A reader notes a security issue with relating to permissions. "I've had an ongoing discussion with the tech support about permissions required to run the program. What it boils down to is this, the normal user of the program is required to have access permissions, rwx, to the MYOB applications directory..."

This is done since a temporary spool file is created here for viewing reports. I suggested that a better place for this file would be where the user has normal access. E.g. Where the data file is stored in a non-networked case, since the user needs rw permissions here anyways. In a network case, the file could be in the users home directory. (The user has to run the application off of their local machine).

Otherwise this leaves that directory (in my case the /Applications) open for
that user, or depending how the groups are setup - any user, to erase the
application, install a trojan, or any other program into a location where
everyone assumes only the admin has put programs.

They probably think I'm paranoid. To use an old cliché, an ounce of
prevention is worth a pound of cure.

by MacNN Staff