windows and the public

[Howard Pasternack]

I guess I am confused about what the Innopac issue mentioned below is.
Innopacs running on Unix machines are reasonably secure.  Telnet access is
available to most of them.  The Innopac becomes unsecure only when
one has a userid and password as a Unix system administrator.  And icons on
windows machines for use by either the public or staff should not be doing
automatic logons as Unix administrators.

Howard Pasternack
Brown University

>Posted on 7 Jun 1996 at 07:57:52 by Elvio Pederzolli
>
>windows and the public
>
>Date: Fri, 7 Jun 1996 04:54:57 -0700
>Reply-To: elviop at ferrari.slsa.sa.gov.au
>From: Elvio Pederzolli <elviop at ferrari.slsa.sa.gov.au>
>
>dHi There
>
>
>We are about to provide our library users a new integrated way of using
>resources on our novell network. They will be able to access our cdrom network
>(about 20 cdroms in all), ERL databases on our ERL server and of course access
>to our INNOPAC library system. They will be able to do this from clicking on
>icons from a window on their windows 3.22 desktop.
>
>We can implement the usual low level security options in windows eg stop them
>deleting icons, stopping the file run option and preventing them from closing
>down windows.
>
>However, if they minimize that main window or use the alt tab key stokes they
>will be able to see the icons for the undepinning programes that are running
>in the background - these programs drive our socket connections to our file
>severs and allow telnet acces to our UNIX machine that runs our INNOPAC
>software. They can then maliciously or accidently stop these programmes from
>running. This means that important parts of the network are disabled and
>require intervention from our hard pressed computer help desk staff.
>
>Has anyone experienced this problem ? Is there a way of locking users into a
>main window, of stopping the use of the alt tab keys so that all
>users get to see is the main window.
>
>We have built our network on the principle that users should be able to access
>all imformation resources from the one place and we would not like to change
>this.
>
>Any help would be much appreciated.
>
>
>Regards Elvio Pederzooli
>
>State Library of South Australia
>
>***********************************************************************
>                                   *                                  *
>Elvio Pederzolli                   *   Tel (voice)   08-2077603       *
>State Library Of South Australia   *       (internt) 61-8-2077603     *
>GPO Box 419, Adelaide              *   fax           08-2077622       *
>South Australia.  5001             *       (internt) 61-8-2077622     *
>                                                                      *
>              E-mail  elviop at ferrari.slsa.sa.gov.au                   *
>                                                                      *
>***********************************************************************