Re: STRSRVJOB and database journal entries

"Bob Crothers" <bob2-d6i/[email protected]>
Newsgroups gmane.comp.systems.as400.security
Message-ID <[email protected]>
> 
> I think the point is that the journal records the fact that user BOB
> made the change to the file, but that the reality is that programmer
> MARY was responsible for the value being what it was.
> 

That makes a bit more sense.  From a strict database journaling point of view,
things are actually ok.  The change was made from BOB's job...but MARY caused
BOB's job to make that change.

Just more proof that programmers are a huge security risk.

Bob

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.