Subject: | |
From: | |
Reply To: | |
Date: | Tue, 20 Oct 2009 10:29:44 +0100 |
Content-Type: | text/plain |
Parts/Attachments: |
|
|
Have you considered programatically creating file equates.
Our menu system does this, making them different for each user, group
and account on the system.
The menu program when run in a JCL just sets the equates and bails out
so we add it to every JCL.
It works for us.
Ken
[log in to unmask] wrote:
> In a message dated 10/19/2009 8:50:43 P.M. Pacific Daylight Time,
> [log in to unmask] writes:
>
> Sure, just put the lockword on the file name, either in the ASSIGN
> clause in the program, or in a FILE command.
>
> There is absolutely no way I would do this -- it's a major security
> violation doing it that way.
>
> I always, always, always have my programs retrieve passwords,
> lockwords, TurboIMAGE database passwords and so on from the system
> itself by using intrinsics (AIF's or otherwise).
>
> That way there is no hardcoded passwords in my programs.
>
> What happens if some joker goes and changes the passwords, lockwords
> etc... ?
>
> Brian.
_____________________________________________________
Computing Solutions Limited
10 St. Andrews Road
Droitwich Spa
WR9 8DN
Company Registered in England and Wales - No. 2540518
_____________________________________________________
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|
|
|