Home > AS/400 Tips > iSeries security tips > Proper IFS security setting
iSeries 400 Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

ISERIES SECURITY TIPS

Proper IFS security setting


Carol Woodbury
04.05.2005
Rating: -3.18- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


The scenario:
Company XYZ has programs (run from the green screen) that generate IFS files. You need to provide authority for the clerk running the program to create these files, but you do not want her to be able to access or view the results via iSeries Access or IFS File Shares.

How do you set the IFS security so the manager can access the files from her PC applications (Word, Excel, etc.), but none of the clerks can?

[TABLE]
[IMAGE]

The solution:
Carol Woodbury, president, CEO of SkyView Partners, says, "To create an object into a directory, you need *W, so try giving the clerks DTAAUT(*W) and OBJAUT(*NONE) to the directory into which th


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
iSeries system and application security
Checking in on your IBM i authorization lists
Strategies for securing IBM i production files
Changing password security levels and upgrading operating systems on the IBM i
Determine the value of parameter UPPWEI in the DSPUSRPRF field
Define journal code value "K"
Modify content within a journal receiver file
Change password parameters on the AS/400 without deactivating user's passwords
Prevent insiders with *READ or *USE access from circumventing object authority on IBM i
Prevent insiders from obtaining user ids and passwords on the IBM i
Change the IBM i system to allow only certain types of SSL protocol versions

iSeries security tips
Checking in on your IBM i authorization lists
PCI data security standards and the System i
Securing the integrated file system on IBM System i
Contextual security on IBM i: Limit user profile access
Time for a security checkup for your i
Security monitoring on IBM i: Watching your super users
Tracking System i program object changes
Recovering your AS/400 security configuration
System values on i: Setting them up and locking i down
A guide to System i security, Part 3: Digging in to the System i security environment

iSeries Access (Client Access)
Modern System i reports using Client Access
Automate Client Access to find files on Windows scheduler
Saving multiple sessions on IBM iSeries Client Access when using Vista
Running a job on the iSeries after it has been transferred to a PC
SQL7008 error in iSeries Access and journals
Converting and transferring AS/400 packed decimal fields to ASCII systems
Copying the spool file stream to IFS
How to: Transfer unlimited data to Excel from AS/400
The iSeries and MS Office make good partners
Microsoft computing: Integrating the iSeries and Microsoft Office

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
midrange  (Search400.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


e files are being created.

"To read a file, the manager will need at least *X to the directory and *RX to the file itself. So the manager will need these authorities.

"The problem is the clerk is going to own the file. Even if you specify to have the group own newly created objects, objects created into the IFS ignore this user profile setting and the user creating the object owns it. So you will need some process to sweep the directory and change the ownership of these objects.

"If you are running V5R3, you may be able to take advantage of one of the new file system exit points that allows you to have a program called when objects are created into a directory. You may be able to use this program to immediately change the ownership. Otherwise, you will have to have a process that runs hourly or nightly."


Rate this Tip
To rate tips, you must be a member of Search400.com.
Register now to start rating these tips. Log in if you are already a member.




DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



iSeries Security - Security Tools, Physical Security and System Security
HomeNewsTopicsITKnowledge ExchangeTipsBlogsAsk the ExpertsMultimediaWhite PapersProducts
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 1999 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts