ADVICE: >> The danger of indiscriminately assigning special authorities TIP :This article explains the special authorities and points out the main exposures if they are not assigned judiciously. >> Auditing user profile storage TIP :Find out whose profiles are taking up a lot of storage space and why. >> Reviewing *PUBLIC authority TIP :Be sure to check the *PUBLIC default security setup so that the configuration doesn't override all your other security ... >> Controlling access to spool files TIP :Viewing spool files can be a helpful and convenient, but it is best to limit access to spool files for security reasons. This ... >> Controlling access to spool files -- Part 2 TIP :This tip covers three parameters that are associated with OS/400 output queues that can extend the level of control you have ... >> Granting OS/400 users special authorities ASK THE EXPERTS : I remember the old VAX/VMS operating system that allowed us to give an individual certain "types" of security -- for ... >> Limiting user authority in Client Access ASK THE EXPERTS :User profiles are assigned a group on our iSeries, and the group has object authority to the data files. What data they can ... >> Prevent access for a user with *ALLOBJ special authority ASK THE EXPERTS :Is there a way to prevent a user with *ALLOBJ special authority from accessing specific files/programs until I can get the ... >> Understanding the user class of a profile ASK THE EXPERTS :If a user has the QSECOFR class assigned to them but has the special authority *SECADM removed, does the user still have ... >> See the users with *change or *all authority ASK THE EXPERTS : Is there a way to see the users with "change" or "all authority" on objects in a library? The library has 200 objects ... >> Things about *ALLOBJ special authority to be aware of ASK THE EXPERTS :We have been discovering many quirks for profiles with *ALLOBJ special authority. Specifically, we are finding that operators ... >> Possible to restrict *SAVSYS special authority? ASK THE EXPERTS :Some users have *SAVSYS special authority. Is it possible to restrict them from saving or restoring over some highly ... >> How much authority should programmers have? ASK THE EXPERTS :What has been your opinion and experience in giving programmers access to production libraries to fix critical production ... >> What's adopted authority all about? ASK THE EXPERTS :I'm in search of adopted authority information. Do you know where I can find detailed information? >> Restrict authority in the root directory ASK THE EXPERTS :How can security be setup so that folders/files cannot be added to the root of the IFS unless you have specific ... >> Revoking *ALLOBJ authority ASK THE EXPERTS : On our iSeries, several users have *ALLOBJ authority. I want to revoke that without annoying these people with ... >> Sufficient authority, but not *ALLOBJ authority ASK THE EXPERTS : I have a user that adds queries to other user's libraries on a regular basis. I've given her a menu item with the ... >> Prevent a user from deleting the DFU Audit Log? ASK THE EXPERTS :How can I prevent the user, who has an UPDDTA authority, from deleting the DFU Audit Log? >> Limiting user profiles ASK THE EXPERTS : I would like to give my help desk staff access to change user profiles, but I don't want the operator to change the ... >> Authorities you need to manage user profiles ASK THE EXPERTS :I am replacing a programmer and was recently granted *SECADM access. When working with user profiles, however, I only see a ...

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT iSeries system and application security Checking in on your IBM i authorization lists Strategies for securing IBM i production files Changing password security levels and upgrading operating systems on the IBM i Determine the value of parameter UPPWEI in the DSPUSRPRF field Define journal code value "K" Modify content within a journal receiver file Change password parameters on the AS/400 without deactivating user's passwords Prevent insiders with *READ or *USE access from circumventing object authority on IBM i Prevent insiders from obtaining user ids and passwords on the IBM i Change the IBM i system to allow only certain types of SSL protocol versions

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary midrange  (Search400.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary