Re: STRSRVJOB and database journal entries

Edwin Davidson <EDavidson-FhXUXP1Pus5Wk0Htik3J/[email protected]>
Newsgroups gmane.comp.systems.as400.security
Organization Prime, inc
Message-ID <[email protected]>
Considering that MARY is a programmer, MARY can probably do SBMJOB and 
specify USER(BOB)
which could run a program that would make the same change and have the 
same result.  Journals show
BOB made the change, but it was actually MARY.

I also agree that this isn't a "hole".




http://www.primeinc.com
**********************************************************************
This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to
whom they are addressed.  If you have received this email
in error please reply to the sender of the message.

The views expressed in this correspondence may not
reflect the views of Prime, Inc.

This footnote also confirms that this email message has
been scanned for the presence of computer viruses.
**********************************************************************
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.