
	Home > Ask the AS/400 Experts > iSeries Security Questions & Answers > Guidelines for preventing access to commands and duplication of objects

Ask The iSeries 400 Expert: Questions & Answers

EMAIL THIS

Guidelines for preventing access to commands and duplication of objects

EXPERT RESPONSE FROM: Carol Woodbury

		Pose a Question

		Other iSeries 400 Categories

		Meet all iSeries 400 Experts
		Become an Expert for this site

iSeries news and advice

Digg This! StumbleUpon Del.icio.us

QUESTION POSED ON: 02 September 2008
Multi part question:
1. What are the recommendations for commands that should be *Public *Exclude?

2. The current example is the command CRTDUPOBJ which is *Public *Use but few users have command line authority to run the command. For those who do have command line, are there other authorities required to create a duplicate object?

Digg This!

StumbleUpon

Del.icio.us

RELATED CONTENT

	iSeries Security
	Changing password security levels and upgrading operating systems on the IBM i
	Determine the value of parameter UPPWEI in the DSPUSRPRF field
	Define journal code value "K"
	Modify content within a journal receiver file
	Change password parameters on the AS/400 without deactivating user's passwords
	Prevent insiders with READ or USE access from circumventing object authority on IBM i
	Prevent insiders from obtaining user ids and passwords on the IBM i
	Change the IBM i system to allow only certain types of SSL protocol versions
	Authorize a specific user to select files in a separate library
	Allow a user to view a library prod without granting full access to all data

iSeries system and application security

Developing a security incident response system for System i

Setting up security for programmers on IBM i

Blocking AS/400 DB2 users

Trouble accessing IFS path from Win2k3 server

Checking in on your IBM i authorization lists

Strategies for securing IBM i production files

Changing password security levels and upgrading operating systems on the IBM i

Determine the value of parameter UPPWEI in the DSPUSRPRF field

Define journal code value "K"

Modify content within a journal receiver file

RELATED GLOSSARY TERMS

Terms from Whatis.com − the technology online dictionary

midrange (Search400.com)

RELATED RESOURCES

2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems

Search Bitpipe.com for the latest white papers and business webcasts

Whatis.com, the online computer dictionary

In Appendix C of the System i Security Reference manual (PDF) you'll see a list of the commands that IBM ships with *PUBLIC authority set to *EXCLUDE. This is a good place to start. Then in Appendix D in the same manual, you'll see all of the CL commands listed along with the authority required to run them. Ensuring that the data's object level security has been set properly should be your first line of defense (rather than focusing on securing commands). For example, if users don't have authority to the file, they won't be able to duplicate it.

Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.

Browse our Expert Advice
Operating Systems IT Management Networking Database	Security Servers and Storage Applications and Development Career Center

iSeries Networking - Printing, Remote Access, TCP/IP

SEARCH

TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.


TechTarget Corporate Web Site \| Media Kits \| Site Map All Rights Reserved, Copyright 1999 - 2009, TechTarget \| Read our Privacy Policy