From:	CRDGW2::CRDGW2::MRGATE::"SMTP::CRVAX.SRI.COM::RELAY-INFO-VAX" 20-OCT-1990 23:12:50.27
To:	MRGATE::"ARISIA::EVERHART"
CC:	
Subj:	Re: More questions regarding privilages

Received:  by crdgw1.ge.com (5.57/GE 1.76)
	 id AA08721; Sat, 20 Oct 90 08:35:44 EDT
Received: From UCBVAX.BERKELEY.EDU by CRVAX.SRI.COM with TCP; Sat, 20 OCT 90 08:00:01 PDT
Received: by ucbvax.Berkeley.EDU (5.63/1.42)
	id AA19529; Sat, 20 Oct 90 07:44:15 -0700
Received: from USENET by ucbvax.Berkeley.EDU with netnews
	for info-vax@kl.sri.com (info-vax@kl.sri.com)
	(contact usenet@ucbvax.Berkeley.EDU if you have questions)
Date: 20 Oct 90 14:41:36 GMT
From: swrinde!zaphod.mps.ohio-state.edu!quanta.eng.ohio-state.edu!kcgl1.eng.ohio-state.edu!JONESD@ucsd.edu  (David Jones)
Organization: Ohio State University
Subject: Re: More questions regarding privilages
Message-Id: <6028@quanta.eng.ohio-state.edu>
References: <35040@cup.portal.com>, <1990Oct20.024129.639@spcvxb.spc.edu>
Sender: info-vax-request@kl.sri.com
To: info-vax@kl.sri.com

A savvy user can get around their account being set disimaged quite easily.
To run AUTHORIZE, for example, all they would have to do is:

	$ DEFINE/USER PHONE SYS$SYSTEM:AUTHORIZE
	$ PHONE

Until they fix this oversight, DISIMAGE is a flag with no function.  Note
that my choice of phone was arbitrary, I chose it because it doesn't have
a required P1 and is therefore less to type.


David L. Jones               |      Phone:    (614) 292-6929
Ohio State Unviversity       |      Internet:
1971 Neil Ave. Rm. 406       |               jonesd@kcgl1.eng.ohio-state.edu
Columbus, OH 43210           |               jones-d@eng.ohio-state.edu

Disclaimer: A repudiation of a claim.