HP3000-L Archives

October 2009, Week 3

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Ken HP3000L <[log in to unmask]>
Reply To:
Date:
Tue, 20 Oct 2009 10:29:44 +0100
Content-Type:
text/plain
Parts/Attachments:
text/plain (49 lines)
Have you considered programatically creating file equates.

Our menu system does this, making them different for each user, group 
and account on the system.

The menu program when run in a JCL just sets the equates and bails out 
so we add it to every JCL.

It works for us.

Ken

[log in to unmask] wrote:
> In a message dated 10/19/2009 8:50:43 P.M. Pacific Daylight Time, 
> [log in to unmask] writes:
>
>     Sure, just put the lockword on the file name, either in the ASSIGN
>     clause in the program, or in a FILE command.
>
> There is absolutely no way I would do this -- it's a major security 
> violation doing it that way.
>  
> I always, always, always have my programs retrieve passwords, 
> lockwords, TurboIMAGE database passwords and so on from the system 
> itself by using intrinsics (AIF's or otherwise).
>  
> That way there is no hardcoded passwords in my programs.
>  
> What happens if some joker goes and changes the passwords, lockwords 
> etc... ?
>  
> Brian.




_____________________________________________________

Computing Solutions Limited
10 St. Andrews Road
Droitwich Spa
WR9 8DN
Company Registered in England and Wales - No. 2540518

_____________________________________________________

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2