient for performing backups.

As for EDI, don't know what that is. However, if your applications are
secured appropriately, there should be no need to use a QSECOFR like
profile for anything. These types of IDs give people free rein on the
system so they most certainly should not be using them. It also means
you will have no idea who actually performed the tasks which makes
auditing difficult.



.

Relevant Pages

  • Re: programmers using qsecofr or qsecaadm to run programs?
    ... wouldnt these be instances were they should use adoptive authority? ... For backups, I can not see any reason for requiring these profiles. ... As for EDI, ...
    (comp.sys.ibm.as400.misc)
  • Re: Need help restoring after failed hard drive
    ... Everything's intact including profiles, etc. ... be to get them to actually check the backups consistently (or pay me to check ... for the domain user Joe whose credentials/profile is ... Log into the local machine as TempJoe ...
    (microsoft.public.windows.server.sbs)
  • Re: Need help restoring after failed hard drive
    ... state that they have were failed backups according to the log. ... keep the existing profiles so the users don't lose their MyDocs, ... for the domain user Joe whose credentials/profile is ... Log into the local machine as TempJoe ...
    (microsoft.public.windows.server.sbs)
  • Re: Need help restoring after failed hard drive
    ... they have were failed backups according to the log. ... existing profiles so the users don't lose their MyDocs, Desktop, etc. ... the domain user Joe whose credentials/profile is cached on that workstation. ... Log into the local machine as TempJoe once ...
    (microsoft.public.windows.server.sbs)
  • Re: Need help restoring after failed hard drive
    ... network with 2 client computers/users and the SBS. ... they have were failed backups according to the log. ... existing profiles so the users don't lose their MyDocs, Desktop, etc. ... the domain user Joe whose credentials/profile is cached on that workstation. ...
    (microsoft.public.windows.server.sbs)
Loading