Excel/Access Updating Production Data on AS400

dmbujak

Well Known Member
It has come to my attention that users who have an AS400 user profile can use Access or Excel to update production data on the AS400. I am aware some third-party products exist such as PC Access and BeSafe that lock down these connections. Do you know of a way to lock down this access within the AS400 itself?
 
Absolutely - it's certainly the preferred method - analogous to locking your data in a vault, as opposed to looking at all the possible doors, windows, etc. that represent ways into your system.

There is a document - SAR #: 2662949, available from Oracle that details the steps necessary. Please note that the document may not properly address the issue of batch jobs.

The process basically involves creating a new group profile which has no rights to any JDE data, and making your users members of this group. The initial program in the profiles is then set to adopt authority from JDE (the owner of JDE data). *PUBLIC authority must be revoked as well.

Not to be undertaken lightly!

Cheers,

Emmanuel
 
SAR 2662948 is titled, "JD Edwards World and IBM Adopted Authority Security."
 
Back
Top