# System access.

**URL:** <https://community.unix.com/t/system-access/267127>\
**Category:** Cybersecurity\
**Created:** [June 6, 2010, 1:36pm UTC](https://community.unix.com/t/system-access/267127 "2010-06-06T13:36:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![FerryJD](https://community.unix.com/letter_avatar/ferryjd/32/5_5575768a8748004e209b776fc1b2916d.png) [@FerryJD](https://community.unix.com/u/FerryJD)\
**Post date:** [June 6, 2010, 1:36pm UTC](https://community.unix.com/t/system-access/267127/1 "2010-06-06T13:36:40Z")

</div>

As system admin i decided not to give shell access to users and even application admins on production systems.  
I give them access via a simple (menu)webpage and the menus are suid capable.  
So, even root commands can be granted to someones menu.  
I like the fact that no commandline trying or messups with parms are possible.  
Our security managers are happy the data is protected that well. Because the application admin could see/change data with its cridentials.

Offcourse when there are major problems, shell access might be needed. But most of then time you can manage with the menus.

Am i the only one?  
If not what tools do you use?

Fjd.

---

<div class="post-metadata">

**Author:** ![jim\_mcnamara](https://community.unix.com/letter_avatar/jim_mcnamara/32/5_5575768a8748004e209b776fc1b2916d.png) [@jim\_mcnamara](https://community.unix.com/u/jim_mcnamara)\
**Post date:** [June 6, 2010, 8:23pm UTC](https://community.unix.com/t/system-access/267127/2 "2010-06-06T20:23:04Z")

</div>

Web services to view data, logs, printers, a readonly id to use some Oracle Forms.

Admin updates and printer control are done thru AppWorx jobs, which are very tightly controlled. So nobody: user or manager gets to any prompt on a production unix box.