foresight technology group ms office integration€¦ · foresight technology group a berbee...
TRANSCRIPT
![Page 1: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/1.jpg)
®
Foresight Technology GroupForesight Technology Group
A Berbee CompanyA Berbee Company
Frank ThomasFrank Thomas
4092 Holland Sylvania Road4092 Holland Sylvania Road
Suite CSuite C
Toledo, OH 43623Toledo, OH 43623
[email protected]@berbee.com
(419) 824(419) 824--96269626
MS Office Integration MS Office Integration
Security Security
Spring 2005
Wednesday
ID# 409091
![Page 2: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/2.jpg)
®
Foresight Technology GroupForesight Technology Group
A Berbee CompanyA Berbee Company
Frank ThomasFrank Thomas
4092 Holland Sylvania Road4092 Holland Sylvania Road
Suite CSuite C
Toledo, OH 43623Toledo, OH 43623
[email protected]@berbee.com
(419) 824(419) 824--96269626
Security and Office Security and Office
IntegrationIntegration
How can you control who How can you control who
has access to your data?has access to your data?
![Page 3: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/3.jpg)
®
3
AgendaAgenda
�� A quick peek at The security WizardA quick peek at The security Wizard
�� Defining the problemDefining the problem
�� What is “normal” SecurityWhat is “normal” Security
�� Security methodsSecurity methods
�� Application only accessApplication only access�� OverviewOverview
�� DemonstrationDemonstration
�� How to set it upHow to set it up
�� Security on the InternetSecurity on the Internet
�� Other Things to improve securityOther Things to improve security
![Page 4: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/4.jpg)
®
4
The Security WizardThe Security Wizard
Right click on security then
Click on configure
![Page 5: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/5.jpg)
®
5
Next, Next
![Page 6: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/6.jpg)
®
6
All done
![Page 7: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/7.jpg)
®
7
![Page 8: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/8.jpg)
®
8
Save the reports to print
or review.
Security Wizard User.TXT.lnk
Security Wizard Administrator.TXT.lnk
DO NOT make the
changes till you have
carefully reviewed the
reports.
![Page 9: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/9.jpg)
®
Foresight Technology GroupForesight Technology Group
A Berbee CompanyA Berbee Company
Frank ThomasFrank Thomas
4092 Holland Sylvania Road4092 Holland Sylvania Road
Suite CSuite C
Toledo, OH 43623Toledo, OH 43623
[email protected]@berbee.com
(419) 824(419) 824--96269626
What trouble can I What trouble can I
get into today?get into today?
A user’s favorite A user’s favorite
questionquestion
![Page 10: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/10.jpg)
®
10
Hi, I am your Typical curious
PC based AS/400 user.
![Page 11: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/11.jpg)
®
11
Hey, That’s our
AS/400
Click
![Page 12: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/12.jpg)
®
12
Hey,That’s
our Payroll
Library
It’s not really,
this is just pretend
Click
![Page 13: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/13.jpg)
®
13
Cool - The employee file
![Page 14: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/14.jpg)
®
14
Power Word User
![Page 15: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/15.jpg)
®
15
![Page 16: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/16.jpg)
®
16
I can actually change data on the AS/400!
![Page 17: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/17.jpg)
®
17
This is just too easy
![Page 18: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/18.jpg)
®
18
Are you scared
yet?
![Page 19: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/19.jpg)
®
19
“Normal” Security“Normal” Security
�� Level 30, maybe Level 40Level 30, maybe Level 40
�� Passwords for surePasswords for sure�� All object? All object?
�� Command lines?Command lines?
�� Week passwords?Week passwords?
�� Powerful profiles? Powerful profiles?
�� Application security at menu levelApplication security at menu level�� No one on a green screen can get past No one on a green screen can get past
this. (probably true unless they have a this. (probably true unless they have a command line) command line)
Check your security level:Check your security level:
http://www.netiq.com/products/vsa/10point.asphttp://www.netiq.com/products/vsa/10point.asp
![Page 20: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/20.jpg)
®
20
Holes in “normal” Holes in “normal”
securitysecurity
�� With a command line I can run With a command line I can run
queries DFU, DBU or other 3rd party queries DFU, DBU or other 3rd party
tools.tools.
�� I can get to any data on the AS/400 I can get to any data on the AS/400
from my PC.from my PC.
![Page 21: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/21.jpg)
®
21
Exit point securityExit point security
�� Exit point security allows you to Exit point security allows you to
secure specific points in programs like secure specific points in programs like
Client Access and TCP to prevent Client Access and TCP to prevent
accessed to the iSeriesaccessed to the iSeries
�� The problem is you have to secure every The problem is you have to secure every
exit point and not all 3rd party tools allow exit point and not all 3rd party tools allow
for this. for this.
![Page 22: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/22.jpg)
®
22
PoliciesPolicies
�� Are “rules” that are enforced on a Client PC.Are “rules” that are enforced on a Client PC.
�� Are Typically downloaded from a file server, but can Are Typically downloaded from a file server, but can be enter manually on an individual PC.be enter manually on an individual PC.
�� Can be used to control some Client Access Functions.Can be used to control some Client Access Functions.
�� Restrict Number of 5250 sessions per userRestrict Number of 5250 sessions per user
�� Restrict usage of ODBC based on DSN, Restrict usage of ODBC based on DSN, AS/400, globallyAS/400, globally
�� Restrict Usage of Data TransferRestrict Usage of Data Transfer
�� Restrict usage of Install and Service functionsRestrict usage of Install and Service functions
�� Restrict OLE DB usageRestrict OLE DB usage
�� Can also be used to control some PC OS functions.Can also be used to control some PC OS functions.
![Page 23: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/23.jpg)
®
23
More on PoliciesMore on Policies
�� Are created by a “Network Administrator”Are created by a “Network Administrator”
�� Create using Microsoft Policy EditorCreate using Microsoft Policy Editor
�� CD from Win 98, Win NT, Office 2000CD from Win 98, Win NT, Office 2000
�� CWBPOLUT.EXE CWBPOLUT.EXE –– tells a PC to download tells a PC to download
policiespolicies
�� At At http://www.as400.ibm.com/clientaccesshttp://www.as400.ibm.com/clientaccess
![Page 24: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/24.jpg)
®
24
Application Application
AdministrationAdministration
�� Part of Operations NavigatorPart of Operations Navigator
�� Host based solution for restricting PC Host based solution for restricting PC
ProgramsPrograms
�� Can restrict Op Can restrict Op NavNav and CAand CA
�� Must be at V4R3 or higherMust be at V4R3 or higher
�� Stored on 400 by user profileStored on 400 by user profile
�� Build in to Client AccessBuild in to Client Access
![Page 25: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/25.jpg)
®
25
ApplAppl. Admin. User Interface. Admin. User Interface
Right Click
![Page 26: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/26.jpg)
®
26
ApplAppl. Admin. User . Admin. User
InterfaceInterface
![Page 27: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/27.jpg)
®
27
Change from GroupChange from Group
![Page 28: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/28.jpg)
®
28
Change by UserChange by User
![Page 29: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/29.jpg)
®
29
Application Admin Application Admin
vsvs PoliciesPolicies�� Application AdminApplication Admin
�� Easy to useEasy to use
�� Scoped to AS/400Scoped to AS/400
�� Limited to On/OffLimited to On/Off
�� Must be at V4R3Must be at V4R3
�� PoliciesPolicies
�� Complex to useComplex to use
�� PC orientedPC oriented
�� More capabilities as to More capabilities as to
what can be set.what can be set.
�� Any releaseAny release
Both may help but neither solve problem
![Page 30: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/30.jpg)
®
30
Exit PointExit Point
�� Provides a place where security can Provides a place where security can be checked when objects are accessed be checked when objects are accessed from outside t with he iSeries. from outside t with he iSeries. Programs such as iSeries TCP and Programs such as iSeries TCP and iSeries Access can be secured with iSeries Access can be secured with Exit PointsExit Points
�� Difficult to do yourselfDifficult to do yourself
�� Some Vendors who offer solutions Some Vendors who offer solutions built on exit point securitybuilt on exit point security�� http://www.netiq.com/products/vsa/iseriehttp://www.netiq.com/products/vsa/iserie
s.asps.asp
�� http://powertech.com/pthttp://powertech.com/pt--solutions.htmlsolutions.html
http://www.softlanding.com/powerlock/http://www.softlanding.com/powerlock/
![Page 31: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/31.jpg)
®
31
Application Only Application Only
AccessAccess
�� Use AS/400 Object security to secure Use AS/400 Object security to secure your data so that it can only be access your data so that it can only be access by an authorized user running an AOA by an authorized user running an AOA application.application.
�� Additional direct access to your data Additional direct access to your data can be granted as needed.can be granted as needed.
�� This is accomplished by:This is accomplished by:�� Reassign object ownershipReassign object ownership
�� Using Adopt Owner Authority on ProgramsUsing Adopt Owner Authority on Programs
�� Putting Users in Groups and Groups in Putting Users in Groups and Groups in Authorization ListAuthorization List
�� Use “swap” User Profile for special cases.Use “swap” User Profile for special cases.
![Page 32: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/32.jpg)
®
32
Object OwnerObject Owner
�� All Objects are changed so that they are All Objects are changed so that they are
owned by “OBJECT OWNER”owned by “OBJECT OWNER”
![Page 33: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/33.jpg)
®
33
Change the object Change the object
ownerowner
![Page 34: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/34.jpg)
®
34
Object OwnerObject Owner
�� Write a CL ProgramWrite a CL Program
�� Loop through all file and program objects Loop through all file and program objects
in a library.in a library.
�� Use CHGOBJOWN OBJ(MYLIB/MYFILE) Use CHGOBJOWN OBJ(MYLIB/MYFILE)
OBJTYPE(*FILE) NEWOWN(PRODOWNR) OBJTYPE(*FILE) NEWOWN(PRODOWNR)
to change ownership.to change ownership.
�� Change the create commands so that Change the create commands so that
objects are owned by “objects are owned by “prodownrprodownr” ”
when created.when created.
�� Use WRKOBJOWN (write a utility) to Use WRKOBJOWN (write a utility) to
find any files or programs not owned find any files or programs not owned
by “by “prodownrprodownr” ”
![Page 35: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/35.jpg)
®
35
Use CHGPGM to set Use CHGPGM to set
Adopt Owner Adopt Owner
AuthorityAuthority
![Page 36: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/36.jpg)
®
36
CHGPGM CHGPGM This is the default, it does not add owner authority but keeps it if it is higher in the stack
This adds owner authority. You use this on the initial program(s)
Use this on all other programs
Use this if you only want owner authority on this one job step
Use this if you want to stop adopt authority at this level
Write a CL program to automate this processWrite a CL program to automate this process
![Page 37: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/37.jpg)
®
37
Put Users in GroupsPut Users in Groups• User1
• User2
• UserB
• User3
• UserC
• UserD
• User4
• Group 1
• Group 2
•Group 3
•Group 4A user can be in more than 1
group if you have applications
to secure with different users.
![Page 38: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/38.jpg)
®
38
Authorization ListAuthorization List
Athlist1 (Programs) *Public = Exclude
Group 2 = Use
Group 3 = Use
Group 4 = All
Athlist 2 (Data) *Public = Exclude
Group 2 = Exclude
Group 3 = Use
Group 4 = All
![Page 39: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/39.jpg)
®
39
Typical Program
Authorization list
![Page 40: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/40.jpg)
®
40
Typical data
Authorization
List
![Page 41: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/41.jpg)
®
41
AOA AOA –– is Setupis Setup
�� All Objects owned by PRODOWNRAll Objects owned by PRODOWNR
�� All programs have the Adopt keyword set.All programs have the Adopt keyword set.
�� All users are in a groupAll users are in a group
�� Groups are in Authorization ListGroups are in Authorization List
�� Program objects Secured by Authorization List 1Program objects Secured by Authorization List 1
�� Data objects Secured by Authorization List 2Data objects Secured by Authorization List 2
Tip: Tip: Once all users are assigned to groups the authorization Once all users are assigned to groups the authorization
list can be given “All” authority. To test the adopt program list can be given “All” authority. To test the adopt program
change the Authorization list to the final authority. If there achange the Authorization list to the final authority. If there are re
any issues change it back, fix the issues then reverse the changany issues change it back, fix the issues then reverse the change.e.
![Page 42: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/42.jpg)
®
42
User in Group1User in Group1�� Initial System MenuInitial System Menu
�� Can displayCan display
�� Call to System and perform allowed functionsCall to System and perform allowed functions
�� Nice error messageNice error message
�� Access Data (read only) via QueryAccess Data (read only) via Query
�� Nice error messageNice error message
�� Update Data via DFU/DBUUpdate Data via DFU/DBU
�� Nice error messageNice error message
�� Access Data (read only) via PCAccess Data (read only) via PC--ODBCODBC
�� System error message (blows Up)System error message (blows Up)
�� Update Data via PCUpdate Data via PC--ODBCODBC
�� System error message (blows Up)System error message (blows Up)
![Page 43: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/43.jpg)
®
43
Group 1 UserGroup 1 User
�� Can’t run any programCan’t run any program
![Page 44: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/44.jpg)
®
44
![Page 45: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/45.jpg)
®
45
User in Group2User in Group2�� Initial System MenuInitial System Menu
�� Can displayCan display
�� Call to System and perform allowed functionsCall to System and perform allowed functions
�� Can performCan perform
�� Access Data (read only) via QueryAccess Data (read only) via Query
�� Nice error messageNice error message
�� Update Data via DFU/DBUUpdate Data via DFU/DBU
�� Nice error messageNice error message
�� Access Data (read only) via PCAccess Data (read only) via PC--ODBCODBC
�� System error message (blows Up)System error message (blows Up)
�� Update Data via PCUpdate Data via PC--ODBCODBC
�� System error message (blows Up)System error message (blows Up)
![Page 46: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/46.jpg)
®
46
Group 2 UsersGroup 2 Users
�� Can run programs that adopt Can run programs that adopt
![Page 47: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/47.jpg)
®
47
Group 2 UsersGroup 2 Users
�� Can’t run programs that do not adopt Can’t run programs that do not adopt
owner authority.owner authority.
![Page 48: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/48.jpg)
®
48
![Page 49: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/49.jpg)
®
49
User in Group3User in Group3�� Initial System MenuInitial System Menu
�� Can displayCan display
�� Call to System and perform allowed functionsCall to System and perform allowed functions
�� Can performCan perform
�� Access Data (read only) via QueryAccess Data (read only) via Query
�� Can performCan perform
�� Update Data via DFU/DBUUpdate Data via DFU/DBU
�� Nice error messageNice error message
�� Access Data (read only) via PCAccess Data (read only) via PC--ODBCODBC
�� Can performCan perform
�� Update Data via PCUpdate Data via PC--ODBCODBC
�� System error message (blows Up)System error message (blows Up)
![Page 50: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/50.jpg)
®
50
Group 3 UsersGroup 3 Users
�� Can run any program that does not Can run any program that does not
updateupdate
![Page 51: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/51.jpg)
®
51
Group 3 UsersGroup 3 Users�� Can’t update with programs that don’t adoptCan’t update with programs that don’t adopt
![Page 52: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/52.jpg)
®
52
![Page 53: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/53.jpg)
®
53
User in Group4User in Group4�� Initial System MenuInitial System Menu
�� Can displayCan display
�� Call to System and perform allowed functionsCall to System and perform allowed functions
�� Can performCan perform
�� Access Data (read only) via QueryAccess Data (read only) via Query
�� Can performCan perform
�� Update Data via DFU/DBUUpdate Data via DFU/DBU
�� Can performCan perform
�� Access Data (read only) via PCAccess Data (read only) via PC--ODBCODBC
�� Can performCan perform
�� Update Data via PCUpdate Data via PC--ODBCODBC
�� Can performCan perform
![Page 54: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/54.jpg)
®
54
Group 4 usersGroup 4 users
�� Can run anythingCan run anything
![Page 55: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/55.jpg)
®
55
![Page 56: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/56.jpg)
®
56
Securing Other AS/400 Securing Other AS/400
objectsobjects
Right click
![Page 57: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/57.jpg)
®
57
Secure your AS/400 resident Secure your AS/400 resident
PC FilesPC Files
![Page 58: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/58.jpg)
®
58
Sharing other AS/400 objects Sharing other AS/400 objects
through NetServerthrough NetServer
![Page 59: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/59.jpg)
®
59
Adding a 400 (folder) to Adding a 400 (folder) to
NetServerNetServer
![Page 60: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/60.jpg)
®
60
Other Things to Other Things to
secure your secure your
DataBaseDataBase
�� Referential Integrity (RI)Referential Integrity (RI)
�� TriggersTriggers
�� Stored ProceduresStored Procedures
�� Column Level ConstraintsColumn Level Constraints
![Page 61: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/61.jpg)
®
61
�� The database ensures that:The database ensures that:–– Data is consistent between filesData is consistent between files–– Data is validData is valid–– No orphansNo orphans
Referential Integrity (RI) Definition
AddRecord
Get &
Display
Error
Master
File
Detail
File
AddRecord
File I/O Program
WriteRecord
![Page 62: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/62.jpg)
®
62
Referential Integrity Referential Integrity ContinuedContinued
�� RI implemented at the Database RI implemented at the Database
Level not at the Application LevelLevel not at the Application Level
�� RI cannot be validated by anyone, not RI cannot be validated by anyone, not
even a programmer.even a programmer.
�� The data is safe from the program.The data is safe from the program.
�� Easier application codingEasier application coding
�� Better performanceBetter performance
![Page 63: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/63.jpg)
®
63
Referential Integrity Referential Integrity ContinuedContinued
�� Constraint Constraint
NameName
�� Dependant FileDependant File
�� Parent FileParent File
�� Foreign KeyForeign Key
�� Parent KeyParent Key
�� Delete ActionDelete Action
�� Update ActionUpdate Action
�� Insert ActionInsert Action
![Page 64: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/64.jpg)
®
64
Triggers DefinitionTriggers Definition
� A trigger is a program which is executed when an event occurs on a file
– Called by the database
� Triggers can be activated either before or after:– Insert– Update *Always or *Change– Delete
� The data passed to the trigger program is the before and after image of the record
� Can have multiple triggers on one file
![Page 65: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/65.jpg)
®
65
Stored Procedures Stored Procedures DefinitionDefinition
� A program called by a SQL (ODBC
compliant) command that receives and
returns a Parameter List.
ODBC
Client
Stored Procedures
Server
![Page 66: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/66.jpg)
®
66
Column Level Column Level
ConstraintsConstraints
�� Allow you to Secure individual fields in Allow you to Secure individual fields in
a record.a record.
�� Allow you to set edit rules that can be Allow you to set edit rules that can be
trapped on a field in a file.trapped on a field in a file.
�� RangesRanges
�� ValuesValues
�� Logical expressionsLogical expressions
![Page 67: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/67.jpg)
®
67
Column ConstraintsColumn Constraints�� You can You can
have the have the database database enforce enforce even even more of more of your your business business rules.rules.
![Page 68: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/68.jpg)
®
68
A Firewall is a blockade A Firewall is a blockade
between a secure network between a secure network
& an un& an un--trusted networktrusted network
![Page 69: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/69.jpg)
®
69
What is required for a What is required for a
secured Internet secured Internet
connection?connection?
�� Proxy,SOCKS or NATProxy,SOCKS or NAT
�� FilteringFiltering
�� LoggingLogging
�� ReportingReporting
�� Virus ProtectionVirus Protection
�� AuthenticationAuthentication
�� EncryptionEncryption
![Page 70: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/70.jpg)
®
70
Proxy ServerProxy Server
�� Breaks connectionsBreaks connections
�� Hides internal IP Hides internal IP
addressaddress
�� May AuthenticateMay Authenticate
�� May LogMay Log
TCP/ IP
Proxy Server
ServerClient
![Page 71: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/71.jpg)
®
71
AuthenticationAuthentication
�� Who is it?Who is it?�� How can you be sure that the person signing on is How can you be sure that the person signing on is
the person you expect.the person you expect.
�� Digital CertificatesDigital Certificates�� Sounds good but?Sounds good but?
�� Authentication ServerAuthentication Server�� Very strong if you can afford itVery strong if you can afford it
http://www.securitydynamics.com/products/datasheets/as400.html
![Page 72: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/72.jpg)
®
72
Virus ProtectionVirus Protection
http://www.as400.ibm.com/tstudio/secure1/Sdex_fr.htm
http://www.symantec.com/nav/fs_nav5-95nt.htmlhttp://www.mcafee.com/
![Page 73: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/73.jpg)
®
73
EncryptionEncryption
�� iSeries supports SSL, which allows iSeries supports SSL, which allows
all iSeries task to be encrypted.all iSeries task to be encrypted.
�� iSeries can be a VPN ServeriSeries can be a VPN Server
�� VPN be careful (At least 2 VPN be careful (At least 2
Definitions)Definitions)�� Your firewall (IPSEC)Your firewall (IPSEC)
�� A private wide area networkA private wide area network
![Page 74: Foresight Technology Group MS Office Integration€¦ · Foresight Technology Group A Berbee Company Frank Thomas 4092 Holland Sylvania Road Suite C Toledo, OH 43623 frank.thomas@berbee.com](https://reader036.vdocuments.net/reader036/viewer/2022070706/5e9ad07d3991b20eb73fb6b7/html5/thumbnails/74.jpg)
®
74
Other ResourcesOther Resources
Tips and Tools for Securing Your iSeries SC41Tips and Tools for Securing Your iSeries SC41--
53005300--0606
Managing OS/400 with Operations Navigator Managing OS/400 with Operations Navigator
V5R1 Volume 2: Security SG24V5R1 Volume 2: Security SG24--6227 6227
iSeries Wired Network Security: OS/400 V5R1 iSeries Wired Network Security: OS/400 V5R1
DCM and Cryptographic Enhancements DCM and Cryptographic Enhancements
SG24SG24--61686168
AS/400 Internet Security Scenarios: A AS/400 Internet Security Scenarios: A
Practical Approach SG24Practical Approach SG24--5954 (somewhat 5954 (somewhat
dated)dated)
http://www.woevans.com/http://www.woevans.com/