home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.unix.sysv386
- Path: sparky!uunet!caen!destroyer!mudos!mju
- From: mju@mudos.ann-arbor.mi.us (Marc Unangst)
- Subject: SUMMARY: Re: Questions about MAS90 from SOA
- Message-ID: <BtKDCp.4tC@mudos.ann-arbor.mi.us>
- Date: Wed, 26 Aug 1992 00:00:05 GMT
- References: <Bt7stA.1o3@mudos.ann-arbor.mi.us>
- Organization: The Programmer's Pit Stop, Ann Arbor MI
- Lines: 41
-
- A week or so ago, I posted a message asking for experiences with the
- MAS90 accounting system from State of the Art Software. Our company
- has been evaluating it, and looks to be planning on adopting it in
- about a month. I had made recommendations against it, but I had been
- overruled, and now I faced the prospect of having to administer the
- thing. So, I asked for reasons why we shouldn't run MAS90, or ways to
- make administering it a bit easier.
-
- The replies I got were pretty evenly split between two types. One the
- one hand, there were people who responded and said that MAS90 is just
- about the best accounting software you can get from the CPA's point of
- view; any implementation or technical difficulties should be worked
- around because MAS90 is a nice piece of software. And on the other
- hand, I got replies saying to "run as fast as possible in the other
- direction" -- regardless of how nice MAS90 might be from the
- accounting standpoint, the implementation details crippled it and made
- it worthless.
-
- The part about being able to work around the problems with MAS90 is
- true; I have mostly solved the technical problems I was having with
- MAS90. It took several calls to SOA's tech support line, a rewrite of
- four or five termcap entries, and many other modifications, but I
- think I've finally gotten it to the point where it's usable. There is
- one problem that I'm still having, though -- because the bbx2
- interpreter does not work properly if run SUID or SGID, I have had to
- make the database directories and files writable by the people who are
- going to be running MAS90. This is a large security hole, IMHO --
- this means that the people using MAS90 can remove the databases or
- modify them without going through MAS90, either with a binary-file
- editor or by directly typing commands into BBx. It also means that
- instead of just having to secure a "mas90" account or the root
- account, I must make sure that all of the MAS90 users' accounts are
- secure.
-
- If anyone has further questions on MAS90, or would like a copy of the
- responses I got, feel free to e-mail me.
-
- --
- Marc Unangst | Real men don't make backups. Real men never
- mju@mudos.ann-arbor.mi.us | accidentally delete files that they're going
- | to need later.
-