58 lines
3.5 KiB
HTML
58 lines
3.5 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Menu security" />
|
||
|
|
<meta name="abstract" content="Menu security controls which menu functions a user can perform." />
|
||
|
|
<meta name="description" content="Menu security controls which menu functions a user can perform." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvconcepts.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvmenusecurity.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="menusec" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Menu security</title>
|
||
|
|
</head>
|
||
|
|
<body id="menusec"><a name="menusec"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Menu security</h1>
|
||
|
|
<div><p>Menu security controls which menu functions a user
|
||
|
|
can perform.</p>
|
||
|
|
<p>This system was originally designed as a follow-on product for S/36 and
|
||
|
|
S/38. Many system installations were, at one time, S/36 or S/38 installations.
|
||
|
|
To control what users could do, security administrators on those earlier systems
|
||
|
|
often used a technique that is referred to as <dfn class="term">menu security</dfn> or <dfn class="term">menu
|
||
|
|
access control</dfn>.</p>
|
||
|
|
<p>Menu access control means that when a user signs on, the user sees a menu.
|
||
|
|
The user can perform only those functions that are on the menu. The user cannot
|
||
|
|
get to a command line on the system to perform any functions that are not
|
||
|
|
on the menu. In theory, the security administrator does not have to worry
|
||
|
|
about authority to objects because menus and programs control what users can
|
||
|
|
do.</p>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> Menus are not secure if the system allows any network interfaces
|
||
|
|
to access the system. Most of those interfaces do not know anything about
|
||
|
|
menu security.</div>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvconcepts.htm" title="To effectively create a security policy and plan security measures for your system, you need to understand the following security concepts, some of which are general concepts and some of which are specific to the hardware type.">Concepts</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
||
|
|
<div><a href="rzamvmenusecurity.htm" title="This article discusses the user profile parameters for setting up menu security.">Set up menu security</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|