How to restrict users to issue only certain commands in FTP

devitr · Posted: Fri May 02, 2008 9:04 pm

I'm trying to restrict users on my z/OS FTP server to only issue certain commands. I am aware of the user exits, however I was wondering if there was an easier way than modifying the assembler to add my own checks for specific users and the commands they enter? Has anyone ever tried this?

Thanks in advance.

dick scherrer · Posted: Fri May 02, 2008 9:16 pm

Hello devtr and welcome ot the forums,

What are you trying to prevent or protect against?

devitr · Posted: Fri May 02, 2008 9:24 pm

I would like to ensure that the user (which is allowed to get files from my server) is only allowed to issue an "mget" when they wish to get files from a certain directory. This is to ensure that they receive all of the files in the directory because they will all be a certain "level" or "version" and not just ones they want. Essentially I'm looking at this to keep the file levels in sync for someone who wants them because they come as a package deal.

Hope this makes sense.

-Ryan

dick scherrer · Posted: Fri May 02, 2008 9:43 pm

Hello,

First, i'd make sure they only had read permission to the one directory where you want them to download from.

Next, i'd consider putting all of the files you want them to have in a zipped file (the individual files would not be available). This would ensure they got all of the files as well as making the file transfer faster.

Keep in mind that if they really wanted to be selective, they cluld "pick and choose" on their system after de-compressing the archive. . . Protectio can only go so far.