Archives

Real Life Experience - System i Data Theft

March 02, 2010

... It is our responsibility as system administrators and security officers to keep our... received a rather frantic phone call from the IT security administrator from a large US company. He... administrators and ...

Topics:
Security
Systems Management

Quick Tip: Deleting User Profiles and Adopted Authority

March 02, 2010

\'Does the user own any programs, service programs or SQL packages ?\' and, if so, \'Do any of those objects adopt the owner\'s authority ?\'"> User profiles that were created for former employees should be immediately disabled upon their departure, ...

Topics:
Application Development
Security
Systems Management

Guard your system - Keeping track of NEW Adopting Objects

February 16, 2010

. These adopting programs can be used to circumvent the security controls and file permissions that you have ...

Topics:
Systems Management
Security

Journal Insights - Skipped Sequence Numbers

February 16, 2010

If you've ever been challenged by auditors in your shop to explain why there appear to be "missing" journal entries, you'll want to know about a little trick you can use to make these normally hidden journal entries pop to the surface. As you probably k ...

Topics:
Systems Management
Security
Database (DB2 for i
General)
Backup & Recovery

Protecting Sensitive Data – But - Where is it?

January 19, 2010

... QA environment libraries. "> When we discuss the security and protection of sensitive data like credit card numbers, Bank Account Numbers and Social security Numbers we tend to focus..., and set the library and file level ...

Topics:
Systems Management
Security
Encryption & Authentication
Database (DB2 for i
General)

Copying authorities from one user to another – The GRTUSRAUT Command

January 19, 2010

I always encourage administrators to use or create a special "owner" profile to own all of our production objects/ For example, instead of the Distribution application programs and files being owned by a conglomeration of programmers and other IT people, ...

Topics:
Systems Management
Security

*SECOFR User Class does not make for a Powerful User

December 01, 2009

... are *SECOFR, *SECADM, *SYSOPR, *PGMR or *USER . The Security Officer( *SECOFR ) user class does..., *SYSOPR, *PGMR or *USER . The Security Officer( *SECOFR ) user class does not make the user powerful... the ...

Topics:
Systems Management
Security

QIBM_QDB_OPEN Exit Point Abuse

December 01, 2009

" security " software package that was calling a license check CL program every time every file... from a security and auditing perspective, but if you are going to add an exit ...

Topics:
Systems Management
Security
Performance

Detecting Access to your Sensitive Database Files

November 16, 2009

Do you know if your system users are accessing files that are outside their scope of responsibility? You can journal those sensitive files and report on who has made changes to the records, but it's a bit different if you want to know who looked at the fi ...

Topics:
Systems Management
Security
Database (DB2 for i
General)

Query/400 Profile Options and the SETQRYPRFO Command

November 16, 2009

... calls for consideration both in terms of operational and security aspects. In order to address some of these requirements Query/400 ...

Topics:
Systems Management
Security
Query/400
Database (DB2 for i
General)
Business Intelligence/Data Warehousing

ProVIP Sponsors

ProVIP Sponsors