Just a quick reminder: If you do as Tracy suggests (which is good
idea), you may want to take some time to ensure any batch jobs (or other
logon type processes - like a remote FTP) are 'aware' of all the newly
implemented passwords for the groups. May save you some grief in the
wee hours of the morning.
8-)
Raymond Shahan
Information Systems
REPUBLIC TITLE OF TEXAS, INC.
2701 W Plano Parkway
Plano, TX 75075
direct 214.556.0202
main 972.578.8611
fax 972.424.5621
www.republictitle.com
[log in to unmask]
Life is not a journey to the grave with the
intention of arriving safely in a pretty and
well preserved body, but rather to skid in
broadside, thoroughly used up, totally worn out,
and loudly proclaiming:
-- WOW!!! What a Ride!!!
-----Original Message-----
From: HP-3000 Systems Discussion [mailto:[log in to unmask]] On
Behalf Of Johnson, Tracy
Sent: Tuesday, November 13, 2007 8:17 AM
To: [log in to unmask]
Subject: Re: [HP3000-L] Restrict a user
None of the prior suggestions (outside of 3rd party software) address
the original question, which ALSO means to prevent a user from writing
outside his Group. These HOME a User into a group, OR prevent other
Users from writing to his Group, but they don't prevent the target User
from doing a CHGROUP or writing outside his Group.
Especially in most situations there is usually a PUB group somewhere
where everyone in an Account can write to.
Several things need to be done:
1. Password all OTHER Groups in the Account (including a PUB Group, if
it exists) to prevent the target User from doing a CHGROUP.
2. Take out AC, or ALL access from all OTHER Groups in the Account
(including a PUB Group, if it exists) to prevent the target User from
writing outside his Group.
3. Make sure only GL and/or GU access is available for SAVE and WRITE
for all OTHER groups (including a PUB Group, if it exists) to also
prevent the target User from writing outside his Group.
Obviously, if there are many Groups in an Account it will be time
consuming. Secondly, if there are any dependencies of the software to
be writing to any of these other Groups, it may cause collateral damage
after you make such changes.
The "outside of 3rd party software" statement applies throughout this
message.
Tracy Johnson
Measurement Specialties, Inc.
BT
NNNN
> -----Original Message-----
> From: HP-3000 Systems Discussion
> [mailto:[log in to unmask]] On Behalf Of Reggie Monroe
> Sent: Monday, November 12, 2007 6:07 PM
> To: [log in to unmask]
> Subject: [HP3000-L] Restrict a user
>
>
> Is there a way to restrict a user to only write to a certain group?
>
> Regards
>
> Reginald Monroe
> Systems Engineering
> Mercury Insurance - Information Technology
> (714) 671-6753
> [log in to unmask]
>
>
>
> This email and/or any files or attachments transmitted with
> it are confidential and intended solely for the use of the
> individual or entity to whom they are addressed, and may
> contain information that is privileged, confidential and
> exempt from disclosure under applicable law. If you are not
> the intended recipient, or the employee or agent responsible
> for delivering the message to the intended recipient, you are
> hereby notified that any dissemination, distribution or
> copying of this e-mail and/or any files or attachments
> transmitted with it is strictly forbidden. If you have
> received this email in error, please delete the e-mail and/or
> any files or attachments, and also notify the system manager
> ([log in to unmask]) of the error. Please note
> that any views or opinions presented in this email are solely
> those of the author and do not necessarily represent those of
> the company.. Finally, the recipient should check this email
> and any attachments for the presence of viruses. The company
> accepts no liability for any damage caused by any virus
> transmitted by this email and/or any files or attachments
> transmitted with it.
>
>
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
>
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|
