nv-l
[Top] [All Lists]

Re: AW: Start Nvevents read-only

To: nv-l@lists.tivoli.com
Subject: Re: AW: Start Nvevents read-only
From: James_Shanks@tivoli.com
Date: Mon, 5 Jun 2000 10:39:51 -0400

If it is of any help, the clear function is not permanent.  If you start an new
workspace, and the event is still part of the current priming load, it will be
re-displayed.   I believe that the last 100 events in nvserverd's cache are what
are used to prime a new workspace.   Also, it will still  show up in Events
History and in trapd.log.  The "clear" is just a command to nvserverd to drop
his pointers to that event in memory.

My "no" is based on the fact that all the menu options in nvevents are internal
and you cannot alter nor hide any of them. And a non-root userid can run the
"clear" function as well as a root user.  But I have not investigated whether
there are any restrictions which could be invoked using NetView security.  I
don't think so, but security is not an area I am well-versed in.  But I think
that even then, all you would find is a "yes-or-no" for nvevents as an
application and all users would have access to all functions once inside.

Basically, I would have to say that, historically, in NetView. very little
effort has been expended to try to keep operators from doing things they
shouldn't. Internal security was introduced for the first time in V4, and has
not been expanded.  And NT has none.

When it comes to your operators, either you trust them or you don't, and if you
don't, they shouldn't be employed.  Perhaps that is naive, but as a former
customer I'll tell you that we made it very clear to ours that when they were
given the authority to run our network, anyone who got cute and abused his or
her authority was subject to instant dismissal and possible criminal
prosecution.


James Shanks
Tivoli (NetView for UNIX and NT) L3 Support


Thomas.Hans@citicorp.com on 06/05/2000 09:34:31 AM

Please respond to IBM NetView Discussion <nv-l@tkg.com>

To:   nv-l@tkg.com
cc:    (bcc: James Shanks/Tivoli Systems)
Subject:  AW: [NV-L] Start NVevents read-only




Hi Josef,

Thanks for your help, but this idea is from my point of view even worse. When I
use this buttom "FreezeRes" and do "Clear selected ... from all users", yes,
the event is still on this event monitor, but is deleted from all other running
Event Monitors!

I urgently need to find a way for example that operators cannot remove DBA
alerts. The clear "No" from James makes me really pessimistic.

Rgds,
Thomas

-----Urspr
üngliche Nachricht-----
Von: hlaves [SMTP:hlaves@datasys.cz]
Gesendet am: Montag, 5. Juni 2000 11:15
An: nv-l
Cc: hlaves
Betreff: RE: [NV-L] Start NVevents read-only

If you activate the FreezeRes button at the bottom of a nvevents window then
it won't  be possible for anybody to clear selected events at the window by
means of "Clear Selected From All Users".
I hope it will help.
Best regards
Josef

-----Original Message-----
From: Thomas.Hans@citicorp.com [mailto:Thomas.Hans@citicorp.com]
Sent: Friday, June 02, 2000 1:42 PM
To: NV-L@UCSBVM.ucsb.edu
Subject: [NV-L] Start NVevents read-only


Running nvevents I saw that every user can start the work menu with the
right
mouse bottom and "clear selected events " "from all users".

Is there a way to start nvevents "read-only" or to hide this option in the
menu?

Thanks in advance,

Thomas

_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l


_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l






<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web