topic Re: Email sending restriction in Administration and Deployment

Email sending restriction

shlomiohana — Tue, 10 Jun 2025 14:38:15 GMT

Hello,

Currently, users in my system can send an email through SAS GUIDE and impersonate someone else in the organization.

For example, I can send an email as if my manager sent it.

I want to limit this option and provide a list of emails that are authorized to be sent.

If I try to send an email that is not on the list, I will get an error.

Is it possible to implement this restriction in SAS?

Thank you very much.

Re: Email sending restriction

carl_sommer — Tue, 10 Jun 2025 15:25:41 GMT

See Fencing in your SAS users with LOCKDOWN - The SAS Dummy
You should be able to selectively enable email using the LOCKDOWN ENABLE_AMS=EMAIL statement via yoru workspace server autoexec.

Carl Sommer - SAS Technical Support

Re: Email sending restriction

shlomiohana — Tue, 10 Jun 2025 16:05:18 GMT

I currently have lockdown ENABLE_AMS=EMAIL in the autoexec file, how do i implement a restriction?

Re: Email sending restriction

carl_sommer — Tue, 10 Jun 2025 17:41:55 GMT

Can you share your autoexec? I would suggest some amount of conditional code to decide for whom to provide the enablement for.

Carl Sommer - SAS Technical Support

Re: Email sending restriction

gwootton — Tue, 10 Jun 2025 20:22:21 GMT

SAS allows you to prevent the email access method from being used at all using LOCKDOWN as Carl mentions. I think to limit what addresses can be used as the sender would be something done on the mail server you are using.

Re: Email sending restriction

carl_sommer — Tue, 10 Jun 2025 20:25:25 GMT

That's a good distinction. While you could conditionally execute the lockdown statement in the autoexec by user, for those allowed to use email, you won't be able to enforce what user the set as the sender.

Carl Sommer - SAS Technical Support

Re: Email sending restriction

shlomiohana — Wed, 11 Jun 2025 05:20:03 GMT

The autoexec file contains:

lockdown ENABLE_AMS=HTTP;
lockdown ENABLE_AMS=EMAIL;
lockdown list;

Re: Email sending restriction

thesasuser — Fri, 13 Jun 2025 13:29:42 GMT

Any restriction on the SAS side will be easy to bypass.
Consider restricting at the SMTP server level. The mail server admin at your place could help.

Re: Email sending restriction

Kurt_Bremser — Sat, 14 Jun 2025 17:53:50 GMT

What others said. This needs to be managed on the SMTP server.